User’s Guide GPT-2541GNAC Indoor GPON HGU Default Login Details http://192.168.1.1 User Name: admin Password: 1234 Firmware Version 1.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate.
Contents 8 Chapter 1: Introduction 8 Overview 9 Hardware Connection 11 LEDs (Lights) 12 Advanced Configuration 16 Chapter 2: Device Info 16 Device Info Summary 18 WAN Info 19 LAN Statistics 21 WAN Statistics 22 Route Info 23 ARP Info 24 DHCP Leases 25 Chapter 3: WAN 25 GPON Layer2 Interface 26 Layer-2 GPON Interface Configuration 26 Ethernet Layer2 Interface 27 Ethernet Layer-2 Interface Configuration 27 WAN Service 29 WAN Connection Configuration 46 Chapter 4: LAN
65 Port Triggering 68 Add Port Triggering Rule 70 DMZ Host 70 SIP ALG 72 Chapter 7: Firewall 72 Firewall General 73 Default Policy Configuration 74 Firewall Rules 76 Firewall Rules Configuration 77 MAC Filtering 78 MAC Filtering Add 80 Chapter 8: Parental Control 80 Time Restriction 81 Add a Time Restriction Rule 82 URL Filter 83 Add a URL Filter Rule 84 Chapter 9: Quality of Service (QoS) 84 QoS General 85 Queue Setup 86 Add a QoS Queue 87 Class Setup 89 Add QoS C
104 DNS Proxy 105 Chapter 14: Interface Grouping 105 Interface Grouping 106 Interface Group Configuration 109 Chapter 15: IP Tunnel 109 IPv6inIPv4 (6RD) 110 IPv6inIPv4 Configuration 111 IPv4inIPv6 (Dual Stack Lite) 113 IPv4inIPv6 Configuration 114 Chapter 16: IPSec VPN 114 IPSec VPN 116 IPSec VPN Add Screen 121 Technical Reference 121 IPSec Architecture 122 Encapsulation 123 IKE Phases 124 Negotiation Mode 124 IPSec and NAT 125 VPN, NAT, and NAT Traversal 126 ID Type a
147 Wireless MAC Filter 148 Wireless MAC Filter Add 149 Wireless Advanced 152 Wireless Station Info 153 Wireless 5GHz Basic 156 Wireless 5GHz Advanced Screen 157 Wireless 5GHz WPS 159 Push Button Configuration 160 Wireless 5GHz MAC Filter 161 Wireless MAC Filter Add 162 Wireless 5GHz Bridge 163 Wireless 5GHz Station Info 165 Chapter 21: Voice 165 SIP Account 170 SIP Server 176 Dial Plan Rules 177 Phone Region 178 Call Rule 179 Call History Summary 180 Outgoing Calls 1
207 SNMP Agent 210 Chapter 26: TR-069 Client 210 TR-069 Client 212 Chapter 27: Internet Time 212 Internet Time 214 Chapter 28: User Passwords 214 User Passwords 215 Chapter 29: GPON Password 215 GPON Password 216 Chapter 30: Update Software 216 Update Software 218 Chapter 31: Reboot 218 Restart Using the Web Configurator 219 Chapter 32: Troubleshooting 219 Overview 219 Power, Hardware Connections, and LEDs 220 Router Access and Login 221 Internet Access 222 Wireless Inte
Introduction 1 Chapter Chapter 1 C H A PT ER 1 1.1 Overview The GPT-2541GNAC GPON ONT combines high-speed Fiber Internet access with a built-in switch, a firewall and high-speed wireless networking capability. It has a phone port for making calls over the Internet (Voice over IP or VoIP). It also supports IPTV service when available from your service provider. The following figure shows an application example of the Router.
1.2 Hardware Connection Make sure to use the proper cables and power adapter to connect the Router. Figure 2 Rear Panel The following table explains the connectors and buttons on the rear panel. Table 1 Rear Panel CONECTOR DESCRIPTION 12V-2A Connect the provided power adapter to the 12V-1A power connector. Attach the power adapter to a proper power source. ON/OFF Use this button to turn the Router on or off. Fibra Óptica Connect the service provider’s fiber optic cable to this port.
Table 1 Rear Panel (continued) CONECTOR DESCRIPTION Wifi5GHz/WPS Use this button to enable or disable the 5 GHz WiFi and WPS features on the Router. By default, WiFi is enabled on the Router. Press this button for 1 second to turn it off. To enable the WPS feature, press the button for more than 3 seconds The WPS LED on the front panel will flash green while the Router sets up a WPS Connection with the wireless device.
1.3 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 3 Front Panel LEDs Figure 4 Rear Panel LEDs Table 2 LED Descriptions LED COLOR STATUS DESCRIPTION Power Blue On The Router is receiving power and ready for use. Red On The Router has hardware failure. Blinking The Router detected an error while self-testing. Off The Router is not receiving power. On The Router has a successful Ethernet connection with a device on the LAN.
