Airlive RS-2000 Manual do Utilizador

Contents 5 Admin 8 Setting 12 Date/Time 22 Multiple Subnet 23 Hacker Alert 34 Blaster Alert 38 Route Table 39 DHCP 43 Host Table 46 DDNS 51 Lan

９Modify the Sub-Administrator’s Password Step 1. In the Admin window, locate the Administrator name you want to edit, and click on Modify in the Con

９９Accessing the Schedule window Click on Schedule on the menu bar and the schedule window will appear displaying the active schedules. The follow

１００Adding a new Schedule Step 1: Click on the New Entry button and the Add New Schedule window will appear. Step 2: Schedule Name: Fill i

１０１Modifying a Schedule Step 1: In the Schedule window, find the policy to be modified and click the corresponding Modify option in the Configure

１０２Removing a Schedule Step 1: In the Schedule window, find the policy to be removed and click the corresponding Remove option in the Configure fi

１０３

１０４QoS By configuring the QoS, you can control the outbound Upstream/downstream Bandwidth. The administrator can configure the bandwidth according

１０５Configuration of QoS Click QoS in the menu bar on the left hand side. Definitions: Name：The name of the QoS you want to configure. Downstream

１０６Add a New QoS Step 1. Click QoS in the menu bar on the left hand side. Step 2. Click the New Entry button to add new QoS. Definition Name：The

１０７Modify a QoS Step 1. Click QoS in the menu bar on the left hand side. Click the Modify button to modify QoS. Definition: Name：The name of the

１０８Removing a QoS Step 1. In the QoS window, find the QoS you want to change, and click Delete in the Configure column. Step 2. In the Delete QoS

１０Removing a Sub Administrator Step 1. In the Administration table, locate the Administrator name you want to edit, and click on the Remove opti

１０９

１１０Authentication By configuring the Authentication, you can control the user’s (Internal user or remote user who connect by VPN and IPSec) connect

１１１Define the required fields of Authentication Authentication Management ! Provide the Administrator the port number and valid time to setup Ovis

１１２ & When the user connect to external network by Authentication, the following page will be displayed:

１１３& It will connect to the appointed website after passing Authentication: If the user ask for authentication positively, can enter the

１１４Auth-User Name: ! The user account for Authentication you want to set. Password: ! The password when setting up Authentication. Confirm Pas

１１５Setting a specific user to connect with external network only before passing the authentication of policy. (Adopt the built-in Auth User Fu

１１６STEP 2. Enter the following setting in Auth of Authentication function: ! Click New User ! Auth-User Name: Enter guest ! Password: Enter 123

１１７STEP 3﹒Add a policy in Outgoing Policy and input the Address and Authentication of STEP1, 2

１１８STEP 4﹒When user_1 is going to access to Internet through browser, the authentication UI will appear in Browser. After entering the correct user

１１Settings The Administrator may use this function to backup Bandwidth Manager configurations and export (save) them to an “Administrator” computer

１１９Setting the users to connect with external network only before passing the authentication of policy. (Adopt external RADIUS Server built-in Windo

１２０STEP 3﹒Choose Internet Authentication Service (IAS)

１２１STEP 4﹒Click [Start] # [Control Panel] # [Administrative Tools], Choose [Internet Authentication Service]

１２２STEP 5﹒Press right button on RADIUS Clients and choose New RADIUS Client

１２３STEP 6﹒Enter the Name and Client Address (also the Ovislink-RS2000 IP)

１２４STEP 7﹒Choose RADIUS Standard; enter Shared Secret and Confirm Shared Secret. (The settings must be the same as RADIUS of Ovislink-RS2000)

１２５STEP 8﹒Press the right button on Remote Access Policies and select to add New Remote Access Policy.

１２６STEP 9﹒Select Use the wizard to set up a typical policy for a common scenario and enter the Policy name.

１２７STEP 10﹒Select Ethernet

１２８STEP 11﹒Choose User

１２Entering the Settings window Click Setting in the System menu to enter the Settings window. The Bandwidth Manager Configuration settings will be s

１２９STEP 12﹒Select MD5-Challenge

１３０STEP 13﹒Press the right button on Radius and choose Properties.

１３１STEP 14﹒Select Grant remote access permission and Remove the original setting, click Add to add a new one.

１３２STEP 15﹒Add Service-Type

１３３STEP 16﹒Add Authenticate Only from the left side.

１３４STEP 17﹒Press Edit Profile button and select Authentication and select Unencrypted authentication (PAP, SPAP)

１３５STEP 18﹒Add Auth User. Click [Start] # [Setting]# [Control Panel] # [Administrative Tools], Choose [Computer Management]

１３６STEP 19﹒Press the right button on the Users and select New User. STEP 20﹒Complete the setting of Windows 2003 RADIUS Server.

１３７STEP 21﹒Enter IP, Port and Shared Secret (The setting must be the same as RADIUS Server) in RADIUS of Authentication STEP 22﹒Add Radius User

１３８STEP 23﹒Add a policy of Auth User Group (RADIUS) that set by STEP 22 in Outgoing Policy.

１３Exporting Bandwidth Manager Gateway settings Step 1. Under Bandwidth Manager Configuration, click on the Download button next to Export System

１３９STEP 24﹒When the user is going to connect with Internet through browser, the Authentication windows will appear in browser. After entering the co

１４０Content filtering The Administrator may setup URL Blocking to prevent LAN network users from accessing a specific website on the Internet. An

１４１URL blocking Entering the URL blocking window Click on URL Blocking under the Configuration menu bar. Click on New Entry.

