Page 191 / 270 Scroll up to view Page 186 - 190
Unified Services Router
User Manual
189
Figure 136: List of curre nt Active VPN Se ssions
All active SSL VPN connections, both for VPN tunnel and VPN Port forwarding, are
displayed on this page as well. Table fields are as follows.
Fie ld
De s cription
User Name
The SSL VPN user that has an active tunnel or port forwarding session to this
router.
IP Address
IP address of the remote VPN client.
Local PPP Interface
The interface (WAN1 or WAN2) through w hich the session is active.
Peer PPP Interface IP
The assigned IP address of the virtual netw ork adapter.
Connect Status
Status of the SSL connection betw een this router and the remote VPN client: Not
Connected or Connected.
Page 192 / 270
Unified Services Router
User Manual
190
Chapter
11.
Trouble Shooting
11.1 Internet connection
Symptom:
You cannot access the router’s web
-configuration interface from a PC on
your LAN.
Recommended action:
1.
Check the Ethernet connection between the PC and the router.
2.
Ensure that your PC’s IP
address is on the same subnet as the router. If you are using the
recommended addressing scheme, your PC’s address should be in the range 192.168.1
0.2
to 192.168.10.254.
3.
Check your PC’s IP address. If the PC cannot reach a DHCP ser
ver, some versions of
Windows and Mac OS generate and assign an IP address. These auto-generated addresses
are in the range 169.254.x.x.
If your IP address is in this range, check the connection from
the PC to the firewall and reboot your PC.
4.
If your route
r’s IP address has changed and you don’t
know what it is, reset the router
configuration to factory defaults (this sets the firewall’s IP address to 192.168.1
0.1).
5.
If you do not want to reset to factory default settings and lose your configuration, reboot
the router and use a packet sniffer (such as Ethereal™) to capture packets sent during the
reboot. Look at the Address Resolution Protocol (ARP) packets to locate the router’s LAN
interface address.
6.
Launch your browser and ensure that Java, JavaScript, or ActiveX is enabled. If you are
using Internet Explorer, click Refresh to ensure that the Java applet is loaded. Close the
browser and launch it again.
7.
Ensure that you are using the correct login information. The factory default login name is
admin and the password is password. Ensure that CAPS LOCK is off when entering this
information.
Symptom:
Router does not save configuration changes.
Recommended action:
1.
When entering configuration settings, click Apply before moving to another menu or tab;
otherwise your changes are lost.
2.
Click Refresh or Reload in the browser. Your changes may have been made, but the
browser may be caching the old configuration.
Page 193 / 270
Unified Services Router
User Manual
191
Symptom:
Router cannot access the Internet.
Possible cause:
If you use dynamic IP addresses, your router may not have requested
an IP address from the ISP.
Recommended action:
1.
Launch your browser and go to an external site such as
www.google.com
.
2.
Access the firewall’s
configuration main menu at
.
3.
Select
Monitoring > Router Status
.
4.
Ensure that an IP address is shown for the WAN port. If 0.0.0.0 is shown, your firewall
has not obtained an IP address from your ISP. See the next symptom.
Symptom:
Router cannot obtain an IP address from the ISP.
Recommended action:
1.
Turn off power to the cable or DSL modem.
2.
Turn off the router.
3.
Wait 5 minutes, and then reapply power to the cable or DSL modem.
4.
When the modem LEDs indicate that it has resynchronized with the ISP, reapply power to
the router. If the router still cannot obtain an ISP address, see the next symptom.
Symptom:
Router still cannot obtain an IP address from the ISP.
Recommended action:
1.
Ask your ISP if it requires a login program
PPP over Ethernet (PPPoE) or some other
type of login.
2.
If yes, verify that your configured login name and password are correct.
3.
Ask your ISP if it checks for your PC's hostname.
4.
If yes, select
Network Configuration > WAN Settings > Ethernet ISP
Settings
and set the account name to the PC hostname of your ISP account.
5.
Ask your ISP if it allows only one Ethernet MAC address to connect to the Internet, and
therefore checks for your PC’s MAC address.
6.
If yes, inform your ISP that you have bought a new network device, and ask them to use
the firewall’s MAC address.
7.
Alternatively, select
Network Configuration > WAN Settings > Ethernet ISP
Settings
and configure your router to spoof your PC’s MAC address.
Page 194 / 270
Unified Services Router
User Manual
192
Symptom:
Router can obtain an IP address, but PC is unable to load Internet pages.
Recommended action:
1.
Ask your ISP for the addresses of its designated Domain Name System (DNS) servers.
Configure your PC to recognize those addresses. For details, see your operating system
documentation.
2.
On your PC, configure the router to be its TCP/IP gateway.
11.2 Date and time
Symptom:
Date shown is January 1, 1970.
Possible cause:
The router has not yet successfully reached a network time server
(NTS).
Recommended action:
1.
If you have just configured the router, wait at least 5 minutes, select
Administration >
Time Zone
, and recheck the date and time.
2.
Verify your Internet access settings.
Symptom:
Time is off by one hour.
Possible cause:
The router does not automatically adjust for Daylight Savings Time.
Recommended action:
1.
Select
Administration > Time Zone
and view the current date and time settings.
2.
Click to check or uncheck
Automatically adjust for Daylight Savings Time
, then click
Apply.
11.3 Pinging to Test LAN Connectivity
Most TCP/IP terminal devices and firewalls contain a ping utility that sends an ICMP
echo-request packet to the designated device. The DSR responds with an echo reply.
Troubleshooting a TCP/IP network is made very easy by using the ping utility in your
PC or workstation.
11.3.1 Testing the LAN path from your PC to your
router
1.
From the PC’s Windo
ws toolbar, select Start > Run.
2.
Type ping <IP_address> where
<IP_address> is the router’s IP address. Example:
ping
192.168.10.1.
3.
Click OK.
Page 195 / 270
Unified Services Router
User Manual
193
4.
Observe the display:
If the path is working, you see this message sequence:
Pinging <IP address> with 32 bytes of d ata
Reply from <IP address>: bytes=32 time=NN ms TTL=xxx
If the path is not working, you see this message sequence:
Pinging <IP address> with 32 bytes of data
Request timed out
5.
If the path is not working, Test the physical connections between PC and router
If the LAN port LED is off, go to the “LED displays” section on page B
-
1 and follow instructions for “LAN or Internet port LEDs are not lit.”
Verify that the corresponding link LEDs are lit for your network
interface card and for any hub ports that are connected to your
workstation and firewall.
6.
If the path is still not up, test the network configuration:
Verify that the Ethernet card driver software and TCP/IP software are
installed and configured on the PC.
Verify that the IP address for th e router and PC are correct and on the
same subnet.
11.3.2 Testing the LAN path from your PC to a remote
device
1.
From the
PC’s
Windows toolbar, select Start > Run.
2.
Type ping -n 10 <IP_address> where -n 10 specifies a maximum
of 10 tries and <IP
address> is the IP
address of a remote device such as your ISP’s DNS server. Example:
ping -n 10 10.1.1.1.
3.
Click OK and then observe the display (see the previous procedure).
4.
If the path is not working, do the following:
Check that the PC has the IP address of your firewall listed as the
default gateway. (If the IP configuration of your PC is assigned by
DHCP, this information is not visible in your PC’s Network Control
Panel.)

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top