User manual AIRLIVE IGR-1500

[. . . ] IGR-1500 Four-WAN Internet Gateway User's Manual Declaration of Conformity We, Manufacturer/Importer OvisLink Corp. 5F. , NO. 6, Lane 130, Min-Chuan Rd. , Hsin-Tien City, Taipei County, Taiwan Declare that the product Four-WAN Internet Gateway IGR-1500 is in conformity with In accordance with 89/336 EEC-EMC Directive and 1999/5 EC-R & TTE Directive Clause EN Description Limits and methods of measurement of radio disturbance characteristics of information technology equipment Disturbances in supply systems caused by household appliances and similar electrical equipment "Harmonics" Disturbances in supply systems caused by household appliances and similar electrical equipment "Voltage fluctuations" Information Technology equipment-Immunity characteristics-Limits And methods of measurement 55022:1998/A1 :2000/A2:2003 61000-3-2:2000 EN EN 61000-3-3:1995/ A1:2001 55024:1998/A1 :2001/A2:2003 marking EN CE Manufacturer/Importer Signature Name Position/ Title : Albert Yeh Vice President (Stamp) Date 2007/8/23 AirLive IGR-1500 CE Declaration Statement Declaration OvisLink Corp. tímto prohlasuje, ze tento AirLive IGR-1500 je ve shod se základními pozadavky a dalsími píslusnými ustanoveními smrnice 1999/5/ES. erklærer herved, Dansk [Danish] at følgende udstyr AirLive IGR-1500 overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. [. . . ] Thus, the PCs in domain A and PCs in domain B can access the data with each other via the router mode. 24 Static Routing ­ Basic NAT Mode Similar to Gateway mode, the difference is that Basic NAT mode only has Basic NAT function. Once you select Basic NAT mode, all the additional function such as DoD (Dial on Demand), IP Filter, DoS and so on will be disabled. You may select Basic NAT mode to obtain higher speed otherwise you have to select Gateway mode to enable these functions. Dynamic Routing Dynamic Routing allows router learning the path to destination by receiving periodic updates from others. RIP1 supports only to broadcast mode while RIP2 supports broadcast and multicast mode. (Figure 3-15) Figure 3-15 Static Routing and Dynamic Routing 25 3. 7. 2 Current Table This display shows the valid routing paths in IGR-1500. (Figure 3-16) Figure 3-16 Current Table 26 3. 8 Access Control 3. 8. 1 Local IP Filtering (Gateway Mode only) AirLive IGR-1500 allows you to define the accessed restriction about to block or allow outgoing IP packets per protocol (port number). You may restrict specific IP to perform limited protocols or allow them to execute partial protocols. And the first thing you have to know is the port numbers and their usages. Local IP Filtering can be defined 10 items and item 1 has the highest priority. If IP settings are conflicted, the higher priority item will be the obeyed rules. You can reserve dedicate IP address to dedicated user from Configure LAN & DHCP address. You can allow or restrict specific IP(s) to access some port numbers. Reservations IP function, by using this function, user can have dedicated IP address match to their computer NIC MAC Example 1: If you restrict the PC of IP 192. 168. 1. 13-192. 168. 1. 15 to access HTTP, the settings are: Item 1: Enable Filter entry: Block Port Number: 80 IP address: 192. 168. 1. 13-192. 168. 1. 15 Example 2: If you allow the PC of IP 192. 168. 1. 16-192. 168. 1. 18 to access FTP only, the settings are: Item 2: Enable Filter entry: Allow Port Number: 21 IP address: 192. 168. 1. 16-192. 168. 1. 18 Example 3: If you allow the PC of IP 192. 168. 1. 40, 192. 168. 1. 56, 192. 168. 1. 100-192. 168. 1. 120 to access port 50, port53, port100-120 only, the settings are: Item 3: Enable Filter entry: Allow Port Number: 50, 53, 100-120 IP address: 192. 168. 1. 40, 192. 168. 1. 56, 192. 168. 1. 100-120 (Figure 3-17) 27 Figure 3-17 Local IP Filtering Example Setting Protocol Port Number List Protocol TCP TCP TCP TCP UDP UDP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP Service FTP SSH TELNET SMTP DNS TFTP GOTHER FINGER HTTP POP3 NFS NNTP NTP IMAP SNMP BGP WAIS Port no. 21 22 23 25 53 69 70 79 80 110 111 119 123 143 161 179 210 28 Protocol TCP TCP UDP TCP UDP UDP UDP TCP TCP TCP TCP TCP UDP TCP TCP TCP TCP Service LADP HTTPS IKE RLOGIN SYSLOG TALK RIP AFPOWERTCP Net-Meeting L2TP PPTP AOL PC Anywhere XWINDOW IRC Real-Media Port no. 389 443 500 513 514 517, 518 520 548 1503, 1702 1701 1723 5190~5194 5631~5632 6000-6063 6660~6669 7070 6000-6063 3. 8. 2 Remote IP Filtering (Gateway Mode only) AirLive IGR-1500 features to define accessed restriction for remote users. You may restrict some destination IP addresses that are not allowed to reach IGR-1500. IP Address: destination IP address that prohibits users to reach Enable: enable restrict function (Figure 3-18) Figure 3-18 Remote IP Filtering Example Setting 29 3. 8. 3 Intrusion Security (Gateway Mode only) AirLive IGR-1500 features Intrusion Security, to allow user setting as "BLOCK" or "PASS" function following by the table content. (Figure 3-19) Figure 3-19 Intrusion Security 30 3. 8. 4 DoS Defense (Gateway Mode only) AirLive IGR-1500 also provides DoS (Denial of Service Defense) function to protect your network servers, hosts, routers and other devices from the attacking of villain using mass data transmission. (Figure 3-20) The default value in the display is the optimize parameter for Router. (Figure 3-21) Figure 3-20 DoS Defense Figure 3-21 Default Setting of DoS Defense 31 Some virus are using "PING" command to attack network, AirLive IGR-1500 can be defined as accept or reject "PING" command from WAN or LAN. (Figure 3-22) Figure 3-22 Disable Ping respond Function Description Checking the IP fragments. When it finds someone from WAN side tries IP Fragments Checking to attack your network using overlap IP fragments in a bad attention, this function will check over these packets and drop them. Finding out whether the source address(s) and destination address(s) are legal IP's or not. [. . . ] Below is the actual display of godaddy for Name Servers: All registrars have the same basic name server facility. For www. example. com, we use godaddy. com, and the process is: Login Manage domain Set Name Servers. We enter WAN1 and WAN2 for Custom Name Servers. 65 A. 1 Simple Load Balance (2 WAN lines; Session 1:1) Let us assume that the upload speed of WAN1 and WAN2 are the same; so we will use inbound load-balancing setting: Session with a load-balancing ratio of 1:1. In the IN-BOUND ROUTER configuration Load Balance Inbound: Step 1: Click on Add new item 66 Step 2: Enter host1. example. com two times, once for WAN1 and once for WAN2 with Address Type. Repeat the previous configuration with the same name for WAN2 at this time. [. . . ]