Introduction

3

•

Stateful Inspection Firewall.

All incoming data packets are monitored and all incom-

ing server requests are filtered, thus protecting your network from malicious attacks from

external sources.

•

Protection against DoS attacks.

DoS (Denial of Service) attacks can flood your

Internet connection with invalid packets and connection requests, using so much band-

width and so many resources that Internet access becomes unavailable. The TW100-

BRV304 incorporates protection against DoS attacks.

•

Rule-based Policy Firewall.

To provide additional protection against malicious pack-

ets, you can define your own firewall rules. This can also be used to control the Internet

services available to LAN users.

VPN Gateway Features

•

IPSec.

.

Support for IPSec standards, including IKE and certificates.

•

70 Tunnels.

Up to 70 VPN tunnels can be created.

•

High performance.

High performance encryption engine maintains high throughput

even when using 3DES.

Package Contents

The following items should be included:

•

The TW100-BRV304 Unit

•

Power Adapter

•

Quick Installation Guide

•

CD-ROM containing the on-line manual.

If any of the above items are damaged or missing, please contact your dealer immediately.

TW100-BRV304 User Guide

4

Physical Details

Front-mounted LEDs

Figure 2: Front Panel

Power

On

- Power on.

Off

- No power.

Status (Red)

On

- Error condition.

Off

- Normal operation.

Blinking

- This LED blinks during start up.

LAN

For each port, there are 2 LEDs

•

Link/Act

•

On

- Corresponding LAN (hub) port is active.

•

Off

- No active connection on the corresponding LAN (hub) port.

•

Flashing

- Data is being transmitted or received via the corre-

sponding LAN (hub) port.

•

100

•

On

- Corresponding LAN (hub) port is using 100BaseT.

•

Off

- Corresponding LAN (hub) port connection is using

10BaseT, or no active connection.

WAN

On

- Connection to the modem attached to the WAN (Internet) port is

established.

Flashing

- Data is being transmitted or received via the WAN port.

PPPoE

On

- PPPoE connection established.

Off

- No PPPoE connection.

DMZ

•

Link/Act

•

Blinking –

receiving/ transmitting data

•

100

•

On

-

Link at 100Mbps

•

Off

-

Link at 10Mbps

Introduction

5

Rear Panel

Figure 3: Rear Panel

DMZ

Use a standard LAN cable to connect to a normal port on another

hub.

Reset Button

This button has two (2) functions:

•

Reboot

.

When pressed and released, the TW100-BRV304 will

reboot (restart).

•

Clear All Data

.

This button can also be used to clear ALL data

and restore ALL settings to the factory default values.

To Clear All Data and restore the factory default values:

1.

Power Off.

2.

Hold the Reset Button down while you Power On.

3.

Keep holding the Reset Button for a few seconds, until the RED

LED has flashed TWICE.

4.

Release the Reset Button. The TW100-BRV304 is now using the

factory default values.

WAN port

(10/100BaseT)

Connect the DSL or Cable Modem here. If your modem came with a

cable, use the supplied cable. Otherwise, use a standard LAN cable.

10/100BaseT

LAN connections

Use standard LAN cables (RJ45 connectors) to connect your PCs to

these ports.

Note:

Any LAN port on the TW100-BRV304 will automatically function

as an "Uplink" port when required. Just connect any port to a normal

port on the other hub, using a standard LAN cable.

Power port

Connect the supplied power adapter here.

6

Chapter 2

Installation

This Chapter covers the physical installation of the TW100-BRV304.

Requirements

•

Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors.

•

TCP/IP protocol must be installed on all PCs.

•

For Internet Access, an Internet Access account with an ISP, and either of a DSL or Cable

modem (for WAN port usage)

Procedure

Figure 4: Installation Diagram

1. Choose an Installation Site

Select a suitable place on the network to install the TW100-BRV304.

Ensure the TW100-BRV304 and the DSL/Cable modem are powered OFF.

2. Connect LAN Cables

•

Use standard LAN cables to connect PCs to the Switching Hub ports on the TW100-

BRV304. Both 10BaseT and 100BaseT connections can be used simultaneously.

•

If required, you can connect any LAN port to another Hub. Any LAN port on the TW100-

BRV304 will automatically function as an "Uplink" port when required. Just connect any

LAN port to a normal port on the other hub, using a standard LAN cable.

•

If desired, connect the DMZ port to a standard port on another Hub. PCs connected this

hub will also gain Internet access, but will NOT be able to access the rest of the LAN.

2

Installation

7

3. Connect WAN Cable

Connect the DSL or Cable modem to the WAN port on the TW100-BRV304. Use the ca-

ble supplied with your DSL/Cable modem. If no cable was supplied, use a standard cable.

4. Power Up

•

Power on the Cable or DSL modem.

•

Connect the supplied power adapter to the TW100-BRV304 and power up.

Use only the power adapter provided. Using a different one may cause hardware damage

5. Check the LEDs

•

The

Power

LED should be ON.

•

The

Status

LED should flash, then turn Off. If it stays on, there is a hardware error.

•

For each LAN (PC) connection, the LAN

Link/Act

LED should be ON (provided the PC is

also ON.)

•

The

WAN

LED should be ON.

For more information, refer to Front-mounted LEDs in Chapter 1.

Using the DMZ Port

Please note the following points regarding the DMZ port.

•

The DMZ port is a normal port, not an "uplink" port.

•

PCs connected to the DMZ port are on the same LAN segment as PCs connected to the

Hub ports. They must use the same IP address range.

•

PCs connected to the DMZ port are NOT visible to PCs on the hub (LAN) ports. So you

cannot use Microsoft networking or other networking protocols to connect to PCs on the

DMZ.

•

PCs connected to the DMZ port still share the WAN port IP address for Internet access.

Advantages of the DMZ Port

If running any Servers on your LAN, you should connect them to the DMZ port, for the

following reasons:

•

Traffic passing between the DMZ and LAN passes through the firewall. The firewall will

protect your LAN if your Server is compromised and used to launch an attack on your

LAN.

•

When using the

Virtual Servers

feature, (see

Virtual Servers

in Chapter 6) a firewall rule

to allow incoming traffic from the Internet (WAN) to the DMZ is automatically created. If

the Server is connected to the LAN (hub) ports, you must add the firewall rule manually.