１４２Adding a URL Blocking policy Step 1: After clicking New Entry, the Add New Block String window will appear. Step 2: Enter the URL of the website

１４３ Modifying a URL Blocking policy Step 1: In the URL Blocking window, find the policy to be modified and click the corresponding Modify option i

１４４Removing a URL Blocking Step 1: In the URL Blocking window, find the policy to be removed and click the corresponding Remove option in the Co

１４５Blocked URL site: When a user from the LAN network tries to access a blocked URL, the error below will appear.

１４６General Blocking To let Popup、ActiveX、Java、Cookie in or keep them out. Step 1: Click Content Filtering in the menu. Step 2: 【General Blockin

１４７Step 4: Add a Outgoing Policy and use in Content Filtering function: When the system detects the setting, the Bandwidth Manage

１４８P2P Blocking Restrict the Internal Users to access to the file on Internet by P2P STEP 1﹒Select the following data in P2P of Content Blocking fu

１４Importing Bandwidth Manager settings Step 1. Under Bandwidth Manager Configuration, click on the Browse button next to Import System Settings. Whe

１４９STEP 2﹒Add a new Outgoing Policy and use in Content Filtering function: STEP 3﹒Complete the policy of restricting the internal use

１５０Restrict the Internal Users to send message, files, video and audio by Instant Messaging STEP 1﹒Enter as following in IM Blocking of Content Blo

１５１Add a new Outgoing Policy and use in Content Filtering function: STEP 2﹒Complete the policy of restricting the internal users to

１５２Restrict the Internal Users to access to video, audio, and some specific sub-name file from http or ftp protocol directly STEP 1﹒Enter the follo

１５３STEP 2﹒Add a new Outgoing Policy and use in Content Filtering function: STEP 3﹒Complete the Outgoing Policy of restricting the i

１５４Virtual Server The Bandwidth Manager separates an enterprise’s Intranet and Internet into LAN networks and WAN networks respectively. Generally

１５５How to use Virtual Server and mapped IP Virtual Server and Mapped IP are part of the IP mapping scheme. By applying the incoming policies, Virtua

１５６Mapped IP LAN private IP addresses are translated through NAT (Network Address Translation). If a server is located in the LAN network, it has a

１５７Entering the Mapped IP window Step 1. Click Mapped IP under the Virtual Server menu bar and the Mapped IP configuration window will appear. Defi

１５８Adding a new IP Mapping Step 1. In the Mapped IP window, click the New Entry button. The Add New Mapped IP window will appear. ! WAN IP: select t

１５Restoring Factory Default Settings Step 1. Select Reset Factory Settings under Bandwidth Manager Configuration. Step 2. Click OK at the bottom-rig

１５９Modifying a Mapped IP Step 1. In the Mapped IP table, locate the Mapped IP you want it to be modified and click its corresponding Modify option i

１６０Removing a Mapped IP Step 1. In the Mapped IP table, locate the Mapped IP desired to be removed and click its corresponding Remove option in the

１６１Virtual Server Virtual server is a one-to-many mapping technique, which maps a real IP address from the WAN interface to private IP addresses of

１６２Adding a Virtual Server Step 1. Click an available virtual server from Virtual Server in the Virtual Server menu bar to enter the virtual server

１６３Modifying a Virtual Server IP Address Step 1. Click the virtual server to be modified Virtual Server under the Virtual Server menu bar. A new win

１６４Removing a Virtual Server Step 1. Click the virtual server to be removed in the corresponding Virtual Server option under the Virtual Server m

１６５Virtual Server’s service Setting the Virtual Server’s services Step 1. For the Virtual Server which has already been set up with an IP address, c

１６６Adding New Virtual Server Service Configuration Step 1. Select Virtual Server in the menu bar on the left hand side, and then select Virtual Serv

１６７Modifying the Virtual Server configurations Step 1. In the Virtual Server window’s service table, locate the name of the service desired to be m

１６８Removing the Virtual Server service Step 1. In the Virtual Server window’s service table, locate the name of the service desired to be removed an

１６Enabling E-mail Alert Notification Step 1. Select Enable E-mail Alert Notification under E-Mail Settings. This function will enable the Bandwidth

１６９

１７０Policy This section provides the Administrator with facilities to sent control policies for packets with different source IP addresses, source po

１７１Outgoing This section describes steps to create policies for packets and services from the LAN network to the WAN network. Entering the Outgoing

１７２Adding a new Outgoing Policy Step 1: Click on the New Entry button and the Add New Policy window will appear. Step 2: Source Address: Select

１７３Logging: Select Enable to enable flow monitoring. Statistics: Select Enable to enable flow statistics. Content Filtering: Select Enable to enable

１７４Modifying an Outgoing policy Step 1: In the Outgoing policy section, locate the name of the policy desired to be modified and click its correspon

１７５Removing the Outgoing Policy Step 1. In the Outgoing policy section, locate the name of the policy desired to be removed and click its correspon

１７６Enabled Monitoring function: Log: If Logging is enabled in the outgoing policy, the MH-2000 will log the traffic and event passing through the B

１７７Alarm: If Logging is enabled in the outgoing policy, the MH-2000 will log the traffic alarms and event alarms passing through the Bandwidth Manag

１７８Statistics: If Statistics is enabled in the outgoing policy, the Bandwidth Manager will display the flow statistics passing through the Bandwidth

１７Web Management (WAN Interface) (Remote UI management) The administrator can change the port number used by HTTP port anytime. (Remote UI managemen

１７９Incoming This chapter describes steps to create policies for packets and services from the WAN network to the LAN network including Mapped IP and

