RX3141 User’s Manual Revision 1.01 Oct.
Table of Contents Introduction ..............................................1 1 2 1.1 Features................................................................................................................1 1.2 System Requirements..........................................................................................1 1.3 Using this Document ............................................................................................2 1.3.2 Typographical conventions .............................
.3 4 Before you begin ......................................................................................13 3.2.2 Windows® XP PCs: .................................................................................13 3.2.3 Windows® 2000 PCs:..............................................................................13 3.2.4 Windows® 95, 98, and Me PCs ..............................................................14 3.2.5 Windows® NT 4.0 workstations:............................................
6 DHCP Server Configuration...................35 6.1 7 DHCP (Dynamic Host Control Protocol)............................................................35 6.1.1 What is DHCP? ........................................................................................35 6.1.2 Why use DHCP?......................................................................................35 6.1.3 Configuring DHCP Server........................................................................35 6.1.
9.4.2 Figure 9.4. Sample Inbound ACL List TableModify Inbound ACL Rules ..................................................................................................................56 9.4.3 Delete Inbound ACL Rules ......................................................................56 9.4.4 Display Inbound ACL Rules.....................................................................57 9.5 Configuring Outbound ACL Rules .....................................................................57 9.
11.7 12 . System Configuration Management ................................................................79 11.7.1 Backup System Configuration .................................................................79 11.7.2 Restore System Configuration.................................................................81 IP Addresses, Network Masks, and Subnets ..................................................83 12.1 IP Addresses..............................................................................
List of Figures Figure 2.1. Front Panel LEDs...................................................................................................................................6 Figure 2.2. Rear Panel Connectors .........................................................................................................................7 Figure 3.1. Overview of Hardware Connections .................................................................................................. 12 Figure 3.2. Login Screen ......
Figure 9.7. Sample Outbound ACL List Table...................................................................................................... 58 Figure 9.8. Self-Access ACL Configuration Page ................................................................................................ 60 Figure 9.9. Self-Access ACL Configuration Example .......................................................................................... 60 Figure 9.10. Existing Self-Access ACL Rules .............................
List of Tables Table 2.1. DoS Attacks.............................................................................................................................................5 Table 2.2. Front Panel Label and LEDs ..................................................................................................................6 Table 2.3. Rear Panel Labels and LEDs .................................................................................................................7 Table 3.1.
RX3141 User’s Manual 1 Chapter 1. Introduction Introduction Congratulations on becoming the owner of RX3141. Your LAN (local area network) will now be able to access the Internet using your high-speed broadband connection such as those with ADSL or cable modem. This User Manual will show you how to set up the RX3141, and how to customize its configuration to get the most out of this product. 1.1 f f f f f f 1.2 Features LAN: 4-port Gigabit switch, jumbo frame supports up to 9Kbyte.
Chapter 1. Introduction 1.3 1.3.1 RX3141 User’s Manual Using this Document Notational conventions f Acronyms are defined the first time they appear in the text. f For brevity, RX3141 is sometimes referred to as the “router” or the ”gateway”. f The terms LAN and network are used interchangeably to refer to a group of Ethernet-connected computers at one site. f Sequence of mouse actions is denoted by the “Δ character.
RX3141 User’s Manual 2 2.1 Chapter 2. Getting to Know Getting to Know RX3141 Parts List In addition to this document, RX3141 should come with the following: f f f f 2.2 The System unit, RX3141 AC Adapter User Manual Compact Disk of Multi-language Quick installation Guide Hardware Features f LAN • 4-port Gigabit switch • Auto speed negotiation • 9KB jumbo frame support • 4K MAC address table w/ auto learning and aging f WAN 2.3 2.3.
Chapter 2. Getting to Know 2.3.2 RX3141 User’s Manual Firewall Features The firewall as implemented in RX3141 provides the following features to protect your network from being attacked and to prevent your network from being used as the springboard for attacks. f f f f 2.3.2.
RX3141 User’s Manual Chapter 2 Getting to Know Table 2.1. DoS Attacks 2.4.1.
Chapter 2. Getting to Know 2.4 2.4.1 RX3141 User’s Manual Finding Your Way Around Front Panel The front panel contains LED indicators that show the status of the unit. 1 ○ 2 ○ 6 ○ 3 ○ 4 ○ 5 ○ Figure 2.1. Front Panel LEDs Table 2.2. Front Panel Label and LEDs LED Label Color Status Indication 1 ○ POWER Green ON OFF RX3141 is powered on RX3141 is powered off 2 ○ 1–4 3 ○ STATUS Identifies the LAN port LEDs. Status of each LAN port is indicated by 3 LEDs: STATUS, SPEED and DUPLEX.