Table 2 LED Descriptions (continued) LED COLOR STATUS DESCRIPTION Telf Blue On The SIP registration is successful. Blinking The Router is negotiating the SIP registration. Green On There is incoming or outgoing voice traffic. Red Blinking The Router has failed to register the VoIP service. Off There is no VoIP service. On The 2.4 GHz wireless is on. Blinking The 2.4 GHz WPS is activated. It also blinks when the Router is setting up a WPS connection. Off The 2.
1 Access the Client Wizard screens. Enter the IP address: http://192.168.1.1. 2 The login screen appears. The default password is random. Please refer to the label sticker at the bottom of the device. Enter the password. Click Entrar to enter the Client Wizard. 3 The main screen appears.
4 Click the Menu button and then Configuración avanzada. 5 Click Aceptar.
6 The advanced configuration screens display. Use the menu on the left to navigate the screens. Refer to the rest of this guide for details about the screens. Click Logout to exit the configuration screens.
2.1 Device Info 2 Chapter Chapter 2 C H A PT ER 2 Device Info Summary Click Device Info > Summary to open this screen with general device and WAN connection status information. Figure 5 Device Info Summary Table 3 Device Info Summary LABEL DESCRIPTION Board ID This field displays the ID number of the circuit board in the Router. Symmetric CPU Threads This field displays the number of threads in the Router’s CPU.
Table 3 Device Info Summary (continued) LABEL DESCRIPTION Bootloader (CFE) Version This field displays the version of bootloader the Router is using. Wireless Driver Version This field displays the version of the driver for the Router’s wireless chipset. Voice Service Version This field displays the version of the VoIP software the Router is using. Uptime This field displays how long the Router has been running since it last started up.
2.2 WAN Info Click Device Info > WAN to open this screen which lists the Router’s WAN connections and their status. Figure 6 WAN Info Table 4 WAN Info LABEL DESCRIPTION Interface This shows the name of the WAN interface. veip0 stands for a virtual Ethernet card and is the foundation for veip0/* which are virtual WAN interfaces of the physical GPON line. The ppp0.* indicates a PPP connection. The number after the dot (.) represents the VLAN ID number assigned to traffic sent through this connection.
Table 4 WAN Info (continued) 2.3 LABEL DESCRIPTION IPv4 Address This displays the interface’s current IPv4 address if it has one. IPv6 Address This displays the interface’s current IPv6 address if it has one. LAN Statistics Click Device Info > Statistics > LAN to open this screen of traffic statistics counters for the Router’s wired and wireless LAN interfaces. Use the button to clear the counters.
Table 5 LAN Statistics (continued) LABEL DESCRIPTION Pkts This indicates the number of transmitted packets on this interface. Errs This indicates the number of frames with errors transmitted on this interface. Drops This indicates the number of outgoing packets dropped on this interface. Reset Statistics Click this to clear the screen’s statistics counters.
2.4 WAN Statistics Click Device Info > Statistics > WAN Service to display the total, multicast, unicast, and broadcast traffic statistics counters for the Router’s WAN interfaces. Use the button to clear the counters. Figure 8 WAN Statistics Table 6 WAN Statistics LABEL DESCRIPTION Interface This shows the name of the WAN interface used by this connection. veip0 stands for a virtual Ethernet card and is the foundation for veip0/* which are virtual WAN interfaces of the physical GPON line. The ppp0.
Table 6 WAN Statistics (continued) 2.5 LABEL DESCRIPTION Drops This indicates the number of outgoing packets dropped on this interface. Reset Click this to clear the screen’s statistics counters. Route Info Click Device Info > Route to display the Router’s IPv4 and IPv6 routing tables. Figure 9 Route Info Table 7 Route Info LABEL DESCRIPTION Destination This displays the IP address to which this entry applies.
2.6 ARP Info Click Device Info > ARP to display the Router’s IPv4 Address Resolution Protocol and IPv6 neighbor tables. This screen lists the IP addresses the Router has mapped to MAC addresses. Figure 10 ARP Info Table 8 ARP Info LABEL DESCRIPTION IPv4 / IPv6 address The learned IP address of a device connected to one of the system’s ports. Flags Static - static entry, Dynamic - dynamic entry that is not yet complete, Complete dynamic entry that is complete.
2.7 DHCP Leases Click Device Info > DHCP to display the Router’s list of IP address currently leased to DHCP clients. Figure 11 DHCP Leases Table 9 DHCP Leases LABEL DESCRIPTION Hostname This field displays the name used to identify this device on the network (the computer name). The Router learns these from the DHCP client requests. “None” shows here for a static DHCP entry.
3.1 3 WAN Chapter Chapter 3 C H A PT ER 3 GPON Layer2 Interface The Router must have a layer-2 interface to allow users to use the GPON port to access the Internet. Log into the Router’s Web Configurator and click Advanced Setup > Layer2 Interface > GPON Interface to manage the GPON layer-2 interface. The GPON and ETH layer-2 interfaces cannot work at the same time. Figure 12 GPON Interface The following table describes the fields in this screen.