１８０! Action: control actions to permit or deny packets from WAN networks to Virtual Server/Mapped IP travelling through the device. ! Option: spec

１８１Adding an Incoming Policy Step 1: Under Incoming of the Policy menu, click the New Entry button. Step 2: Source Address: Select names of the

１８２Statistics: select Enable to enable flow statistics. Schedule: Select the item listed in the schedule to enable the policy to automatically execu

１８３Modifying Incoming Policy Step 1: In the Incoming window, locate the name of policy desired to be modified and click its corresponding Modify

１８４Removing an Incoming Policy Step 1: In the Incoming window, locate the name of policy desired to be removed and click its corresponding [Remove

１８５

１８６ VPN The Ovislink-RS2000 adopts VPN to set up safe and private network service. And combine the remote Authentication system in order to integr

１８７Define the required fields of VPN: RSA: ! A public-key cryptosystem for encryption and authentication. Preshared Key: ! The IKE VPN mus

１８８DES (Data Encryption Standard): ! The Data Encryption Standard developed by IBM in 1977 is a 64-bit block encryption block cipher using a 56-b

１８MTU (set networking packet length) The administrator can modify the networking packet length. Step 1. MTU Setting. The administrator can modify th

１８９Define the required fields of IPSec Function Name: ! The VPN name to identify the VPN tunnel definition. The name must be different for the tw

１９０Define the required fields of PPTP Server Function PPTP Server: ! To select Enable or Disable Client IP Range: ! Setting the IP addresses

１９１Define the required fields of PPTP Client Function User Name： ! Displays the PPTP Client user’s name when connecting to PPTP Server Server Add

１９２We set up six VPN examples in this chapter: No. Suitable Situation Example Ex1 IPSec Autokey Setting IPSec VPN connection between two Ovislink-R

１９３Setting IPSec VPN connection between two Ovislink-RS2000 Preparation Company A WAN IP: 61.11.11.11 LAN IP: 192.168.10.X Company B WAN IP: 2

１９４STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.

１９５STEP 5﹒Select ISAKMP Algorithm in Encapsulation list. Choose the Algorithm when setup connection. Please select ENC Algorithm (3DES/DES/AES), AU

１９６STEP 7﹒After selecting Perfect Forward Secrecy and enter 28800 seconds in IPSec Lifetime, also can enter the Keep Alive IP of Company B: 192.168.

１９７The Default Gateway of Company B is the LAN IP of the Ovislink-RS2000 192.168.20.1. Follow the steps below: STEP 1﹒Enter the default IP of Gatew

１９８STEP 3﹒Select Remote Gateway-Fixed IP In To Destination list and enter the IP Address, Subnet 192.168.10.0, and Mask 255.255.255.0 of Company A.

１ Service 89 Pre-defined 90 Custom 91 Group 95 Schedule 99 QoS 105 Authentication 111 Content Filtering 141 URL Blocking 142 General Blocking

１９To-Bandwidth Manager Packets Log The administrator select this option to the device’s To-Bandwidth Manager Packets Log. Once this function is e

１９９STEP 6﹒You can choose Data Encryption+Authentication or Authentication Only to communicate in IPSec Algorithm list: ENC Algorithm: 3DES/DES/AES/N

２００STEP 9﹒Click OK to complete the setting of Company B STEP 10﹒Complete IPSec VPN Connection

２０１Setting VPN connection between Ovislink-RS2000 IPSec VPN and Windows 2000 IPSec VPN Preparation Company A Ovislink-RS2000 WAN IP: 61.11.11.11

２０２STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.

２０３STEP 5﹒Select ISAKMP Algorithm in Encapsulation list. Choose the Algorithm when setup connection. Please select ENC Algorithm (3DES/DES/AES), AU

２０４STEP 7﹒After selecting Perfect Forward Secrecy and enter 28800 seconds in IPSec Lifetime, also can enter the Keep Alive IP of Company B: 211.22.2

２０５The PC of Company B use Real IP Address: 211.22.22.22. Follow the steps below: STEP 1﹒Enter Windows2000 and select Run in Start.

２０６STEP 2﹒In the Run WebUI, enter the command: mmc in Open field. STEP 3﹒Enter File in Console 1 WebUI, select File option and then select Add

２０７STEP 4﹒Enter Add in Add/Remote Snap-ins. And add IP Security Policy Management in Add Standalone Snap-in WebUI.

２０８STEP 5﹒Select Local computer to complete adding

２０Bandwidth Manager Reboot The administrator select this option to the device’s Bandwidth Manager Reboot. Once this function is enabled, the Band

２０９STEP 6﹒Complete adding IP Security Policy Management

２１０STEP 8﹒Press the right button of the mouse in IP Security Policies on Local Computer selection and select Create IP Security Policy.

２１１STEP 9﹒Click on Next

２１２STEP 10﹒Enter IP Security Policy Name and Description and click on Next in IP Security Policy Wizard WebUI.

２１３STEP 11﹒Please cancel Active the default response rule selection and click on Next.

２１４STEP 12﹒Complete setting IP Security Policy and click on Finish. Select the Edit properties

２１５STEP 13﹒Enter VPN_B Properties WebUI and do not select Use Add Wizard. Select Add and enter Edit Properties

２１６STEP 14﹒Click on Add in New Rule Properties WebUI

２１７STEP 15﹒Please do not select Use Add Wizard in IP Filter List. Change the name as VPN_B WAN TO LAN and click Add

２１８STEP 16﹒After entering Filter Properties, please select A specific IP Address in Source address and enter the WAN IP of Company B: 211.22.22.22,

２１Date/Time Synchronizing the Bandwidth Manager with the System Clock The administrator can configure the Bandwidth Manager.s date and time by eithe

２１９STEP 17﹒Complete the setting and close IP Filter List WebUI.

