Pirelli PRGAV4202N Router Manual PDF (Setup & Configuration Guide)

Page 121 / 182 Scroll up to view Page 116 - 120

PRG AV4202N

114

OGU 930500275-A1

Advanced Section

Access the File Server settings either from its link in the 'Storage' tab under the

'Services' screen, or by clicking the 'File Server' icon in the 'Advanced' screen.

The 'File Server' screen will appear.

Enabled.

Check or un-check this box to enable or disable this feature. NetBIOS

Workgroup Discus’ workgroup name that will be displayed in the Windows net-

work map of LAN hosts.

File Server Shares.

Define file shares on your disk partitions.

FIGURE 15.

File Server Panel

IP ADDRESS

DISTRIBUTION

Your gateway's Dynamic Host Configuration Protocol (DHCP) server makes it

possible to easily add computers that are configured as DHCP clients to the

home network. It provides a mechanism for allocating IP addresses and deliver-

ing network configuration parameters to such hosts. Router's default DHCP

server is the LAN bridge.

Page 122 / 182

PRG AV4202N

Advanced Section

OGU 930500275-A1

115

A client (host) sends out a broadcast message on the LAN requesting an IP ad-

dress for itself. The DHCP server then checks its list of available addresses and

leases a local IP address to the host for a specific period of time and simultane-

ously designates this IP address as `taken'. At this point the host is configured

with an IP address for the duration of the lease.

The host can choose to renew an expiring lease or let it expire. If it chooses to

renew a lease then it will also receive current information about network ser-

vices, as it did with the original lease, allowing it to update its network configura-

tions to reflect any changes that may have occurred since it first connected to

the network. If the host wishes to terminate a lease before its expiration it can

send a release message to the DHCP server, which will then make the IP ad-

dress available for use by others.

Your gateway's DHCP server:



Displays a list of all DHCP host devices connected to the Router



Defines the range of IP addresses that can be allocated in the LAN



Defines the length of time for which dynamic IP addresses are allocated



Provides the above configurations for each LAN device and can be config-

ured and enabled/disabled separately for each LAN device



Can assign a static lease to a LAN PC so that it receives the same IP ad-

dress each time it connects to the network, even if this IP address is within

the range of addresses that the DHCP server may assign to other computers



Provides the DNS server with the host name and IP address of each PC that

is connected to the LAN

Additionally, the Router can act as a DHCP relay, escalating DHCP responsibili-

ties to a WAN DHCP server. In this case,

PRG AV4202N will act merely as a

router, while its LAN hosts will receive their IP addresses from a DHCP server

on the WAN.

With the Router's optional Zero Configuration Technology feature, the IP Auto

Detection method detects statically-defined IP addresses in addition to the

Router's DHCP clients. It learns all the IP addresses on the LAN, and integrates

the collected information with the database of the DHCP server. This allows the

DHCP server to issue valid leases, thus avoiding conflicting IP addresses used

by other computers in the network.

Page 123 / 182

PRG AV4202N

116

OGU 930500275-A1

Advanced Section

FIGURE 16.

IP Address Distribution Panel

IPSEC

Internet Protocol Security (IPSec) is a series of guidelines for the protection of

Internet Protocol (IP) communications. It specifies procedures for securing pri-

vate information transmitted over public networks. The IPSec protocols include:

AH (Authentication Header) provides packet-level authentication, ESP (Encap-

sulating Security Payload) provides encryption and authentication, IKE (Internet

Key Exchange) negotiates connection parameters, including keys, for the other

two services.

Services supported by the IPSec protocols (AH, ESP) include confidentiality

(encryption), authenticity (proof of sender), integrity (detection of data tamper-

ing), and replay protection

(defense against unauthorized resending of data). IPSec also specifies meth-

odologies for key management. Internet Key Exchange (IKE), the IPSec key

management protocol, defines a series of steps to establish keys for encrypting

and decrypting information; it defines a common language on which communi-

cations between two parties is based. Developed by the Internet Engineering

Task Force (IETF), IPSec and IKE together standardize the way data protection

is performed, thus making it possible for security systems developed by differ-

ent vendors to interoperate.

Access this feature either from the 'VPN' menu item under the 'Services' tab, or

by clicking its icon in the 'Advanced' screen. The 'Internet Protocol Security (IP-

Sec)' screen appears.

Block Unauthorized IP

Select the 'Enabled' check box to block unauthorized

IP packets to Discus. Specify the following parameters:

•

Maximum Number of Authentication Failures

The maximum number of

packets to authenticate before blocking the origin's IP address.

Page 124 / 182

PRG AV4202N

Advanced Section

OGU 930500275-A1

117

•

Block Period (in seconds)

The timeframe during which Discus will drop

packets from an unauthorized IP address.

Enable Anti-Replay Protection

Select this option to enable dropping of pack-

ets that are recognized (by their sequence number) as already been received.

Connections

This section displays the list of IPSec connections.

FIGURE 17.

IPSec Panel

L2TP SERVER

Access this feature either from its link in the 'VPN' tab under the 'Services'

screen, or by clicking the 'L2TP' icon in the 'Advanced' screen. This screen en-

ables you to configure the following:

Enabled

Select or deselect this check box to enable or disable this feature.

Note that checking this box creates an L2TP server (if not yet created with the

wizard), but does not define remote users.

Click Here to Create VPN Users

Click this link to define remote users that will

be granted access to your home network.

Protect L2TP Connection by IPSec

By default, the L2TP connection is not

protected by the IP Security (IPSec) protocol. Check this option to enable this

feature. When enabled, the following entry appears.

Create Default IPSec Connection

When creating an L2TP Server with the

connection wizard, a default IPSec connection is created to protect it. If you

wish to disable this feature, uncheck this option. However, note that if L2TP pro-

Page 125 / 182

PRG AV4202N

118

OGU 930500275-A1

Advanced Section

tection is enabled by IPSec (see previous entry), you must provide an alterna-

tive, active IPSec connection in order for users to be able to connect. When this

feature is enabled, the following entry appears.

L2TP Server IPSec Shared Secret

You may change the IPSec shared secret,

provided when the connection was created, in this field.

Remote Address Range

Use the 'Start IP Address' and 'End IP Address' fields

to specify the range of IP addresses that will be granted by the L2TP server to

the L2TP client.

FIGURE 18.

IPSec Panel

MAC CLONING

A Media Access Control (MAC) address is the numeric code that identifies a

device on a network, such as your external cable/DSL modem or a PC network

card. Your service provider may ask you to supply the MAC address of your PC,

external modem, or both.

When replacing an external modem with the Router, you can simplify the instal-

lation process by copying the MAC address of your existing PC to the router. In

such a case, you do not need to delay the setup process by informing your ser-

vice provider of newly installed equipment.

Rate

Popular Pirelli Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share