RX3141 User’s Manual Chapter 2 Getting to Know LED Label 5 ○ DUPLEX Color Status Indication Amber ON Blinking Speed is 10Mbps Data is transmitted or received via the connection OFF No link is established. ON The LAN port is operating in full-duplex mode. The LAN port is operating in half duplex mode and no collision is detected. Amber OFF 2.4.2 Rear Panel The rear panel contains the ports for the unit's data and power connections. 7 ○ 8 ○ 9 10 ○ ○ Figure 2.2.
Chapter 2. Getting to Know 2.4.3 Bottom View RX3141 User’s Manual 11 ○ 11 ○ 12 ○ 11 ○ 12 ○ 11 ○ 11 Wall Mount Slots: You may use these slots to hang RX3141 on the wall to save space. Depending on your ○ particular requirement by taking into account the location of the power outlet, power cord length, Ethernet cable length and etc., you can hang RX3141 in 4 different orientations: front panel up, rear panel up, left side up or right side up.
RX3141 User’s Manual 2.5 Chapter 2 Getting to Know Placement Options Depending on your environment, you may choose one of the three supported placement options for RX3141 – desktop placement, magnet mount and wall mount. 2.5.1 Desktop Placement You may place RX3141 on any flat surface. The space-saving design of RX3141 occupies only a small area on your desk. 2.5.
RX3141 User’s Manual 3 Chapter 3. Quick Start Guide Quick Start Guide This Quick Start Guide provides basic instructions for connecting the RX3141 to a computer or a network and to the Internet. f Part 1 provides instructions to set up the hardware. f Part 2 describes how to configure Internet properties on your computer(s). f Part 3 shows you how to configure basic settings on the RX3141 to get your LAN connected to the Internet.
Chapter 3. Quick Start Guide 3.1.3 RX3141 User’s Manual Step 3. Attach the AC adapter. Attach the AC adapter to the POWER input jack on the back of the device and plug in the adapter to a wall outlet or a power strip. 3.1.4 Step 4. Power on RX3141, the ADSL or cable modem and power up your computers. Plug the AC adapter to the power input jack of RX3141. Turn on your ADSL or cable modem. Turn on and boot up your computer(s) and/or any LAN devices such as wireless AP, hubs or switches.
RX3141 User’s Manual 3.2 Chapter 3. Quick Start Guide Part 2 — Configuring Your Computers Part 2 of the Quick Start Guide provides instructions for configuring the network settings on your computers to work with the RX3141. 3.2.1 Before you begin By default, the RX3141 automatically assigns all required network settings (e.g. IP address, DNS server IP address, default gateway IP address) to your PCs. You need only to configure your PCs to accept the network settings provided by the RX3141.
Chapter 3. Quick Start Guide RX3141 User’s Manual 5. In the Select Network Component Type dialog box, select Protocol, and then click button. 6. Select Internet Protocol (TCP/IP) in the Network Protocols list, and then click button. You may be prompted to install files from your Windows 2000 installation CD or other media. Follow the instructions to install the files. 7. If prompted, click button to restart your computer with the new settings.
RX3141 User’s Manual 3.2.5 Chapter 3. Quick Start Guide Windows® NT 4.0 workstations: First, check for the IP protocol and, if necessary, install it: 1. In the Windows NT task bar, click the button, point to Settings, and then click Control Panel. 2. In the Control Panel window, double click the Network icon. 3. In the Network dialog box, click the Protocols tab. The Protocols tab displays a list of currently installed network protocols.
Chapter 3. Quick Start Guide 3.3 RX3141 User’s Manual Part 3 — Quick Configuration of the RX3141 In Part 3, you log into the Configuration Manager on the RX3141 and configure basic settings for your router. Your ISP should provide you with the necessary information to complete this step. Note the intent here is to quickly get the RX3141 up and running, instructions are concise. You may refer to corresponding chapters for more details. 3.3.
RX3141 User’s Manual Chapter 3. Quick Start Guide Figure 3.3. System Status Page 4. Follow the instructions described in Chapter 5 "Router Connection Setup” to set up the LAN and WAN settings for RX3141. After completing the basic configuration for RX3141, read the following section to determine if you can access the Internet. 3.3.2 Testing Your Setup At this point, the RX3141 should enable any computers on your LAN to use the RX3141’s ADSL or cable modem connection to access the Internet.
Chapter 3. Quick Start Guide 3.3.3 RX3141 User’s Manual Default Router Settings In addition to handling the DSL connection to your ISP, the RX3141 can provide a variety of services to your network. The device is pre-configured with default settings for use with a typical home or small office network. Table 3.2 lists some of the most important default settings; these and other features are described fully in the subsequent chapters.