２２０STEP 18﹒ Select Require Security in Filter Action WebUI and click Edit.

２２１STEP 19﹒Enter Require Security Properties WebUI and select Session key perfect forward secrecy.

２２２STEP 20﹒Please select Custom/None/3DES/MD5 and click Edit

２２３STEP 21﹒Click Custom (provide for professional users) and select Settings.

２２４STEP 22﹒ Please select ESP and choose MD5 and 3DES. Also select Generate a new key every. Enter 28800 seconds and click OK triple times to go ba

２２５STEP 23﹒Enter Connection Type and select All network connections

２２６STEP 24﹒Enter Tunnel Setting WebUI. Select The tunnel endpoint is specified by this IP address and enter the WAN IP of Company A: 61.11.11.11

２２７STEP 25﹒ Enter Authentication Methods WebUI and select Edit.

２２８STEP 26﹒Select the item Use this string to protect preshared key and enter the preshared key: 123456789

２２Multiple Subnet NAT mode Multiple Subnet allows local port to set multiple subnet works and connect with the internet through different WAN IP Add

２２９STEP 27﹒Complete Setting and close the WebUI

２３０STEP 28﹒Complete the VPN_B WAN TO LAN Settings

２３１STEP 29﹒Please enter VPN_B Properties WebUI again and do not select Use Add Wizard. Select Add to enter Edit Properties

２３２STEP 30﹒ Please select Add in New Rule Properties WebUI.

２３３STEP 31﹒Please do not select Use Add Wizard in IP Filter List. Please change the name as VPN_B LAN TO WAN and select Add.

２３４STEP 32﹒Enter Filter Properties and select A specific IP Subnet in Source address and enter the LAN IP of Company A: 192.168.10.0, Subnet mask: 2

２３５STEP 33﹒Complete Setting and close IP Filter List WebUI

２３６STEP 34﹒Select Require Security in Filter Action WebUI and click Edit

２３７STEP 35﹒Enter Require Security Properties WebUI and select Session key perfect forward secrecy (PFS)

２３８STEP 36﹒ Select Custom/ None/ 3DES/ MD5 and choose Edit

２３Multiple Subnet settings Click Multiple Subnet in the System menu to enter Multiple Subnet window. Multiple Subnet ! Forwarding Mode: Display fo

２３９STEP 37﹒Select Custom (provide for professional users) and click Settings

２４０STEP 38﹒Please select Data integrity and encryption (ESP) and choose MD5 and 3DES. Also select Generate a new key every. Enter 28800 seconds and

２４１STEP 39﹒Select All network connections in Connection Type.

２４２STEP 40﹒Enter Tunnel Setting WebUI. Select The tunnel endpoint is specified by this IP address and enter the WAN IP of Company B: 211.22.22.22

２４３STEP 41﹒Enter Authentication Methods WebUI and select Edit.

２４４STEP 42﹒Select the item Use this string (preshared key) to protect preshared key and enter the preshared key: 123456789

２４５STEP 43﹒Complete Setting and close the WebUI

２４６STEP 44﹒Complete VPN_B LAN TO WAN Settings

２４７STEP 45﹒Please enter General in VPN_B Properties WebUI and click Advanced

２４８STEP 46﹒Please select Master key perfect forward secrecy (PFS) and click Methods.

２４Add a Multiple Subnet NAT Mode. Step 1. Click the Add button below to add Multiple Subnet. Step 2. Enter the IP Address in the website name colum

２４９STEP 47﹒Please move IKE/ 3DES/ MD5 /Medium (2) to the top and complete all the settings.

２５０STEP 47﹒Complete all the Window2000 VPN Setting of Company B

２５１STEP 48﹒Please press the right button of the mouse on VPN_B and enable VPN_B.

２５２STEP 49﹒To reboot IPSec Service, please begin with Start and select Settings then enter Control Panel.

２５３STEP 50﹒ After entering Control Panel WebUI, please enter Administrative Tools.

２５４STEP 51﹒Please select Services item after entering Administrative Tools.

２５５STEP 52﹒After entering Services, please select IPSec Services to restart.

２５６STEP 53﹒Complete all of the settings.

２５７Setting IPSec VPN connection between two Ovislink-RS2000 (Connection adopts Aggressive Mode Algorithm) Preparation Company A WAN IP: 61.11

２５８STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.

２５Modify a Multiple Subnet Step 1. Find the IP Address you want to modify and click Modify Step 2. Enter the new IP Address in Modify Multiple Sub

２５９STEP 5﹒ Select Aggressive Mode Algorithm in Encapsulation. When setup connection, it will choose the Algorithm as 3DES ENC Algorithm, MD5 AUTH Al

２６０STEP 7﹒After selecting Perfect Forward Secrecy and enter 28800 seconds in IPSec Lifetime, also can enter the Keep Alive IP of Company B: 192.168.