3.1.1 Layer-2 GPON Interface Configuration Click the Add button in the Layer2 Interface: GPON Interface screen to open the following screen. Use this screen to create a new layer-2 interface. Figure 13 GPON Interface Configuration Select the GPON port and click Apply/Save. The following table describes the fields in this screen. Table 11 GPON Interface Configuration LABEL DESCRIPTION Select a GPON port Select a GPON port.
The following table describes the fields in this screen. Table 12 ETH Interface LABEL DESCRIPTION Interface/(Name) The name of a configured layer-2 interface. eth0 ~ eth3 represent the ethernet LAN ports 1 ~ 4. Connection Mode This shows the connection mode of the layer-2 interface. Remove Select an interface and click the Remove button to delete it. You cannot remove a layer-2 interface when a WAN service is associated with it. Add Click this button to create a new layer-2 interface.
To use NAT, firewall or IGMP proxy in the Router, you need to configure a WAN connection with PPPoE or IPoE. When a layer-2 interface is in VLAN MUX Mode, you can configure up to five WAN services on the Router. Figure 16 WAN Service Table 14 WAN Service LABEL DESCRIPTION Interface This shows the name of the interface used by this connection. veip0 stands for a virtual Ethernet card and is the foundation for veip0/* which are virtual WAN interfaces of the physical GPON line. The ppp0.
Table 14 WAN Service (continued) LABEL DESCRIPTION NAT This shows whether NAT is activated or not for this interface. NAT is not available when the connection uses the bridging service. IPv6 This shows whether IPv6 is activated or not for this connection. IPv6 is not available when the connection uses the bridging service. Mld Proxy This shows whether Multicast Listener Discovery (MLD) proxy is activated or not for this connection. MLD is not available when the connection uses the bridging service.
Table 15 WAN Configuration: WAN Interface (continued) LABEL DESCRIPTION Back Click this button to return to the previous screen. Next Click this button to continue. 3.3.1.2 WAN Service Configuration This screen displays after you select the WAN interface for a new WAN connection. Figure 18 WAN Configuration: WAN Service Configuration Table 16 WAN Configuration: WAN Service Configuration LABEL DESCRIPTION Select WAN service type Select the method of encapsulation used by your ISP.
Table 16 WAN Configuration: WAN Service Configuration LABEL DESCRIPTION Allow as MLD Multicast Source This displays when you select the Bridging service type. Select this to have the Router add routing table entries based on the MLD traffic. Enter Service Description Specify a name to identify the service. veip0 stands for a virtual Ethernet card and is the foundation for veip0/* which are virtual WAN interfaces of the physical GPON line. eth0 ~ eth3 represent the ethernet LAN ports 1 ~ 4. Enter 802.
PPPoE This screen displays when you select PPP over Ethernet (PPPoE) in the WAN Service Configuration screen.
Table 17 WAN Configuration: PPPoE LABEL DESCRIPTION PPP Username Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. PPP Password Enter the password associated with the user name above. PPPoE Service Name Type the name of your PPPoE service here.
Table 17 WAN Configuration: PPPoE (continued) LABEL DESCRIPTION WAN Interface Identifier If you selected Random, this field is automatically configured. Use Static IPv6 Address Select this option if you have a fixed IPv6 address assigned by your ISP. IPv6 Address If you selected Manual, enter the WAN Identifier in this field. The WAN identifier should be unique and 64 bits in hexadecimal form.
Table 17 WAN Configuration: PPPoE (continued) LABEL DESCRIPTION Enable MLD Multicast Source Select this check box to have the Router add routing table entries based on the MLD traffic. Back Click this button to return to the previous screen. Next Click this button to continue.
IPoE This screen displays when you select IP over Ethernet in the WAN Service Configuration screen.
Table 18 WAN Configuration: IPoE LABEL DESCRIPTION Obtain an IP address automatically A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet. Select this if you have a dynamic IP address. Option 60 Vendor ID DHCP Option 60 identifies the vendor and functionality of the Router in DHCP requests that the Router sends to a DHCP server when getting a WAN IP address.
Table 18 WAN Configuration: IPoE (continued) LABEL DESCRIPTION WAN Interface Identifier Type Select Random to have the Device randomly configure a WAN Identifier, which is shown in the WAN Interface Identifier field. Select EUI-64 to use the EUI-64 format to generate an interface ID from the MAC address of the WAN interface. Select Manual to manually enter a WAN Identifier as the interface ID to identify the WAN interface.
3.3.1.4 NAT and IGMP Multicast This screen is available only when you select IP over Ethernet in the WAN Service Configuration screen. Figure 21 WAN Configuration: NAT and IGMP Multicast: IPoE Table 19 WAN Configuration: NAT and IGMP Multicast: IPoE LABEL DESCRIPTION Enable NAT Select this check box to activate NAT on this connection. Enable Fullcone NAT Select this check box to activate full cone NAT on this connection.