RX3141 User’s Manual 4 Chapter 4. Using the Configuration Manager Using the Configuration Manager The RX3141 includes a preinstalled program called the Configuration Manager, which provides an interface to the software installed on the device. It enables you to configure the device settings to meet the needs of your network. You access it through your web browser from any PC connected to the RX3141 via the LAN or the WAN ports.
Chapter 4. Using the Configuration Manager 4.2 RX3141 User’s Manual Functional Layout Typical Typical Configuration page consists of several elements – banner, menu, menu navigation tips, configuration, and on-line help. You can click on any menu item to expand/contract any menu groups or to access a specific configuration page. The configuration pane is where you interact with the Configuration Manager to configure the settings for RX3141.
RX3141 User’s Manual 4.2.2 Chapter 4. Using the Configuration Manager Commonly Used Buttons and Icons The following buttons or icons are used throughout the application. The following table describes the function for each button or icon. Table 4.1. Description of Commonly Used Buttons and Icons Button/Icon Function Stores any changes you have made on the current page. Adds a new configuration to the system, e.g. a static route or a firewall ACL rule and etc.
Chapter 4. Using the Configuration Manager 4.3 RX3141 User’s Manual Overview of System Configuration To view the overall system configuration, log into the Configuration Manager, and then click Status menu. Figure 4.3 shows sample information available in the System Information page. Figure 4.3.
RX3141 User’s Manual 5 Chapter 5 Router Connection Setup Router Connection Setup This chapter describes how to configure the basic settings for your router so that the computers on your LAN can communicate with each other and have access to the Internet. Network setup consists of LAN and WAN configurations. 5.1 5.1.1 LAN Configuration LAN IP Address If you are using RX3141 with multiple PCs on your LAN, you must connect your LAN to the Ethernet ports on the built-in Ethernet switch.
Chapter 5 Router Connection Setup 5.1.3 RX3141 User’s Manual Configuring the LAN IP Address Follow these steps to change the default LAN IP address. 1. Log into Configuration Manager, and then double click Router Setup Î Connection menu. The Router Connection Setup configuration page is then displayed as shown in Figure 5.1. Figure 5.1. Router Connection Setup Configuration – LAN Configuration 2. (Optional) Enter the host name for RX3141.
RX3141 User’s Manual 5.2 Chapter 5 Router Connection Setup WAN Configuration This section describes how to configure WAN settings for the WAN interface on the RX3141 that communicates with your ISP. You’ll learn to configure IP address, DHCP and DNS server for your WAN in this section. 5.2.1 WAN Connection Mode Four modes of WAN connection are supported by the RX3141 – PPPoE (multi-session), PPPoE unnumbered, dynamic IP and static IP.
Chapter 5 Router Connection Setup 5.2.2 RX3141 User’s Manual PPPoE PPPoE connection is most often used by ADSL service providers. Connection Mode dropdown list Figure 5.3.
RX3141 User’s Manual 5.2.2.1 Chapter 5 Router Connection Setup WAN PPPoE Configuration Parameters Table 5.2 describes the configuration parameters available for PPPoE connection mode. Table 5.2. WAN PPPoE Configuration Parameters Setting Description Connection Mode Select PPPoE from the connection mode drop-down list. PPPoE Session Select the PPPoE session ID for this PPPoE session. Note that only two simultaneous PPPoE sessions are supported.
Chapter 5 Router Connection Setup 5.2.2.2 RX3141 User’s Manual Configuring PPPoE for WAN Follow the instructions below to configure PPPoE settings: 1. Open the Router Connection configuration page by double clicking the Router Setup Î Connection menu. 2. Select PPPoE from the WAN Connection Mode drop-down list as shown in Figure 5.3. 3. Select PPPoE session ID from the PPPoE session ID drop-down list. Currently, two sessions are supported. 4. Enter the user name and password provided by your ISP. 5.
RX3141 User’s Manual Figure 5.5. WAN – PPPoE0 Settings Chapter 5 Router Connection Setup Figure 5.6. WAN – PPPoE1 Settings 3. Configure firewall outbound ACL rules to forward the designated traffic to each intended PPPoE session. Please refer to section 9.5 “Configuring Outbound ACL Rules” for instructions on setting up ACL rules. Figure 5.7 and Figure 5.
Chapter 5 Router Connection Setup RX3141 User’s Manual Figure 5.9. WAN – Outbound ACL Rule Settings for PPPoE Multi-session Example Figure 5.10.