２６１The Default Gateway of Company B is the LAN IP of OVISLINK-RS2000 192.168.20.1. Follow the steps below: STEP 1﹒Enter the default gateway of OVIS

２６２STEP 3﹒Select Remote Gateway-Fixed IP In To Destination list and enter the Remote IP Address, Subnet 192.168.10.0, and Mask 255.255.255.0 of Comp

２６３STEP 6﹒Select Data Encryption+Authentication in IPSec Algorithm. You can choose Data Encryption+Authentication or Authentication Only to commun

２６４STEP 9﹒Click OK to complete the setting of Company B STEP 10﹒Complete IPSec VPN Aggressive Mode Settings:

２６５Setting IPSec VPN connection between two Ovislink-RS2000 (Adopt GRE Packets) Preparation Company A WAN IP: 61.11.11.11 LAN IP: 192.168.10.X

２６６STEP 2﹒In the list of IPSec Autokey, fill in Name with VPN_A, and select LAN in From Source. Also fill in Subnet: 192.168.10.0 and Mask: 255.255.

２６７STEP 5﹒Select ISAKMP Algorithm in Encapsulation. Choose the Algorithm when setup connection. Please select ENC Algorithm (3DES/DES/AES), AUTH Alg

２６８STEP 6﹒Select Data Encryption+Authentication in IPSec Algorithm. You can choose Data Encryption+Authentication or Authentication Only to commu

２６Removing a Multiple Subnet Step 1.Find the IP Address you want to delete and click Delete. Step 2.A confirmaion pop-up box will appear, click OK

２６９STEP 9﹒Click OK to complete the setting of Company A

２７０The Default Gateway of Company B is the LAN IP of Ovislink-RS2000: 192.168.20.1. Follow the steps below: STEP 2﹒Enter the default gateway of Ov

２７１STEP 4﹒Select Remote Gateway-Fixed IP In To Destination list and enter the Remote IP Address, Subnet 192.168.10.0, and Mask 255.255.255.0 of C

２７２STEP 7﹒Select GRE/IPSec and enter GRE Local IP: 192.168.50.200. GRE Remote IP: 192.168.50.100. (GRE Local IP must be at the same subnet (C class)

２７３STEP 10﹒Select Schedule and if it is permissive to connect with each other by Show remote Network Neighborhood. STEP 11﹒Click OK to complet

２７４STEP 12﹒Complete IPSec VPN GRE/IPSec Setting Ovislink-RS2000 IPSec VPN function also can combine with Authentication and Show remote Net

２７５Setting PPTP VPN connection between two Ovislink-RS2000 Preparation Company A WAN IP: 61.11.11.11 LAN IP: 192.168.10.X Company B WAN IP: 2

２７６Enter PPTP Server of VPN function in the Ovislink-RS2000 of Company A. Select Modify: ! Select Encryption ! Client IP Range: Enter 192.44.75.1

２７７Add the following settings in PPTP Server of VPN function in the Ovislink-RS2000 of Company A: ! Select New Entry ! User Name: Enter PPTP_Connec

２７８Add the following settings in PPTP Client of VPN function in the Ovislink-RS2000 of Company B: ! Select New Entry ! User Name: Enter PPTP_Connec

２７Routing Mode Multiple Subnet allows local port to set Multiple Subnet Routing Mode works and connect with the internet through different WAN IP Ad

２７９STEP 4﹒Complete PPTP VPN Connection

２８０Setting VPN connection between Ovislink-RS2000 PPTP VPN and Windows 2000 PPTP VPN Preparation Company A Ovislink-RS2000 WAN IP: 61.11.11.11

２８１The default gateway of Company A 192.168.10.100 is the LAN IP of Ovislink-RS2000’s LAN IP. Enter the following setting: STEP 1﹒Enter PPTP Server

２８２STEP 2﹒Add the following settings in PPTP Server of VPN function in the Ovislink-RS2000 of Company A: ! Select New Entry ! User Name: Enter PPTP

２８３Enter the following settings in Company B (211.22.22.22): STEP 1﹒Enter Windows 2000, press the right key of the mouse in My Network Place and se

２８４STEP 2﹒Enter Network and Dial-up Connections WebUI and then enter Make New Connection.

２８５STEP 3﹒In the Location Information WebUI, enter country/region, city code, and the phone system you use, and then click OK

２８６STEP 4﹒Click OK in Phone And Modem Options WebUI.

２８７STEP 5﹒Click on Next in Network Connection Wizard.

２８８STEP 6﹒Select Connect to a private network through the Internet in Network Connection Wizard WebUI and click on Next

２８Step 1. Click System Configuration on the left side menu bar, then click Multiple Subnet below it. Enter Multiple Subnet window. Step 2. The

２８９STEP 7﹒Enter IP Address in Network Connection Wizard WebUI and click Next.

２９０STEP 8﹒In Network Connection Wizard WebUI, create the connection For all users and click on Next.

２９１STEP 9﹒Click on Finish on Network Connection Wizard WebUI to Complete the New Connection Wizard setting

２９２STEP 10﹒ Enter the following settings in Connect Virtual Private Connection function: ! User name: Enter PPTP_Connection ! Password: Enter 123

２９３

２９４STEP 11﹒Complete PPTP VPN Connection Settings

２９５

２９６Log The Bandwidth Manager supports traffic logging and event logging to monitor and record services, connection times, and the source and destina

２９７Traffic Log The Administrator queries the Bandwidth Manager for information, such as source address, destination address, start time, and Protoco

２９８Downloading the Traffic Logs The Administrator can backup the traffic logs regularly by downloading it to the computer. Step 1. In the Tra

２Example 5 276 Example 6 281 LOG 297 Traffic Log 298 Event Log 301 Connection Log 304 Log Backup 307 Alarm 311 Traffic Alarm 312 Event Alar

２９Adding a Multiple Subnet Routing Mode Step 1. Click the Add button below to add Multiple Subnet. Step 2. Enter the IP Address in Add Multiple Subn

