NetFasteR IAD 2 English user manual

10 _{0 0} 1 1 1 0 0 11_{10 0} 01 0 _{0 1} 0 _{0 1} 00 0 0 1 0 1_{11 1} 01 11 11 ₀ 10 0 01 0 ₁ 010 _{0 1} 00 _{0 0} 101_{10 0} 0 0 0 01_{0 01} 0 10₁₀ 011 01 0110 0 0 0 0 1 0 00 10 0 0 1 11 0 0 1110 0 01 _{0 0 10} 0 100 _{0 0 10} 111 1 _{01 11} 11 ₀₁₀ 0 01 0 _{1010 0 1} 00 0 0 1_{0110 0 0 0 0 0} 10 01 0 1010 011 01 01 10 0 0 0 0 1 0 00 10 0 0 1 11 0 0 1110 0 01 0 0 10 0 100 0 0 10 111 1 01 11 11 010 0 01 0 1010 0 1 00 0 0 10110 0 0 0 0 010 01 0 1010

User Manual

All copyright, intellectual and industrial rights in this document and in the technical knowledge it contains are owned by INTRACOM S.A. TELECOM SOLUTIONS and/or their respective owners.

This document is made available to the end users only for their internal use.

No part of this document nor any data herein may be published, disclosed, copied, reproduced, redistributed by any form or means, electronically or mechanically, or used for any other purpose whatsoever without the prior written approval of INTRACOM S.A. TELECOM SOLUTIONS.

Information as well as drawings and specifications contained in this document are subject to change without prior notice.

All trademarks and copyrights mentioned herein are the property of INTRACOM S.A. TELECOM SOLUTIONS and/or their respective owners.

Any rights not expressly granted herein are reserved. Printed in Greece.

Table of Contents

Introduction... 1

Networking Capabilities ... 3

Applications ... 4

Hardware Description & Requirements... 6

Package Contents ... 7

Front Panel ... 8

Rear Panel... 10

Installation of NetFasteR IAD 2™ ... 11

Instructions for Positioning the NetFasteR IAD 2™ ... 12

Installation Using Micro DSL Filters ... 13

Installation Using a Splitter ... 14

Installing NetFasteR IAD 2™ ... 15

Resetting NetFasteR IAD 2™ ... 17

Setting Up your Computer ... 18

Enabling the TCP/ IP Protocol ... 19

Wi-Fi Connection ... 20

Configuring NetFasteR IAD 2™ ... 21

HOME PAGE ... 22

SETUP WIZARD Menu... 26

SYSTEM Menu ... 31 WAN Menu ... 35 LAN Menu... 37 WIRELESS Menu ... 42 NAT Menu ... 52 ROUTE Menu ... 56 FIREWALL Menu... 59 SNMP Menu ... 69 ADSL Menu ... 72 VOIP Menu ... 74 QoS Menu ... 83 DDNS Menu ... 85 USB Menu ... 86 TOOLS Menu ... 91 STATUS Menu... 94

Appendix A: Technical Specifications ... 96

Appendix B: Frequently Asked Questions... 99

Declaration of Conformity

Hereby, INTRACOM TELECOM S.A. declares that NetFasteR IAD 2™ is in

compliance with the essential requirements and other relevant provisions of Directive 1995/5/EC.

Equipment Disposal

Disposal of old electrical and electronic equipment (applicable through the European Union and other European countries with separate waste collection systems).

This symbol, found on this product and any of its parts or on its operating instructions or on its packaging, indicates that electrical and electronic equipment may not be disposed of as unsorted municipal waste. Instead, this product should be handed over to applicable collection points for the recycling of electrical and electronic equipment.

By ensuring the correct disposal of this product, you will help prevent potential negative consequences to the environment and human health, which could otherwise be caused by inappropriate disposal of this product. By recycling, reusing and other forms of recovery of old electrical and electronic equipment you are making an important contribution to the conservation of natural resources and to the protection of the environment. For more information about the recycling of this product, please contact your local municipal authorities, municipal waste disposal service or the store where you purchased this product.