Table 19 WAN Configuration: NAT and IGMP Multicast: IPoE (continued) LABEL DESCRIPTION No Multicast VLAN Filter Select this check box to have the Router not filter multicast traffic based on its VLAN. Enable MLD Multicast Proxy Select this check box to have the Router act as an MLD proxy on this connection. This allows the Router to get subscription information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly.
3.3.1.5 Default Gateway (PPPoE or IPoE) The screen is not available when you select Bridging in the WAN Service Configuration screen. Figure 22 WAN Configuration: Default Gateway Table 20 WAN Configuration: Default Gateway LABEL DESCRIPTION Selected Default Gateway Interfaces Select a WAN interface through which to forward the service’s traffic. Available Routed WAN Interfaces Chapter 3 WAN You can select multiple WAN interfaces for the device to try.
Table 20 WAN Configuration: Default Gateway (continued) LABEL DESCRIPTION Selected WAN Interface Select a WAN interface through which to forward IPv6 traffic. Selected Default IPv6 Gateway Interfaces Select an IPv6 WAN interface through which to forward the service’s IPv6 traffic. Available IPv6 WAN Interfaces Select from these IPv6 WAN interfaces. Back Click this button to return to the previous screen. Next Click this button to continue.
If you configure only one IPoE connection, you must enter the static DNS server address.
Table 21 WAN Configuration: DNS Server: PPPoE or IPoE LABEL DESCRIPTION Select DNS Server Interface from available WAN interfaces Select this to have the Router get the DNS server addresses from one of the Router’s WAN interfaces. Selected DNS Server Interfaces Available WAN Interfaces Use the following Static DNS IP address Select a WAN interface through which to get DNS server addresses. You can select multiple WAN interfaces for the device to try.
3.3.1.7 Configuration Summary This read-only screen shows the current WAN connection settings. Figure 24 WAN Configuration: Configuration Summary Table 22 WAN Configuration: Configuration Summary LABEL DESCRIPTION Connection Type This is the encapsulation method used by this connection. NAT This shows whether NAT is active or not for this connection. Full Cone NAT This shows whether full cone NAT is active or not for this connection.
4 LAN Chapter Chapter 4 C H A PT ER 4 4.1 LAN Setup Click Advanced Setup > LAN to open the LAN Setup screen. Use this screen to set the Local Area Network IP address and subnet mask of your Router and configure the DNS server information that the Router sends to the DHCP client devices on the LAN.
Figure 25 LAN Setup Chapter 4 LAN 47
Table 23 LAN Setup LABEL DESCRIPTION Group Name Select the LAN interface for which to configure the IP address and subnet mask. IP Address Enter the LAN IP address you want to assign to your Router. The factory default is 192.168.1.1. Subnet Mask Type the subnet mask of your network. The factory default is 255.255.255.0. Your Router automatically computes the subnet mask based on the IP address you enter, so do not change this field unless you are instructed to do so.
Table 23 LAN Setup (continued) LABEL DESCRIPTION Gateway Enter the IPTV server’s IP address. Subnet Mask Enter the IPTV server’s subnet mask. Pool Start/End Specify the first and last of the contiguous addresses in the IPTV server’s IP address pool. DNS Server 1/2 Enter the IPTV server’s first/second DNS server IP address. VendorID Specify the IPTV’s vendor ID. VendorID Mode Specify the IPTV’s vendor ID mode type. VendorID Exclude Specify if you want to enable vendor ID exclude.
Table 24 Add DHCP Static IP Lease LABEL DESCRIPTION MAC Address Enter the MAC address of a computer on your LAN. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. 4.2 IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify.
Table 25 LAN Additional Subnet LABEL DESCRIPTION Active Select the check box to configure a LAN network for the Router. IP Address Enter the IP address of your Router in dotted decimal notation. IP Subnet Mask Your Router will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Router.
Table 26 LAN VLAN (continued) LABEL DESCRIPTION Pbits Set the IEEE 802.1p priority tag value (o to 7) to use for the LAN port’s downstream traffic. The larger the number, the higher the priority. Remove Select an entry and click the Remove button to delete it. Add Click this button to create a new LAN VLAN setting entry. Apply/Save Click this button to save your changes and go back to the previous screen.
4.4 IPv6 LAN Auto Configuration Click Advanced Setup > LAN > IPv6 Autoconfig to open the IPv6 LAN Auto Configuration screen. Use this screen to set the Local Area Network interface IPv6 settings.
The following table describes the fields in this screen. Table 27 IPv6 LAN Auto Configuration LABEL DESCRIPTION Interface Address To use a static IPv6 address, enter the IPv6 address prefix and prefix length that the Router uses for the LAN IPv6 address. The IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask.
Table 27 IPv6 LAN Auto Configuration (continued) LABEL DESCRIPTION Statically Configure Select this to send a fixed LAN IPv6 address prefix. Prefix: enter the IPv6 prefix and length the Router uses to generate the LAN IPv6 address. The prefix length specifies how many most significant bits (starting from the left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask. Preferred Life Time (hour): enter the preferred lifetime for the prefix.