２９９Clearing the Traffic Logs The Administrator may clear on-line logs to keep just the most updated logs on the screen. Step 1. In the Traffic Log

３００Event Log When the Bandwidth Manager detects events, the Administrator can get the details, such as time and description of the events from the E

３０１Downloading the Event Logs Step 1. In the Event Log window, click the Download Logs button at the bottom of the screen. Step 2. Follow the File

３０２Clearing the Event Logs The Administrator may clear on-line event logs to keep just the most updated logs on the screen. Step 1. In the Event L

３０３Connection Log Click Log in the menu bar on the left hand side, and then select the sub-selection Connection Log. Definition: Time：The start an

３０４Download Logs Step 1. Click Log in the menu bar on the left hand side and then select the sub-selection Connection Log. Step 2. In Connection Log

３０５Clear Logs Step 1. Click Log in the menu bar on the left hand side, and then select the sub-selection Connection Logs. Step 2. In Connection Log

３０６Log Backup The Log Backup Step 1. Click Log #Log Backup. Step 2. ! Log Mail Configuration：When the Log Mail files accumulated up to 300Kbytes

３０７Enable Log Mail Support & Syslog Message Log Mail Configuration /Enable Log Mail Support Step 1. Firstly, go to Admin –Select Enable E-mail

３０８Disable Log Mail Support & Syslog Message Step 1. Go to LOG #Log Backup. Uncheck to disable Log Mail Support. Click OK. Step 2. Go to LO

３０ Step 4: Adding a new Incoming Policy. In the incoming window, click the New Entry button.

３０９

３１０Alarm In this chapter, the Administrator can view traffic alarms and event alarms that occur and the Bandwidth Manager has logged. Bandwidth Man

３１１Traffic Alarm Entering the Traffic Alarm window Click the Traffic Alarm option below Alarm menu to enter the Traffic Alarm window. The table in

３１２Downloading the Traffic Alarm Logs The Administrator can back up traffic alarm logs regularly and download it to a file on the computer. Step 1.

３１３Clearing the Traffic Alarm Logs Step 1. In the Traffic Alarm window, click the Clear Logs button at the bottom of the screen. Step 2. In the

３１４Event Alarm Entering the Event Alarm window Click the Event Alarm option below the Alarm menu to enter the Event Alarm window. The table in Even

３１５Downloading the Event Alarm Logs The Administrator can back up event alarm logs regularly by downloading it to a file on the computer. Step 1.

３１６Clearing Event Alarm Logs The Administrator may clear on-line logs to keep the most updated logs on the screen. Step 1. In the Event Alarm wind

３１７

３１８ Accounting Report Accounting Report can be divided into two parts, one is Outbound Accounting Report, and the other is Inbound Accounting Rep

３１Modify a Multiple Subnet Routing Mode Step 1. Find the IP Address you want to modify in Multiple Subnet menu, then click Modify button, on the r

３１９Inbound Accounting Report It is the statistics of downstream/upstream for all kinds of communication services; the Inbound Accounting report wi

３２０Outbound Accounting Report Step 1. Click the Accounting Report function, and then select Outbound.

３２１Outbound source IP Accounting Report Source IP：When LAN users use Bandwidth Manager to connect to WAN service server, all of the Downstream/Upstr

３２２ ''

３２３Outbound Destination IP Accounting Report Destination IP：When WAN service server uses Bandwidth Manager to connect to LAN user, all of the Downst

３２４

３２５Outbound Service Accounting Report Service： When LAN users use Bandwidth Manager to connect to WAN Service Server, all of the Downstream/Upstr

３２６ Press to return to Accounting Report window. ''

３２７

３２８Inbound Accounting Report Step 1. Click Service in the menu bar on the left hand side of the window. Click Group under it.

３２Removing a Multiple Subnet Routing Mode Step 1. Find the IP Address you want to delete in Multiple Subnet menu, then click Delete button, on the r

３２９Inbound Source IP Accounting Report Source IP：When WAN users use Bandwidth Manager to connect to LAN service server, all of the Downstream/Upst

３３０

３３１Inbound Destination IP Accounting Report Destination IP：When WAN users use Bandwidth Manager to connect to LAN service server, all of the Downst

３３２

３３３Inbound Service Accounting Report Service： When WAN users use Bandwidth Manager to connect to LAN Service Server, all of the Downstream/Upstre

３３４ Press and return to Accounting Report window.

３３５

３３６Statistics In this chapter, the Administrator queries the Bandwidth Manager for statistics of packets and data which passes across the Bandwidth

３３７WAN Statistics Step 1. Click Statistics in the menu bar on the left hand side, and then select WAN Statistics. Step 2. The WAN Statistics will be

３３８Entering the Statistics window by Time The Statistics window displays the statistics of network connections (downstream and upstream as well) b

３３Hacker Alert The Administrator can enable the device’s auto detect functions in this section. When abnormal conditions occur, the Bandwidth Manage

３３９Policy Statistics Entering the Statistics window Step 1. The Statistics window displays the statistics of current network connections. ! So

３４０Entering the Policy Satistics Step 1. Click Statistics in the menu bar on the left hand side, and then select WAN Statistics. Step 2. In Statisti

３４１

３４２Status In this section, the device displays the status information about the Bandwidth Manager. Status will display the network information fro

３４３Interface Status Entering the Interface Status window Click on Status in the menu bar, then click Interface Status below it. A window will a

３４４ARP Table Entering the ARP Table window Click on Status in the menu bar, then click ARP Table below it. A window will appear displaying a

３４５DHCP Clients Entering the DHCP Clients window Click on Status in the menu bar, then click on DHCP Clients below it. A window will appear dis

３４６Setup Examples Example 1: Allow the LAN network to be able to access the Internet Example 2: The LAN network can only access Yahoo.com websi

３４７Example 1:Allow the LAN network to be able to access the Internet Step 1 Enter the Outgoing window under the Policy menu. Step 2 Click the

３４８Step 4 When the following screen appears, the setup is completed.