RX3141 User’s Manual 5.2.3 Chapter 5 Router Connection Setup PPPoE Unnumbered Some of the ADSL service providers may offer PPPoE unnumbered service. Choose this connection mode if your ISP provides such service. Connection Mode dropdown list Figure 5.11.
Chapter 5 Router Connection Setup 5.2.3.1 RX3141 User’s Manual WAN PPPoE Unnumbered Configuration Parameters Table 5.3 describes the configuration parameters available for PPPoE unnumbered connection mode. Table 5.3. WAN PPPoE Unnumbered Configuration Parameters 32 Setting Description Connection Mode Select PPPoE Unnumbered from the connection mode drop-down list. Traditionally, each network interface must have a unique IP address.
RX3141 User’s Manual 5.2.3.2 Chapter 5 Router Connection Setup Configuring PPPoE Unnumbered for WAN Follow the instructions below to configure PPPoE unnumbered settings: 1. Open the Router Connection configuration page by double clicking the Router Setup Î Connection menu. 2. Select PPPoE Unnumbered from the WAN Connection Mode drop-down list as shown in Figure 5.11. 3. Enter user name and password provided by your ISP.. 4. (Optional) Enter the service name if required by your ISP. 5.
Chapter 5 Router Connection Setup 5.2.5 RX3141 User’s Manual Static IP Connection Mode dropdown list Figure 5.13. WAN – Static IP Configuration 5.2.5.1 WAN Static IP Configuration Parameters Table 5.4 describes the configuration parameters available for static IP connection mode. Table 5.4. WAN Static IP Configuration Parameters Setting Description Connection Mode Select Static from the connection mode drop-down list. IP Address WAN IP address provided by your ISP.
RX3141 User’s Manual 6 6.1 6.1.1 Chapter Error! Reference source not found.. Error! Reference source not found. DHCP Server Configuration DHCP (Dynamic Host Control Protocol) What is DHCP? DHCP is a protocol that enables network administrators to centrally manage the assignment and distribution of IP information to computers on a network. When you enable DHCP on a network, you allow a device — such as the RX3141 — to assign temporary IP addresses to your computers whenever they connect to your network.
Chapter 6 RX3141 User’s Manual Figure 6.1. DHCP Server Configuration Page 2. Enter the information for the IP Address Pool (Begin/End Address), Subnet Mask, Lease Time and Default Gateway IP Address, fields; others, such as Primary/Secondary DNS Server IP Address and Primary/Secondary WINS Server IP Address are optional. However, it is recommended that you enter the primary DNS server IP address in the space provided.
RX3141 User’s Manual Field Chapter Error! Reference source not found.. Error! Reference source not found. Description LAN to DNS servers and relay the results back to the LAN computers. Note that both the primary and secondary DNS servers are optional. Primary/Secondary WINS Server IP Address (optional) 3. Click 6.1.4 The IP address of the WINS servers to be used by computers that receive IP addresses from the DHCP IP address pool.
RX3141 User’s Manual 7 Chapter 7. Configuring Static Routes Configuring Static Routes You can use Configuration Manager to define specific routes for your Internet and network data communication. This chapter describes basic routing concepts and provides instructions for creating static routes. Note that most users do not need to define static routes. 7.
Chapter 7. Configuring Static Routes 7.2 RX3141 User’s Manual Static Route Figure 7.1. Routing Configuration Page 7.2.1 Static Route Configuration Parameters The following table defines the available configuration parameters for static routing configuration. Table 7.1. Static Route Configuration Parameters 40 Field Description Destination Address Specifies the IP address of the destination computer or an entire destination network.
RX3141 User’s Manual 7.2.2 Chapter 7. Configuring Static Routes Adding Static Routes Figure 7.2. Static Route Configuration Follow these instructions to add a static route to the routing table. 1. Open the Static Route configuration page by double clicking the Advanced Î Static Route menu. 2. Enter static routes information such as destination IP address, destination subnet mask, gateway IP address and the interface in the corresponding fields. For a description of these fields, refer to Table 7.1.
Chapter 7. Configuring Static Routes 7.2.3 RX3141 User’s Manual Deleting Static Routes Figure 7.3. Sample Routing Table Follow these instructions to delete a static route from the routing table. 1. Open the Static Route configuration page by double clicking the Advanced Î Static Route menu. 2. Click on the icon of the route to be deleted in the Routing Table. WARNING 7.2.4 Do not remove the route for default gateway unless you know what you are doing.