5.1 5 VPN Chapter Chapter 5 C H A PT ER 5 L2TP VPN Client Use this screen to manage WAN service Layer 2 Tunneling Protocol (L2TP) client settings for connecting to L2TP servers. Click Advanced Setup > VPN > L2TP Client to open this screen as shown next. Figure 30 L2TP Client This screen contains the following fields: Table 28 L2TP Client LABEL DESCRIPTION Tunnel Name This is the name of this client connection. LNS Ip Address This is the IP address of the L2TP VPN server.
5.1.1.1 Name and Server IP Address This screen displays when you add a new L2TP client WAN service. Figure 31 L2TP Client: Add This screen contains the following fields: Table 29 L2TP Client: Add LABEL DESCRIPTION Tunnel Name Enter the name for this client connection. L2TP Server Ip Address Enter the IP address of the L2TP server. L2TP Protocol Version Select the L2TP Protocol Version 2 or 3.
Table 29 L2TP Client: Add (continued) LABEL DESCRIPTION MPPE Stateful? Select Yes to enable stateful MPPE encryption. This can increase performance over stateless MPPE, but should not be used in lossy network environments like layer two tunnels over the Internet. User Name Enter the user name for connecting to the L2TP server. Password Enter the password for connecting to the L2TP server. Retype Retype the password for connecting to the L2TP server.
5.1.1.2 PPP This screen displays second when you add a new L2TP client WAN service.
This screen contains the following fields: Table 30 L2TP Client Add: PPP LABEL DESCRIPTION PPP Username Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. PPP Password Enter the password associated with the user name above. PPPoE Service Name Type the name of your PPPoE service here.
5.1.1.3 L2TP Client Add: Configuration Summary This read-only screen shows the current L2TP WAN connection settings. Figure 33 L2TP Client Add: Configuration Summary Table 31 L2TP Client Add: Configuration Summary LABEL DESCRIPTION Connection Type This is the encapsulation method used by this connection. NAT This shows whether NAT is active or not for this connection. Full Cone NAT This shows whether full cone NAT is active or not for this connection.
Network Address Translation (NAT) 6.1 6 Chapter Chapter 6 C H A PT ER 6 Virtual Servers Click Advanced Setup > NAT > Virtual Servers to open the screen where you manage the list of virtual server rules. A virtual server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.
Table 32 Virtual Servers (continued) LABEL DESCRIPTION Server Name This field displays the name of the service used by the packets for this virtual server. External Port Start This is the first external port number that identifies a service. External Port End This is the last external port number that identifies a service. Protocol This show whether the virtual server applies to TCP traffic, UDP traffic, or both.
You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports.
Table 33 Virtual Servers Add LABEL DESCRIPTION Use Interface Select a WAN interface for which you want to configure a virtual server rules. Service Name Select a Service: use the drop-down list to select a service. Custom Service: type a name to specify a different service. Server IP Address Enter the inside IP address of the LAN device to which the virtual server forwards traffic. Apply/Save Click this button to save your changes.
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The Router records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the Router's WAN port receives a response with a specific port number and protocol ("open" port), the Router forwards the traffic to the LAN IP address of the computer that sent the request.
Table 34 Port Triggering LABEL DESCRIPTION Add Click this to create a new rule. Remove Select entries and click the Remove button to delete them. # This is the index number of the entry. Status This field displays whether the port triggering rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Application Name This field displays the name of the service used by this rule.
6.2.1 Add Port Triggering Rule This screen lets you create new port triggering rules. Click Add in the Port Triggering screen to open the following screen. Figure 38 Port Triggering: Add Table 35 Port Triggering: Add LABEL DESCRIPTION User Interface Select a WAN interface for which you want to configure port triggering rules.
Table 35 Port Triggering: Add (continued) LABEL DESCRIPTION Trigger Port End Type a port number or the ending port number in a range of port numbers. Trigger Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. Open Port Start The open port is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The Router forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service.
6.3 DMZ Host Click Advanced Setup > NAT > DMZ Host to specify the IP address of a default server to receive packets from ports not specified in the Port Forwarding screen. Figure 39 DMZ Host Table 36 DMZ Host LABEL DESCRIPTION DMZ Host IP Address Enter the IP address which receives packets from ports that are not specified in the Port Forwarding screen. Note: If you do not assign a default server, the Router discards all packets received for ports not specified in the virtual server configuration.
The SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream. When the Router registers with the SIP register server, the SIP ALG translates the Router’s private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if you enable the SIP ALG. Figure 40 SIP ALG Table 37 SIP ALG LABEL DESCRIPTION Enable SIP ALG Enable this to make sure SIP (VoIP) works correctly with port-forwarding.
7.1 Firewall 7 Chapter Chapter 7 C H A PT ER 7 Firewall General Use this screen to enable or disable the firewall and manage the default policies (filters). Click Advanced Setup > Firewall to open the General screen. Figure 41 Firewall General Table 38 Firewall General LABEL DESCRIPTION Active Firewall Select this check box to activate the firewall. The Router performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated.