３４【SYN Flood Threshold Blocking Time ( Per Source IP) Seconds】: The System Administrator can enter the blocking time when the number of SYN packets

３４９Example 2: The LAN network can only access 61.11.11.11 website. Step 1. Enter the WAN window under the Address menu. Step 2. Click the New Entry

３５０Step 5. Go to the Outgoing window under the Policy menu. Step 6. Click the New Entry button. Step 7. In the Add New Policy window, enter

３５１Example 3:Outside users can access the LAN FTP server through Virtual Servers Step 1. Enter Virtual Server under the Virtual Server menu. Step

３５２Step 7. A new Virtual Service should appear. Step 8. Go to the Incoming window under the Policy menu, then click on the New Entry button.

３５３Step 9. In the Add New Policy window, set each parameter, then click OK. Step 10. An Incoming FTP policy should now be created.

３５４Example 4:Install a server inside the LAN network and have the Internet (WAN1)users access the server through IP Mapping Step 1. Enter the Ma

３５５ Step 4. When the following screen appears, the IP Mapping setup is completed. Step 5. Go to the Incoming window under the Policy menu. Step 6.

３５６Step 7. In the Add New Policy window, set each parameter, then click OK. Step 8. Open all the services. (ANY) Step 9. The setup is completed.

３５７Example 5: Configuration of QoS inside the LAN Network Step 1. Click QoS in the menu bar on the left hand side. Step 2. Click the New Entry bu

３５８Step 5. Click Policy on the left hand side menu bar, then click Outgoing under it. Step 6. In the outgoing window, click on the New Entry butto

３５【UDP Flood Threshold( Per Source IP) Pkts/Sec】: The System Administrator can enter the maximum number of UDP packets per second from attacking sou

３５９Example 6: Configuration of QoS inside the WAN Network Step 1. Click QoS in the menu bar on the left hand side. Step 2. Click the New Entry bu

３６０Step 5. Click an available virtual server from Virtual Server in the Virtual Server menu bar to enter the virtual server configuration window. In

３６１Step 9. Enter the IP address of the LAN network server(s), to which the virtual server will be mapped. Up to four IP addresses can be assigned at

３６２Step 13. In Add Policy window, enter the related parameters and click OK.

３６! Detect Land Attack: Some Systems may shut down when receiving packets with the same source and destination addresses, the same source port and

３７Blaster Alert The Administrator can enable the device’s auto detect functions in this section. When abnormal conditions occur, the Bandwidth Manag

３８Route Table In this section, the Administrator can add static routes for the networks. Entering the Route Table screen Click System on the left

３ Setup Examples 347 Allow the LAN network to be able to access the Internet 348 The LAN network canonly access 61.11.11.11 website 350 Outside use

３９Adding a new Static Route Step 1. In the Route Table window, click the New Entry button. Step 2. In the Add New Static Route window, enter new

４０Modifying a Static Route: Step 1. In the Route Table menu, find the route to edit and click the corresponding Modify option in the Configure fie

４１Removing a Static Route Step 1. In the Route Table window, find the route to remove and click the corresponding Remove option in the Configure f

４２DHCP In the section, the Administrator can configure DHCP (Dynamic Host Configuration Protocol) settings for the LAN (LAN) network. Entering the

４３LAN Interface : ! Client IP Address Range 1: Enter the starting and the ending IP address dynamically assigning to DHCP clients. ! Client IP Add

４４Enabling DHCP Support Step 1. In the Dynamic IP Address window, click Enable DHCP Support. Step 2. Enable DHCP Support：Enable /Disable DCHP S

４５Host Table The Bandwidth Manager’s Administrator may use the Host Table function to make the Bandwidth Manager act as a DNS Server for the LAN.

４６Entering the Host Table window Click on System in the menu bar, then click on Host Table below it. The Host Table window will appear. Below is t

４７Adding a new Host Table Step 1: Click on the New Entry button and the Add New Host Table window will appear. Step 2: Fill in the appropriate

４８Modifying a Host Table Step 1: In the Host Table window, find the policy to be modified and click the corresponding Modify option in the Conf

４System The device Bandwidth Manager administration and monitoring control is set by the system Administrator. The System Administrator can add or

４９Removing a Host Table Step 1: In the Host Table window, find the policy to be removed and click the corresponding Remove option in the Configur

５０DDNS The DDNS (require DDNS Service) allows you to alias a dynamic IP address to a static hostname, allowing your device to be more easily accesse

５１How to register：Firstly, Click DDNS in the System menu to enter DDNS window, then click Add button，on the right side of the service providers, cli

５２DDNS settings Step 1: Click Add button. Step 2: Click the information in the column of the new window. ! Service providers：Select service provid

５３Modify a DDNS Step 1: Find the item you want to change and click Modify. Step 2: Enter the new information in the Modify DDNS window. Step 3: Cli

５４Removing a DDNS Step 1: Find the item you want to change and click Delete. Step 2: A confirmation pop-up box will appear, click OK to delete the

５５Language The administrator can configure the Bandwidth Manager Select the Language version. Step 1. Select the Language version (English Version/T

５６Permitted IPs Only the authorized IP address is permitted to manage the Bandwidth Manager.