RX3141 User’s Manual 8 Chapter 8. Configuring DDNS Configuring DDNS Dynamic DNS is a service that allows computers to use the same domain name, even when the IP address changes from time to time (during reboot or when the ISP's DHCP server resets IP leases). RX3141 connects to a Dynamic DNS service provider whenever the WAN IP address changes. It supports setting up the web services such as Web server, FTP server using a domain name instead of the IP address.
Chapter 8. Configuring DDNS 8.1 RX3141 User’s Manual DDNS Configuration Parameters Table 8.1 describes the configuration parameters available for DDNS service. Table 8.1. DDNS Configuration Parameters Field Description Status Shows the state of DDNS. Dynamic DNS Enable Click on this radio button to enable the DDNS Service Disable Click on this radio button to disable the DDNS Service Domain Name Enter the registered domain name provided by your ISP into this field.
RX3141 User’s Manual 8.2 Chapter 8. Configuring DDNS Configuring HTTP DDNS Client Figure 8.2. HTTP DDNS Configuration Page Follow these instructions to configure the HTTP DDNS: 1. First, you should have already registered a domain name to the DDNS service provider. If you have not done so, please visit www.dyndns.org for more details. 2. Log into the Configuration Manager, and then click Advanced Î DDNS Service menu to open the DDNS Configuration page. 3.
RX3141 User’s Manual 9 Chapter 9. Configuring Firewall/NAT Settings Configuring Firewall/NAT Settings The RX3141 provides built-in firewall/NAT functions, enabling you to protect the system against denial of service (DoS) attacks and other types of malicious accesses to your LAN while providing Internet access sharing at the same time. You can also specify how to monitor attempted attacks, and unwanted network access.
Chapter 9. Configuring Firewall/NAT Settings RX3141 User’s Manual the packet is dropped; otherwise, the packet is either dropped or forwarded based on the action defined in the matched ACL rule. 9.1.3.2 ACL Rule and Connection State Tracking The stateful packet inspection engine in the firewall keeps track of the state, or progress, of a network connection.
RX3141 User’s Manual 9.2 9.2.1 Chapter 9. Configuring Firewall/NAT Settings Router Security Settings Basic Router Security Configuration Parameters Table 9.1 describes the configuration parameters available for basic router security configuration. Table 9.1. Basic Router Security Configuration Parameters Field Description Firewall Check or uncheck this box to enable or disable firewall. NAT Check or uncheck this box to enable or disable NAT.
Chapter 9. Configuring Firewall/NAT Settings 9.2.2.1 RX3141 User’s Manual DoS Protection Configuration Parameters Table 9.2 provides explanation for each type of DoS attacks. You may check or uncheck the check box to enable or disable the protection or detection for each type DoS attacks. Table 9.2. DoS Attack Definition Field Description IP Source Route Intruder uses "source routing" in order to break into the target system.
RX3141 User’s Manual 9.2.2.2 Chapter 9. Configuring Firewall/NAT Settings Configuring DoS Settings To configure DoS settings, follow the instructions below: 1. Open the Router Security configuration page as shown in Figure 9.1 by double clicking on Router Setup Î Security menu. 2. Check or uncheck individual check box for each type DoS attack. 3. Click to save the settings. Figure 9.1.
Chapter 9. Configuring Firewall/NAT Settings 9.3 RX3141 User’s Manual ACL Rule Configuration Parameters 9.3.1 ACL Rule Configuration Parameters Table 9.3 describes the configuration parameters firewall inbound, outbound and self-access ACL rules. Table 9.3. ACL Rule Configuration Parameters Field Description ID Add New Rule Number Click on this option to add a new ACL rule. Select a rule from the drop-down list, to modify its settings. Mave This option allows you to set a priority for this rule.
RX3141 User’s Manual Chapter 9. Configuring Firewall/NAT Settings Field Description Subnet This option allows you to include all the computers that are connected in an IP subnet. When this option is selected, the following fields become available for entry: Address Mask Self (for self access rule only) Enter the appropriate IP address. Enter the corresponding subnet mask. Indicates the router itself.
Chapter 9. Configuring Firewall/NAT Settings Field RX3141 User’s Manual Description arbitrary source port number. Single This option allows you to apply this rule to an application with a specific source port number. Port Number Range Enter the source port number Select this option if you want this rule to apply to applications with this port range. The following fields become available for entry when this option is selected.
RX3141 User’s Manual 9.4 Chapter 9. Configuring Firewall/NAT Settings Configuring Inbound ACL Rules By creating ACL rules in Inbound ACL configuration page as shown in Figure 9.2, you can control (allow or deny) incoming access to computers on your LAN. Options in this configuration page allow you to: f f f f Add a rule, and set parameters for it Modify an existing rule Delete an existing rule View configured inbound ACL rules Figure 9.2. Inbound ACL Configuration Page 9.4.