Table 38 Firewall General (continued) LABEL DESCRIPTION Default Action This displays the default action that the firewall is to take on packets that are traveling in the selected direction and do not match any of the firewall rules. Drop: the Router silently discards the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the sender. Permit: the Router allows the passage of the packets. Remove Select entries and click the Remove button to delete them.
Table 39 Default Policy (continued) 7.2 LABEL DESCRIPTION Default Action Specify whether the firewall silently discards packets (Drop) or allows the passage of packets (Permit). Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. Firewall Rules The ordering of your rules is very important as rules are applied in turn. Click Advanced Setup > Firewall > Rules to display the following screen.
Table 40 Firewall Rules LABEL DESCRIPTION Incoming/ Outgoing Rules The following fields summarize the rules you have created that apply to traffic traveling in the selected packet direction. No. This is your firewall rule number. The ordering of your rules is important as rules are applied in turn. Active This field displays whether a firewall rule is turned on or not. Select the check box to enable the rule. Clear the check box to disable the rule. Name This displays the name of the rule.
7.2.1 Firewall Rules Configuration In the Firewall Rules screen, click Add or click a rule’s Edit button to display this screen and refer to the following table for information on the labels. Figure 44 Firewall Rules: Add Table 41 Firewall Rules: Add LABEL DESCRIPTION Active Select this check box to enable the rule. Rule Name Enter a descriptive name of up to 16 printable English keyboard characters, including spaces.
Table 41 Firewall Rules: Add (continued) LABEL DESCRIPTION Direction Select a direction of travel of packets for which you want to configure the firewall rule. Protocol Select the IP protocol (TCP, UDP or ICMP) and enter the protocol (service type) number in the port field. Source IP Address Enter the source IP address in dotted decimal notation. Source Subnet Mask Enter the source subnet mask. Source IPv6 Address Enter the source IPv6 address in dotted decimal notation.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen. Figure 45 MAC Filtering The following table describes the labels in this menu. Table 42 MAC Filtering LABEL DESCRIPTION MAC Restrict Mode Select Disabled to turn off MAC address filtering.
The following table describes the labels in this menu. Table 43 MAC Filtering Add LABEL DESCRIPTION MAC Address Enter the MAC address in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply/Save Click this button to save your changes.
8.1 Parental Control 8 Chapter Chapter 8 C H A PT ER 8 Time Restriction Click Advanced Setup > Parental Control > Time Restriction to configure access time schedules for specific users. Figure 47 Time Restriction Table 44 Time Restriction LABEL DESCRIPTION Username This is the name of the user whose access the rule controls. MAC This is the MAC address of the LAN or wireless device whose access the rule controls. Mon ~ Sun This shows an “x” for every day of the week the schedule applies to.
8.1.1 Add a Time Restriction Rule Click Add in the Time Restriction screen to add a new rule. Use this screen to configure a restricted access schedule. Figure 48 Time Restriction: Add Table 45 Time Restriction: Add LABEL DESCRIPTION Username Specify the name of the user whose access the rule controls. Browser's MAC Address Select this to create the rule for the MAC address of the device with the browser you are using to configure the Router.
8.2 URL Filter Click Advanced Setup > Parental Control > Url Filter to use the Url Filter screen to block or allow access to specific web sites. Figure 49 URL Filter Table 46 URL Filter LABEL DESCRIPTION URL List Type Select Exclude to block access to the URLs in the list and allow access to other URLs. Select Include to allow access to the URLs in the list and block access to other URLs. Address This shows the website address (URL) to which the entry applies.
8.2.1 Add a URL Filter Rule Click Add in the URL Filter screen to add a new entry. Use this screen to configure a URL filtering setting to control access to certain web sites. Figure 50 URL Filter: Add Table 47 URL Filter: Add LABEL DESCRIPTION URL Address Specify a web site or URL to which to filter access. Port Number Specify the port number if you need to control access to one other than 80. Apply/Save Click this button to save your changes.
9.1 Quality of Service (QoS) 9 Chapter Chapter 9 C H A PT ER 9 QoS General Click Advanced Setup > Quality of Service to enable or disable QoS, set the bandwidth, and select to have the Router automatically assign priority to upstream traffic according to the IP precedence or packet length. Figure 51 QoS General Table 48 QoS General LABEL DESCRIPTION Enable QoS Select the check box to turn on QoS to improve your network performance.
9.2 Queue Setup Click Advanced Setup > Quality of Service > Queue Setup to use the Queue Setup screen to configure QoS queue assignment. Figure 52 Queue Setup Table 49 Queue Setup LABEL DESCRIPTION Name This shows the descriptive name of this queue. Key This is the queue’s index number. Interface This shows the name of the Router’s interface through which traffic in this queue passes. Qid This shows the priority of this queue for the interface.
