20

Chapter 5: Configuring the ADSL Gateway

The Setup Tab

ADSL Gateway

The Advanced Routing Tab

The

Advanced Routing

screen allows you to configure the NAT, dynamic routing, and static routing settings.

Advanced Routing

•

Operating Mode. In this section, you will configure the Gateway’s general routing settings.

•

NAT. NAT is a security feature that is enabled by default. It enables the Gateway to translate IP addresses

of your local area network to a different IP address for the Internet. To disable NAT, click the

Disabled

radio button.

•

Dynamic Routing. With Dynamic Routing you can enable the Gateway to automatically adjust to physical

changes in the network’s layout. Using RIP, the Gateway determines the network packets’ route based on the

fewest number of hops between the source and the destination. The RIP protocol regularly broadcasts routing

information to other Gateways on the network.

•

RIP. If you have multiple routers, you may want to use the Routing Information Protocol (RIP) so the routers

can exchange routing information with each other. To use RIP, select the

Enabled

radio button. Otherwise,

keep the default,

Disabled

.

•

Transmit RIP Version. To transmit RIP messages, select the protocol you want:

RIP1, RIP1-Compatible

(RIP1 broadcasts and RIP2 multicasts), or RIP2

. If you don’t want to transmit RIP messages, select

None

.

•

Receive RIP Version. To receive RIP messages, select the protocol you want:

RIP1

or

RIP2

. If you don’t

want to receive RIP messages, select

None

.

•

Static Routing. If the Gateway is connected to more than one network, it may be necessary to set up a static

route between them. A static route is a pre-determined pathway that network information must travel to

reach a specific host or network. To create a static route, change the following settings:

•

Select set number. Select the number of the static route from the drop-down menu. The Gateway

supports up to 20 static route entries. If you need to delete a route, then select the entry and click the

Delete This Entry

button.

•

Destination IP Address. The Destination IP Address is the address of the remote network or host to which

you want to assign a static route. Enter the IP address of the host for which you wish to create a static

route. If you are building a route to an entire network, be sure that the network portion of the IP address is

set to 0.

Downloaded from

www.Manualslib.com

manuals search engine

21

Chapter 5: Configuring the ADSL Gateway

The Setup Tab

ADSL Gateway

•

Subnet Mask. Enter the Subnet Mask (also known as the Network Mask), which determines which portion

of an IP address is the network portion, and which portion is the host portion.

•

Gateway. Enter the IP address of the gateway device that allows for contact between the Gateway and the

remote network or host.

•

Hop Count. Hop Count is the number of hops to each node until the destination is reached (16 hops

maximum). Enter the Hop Count in the field provided.

•

Show Routing Table. Click the

Show Routing Table

button to open a screen displaying how data is routed

through your local network. For each route, the Destination LAN IP address, Subnet Mask, Gateway, and

Interface are displayed. Click the

Refresh

button to update the information. Click the

Close

button to return to

the previous screen.

PVC Routing Policy

If you have multiple PVCs, click the

PVC Routing Setting

button to configure which outgoing traffic will be routed

over which PVC. A window titled PVC Selection Table will appear.

Please select Active Connection. Open this drop-down list and specify the PVC for which you will select traffic.

Traffic can be selected on the basis of any of the following criteria, alone or in combination:

•

Destination (IP address and address mask)

•

Source (IP address and address mask, or MAC address)

•

Transport protocol (TCP, UDP, or All)

•

Destination port and/or source port (if protocol is set to TCP or UDP)

•

Presence of a specified IEEE 802.1D user priority marker

•

IEEE 802.3 Type/Length value (the value in the 13th and 14th octets of an Ethernet frame)

•

Presence of a specified IEEE 802.1Q virtual LAN (VLAN) ID

•

Packet length between specified minimum and maximum numbers of octets.

•

Presence of a specified DSCP (Diffserv Code Point) value (one kind of QoS marker)

Figure 5-15: Routing Table

Figure 5-16: PVC Routing

Downloaded from

www.Manualslib.com

manuals search engine

22

Chapter 5: Configuring the ADSL Gateway

The Setup Tab

ADSL Gateway

Apply. To enable the selection criteria on one line of the table, click that line’s Apply box so a check appears in it.

To disable the line’s criteria, click the box to clear.