Chapter 9. Configuring Firewall/NAT Settings RX3141 User’s Manual Figure 9.3 illustrates how to create a rule to allow inbound HTTP (i.e. web server) service. This rule allows inbound HTTP traffic to be directed to the host w/ IP address 192.168.1.28. Note that the newly added inbound ACL rule is displayed in the Existing Inbound ACL table shown in Figure 9.4. Figure 9.3. Inbound ACL Configuration Example 9.4.2 Figure 9.4.
RX3141 User’s Manual 9.4.4 Chapter 9. Configuring Firewall/NAT Settings Display Inbound ACL Rules To see existing inbound ACL rules, just open the Inbound ACL Rule configuration page by double clicking the Router Setup Î Inbound ACL menu. The existing inbound ACL rules are displayed at the bottom of the configuration page. 9.5 Configuring Outbound ACL Rules By creating ACL rules in outbound ACL configuration page as shown in Figure 9.
Chapter 9. Configuring Firewall/NAT Settings RX3141 User’s Manual 4. Assign a priority for this rule by selecting a number from the “Move to” drop-down list. Note that the number indicates the priority of the rule with 1 being the highest. Higher priority rules will be examined prior to the lower priority rules by the firewall. 5. Select an interface through which to send the packets. Options available are “AUTO”, “ppp0 (unnumbered)”, “ppp1 (PPPoE 0)” and “ppp2 (PPPoE 1)”.
RX3141 User’s Manual Chapter 9. Configuring Firewall/NAT Settings 2. Click on the icon of the rule to be modified in the outbound ACL table or select the rule number from the “ID” drop-down list. 3. Make desired changes to any or all of the following fields: action, source/destination IP, source/destination port, protocol, ICMP message type and log. Please see Table 9.3 for explanation of these fields. 4. Click on the button to modify this ACL rule.
Chapter 9. Configuring Firewall/NAT Settings RX3141 User’s Manual Figure 9.8. Self-Access ACL Configuration Page 9.6.1 Add a Self-Access Rule To add a Self-Access rule, follow the instructions below: 1. Open the Self-Access Rule configuration page, as shown in Figure 9.8, by double clicking the Router Setup Î Self Access ACL menu. 2. Select “Add New” from the “ID” drop-down list. 3. Set desired action (Allow or Deny) from the “Action” drop-down list. 4.
RX3141 User’s Manual Chapter 9. Configuring Firewall/NAT Settings 3. Make desired changes to any settings.. 4. Click on the button to save the changes. The new settings for this Self-Access rule will then be displayed in the Existing Self-Access ACL table located at the bottom half of the Self-Access ACL configuration page. 9.6.
Chapter 9. Configuring Firewall/NAT Settings RX3141 User’s Manual Figure 9.11 Sample Firewall Log 9.7.1 Log Format Two types of log are supported by the RX3141 – system security log and firewall access control log. They are designated by the two keywords, sys and fw respectively. The log format is best explained by examples:System Security Log Example: Jan 1 00:01:22 2000 klogd: sys: TCP XMAS/NULL packet from 192.168.1.100.
RX3141 User’s Manual 10 Chapter 11. System Management Virtual Sever and Special Application This chapter describes the configuration procedures for: f Virtual Server f Special Application NAT is the technology used to support the above applications. 10.1 NAT Overview Network Address Translation allows use of a single device, such as the RX3141, to act as an agent between the Internet (public network) and a local (private) network.
Chapter 11. System Management RX3141 User’s Manual Figure 10.2 Reverse NAPT – Relayed Incoming Packets to the Internal Host Base on the Protocol, Port Number or IP Address 10.1.2 Reverse NAPT / Virtual Server Reverse NAPT is also called inbound mapping, port mapping, or virtual server. Any packet coming to the RX3141 can be relayed to the internal host based on the protocol, port number and/or IP address specified in the ACL rule.
RX3141 User’s Manual Chapter 11. System Management Table 10.1. Virtual Server Configuration Parameters Setting Description Enable Select an application from the list of pre-configured applications. The corresponding protocol and the redirect port range will be automatically selected. Select “Manual Setting” if you want to configure the settings yourself. To activate the policy, make sure the check box is checked. For a list of pre-configured applications, please refer to Table 10.2.