Table 49 Queue Setup (continued) LABEL DESCRIPTION Add Click Add to create a new queue. Enable Select disabled entries and click the Enable button to activate them. 9.2.1 Add a QoS Queue Click the Add button in the QoS Queue screen to configure a new queue. Figure 53 Queue Setup: Add Table 50 Queue Setup: Add LABEL DESCRIPTION Name Enter the descriptive name of this queue. Enable Select to enable or disable this queue. Interface Select the interface of this queue.
Table 50 Queue Setup: Add (continued) LABEL DESCRIPTION Queue Precedence Select a queue precedence level (from 1 to 8) to configure for the selected interface. The smaller the number, the higher the priority level. Traffic assigned to higher priority queues gets through faster while traffic in lower priority queues is dropped if the network is congested. If the queue precedence level already has a queue scheduler configured, it displays after the precedence level.
Table 51 QoS Classification Setup (continued) LABEL DESCRIPTION CLASSIFICATION CRITERIA These fields show the criteria specified in the classifier rule. For example the interface from which traffic of this class comes and the source MAC address of traffic that matches this classifier. Class Intf This displays the ingress interface to which the classifier applies. Ether Type This displays the type of Ethernet frames to which the classifier applies.
9.3.1 Add QoS Class Click Add in the Class Setup screen to configure a new classifier. Figure 55 Add QoS Class Table 52 Add QoS Class LABEL DESCRIPTION Traffic Class Name Enter a descriptive name of up to 15 printable English keyboard characters, not including spaces. Rule Order Select this classifier’s place in the list of classifiers. Select Last to put this rule in the back of the classifier list. Rule Status Chapter 9 Turn this classifier on or off.
Table 52 Add QoS Class (continued) LABEL DESCRIPTION Specify Classification Criteria Configure these fields to identify the traffic to which the class applies. The fields available vary depending on the selected interface and Ether type. Leave a field blank to not apply that criterion. Class Interface Select the ingress interface to which the classifier applies. Ether Type Select the predefined application (IP, ARP, IPv6, PPPoE discovery, PPPoE session, 8865, 8866, or IEEE 802.
Table 52 Add QoS Class (continued) LABEL DESCRIPTION Specify Classification Results Configure these fields to change traffic that matches the classifier. The fields available vary depending on the selected interface, Ether type, and sometimes on the selected class queue. Leave a field blank to not apply that type of change. Specify Class Queue Select the queue to which to add traffic that matches this classifier.
Routing 10 Chapter Chapter 10 C H AP T ER 1 0 10.1 Default Gateway Click Advanced Setup > Routing > Default Gateway to open the Default Gateway screen. Use this screen to select WAN interfaces to serve as system default gateways. Figure 56 Default Gateway Move the WAN interfaces to serve as system default gateways from Available Routed WAN Interfaces to Selected Default Gateway Interfaces.
10.2 Static Route Click Advanced Setup > Routing > Static Route to view and configure the static route rules on the Router. Figure 57 Static Route Table 53 Static Route LABEL DESCRIPTION IP Version This displays whether the entry uses IPv4 or IPv6. DstIP/ PrefixLength This specifies the IP network address and prefix length of the final destination. Routing is always based on network number. Gateway This is the IP address of the gateway.
10.2.1 Add Static Route Use this screen to add a static route. Click Add in the Static Route screen to display the following screen. Figure 58 Static Route: Add Table 54 Static Route: Add LABEL DESCRIPTION IP Version Select whether your IP type is IPv4 or IPv6. Destination IP address/ prefix length Enter the IPv4 or IPv6 address and network length of the final destination. Interface Select the interface through which this static route sends traffic.
Use the Policy Routing screen to view and configure routing policies on the Router. Click Advanced Setup > Routing > Policy Routing to open the following screen. Figure 59 Policy Routing Table 55 Policy Routing LABEL DESCRIPTION Policy Name This displays the name of the rule. Source IP This displays the source IP address. LAN Port This displays the source LAN port number. WAN This displays the WAN interface through which the traffic is routed.
10.3.1 Add Policy Routing Click Add in the Policy Routing screen to open the following screen. Use this screen to configure the required information for a policy route. Figure 60 Policy Routing: Add Table 56 Policy Routing: Add LABEL DESCRIPTION Policy Name Enter a descriptive name of printable English keyboard characters, not including spaces. Physical LAN Port Select the source LAN Ethernet port number. Source IP Enter the source IP address.
10.4 RIP Click Advanced Setup > Routing > RIP to open the RIP screen. Use this screen to configure RIP settings. Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. Figure 61 RIP Table 57 RIP LABEL DESCRIPTION Interface This is the name of the interface in which the RIP setting is used.
11.1 11 DNS Chapter Chapter 11 C H AP T ER 1 1 DNS Server DNS (Domain Name System) maps a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. Use this screen to view and configure DNS routes on the Router. Click Advanced Setup > DNS > DNS Server to open this screen.
