3-

6

Advanced Setup Procedures

After completing the

Simple Setup

menu options, you will next move to the

Advanced Setup

options.

You may also go directly to any of these screens by clicking that option on the main menu.

The SpeedStream 2602 DSL/Cable Router supports advanced functions including hacker attack protection,

virtual servers, special applications configuration, virtual server, client filtering, and remote management.

We highly recommend you keep the default settings.

Configure LAN Gateway and DHCP Settings

From this screen, you can dynamically assign the IP addresses for client computers, enable the DHCP

server, set the lease time, and specify the address range.

Note:

Remember to configure all of your client computers for dynamic address allocation.

Valid IP addresses consist of four numbers separated by periods. The first three fields are the network

portion, and can be from 0–255, while the last field is the host portion and can be from 1 to 254. Remember

not to include the gateway address of the SpeedStream 2602 in the client address pool.

Figure 3-1.

Advanced Setup | LAN

3-

7

Enable Firewall Protection

From the Advanced Setup | Firewall screen, you can enable the SpeedStream 2602 firewall to block

common hacker attacks, including IP Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf

Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP SYN flooding. The firewall does not

significantly affect system performance, so we advise leaving it enabled to protect your network users.

Enable Virtual Server

From the Advanced Setup screen, you can enable Virtual Server. If you configure the SpeedStream 2602 as

a virtual server, remote users accessing services such as Web or FTP at your local site via public IP

addresses can be automatically redirected to local servers configured with private IP addresses. Depending

on the requested service (TCP/UDP port number), the SpeedStream 2602 redirects the external service

request to the appropriate server located at another internal IP address.

Figure 3-2.

Advanced Setup | Virtual Server

1.

Specify the

Private IP

,

Private Port

,

Type

, and

Public Port

information.

2.

Click

Enter

to save the settings and continue.

Automatically Entering Port Information

You can have the system automatically enter the most common application ports:

1.

Scroll to the bottom of the Advanced Setup | Virtual Server screen.

2.

In the

Well known services

box, select the desired service.

3.

Click in the box to the right of

Copy to

and select the line number to which the system will enter that

information.

3-

8

4.

Tto enter that information in the Public Port boxes on the designated line, click

Copy

to

.

Network Address Translation (NAT)

Network Address Translation, or NAT, is automatically enabled when you enable multi-user Internet

access or enable the Virtual Server function. NAT provides multiple users with access to the Internet via a

single user account, or maps the local address for an IP server (such as Web or FTP) to a public address.

This secures your network from direct attack by hackers, and provides more flexible management by

allowing you to change internal IP addresses without affecting outside access to your network.

Configure Special Applications

Use the

Advanced Setup

menu to configure applications that require multiple connections, such as

Internet games, video-conferencing, and Internet telephony. These applications may not work when

Network Address Translation (NAT) is enabled. If you need to run applications that require multiple

connections, use the following screen to specify the additional public ports to be opened for each

application.

Figure 3-3.

Advanced Setup | Special Applications

1.

In the

Trigger Port

box, specify the port normally associated with an application.

2.

Select

TCP

or

UDP

as the protocol type.

3.

In the

Public Port

box, enter the public ports associated with the trigger port to open them for inbound

traffic.

Automatically Entering Port Information

You can have the system automatically enter the most common application ports:

1.

Scroll to the bottom of the Advanced Setup | Special Applications screen.

2.

In the

Popular applications

box, select the desired application.

3.

Click in the box to the right of

Copy to

and select the line number to which the system will enter that

3-

9

information.

4.

Click

Copy to

to enter that information in the

Public Port

boxes on the designated line.

If an application still cannot function correctly after enabling multiple ports via the Special Application

screen, you may need to use the Virtual DMZ Host option to open the client computer for full Internet

access. (Refer to the “Miscellaneous Services” section for instructions.)

Configure Client Filtering

You can filter Internet access for local clients based on IP address, application type (i.e., HTTP port), and

time of day.

For example, the following screen indicates that clients in the address range 192.168.254.50 to

192.168.254.99 are permanently restricted from using FTP (port 21), while clients in the address range

192.168.254.110 to 192.168.254.119 are blocked from browsing the Internet from 8:00 a.m. to 5:00 p.m.,

Monday through Friday.

Figure 3-4.

Advanced Setup | Client Filtering

Configure Miscellaneous Features

From the Advanced Setup | Misc screen, you can configure these additional features:

Administrator Time-Out

0

Discard PING from WAN side

Remote Management

3-

10

Caution:

If you specify an IP address of 0.0.0.0, any host can manage the SpeedStream 2602.

IP Address of Virtual DMZ Host

Caution:

Adding a client to the DMZ (demilitarized zone) may expose your local network to a variety of security

risks.

Use this option as a last resort only!

System Tools

From the Tools screen, you can manage additional features and functions of the SpeedStream 2602.

Change Password

Set Time Zone

Reset Router

Restore Factory Defaults

Update Firmware

Backup Settings

Restore Settings

Set or Change a Password

From the Simple Setup | Change Password screen, you can set a new password or change an existing

password to restrict management access. Passwords can consist of 3 to 12 alphanumeric characters and are

not case-sensitive.

Although any user can access the

Status

and

Help

menus, the

Simple Setup

,

Advanced Setup

, and

Tools

configuration options are permission-based and require a password. The default password is

admin

. To

ensure system security, it is recommended that you assign your Administrator a unique password as soon

as possible.

Note:

If your password is lost or you cannot gain access to the management interface, restore the factory defaults.

Press and hold the

Reset

button for at least five seconds.

1.

On the main menu, click

Tools

.

2.

On the

Tools

menu, click

Change Password

.

3.

On the Change Password screen, enter the current password in the first text box; then enter the new

password in the next two text boxes.

4.

Click

Enter

to save settings and continue.