Chapter 11. System Management RX3141 User’s Manual Application Service Port Numbers Netmeeting or VOIP 1503-1503, 1720 (ALG) NEWS TCP 119-119 PC Anywhere TCP: 5631 PC Anywhere TCP: 5631, UDP: 5632 POP3 TCP 110-110 Powwow Chat 13223-13223 Red Alert II 1234-1237 SMTP TCP 25-25 Sudden Strike 2300-2400 TELNET TCP 23-23 Win VNC UDP 5800-5900 10.2.2 Virtual Server Example Following describes the procedure to setup a FTP server: 1.
RX3141 User’s Manual Chapter 11. System Management 5. For security concerns, the RX3141 denies all the access requests from the external users unless a proper inbound ACL rule is setup for each virtual server to allow external users to access the internal servers set up in the Virtual Server configuration page. For example, if you want to allow any one in the external network to access the FTP server, define an inbound ACL rule as configured in Figure 10.4.
Chapter 11. System Management RX3141 User’s Manual Setting Description Application Name The name identifying the application. Outgoing (Trigger) Port Range The port range this application uses when it sends outbound packets. The outgoing port numbers act as the trigger. When the router detects the outgoing packets with these port numbers, it will allow the corresponding inbound packets with the incoming port numbers specified in the Incoming Port Range field to pass through the router.
RX3141 User’s Manual Chapter 11. System Management Following describes the procedure to setup a special application for Quick Time. 1. Open the Special Application configuration page, as shown in Figure 10.5, by double clicking the Advanced Î Special Application menu. 2. Select Quick Time from the Enable drop-down list and the check the check box to activate this policy. Note that the application name, outgoing and incoming port range are automatically selected. 3. Click to save the settings. 4.
Chapter 11. System Management 11 RX3141 User’s Manual System Management This chapter describes the following administrative tasks that you can perform using the Configuration Manager: f f f f f f f Modify password and system-wide settings View system information Modify system date and time Reset system configuration Reboot system Update firmware Backup/restore system configuration 11.
RX3141 User’s Manual Chapter 11. System Management System Administration configuration page, as shown in Figure 11.1, allows you to change login password and other global settings for RX3141. Follow the steps below to change password and/or system-wide settings: 1. Open the System Administration configuration page, as shown in Figure 11.1, by double clicking the Router Setup Î Administration menu. 2.
Chapter 11. System Management RX3141 User’s Manual 11.2 Viewing System Information System Information page displays whenever you log into RX3141. It contains information for the overall system settings. Figure 11.2.
RX3141 User’s Manual Chapter 11. System Management 11.3 Setup Date and Time RX3141 keeps a record of the current date and time, which it uses to calculate and report various data. However, there is no real time clock inside RX3141; RX3141 relies on external time servers to maintain correct time. RX3141 allows you to configure up to three external time servers. Make sure that the “Enable” check box is checked to activate the SNTP (Simple Network Time Protocol) service for time keeping.
Chapter 11. System Management RX3141 User’s Manual 11.3.1 View the System Date and Time To view the updated system date and time, log into Configuration Manager, click the Router Setup Î Timezone menu. Note that the system will go back to the default time, 1/1/2000 00:00:00, if SNTP service is not enabled or none of the configured SNTP servers are not accessible after system is rebooted or powered off. 11.4 Reset to Factory Default Settings 11.4.
RX3141 User’s Manual Chapter 11. System Management 5. RX3141 will then reboot thereafter to make the factory default configuration in effect. Note a count down timer such as the one shown in Figure 11.6 will display to indicate when the reboot process will be completed. Figure 11.6. Factory Reset Count Down Timer 11.4.2 Reset to Factory Default Settings using the Reset Button Note Sometimes, you may find that you have no way to access the RX3141, e.g.
Chapter 11. System Management RX3141 User’s Manual 2. In the Firmware text box, enter the path and name of the firmware image file. Alternatively, you may click on button to open a file manager to search for the firmware image on your computer. Figure 11.8. File Manager 3. Click on button to update the firmware. A dialog window, such as the one below, will pop up to ask for confirmation of the firmware upgrade. Click the proceed; otherwise, click the button to cancel the action. Figure 11.9.
RX3141 User’s Manual Chapter 11. System Management 5. A count down timer will display, as shown in Figure 11.11, after the firmware upgrade is completed. You’ll be reconnected back to RX3141 when the counter returns to zero. You may need to manually connect back to the RX3141 if you are not connected back to RX3141 automatically. Figure 11.11. Firmware Upgrade Count Down Timer 6. When you are reconnected to the RX3141, click Status menu to check if the new firmware is properly upgraded.
Chapter 11. System Management RX3141 User’s Manual 11.6 System Reboot 1. Open the System reboot page, as shown in Figure 11.12, by double clicking the Management Î Reboot menu. button in the reboot the system. 2. Click on the Figure 11.12. System Reboot Page 3. A dialog window will popup, as illustrated in Figure 11.13. Click on the proceed or click on the button to button to cancel. Figure 11.13.