Figure 62 DNS Server Chapter 11 DNS 99
The following table describes the fields in this screen. Table 58 DNS Server LABEL DESCRIPTION Select DNS Server Interface from available WAN interfaces Select this to have the Router get the DNS server addresses from one of the Router’s WAN interfaces. Selected DNS Server Interfaces Select a WAN interface through which to get DNS server addresses. Available WAN Interfaces These are the WAN interfaces you can select from.
Click Advanced Setup > DNS > Dynamic DNS to configure DDNS entries. Figure 63 Dynamic DNS The following table describes the fields in this screen. Table 59 Dynamic DNS LABEL DESCRIPTION Hostname This displays the entry’s domain name. Username This displays the entry’s user name. Service This displays the entry’s Dynamic DNS service provider. Interface This displays the interface the DDNS entry uses. Remove Select entries and click the Remove button to delete them.
11.2.1 Dynamic DNS Add Use this screen to create a DDNS entry. Click the Dynamic DNS screen’s Add button to display the following screen. Figure 64 Dynamic DNS Add The following table describes the fields in this screen. Table 60 Dynamic DNS Add LABEL DESCRIPTION D-DNS provider Select your Dynamic DNS service provider from the drop-down list box. Hostname Type the domain name assigned to your Router by your Dynamic DNS provider.
12.1 12 UPnP Chapter Chapter 12 C H AP T ER 1 2 UPnP Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. Use the UPnP screen to enable the UPnP feature on your Router.
DNS Proxy 13 Chapter Chapter 13 C H AP T ER 1 3 13.1 DNS Proxy Use DNS Proxy to have the Router send its own address to the LAN clients for them to use as the DNS server. Click Advanced Setup > DNS Proxy to open the DNS Proxy screen. Figure 66 DNS Proxy Table 62 DNS Proxy LABEL DESCRIPTION Enable DNS Proxy Select this to have the Router send its own address to the LAN clients for them to use as the DNS server. Host name of the Broadband Router Enter a descriptive name for this Router.
14.1 Interface Grouping 14 Chapter Chapter 14 C H AP T ER 1 4 Interface Grouping By default, all LAN and WAN interfaces on the Router are in the same group and can communicate with each other. Create interface groups to have the Router assign the IP addresses in different domains to different groups. Each group acts as an independent network on the Router.
The following table describes the fields in this screen. Table 63 Interface Grouping LABEL DESCRIPTION Group Name This shows the descriptive name of the group. Remove Select this check box and click the Remove button to delete the group from the Router. WAN Interface This shows the WAN interfaces in the group. LAN Interfaces This shows the LAN interfaces in the group. DHCP Vendor IDs This shows the DHCP Vendor’s ID for the group. Add Click this button to create a new group. 14.1.
An interface can belong to only one group at a time.
The following table describes the fields in this screen. Table 64 Interface Grouping: Add LABEL DESCRIPTION Group Name Enter a name to identify this group. You can enter up to 30 characters. You can use letters, numbers, hyphens (-) and underscores (_). Spaces are not allowed. WAN Interface used in the grouping Select the WAN interface this group uses.
15 IP Tunnel Chapter Chapter 15 C H AP T ER 1 5 15.1 IPv6inIPv4 (6RD) Use IPv6 Rapid Deployment (6RD) when the local network uses IPv6 and the ISP has an IPv4 network. When the Router has an IPv4 WAN address and is configured to IPv4 only, you can enable 6RD to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Table 65 IPv6inIPv4 LABEL DESCRIPTION Name This displays the IPv6 to IPv4 tunnel’s name. WAN This displays the associated WAN interface. LAN This displays the associated LAN interface. Dynamic This displays the type of 6RD. IPv4 Mask Length This displays the subnet mask number for the IPv4 network. 6rd Prefix This displays the IPv6 prefix for tunneling IPv6 traffic to the ISP’s border relay router and connecting to the native IPv6 Internet.
Table 66 IPv6inIPv4: Add LABEL DESCRIPTION Tunnel Name Enter a descriptive name for the IPv6 through IPv4 tunnel. Mechanism The current mechanism is set to 6RD to tunnel IPv6 traffic from the local network through the ISP’s IPv4 network. Associated WAN Interface Select a WAN interface to associate with the IPv6 to IPv4 tunnel. Associated LAN Interface Select a LAN interface to associate with the IPv6 to IPv4 tunnel. Manual/ Automatic Select the 6RD type.
The Router tunnels IPv4 packets inside IPv6 encapsulation packets to the ISP’s Address Family Transition Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The Router uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet.
Table 67 IPv4inIPv6 (continued) LABEL DESCRIPTION Remove Select an entry and click the Remove button to delete it. Add Click this to add a new IPv4 through IPv6 tunnel. 15.2.1 IPv4inIPv6 Configuration Click the Add button in the IPv4inIPv6 screen to add a new IPv6 through IPv4 tunnel entry. Figure 74 IPv4inIPv6: Add Table 68 IPv4inIPv6: Add LABEL DESCRIPTION Tunnel Name Enter a descriptive name for the IPv4 to IPv6 tunnel.