When you have finished making changes in this window, click the

Save

button to save the changes, or click the

Cancel

button to undo your changes. Then click

Close

. You will be returned to the Advanced Routing panel. Click

the

Save Settings

button to save your changes, or click the

Cancel Changes

button to undo your changes.

Downloaded from

www.Manualslib.com

manuals search engine

23

Chapter 5: Configuring the ADSL Gateway

The Security Tab

ADSL Gateway

The Security Tab

The Security tab gives you access to firewall and VPN (virtual private network) settings.

The Firewall Tab

This panel shows firewall and filter settings. Use these features to enhance the security of your network.

Firewall

You can enable or disable the firewall, select filters to block specific Internet data types, and block anonymous

Internet requests.

To use the firewall, click

Enable

. If you do not want to use the firewall, click

Disable

.

Additional Filters

•

Filter Proxy. Use of WAN proxy servers may compromise the Gateway's security. Denying Filter Proxy will

disable access to any WAN proxy servers. To enable proxy filtering, click the checkbox.

•

Filter Cookies. A cookie is data stored on your computer and used by Internet sites when you interact with

them. To enable cookie filtering, click the checkbox.

•

Filter Java Applets. Java is a programming language for websites. If you deny Java Applets, you run the risk

of not having access to Internet sites created using this programming language. To enable Java Applet

filtering, click the checkbox.

•

Filter ActiveX. ActiveX is a programming language for websites. If you deny ActiveX, you run the risk of not

having access to Internet sites created using this programming language. To enable ActiveX filtering, click the

checkbox.

Block WAN Requests

•

Block Anonymous Internet Requests. This keeps your network from being “pinged” or detected and

reinforces your network security by hiding your network ports, so it is more difficult for intruders to discover

your network. Select

Block Anonymous Internet Requests

to block anonymous Internet requests or de-

select it

to allow anonymous Internet requests.

If you want to see activity logs for your security measures, then click the

View Logs

button. Click the

Clear

button to clear the log information. Click the

pageRefresh

button to refresh the information. Click the

Previous

Figure 5-18: Firewall Log

Figure 5-17: Firewall

Downloaded from

www.Manualslib.com

manuals search engine

24

Chapter 5: Configuring the ADSL Gateway

The Security Tab

ADSL Gateway

Page

button to go to the previous page of information. Click the

Next Page

button to move to the next page of

information.

When finished making your changes on this tab, click the

Save Settings

button to save these changes, or click

the

Cancel Changes

button to undo your changes.

The VPN Tab

This panel shows VPN (virtual private network) settings. You can disable or enable passthrough for four kinds of

VPNs. You can also set up IPSec (Internet Protocol Security) VPN tunnels for secure remote access.

VPN Passthrough

Virtual Private Networking (VPN) is a security measure that basically creates a secure connection between two

remote locations. Configure these settings so the Gateway will permit VPN tunnels to pass through.

•

IPSec Passthrough. Internet Protocol Security (IPSec) is a suite of protocols used to implement secure

exchange of packets at the IP layer. To allow IPSec Passthrough, click the

Enable

button. To disable IPSec

Passthrough, click the

Disable

button.

•

PPPoE Passthrough. PPPoE Passthrough allows your PC(s) to use the PPPoE client software provided by your

ISP. Some ISPs may request that you use this feature on the Gateway. To allow PPPoE Passthrough, click the

Enable

button. To disable PPPoE Passthrough, click the

Disable

button.

•

PPTP Passthrough. Point-to-Point Tunneling Protocol Passthrough is the method used to enable VPN sessions

to a Windows NT 4.0 or 2000 server. To allow PPTP Passthrough, click the

Enable

button. To disable PPTP

Passthrough, click the

Disable

button.

•

L2TP Passthrough. Layering 2 Tunneling Protocol Passthrough is an extension of the Point-to-Point Tunneling

Protocol (PPTP) used to enable the operation of a VPN over the Internet.To allow L2TP Passthrough, click the

Enable

button. To disable L2TP Passthrough, click the

Disable

button.

IPSec VPN Tunnel

Use this section of the VPN panel to set up, enable, and disable secure IPSec tunnels between the Gateway and

remote IPSec gateways and clients. Note that you must have a working ADSL connection to complete the settings

in this section.

•

Select Tunnel Entry: You can enable up to five IPSec tunnels. Each has a number and a name. Use this

control to select the one you want to enable, disable, edit, or delete.

Figure 5-19: The VPN Panel

Downloaded from

www.Manualslib.com

manuals search engine