RX3141 User’s Manual Chapter 11. System Management 11.7 . System Configuration Management 11.7.1 Backup System Configuration Follow the steps below to backup system configuration: 1. Open the System Configuration Backup/Restore page, as illustrated in Figure 11.15, by double clicking the Management Î Backup/Restore menu. Figure 11.15. System Configuration Backup Page 2. Click the “Backup system configuration” radio button. 3. Click the button to backup the system configuration. 4.
Chapter 11. System Management RX3141 User’s Manual 5. Enter the desired filename for the backup configuration file as illustrated in Figure 11.17and click on the button to continue. Enter desired filename Figure 11.17. System Configuration Backup Page – Save As Dialog 6. Finally, a message, as shown in Figure 11.18, will display to let you know whether the system configuration is successfully saved to your computer. Figure 11.18.
RX3141 User’s Manual Chapter 11. System Management 11.7.2 Restore System Configuration Follow the steps below to backup system configuration: 1. Open the System Configuration Backup/Restore configuration page by double clicking the Management Î Backup/Restore menu. 2. Enter the path and filename of the system configuration file that you want to restore in the text field. Figure 11.19.
Chapter 11. System Management 3. Click on RX3141 User’s Manual button to restore the system configuration. 4. A message will pop up, as illustrated in Figure 11.21, to let you know whether the system configuration is successfully restored. Note that you must reboot the RX3141 to make the new system configuration in effect. Figure 11.21.
RX3141 User’s Manual 12 Chapter 12. IP Addresses, Network Masks, and Subnets IP Addresses, Network Masks, and Subnets 12.1 IP Addresses This section pertains only to IP addresses for IPv4 (version 4 of the Internet Protocol). IPv6 addresses are not covered. Note This section assumes basic knowledge of binary numbers, bits, and bytes. For details on this subject, see Appendix 12.
Chapter 12. IP Addresses, Network Masks, and Subnets RX3141 User’s Manual 12.2 Network classes The three commonly used network classes are A, B, and C. (There is also a class D but it has a special use beyond the scope of this discussion.) These classes have different uses and characteristics. Class A networks are the Internet's largest networks, each with room for over 16 million hosts. Up to 126 of these huge networks can exist, for a total of over 2 billion hosts.
RX3141 User’s Manual Chapter 12. IP Addresses, Network Masks, and Subnets 12.3 Subnet masks Definition mask A mask looks like a regular IP address, but contains a pattern of bits that tells what parts of an IP address are the network ID and what parts are the host ID: bits set to 1 mean "this bit is part of the network ID" and bits set to 0 mean "this bit is part of the host ID." Subnet masks are used to define subnets (what you get after dividing a network into smaller pieces).
RX3141 User’s Manual 13 Appendix Troubleshooting This appendix suggests solutions for problems you may encounter in installing or using the RX3141, and provides instructions for using several IP utilities to diagnose problems. Contact Customer Support if these suggestions do not resolve the problem. Problem Power LED does not illuminate after product is turned on.
Appendix RX3141 User’s Manual Problem PCs cannot display web pages on the Internet. Troubleshooting Suggestion Verify that the DNS server specified on the PCs is correct for your ISP, as discussed in the item above. You can use the ping utility, discussed in the following section, to test connectivity with your ISP’s DNS server. Configuration Manager Program If you have not changed the password from the default, try using You forgot/lost your “admin” as the user ID and “admin” for the password.
RX3141 User’s Manual Appendix Figure 13.1. Using the ping Utility If the target computer cannot be located, you will receive the message “Request timed out.” Using the ping command, you can test whether the path to the RX3141 is working (using the preconfigured default LAN IP address 192.168.1.1) or another address you assigned. You can also test whether access to the Internet is working by typing an external address, such as that for www.yahoo.com (216.115.108.243).
Appendix RX3141 User’s Manual Figure 13.2. Using the nslookup Utility There may be several addresses associated with an Internet name. This is common for web sites that receive heavy traffic; they use multiple, redundant servers to carry the same information. To exit from the nslookup utility, type exit and press at the command prompt.
RX3141 User’s Manual 14 Appendix.
Appendix 14. Index defined, 75 NAPT, 75 RX3141 User’s Manual PC Configuration static IP addresses, 13 Overload, 75 Ping, 106 PAT, 75 Power adapter, 9 Reverse NAPT, 76 Primary DNS, 36 Virtual Server, 76 Quick Configuration Navigating, 18 logging in, 14 Netmask.