TW-EA1000 Wireless ADSL Firewall Router

27

For the Remote Access Application, please refer to the figure below.

Connection Name:

Give a name for this connection.

Via IP Interface:

Select an interface that will establish this connection.

Type:

Check

Dial Out

to be a client, check

Dial In

to be a server. When this network router

acts as a client, please input the remote

server IP

address to establish a connection. When this

network router acts as a server, please input the

local IP

address and a

remote IP

address

assigning it to a dial in PPTP client.

Local Interface:

Select an interface that will use this connection to communicate with the

remote site.

Username:

Enter the username provided by your ISP. You can input up to

128

alphanumeric

characters (case sensitive).

Password:

Enter the password provided by your ISP. You can input up to

128

alphanumeric

characters (case sensitive).

PPP Authentication Type:

Default is

Auto

.

Data Encryption:

The data can be encrypted by MPPE algorithm. Default is

Auto,

it is

negotiated when establishing a connection.

Key Length:

The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default is

Auto

, it is negotiated when establishing a connection.

Mode:

You may select

Stateful

or

Stateless

mode. The key will be changed in each 256

packets when you select Stateful mode. If you select Stateless mode, the key will be changed in

each packet.

Chapter 3 Configuration

28

Idle Time

: Auto-disconnect the broadband firewall gateway when there is no activity on the

line for a predetermined period of time. 0 means this connection is always on.

Click

Apply

after setting.

Connection Name:

Give a name for this connection.

Via IP Interface:

Select an interface that will establish this connection.

Type:

Check

Dial Out

to be a client, check

Dial In

to be a server. When this network router

acts as a client, please input the remote

server IP

address to establish a connection. When this

network router acts as a server, please input the

local IP

address and a

remote IP

address

assigning it to a dial in PPTP client.

Local Interface:

Select an interface that will use this connection to communicate with the

remote site.

Peer Network IP:

Enter Peer network IP address.

Netmask:

Enter the subnet mask of peer network based on above Peer Network IP setting.

Username:

Enter the username provided by your ISP. You can input up to

128

alphanumeric

characters (case sensitive).

Password:

Enter the password provided by your ISP. You can input up to

128

alphanumeric

characters (case sensitive).

PPP Authentication Type:

Default is

Auto

.

Data Encryption:

The data can be encrypted by MPPE algorithm. Default is

Auto,

it is

negotiated when establishing a connection.

Key Length:

The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default is

Auto

, it is negotiated when establish a connection.

Mode:

You may select

Stateful

or

Stateless

mode. The key will be changed in each 256

packets when you select Stateful mode. If you select Stateless mode, the key will be changed in

each packet.

Idle Time

: Auto-disconnect the broadband firewall gateway when there is no activity on the

line for a predetermined period of time. 0 means this connection is always on.

Click

Apply

after setting.

TW-EA1000 Wireless ADSL Firewall Router

29

3.4.3.6 Virtual Server

When you click Virtual Server, you get the following figure.

Being a natural Internet firewall, this network router protects your network from being accessed

by outside users. When it needs to allow outside users to access internal servers, e.g. Web

server, FTP server, E-mail server or News server, this product can act as a virtual server. You

can set up a local server with specific port number that stands for the service, e.g. Web (80),

FTP (21), Telnet (23), SMTP (25), POP3 (110), When an incoming access request to the router

for specified port is received, it will be forwarded to the corresponding internal server.

For example, if you set the Service Port number 80 (Web) to be mapped to the IP Address

192.168.0.2, then all the http requests from outside users will be forwarded to the local server

with IP address of 192.168.0.2. If the port is not listed as a predefined application, you need to

add it manually.

DMZ:

Regarding the DMZ Host, it is a local computer exposed to the Internet. Therefore, an

incoming packet will be checked by the Firewall and NAT algorithms, then passed to the DMZ

host when a packet is not sent by a hacker and not limited by the virtual server list.

If you have disabled the NAT option in the WAN-ISP section, this Virtual Server

function will hence be invalid.

If the DHCP server option is enabled, you have to be very careful in assigning the

IP addresses of the virtual servers in order to avoid conflicts. The easy way is that

the IP address assigned to each virtual server should not fall into the range of IP

addresses that are to be issued by the DHCP server. You configure the virtual

server IP address manually, but it is still in the same subnet with the router.

Chapter 3 Configuration

30

3.4.3.7 Advanced

There are two items under the Advanced section, Static Routing and Dynamic DNS. When you

click

Static Routing

and then click

Create IP V4Route

to get the below figure to add a routing

table.

Destination:

Enter the destination subnet IP.

Gateway:

Enter the gateway IP address which the packet is forwarded to.

Netmask:

Subnet mask of destination IP addresses based on above destination subnet IP.

Cost:

This is the same meaning as Hop. Usually, leave it as 1.

Interface :

Enter the interface which the packet is forwarded to.

Click

Dynamic DNS

to get the below figure then check the “Enable” button to access the

Dynamic DNS service.

The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This

dynamic IP address is the WAN IP address. For example, to use the service, you must first apply

an account from this free Web server http://www.dyndns.org/

. There are more than 5 DDNS

servers supported.

Dynamic DNS:

Select the registered DDNS server.

Domain Name, Username and Password:

Enter the registered domain name, username and

password.

TW-EA1000 Wireless ADSL Firewall Router

31

Period:

Set the time period for Router to exchange information with DDNS server. In addition

to update periodically according to this period setting, Router will take the same action

automatically whenever the assigned IP is changed.

3.4.4 Save Configuration to Flash

After configuring this network router, you have to save all of the configuration parameters to

FLASH.