21

of

72

Clear

Re-initialize this area of the screen, discarding any changes you have made.

With the above example application rule enabled, the router will open up a range of ports

from 6000-6200 for incoming traffic from the Internet, whenever any computer on the

internal network opens up an application that sends data to the Internet using a port in

the range of 6500-6700.

Application Rules

This is a list of the defined application rules. Click the Enable checkbox at the left to

directly activate or de-activate the entry. An entry can be changed by clicking the Edit

icon or can be deleted by clicking the Delete icon. When you click the Edit icon, the item

is highlighted, and the "Edit Application Rule" section is activated for editing.

TRAFFIC SHAPING

The Traffic Shaping feature helps improve your network performance by prioritizing applications.

Traffic Shaping Setup

Enable Traffic Shaping

When this option is enabled, the router restricts the flow of outbound traffic so as not to

exceed the WAN uplink bandwidth.

Automatic Classification

This option is enabled by default so that your router will automatically determine which

programs should have network priority. For best performance, use the Automatic

Classification option to automatically set the priority for your applications.

Dynamic Fragmentation

This option should be enabled when you have a slow Internet uplink. It helps to reduce

the impact that large low priority network packets can have on more urgent ones by

breaking the large packets into several smaller packets.

Automatic Uplink/Downlink Speed

When enabled, this option causes the router to automatically measure the useful uplink

and downlink bandwidth each time the WAN interface is re-established (after a reboot, for

example).

Measured Uplink Speed

This is the uplink speed measured when the WAN interface was last re-established. The

value may be lower than that reported by your ISP as it does not include all of the

network protocol overheads associated with your ISP's network. Typically, this figure will

be between 87% and 91% of the stated uplink speed for xDSL connections and around 5

kbps lower for cable network connections.

22

of

72

Manual Uplink Speed

If Automatic Uplink Speed is disabled, this options allows you to set the uplink speed

manually. Uplink speed is the speed at which data can be transferred from the router to

your ISP. This is determined by your ISP. ISPs often specify speed as a downlink/uplink

pair; for example, 1.5Mbps/284kbps. For this example, you would enter "284".

Alternatively you can test your uplink speed with a service such as

www.dslreports.com

.

Note however that sites such as DSL Reports, because they do not consider as many

network protocol overheads, will generally note speeds slightly lower than the Measured

Uplink Speed or the ISP rated speed.

Connection Type

By default, the router automatically determines whether the underlying connection is an

xDSL/Frame-relay network or some other connection type (such as cable modem or

Ethernet), and it displays the result as

Detected xDSL or Frame Relay Network

. If you

have an unusual network connection in which you are actually connected via xDSL but

for which you configure either "Static" or "DHCP" in the WAN settings, setting this option

to

xDSL or Other Frame Relay Network

ensures that the router will recognize that it

needs to shape traffic slightly differently in order to give the best performance. Choosing

xDSL or Other Frame Relay Network

causes the measured uplink speed to be reported

slightly lower than before on such connections, but gives much better results.

Detected xDSL or Frame Relay Network

When

Connection Type

is set to

Auto-detect

, the automatically detected connection

type is displayed here.

Add/Edit Traffic Shaping Rules

A Traffic Shaping Rule identifies a specific message flow and assigns a priority to that

flow. For most applications, automatic classification will be adequate, and specific Traffic

Shaping Rules will not be required.

Traffic Shaping supports overlaps between rules, where more than one rule can match

for a specific message flow. If more than one rule is found to match the rule with the

highest priority will be used.

Enable

Specifies whether the entry will be active or inactive.

Name

Create a name for the rule that is meaningful to you.

Priority

The priority of the message flow is entered here -- 0 receives the highest priority (most

urgent) and 255 receives the lowest priority (least urgent).

Protocol

The protocol used by the messages.

23

of

72

Local IP Range

The rule applies to a flow of messages whose LAN-side IP address falls within the range

set here.

Local Port Range

The rule applies to a flow of messages whose LAN-side port number is within the range

set here.

Remote IP Range

The rule applies to a flow of messages whose WAN-side IP address falls within the range

set here.