５７Add a Permitted IP Address Step 1. Click New Entry button. Step 2. In IP Address field, enter the LAN IP address or WAN IP address. ! IP address：

５８Modify a Permitted IP Address Step 1. In the table of Permitted IPs, highlight the IP you want to modify, and then click Modify. Step 2. In Modif

５Date/Time: This function enables the Bandwidth Manager to be synchronized either with an Internet Server time or with the client computer’s clock.

５９Remove a Permitted IP addresses Step 1. In the table of Permitted IPs, highlight the IP you want to remove, and then click Remove. Step 2. In Rem

６０Logout Select this option to the device’s Logout the Bandwidth Manager. This function protects your system while you are away. Step 1. Click Lo

６１Software Update Under Software Update, the admin may update the device’s software with a newer software.

６２Interface In this section, the Administrator can set up the IP addresses for the office network. The Administrator may configure the IP address

６３LAN Entering the Interface menu Click on Interface in the left menu bar. Then click on LAN below it. The current settings of the interface add

６４Configuring the Interface Settings LAN Interface Using the LAN Interface, the Administrator sets up the LAN network. The LAN network will use

６５WAN Entering the Interface menu Click on Interface in the left menu bar. Then click on WAN below it. The current settings of the interface addres

６６WAN Interface Using the WAN Interface, the Administrator sets up the WAN network. These IP Addresses are real public IP Addresses, and are routab

６７

６８For Dynamic IP Address (Cable Modem User): This option is for users who are automatically assigned an IP address by their ISP, such as cable modem

６DDNS The DDNS (require DDNS Service) allows you to alias a dynamic IP address to a static hostname, allowing your device to be more easily accessed

６９For Static IP Address: This option is for users who are assigned a static IP Address from their ISP.Your ISP will provide all the information need

７０Address The Bandwidth Manager allows the Administrator to set Interface addresses of the LAN network, LAN network group, WAN network, WAN network

７１LAN Entering the LAN window Step 1. Click LAN under the Address menu to enter the LAN window. The current setting information such as the name of

７２Adding a new LAN Address Step 1. In the LAN window, click the New Entry button. Step 2. In the Add New Address window, enter the settings of a ne

７３Modifying an LAN Address Step 1. In the LAN window, locate the name of the network to be modified. Click the Modify option in its corresponding

７４Removing an LAN Address Step 1. In the LAN window, locate the name of the network to be removed. Click the Remove option in its corresponding Con

７５LAN Group Entering the LAN Group window The LAN Addresses may be combined together to become a group. Click LAN Group under the Address menu to en

７６Adding an LAN Group Step 1. In the LAN Group window, click the New Entry button to enter the Add New Address Group window. Step 2. In the Add N

７７Modifying an LAN Group Step 1. In the LAN Group window, locate the network group desired to be modified and click its corresponding Modify optio

７８Removing an LAN Group Step 1. In the LAN Group window, locate the group to be removed and click its corresponding Remove option in the Configure f

７Admin On the left hand menu, click on Setup, and then select Admin below it. The current list of Administrator(s) shows up. Settings of the Admin

７９WAN Entering the WAN window Click WAN under the Address menu to enter the WAN window. The current setting information, such as the name of the

８０Adding a new WAN Address Step 1. In the WAN window, click the New Entry button. Step 2. In the Add New Address window, enter the settings for a

８１Modifying an WAN Address Step 1. In the WAN table, locate the name of the network to be modified and click the Modify option in its correspondin

８２Removing an WAN Address Step 1. In the WAN table, locate the name of the network to be removed and click the Remove option in its corresponding Co

８３WAN Group Entering the WAN Group window Click the WAN Group under the Address menu bar to enter the WAN window. The current settings for the WAN n

８４Adding an WAN Group Step 1. In the WAN Group window, click the New Entry button and the Add New Address Group window will appear. Step 2. In the A

８５Modify an WAN Group Step 1. In the WAN Group window, locate the network group to be modified and click its corresponding Modify button in the Conf

８６Removing an WAN Group Step 1. In the WAN Group window, locate the group to be removed and click its corresponding Modify option in the Configure

８７

８８Service In this section, network services are defined and new network services can be added. There are three sub menus under Service which are:

８Adding a new Sub Administrator Step 1. In the Admin window, click the New Sub Admin button to create a new Sub Administrator. Step 2. In the Add

８９Pre-defined Entering a Pre-defined window Click Service on the menu bar on the left side of the window. Click Pre-defined under it. A window w

９０Custom Entering the Custom window Click Service on the menu bar on the left side of the window. Click Custom under it. A window will appear wi

９１Adding a new Service Step 1. In the Custom window, click the New Entry button and a new service table appears. Step 2. In the new service ta

９２Modifying Custom Services Step 1. In the Custom table, locate the name of the service to be modified. Click its corresponding Modify option in th

９３Removing Custom Services Step 1. In the Custom window, locate the service to be removed. Click its corresponding Remove option in the Configure

９４Group Accessing the Group window Click Service in the menu bar on the left hand side of the window. Click Group under it. A window will appear

９５Adding Service Groups Step 1. In the Group window, click the New Entry button. In the Add Service Group window, the following fields will appe

９６Modifying Service Groups Step 1. In the Group window, locate the service group to be edited. Click its corresponding Modify option in the Con

９７Removing Service Groups Step 1. In the Group window, locate the service group to be removed and click its corresponding Remove option in the Con

９８Schedule The Bandwidth Manager allows the Administrator to configure a schedule for policies to take affect. By creating a schedule, the Admin