HotBrick Network Solutions

Settings – Multi DMZ

Enable

Use this to enable or disable the DMZ setting, as required.

Name

Enter a name to assist you to remember this setting. This name has no effect

on the operation.

For Static IP

Public IP address

Enter the WAN port (Internet) IP address you wish to associate to a PC. This

IP address must have been allocated to you by your ISP.

Private IP

Address (LAN)

Enter the IP address of the PC you wish to associate with this WAN port IP

address. This IP address should be fixed, or reserved. (See the

Host IP

section for details on reserving an IP address.)

For Dynamic IP

WAN

Select the desired WAN port.

Session

•

Select "DHCP" if the IP address on this WAN port is dynamically

assigned. You can only select assign one (1) Private (LAN) IP address to

each port.

•

If using multi-session PPPoE, select the desired PPPoE session. These

sessions are defined on the

Advanced PPPoE

screen. You can assign

one (1) one (1) Private (LAN) IP address to each PPPoE session.

Private IP

Address (LAN)

Enter the IP address of the PC you wish to associate with this WAN port IP

address. This IP address should be fixed, or reserved. (See the

Host IP

section for details on reserving an IP address.)

Access Group

You can decide the users to have the authority of using DMZ, by define the

groups.

Direction

For DMZ, you can allow inbound, outbound only, or both inbound and

outbound both.

37

HotBrick Network Solutions

UPnP

With UPNP (Universal Plug & Play) function, it can easily setup and configure an entire network,

enable discovery and control of networked devices and services.

Figure 20 UPnP

Settings – UPnP

UPnP Option

If you Enable UPnP, then this two wan router will become one of the entire

local network. You can find out there is an icon show up on network

neighborhood on the window XP OS.

Every time you add a new network device with port mapping, The new

network device will appear on the mapping list.

38

HotBrick Network Solutions

Advanced Features

This screen allows you to change some advanced settings:

•

NAT

– NAT (Network Address Translation) is the technology which allows a number of LAN PCs

to share one (1) Internet IP address. These settings rarely need to be changed.

•

Remote Access Configuration

– This feature allows you to manage the Load Balancer via the

Internet. You can restrict access to a specified IP address or address range.

•

External Filters Configuration

– These settings determine whether or not the Load Balancer

should respond to ICMP (ping) requests received from the WAN port.

•

Interface Binding

– Use these to ensure that certain traffic is sent by a particular WAN port, and

thereby a particular ISP account. These settings are only useful if using both WAN ports.

Protocol & Port Binding

– This allows you binding WAN1 or WAN2 ports by selecting TCP/UDP

protocol.

Settings – Advanced Features

NAT

Configuration

•

NAT Routing

– NAT (Network Address Translation) is the technology which

allows one (1) WAN (Internet) IP address to be used by many LAN users.

•

If you disable NAT, Internet access is only possible if all PCs are

configured with valid Internet IP addresses. (The Load Balancer needs 2

addresses, 1 for the LAN port, and 1 for the WAN port.)

•

Generally, NAT is disabled only when you wish to use the

Load Balancer

as a Static Router.

•

TCP Timeout

– Enter the desired value to use on both WAN ports. The

default is 300.

•

UDP Timeout

– Enter the desired value to use on both WAN ports. The

default is 120.

•

TCP Window Limit

– Enter the desired value to use on both WAN ports. The

default is 0 (no limit).

•

TCP MSS Limit

– Enter the required MSS (Maximum Segment Size) to use

on both WAN ports. The default is 0 (no limit).,

•

Disable Port Translation

– Enter the desired port range of all packets which

aren’t translated via WAN port.

39

Session Persistency (Protocol, Port Range)

Enabled

Session 1

Session 2

Session 3

Session 4

Session 5

Session 6

BOTH

BOTH

BOTH

BOTH

BOTH

BOTH

0

~

0

0

~

0

0

~

0

0

~

0

0

~

0

0

~

0

Session Persistency –

Some Internet applications (notably secure web sites, gaming sites) would need

several established sessions to make a successful transaction (or connection) and most likely they expect

all sessions would be coming from the same source (IP address). Multiple-Wan devices by default

(without any binding rules set) would handle all the traffic using load balance algorithm, sessions would

be distributed and passed over all available wan interfaces and thus when connecting against those

applications or web sites this is breaking its rule (same source) and would create problems (something

like slow connection, web pages not fully loaded etc) . Session binding rule is implemented to avoid such

situation, it indexes all the traffic from each host within LAN side and instruct them going through one

specific (dynamically selected) wan interface during host’s active period and as the result problem is

avoided when communicating with those applications.

a) Enable –

Enable Checkbox will enable Session Persistency mechanism.

b)

Users can use pull-down menu to select TCP, UDP or both protocols for the Internet .

c) Port range –

User an define port number range to decide the traffic sessions, and maintain on that

WAN IP port . For example, if the port range is 2903 ~ 2923, that means only the port number from

2903 to 2923 will keep the sessions accordance for a WAN port.

HotBrick Network Solutions

Remote

Access

Configuration

•

Remote Upgrade

– If enabled, you can use the supplied Windows program to

remotely upgrade the Firmware. If not enabled, upgrades must be performed

by a PC on the LAN.

•

Remote Web-based setup

- – If enabled, access to the Web-based interface

is available via the Internet. (See below for details.) If not enabled, access is

only available to PCs on the LAN.

•

Port

– The port number used when connecting remotely. See below for

details.

•

Allowed IP range

– Remote access is only available to the IP addresses

entered here.

•

Leaving these fields blank will allow access by all PCs.

•

These addresses must be Internet IP addresses, not addresses on the

local LAN.

•

To specify a single address, enter it in both fields.

•

IDENT Port

– Port 113 is associated with the Internet's (Identification /

Authentication) service. When a client program in your computer contacts a

remote server for services such as POP, IMAP, SMTP, that remote server

sends back a query to the "Ident" server running in many systems listening for

these queries on port 113. This means that port 113 is often probed by

attackers as a rich source of your personal information. By default it is

“Disable”.

External

Filters

Configuration

These settings determine whether or not the Load Balancer should respond to

ICMP (ping) requests received from the WAN port.

•

Block Selected packet types

– This acts as "master" switch. If checked, the

selected packet types are blocked. Otherwise, they are accepted.

•

Echo Request, Timestamp Request, …

Select the packet types you wish to

block, using the checkboxes.

Dynamic

Routing

•

RIP v2

– This acts as “master” switch. If enabled, the selected WAN or LAN

will run RIPv1/v2, otherwise they don’t have RIP function.

•

LAN, WAN1, WAN2

– If enabled, any WAN or LAN can execute RIP function.

DNS

Loopback

When you have some servers on LAN and their domain names have already

registered on public DNS. To avoid DNS loop back problem, please enter the

following fields.

•

Domain Name

– Enter the domain name specified by you for local

host/server.

•

Private IP

– Enter the private IP address of your local host/server.

40