Remote Port Range

The rule applies to a flow of messages whose WAN-side port number is within the range

set here.

Save/Update

Record the changes you have made into the following list.

Clear

Re-initialize this area of the screen, discarding any changes you have made.

Traffic Shaping Rules

This section lists all the defined Traffic Shaping Rules. Click the Enable checkbox at the

left to directly activate or de-activate the entry. An entry can be changed by clicking the

Edit icon or can be deleted by clicking the Delete icon. When you click the Edit icon, the

item is highlighted, and the "Edit Traffic Shaping Rule" section is activated for editing.

ROUTING

Add/Edit Route

Adds a new route to the IP routing table or edits an existing route.

Enable

Specifies whether the entry will be enabled or disabled.

Destination IP

The IP address of packets that will take this route.

Netmask

One bits in the mask specify which bits of the IP address must match.

24

of

72

Gateway

Specifies the next hop to be taken if this route is used. A gateway of 0.0.0.0 implies there

is no next hop, and the IP address matched is directly connected to the router on the

interface specified: LAN or WAN.

Metric

The route metric is a value from 1 to 16 that indicates the cost of using this route. A value

of 1 is the lowest cost, and 15 is the highest cost. A value of 16 indicates that the route is

not reachable from this router. When trying to reach a particular destination, computers

on your network will select the best route, ignoring unreachable routes.

Interface

Specifies the interface -- LAN or WAN -- that the IP packet must use to transit out of the

router, when this route is used.

Save/Update

Record the changes you have made into the following list.

Clear

Re-initialize this area of the screen, discarding any changes you have made.

Routes List

The section shows the current routing table entries. Certain required routes are

predefined and cannot be changed. Routes that you add can be changed by clicking the

Edit icon or can be deleted by clicking the Delete icon. When you click the Edit icon, the

item is highlighted, and the "Edit Route" section is activated for editing. Click the Enable

checkbox at the left to directly activate or de-activate the entry.

ACCESS CONTROL

The Access Control section allows you to control access in and out of devices on your network.

Use this feature as Parental Controls to only grant access to approved sites, limit web access

based on time or dates, and/or block access from applications such as peer-to-peer utilities or

games.

Enable

By default, the Access Control feature is disabled. If you need Access Control, check this

option.

Note:

When Access Control is disabled, every device on the LAN has unrestricted

access to the Internet. However, if you enable Access Control, Internet access is

restricted for those devices that have an Access Control Policy configured for them. All

other devices have unrestricted access to the Internet.

25

of

72

Policy Wizard

The Policy Wizard guides you through the steps of defining each access control policy. A

policy is the "Who, What, When, and How" of access control -- whose computer will be

affected by the control, what internet addresses are controlled, when will the control be in

effect, and how is the control implemented. You can define multiple policies. The Policy

Wizard starts when you click the button below and also when you edit an existing policy.

Add Policy

Click this button to start creating a new access control policy.

Policy Table

This section shows the currently defined access control policies. A policy can be changed

by clicking the Edit icon, or deleted by clicking the Delete icon. When you click the Edit

icon, the Policy Wizard starts and guides you through the process of changing a policy.

You can enable or disable specific policies in the list by clicking the "Enable" checkbox.

WEBSITE FILTER

The Web sites listed here are used when the Web Filter option is enabled in

Advanced

→

Access Control

.

Add Web Filtering Rule

This section is where you add the Web sites to be used for Access Control.

Website URL/Domain

Enter the URL (address) of the Web Site that you want to allow; for example:

google.com

. Do not enter the

http://

preceding the URL. Enter the most inclusive

domain; for example, enter

kyocera.com

and access will be permitted to both

www.kyocera.com

and

support.kyocera.com

.

Save

Record the changes you have made into the following list.

Note:

Many web sites construct pages with images and content from other web sites.

Access will be forbidden if you do not enable all the web sites used to construct a page.

For example, to access

my.yahoo.com

, you need to enable access to

yahoo.com

,

yimg.com

, and

doubleclick.net

.

Website Filtering Rules

The section lists the currently allowed web sites.