Απόρριψη παλαιών ηλεκτρικών και ηλεκτρονικών συσκευών (ισχύει στην Ευρωπαϊκή Ένωση και άλλες Ευρωπαϊκές χώρες µε συστήµατα χωριστής συλλογής απορριµµάτων). Το σύµβολο αυτό, που απεικονίζεται πάνω στο προϊόν και σε τυχόν εξαρτήµατα του ή στο εγχειρίδιο οδηγιών του ή στη συσκευασία του, δείχνει ότι οι ηλεκτρικές και ηλεκτρονικές συσκευές, µετά το πέρας της λειτουργίας τους, δεν θα πρέπει να απορρίπτονται µαζί µε τα αστικά απόβλητα. Αντίθετα θα πρέπει να παραδίδονται σε κατάλληλα σηµεία συλλογής για την ανακύκλωση των ηλεκτρικών και ηλεκτρονικών συσκευών. ∆ιασφαλίζοντας τη σωστή απόρριψη αυτού του προϊόντος, συνεισφέρετε στην πρόληψη πιθανών αρνητικών συνεπειών στο περιβάλλον και την ανθρώπινη υγεία, οι οποίες θα µπορούσαν να προκληθούν από την µη ενδεδειγµένη απόρριψη του προϊόντος. Η ανακύκλωση, επαναχρησιµοποίηση και άλλες µορφές αξιοποίησης των παλαιών ηλεκτρικών και ηλεκτρονικών συσκευών βοηθούν στη διαφύλαξη των φυσικών πόρων και στην προστασία του περιβάλλοντος. Για περισσότερες πληροφορίες σχετικά την ανακύκλωση αυτού του προϊόντος, παρακαλούµε επικοινωνήστε µε τις τοπικές δηµοτικές αρχές, την υπηρεσία αποκοµιδής αστικών αποβλήτων ή το κατάστηµα από το οποίο αγοράσατε το συγκεκριµένο προϊόν. Για περισσότερες πληροφορίες, µπορείτε να επικοινωνείτε µε το Συλλογικό Σύστηµα Εναλλακτικής ∆ιαχείρισης Αποβλήτων Ηλεκτρικού και Ηλεκτρονικού Εξοπλισµού “Ανακύκλωση Συσκευών Α.Ε.” (www.electrocycle.gr).

Important Safety Information

Follow all the instructions with care. You must read the following safety information carefully before you install or remove the device.

• Use only the power adapter that is supplied with the unit. The use of an alternative adapter can damage the device and invalidate the warranty

• Use an electrical outlet within easy distance. Take care not to damage the power cable

• To avoid electrical shock, do not open the device

• To prevent fire or shock hazard, do not expose your device to rain or moisture, liquid and toxic substances

• Particular care must be taken during installation and removal of cables and telephone line

• Never touch the non-insulated telephone wires or terminals unless the telephone line has been disconnected from the network interface • Ensure the correct ventilation of the device. Do not obstruct the air

exhaust outlets and do not lean anything over the device

• Place the device out of direct sunlight and away from sources of heat • Avoid using your device during an electrical storm as it may cause an

electrical shock

• The device generates and uses Radio Frequency (RF) energy. In some environments, the use of RF energy is not permitted. The user should seek local advice on whether or not RF energy is permitted within the area of intended use

Introduction

Overview The NetFasteR IAD 2™ device (see photo below) is a Router that employs

ADSL2+ technology, having the capability to provide a cost-effective means of sharing a single broadband Internet connection, between several wired and wireless computers.

NetFasteR IAD 2™ is also applicable to SOHO customers for the

provisioning of broadband services from a single access point.

The incorporated firewall capability provides protection against malicious invasions that could allow access to your files or damage of your computers.

NetFasteR IAD 2™ also provides two VoIP channels that allow you to

connect existing analogue telephone devices.

NetFasteR IAD 2™ is the ideal solution for:

• Connecting multiple PCs and Video game consoles

• Sharing broadband internet connections with all home computers • Sharing access to printers and peripherals for all computers in your

home wirelessly or through the USB Host (Printers & USB Sticks) • Performing VoIP calls

• Supporting bandwidth critical applications like IPTV

NetFasteR IAD 2™ is designed to implement an “always-on” Internet

connection through the featured high speed ADSL2+ interface. The local network connection capabilities of the device are listed below:

• Four switched 10/100 Base-TX Ethernet ports

• One Universal Serial Bus 2.0 (USB), operating as a Host • One IEEE 802.11b/g Wireless LAN Access Point

Introduction,

Benefits

The features of NetFasteR IAD 2™ are summarized below:

• Shared Internet connection for both wired and wireless computers on your network

• High speed 802.11b/g wireless networking

• No need for a dedicated, “always on” computer for Internet connection

• Compatible with Windows and Macintosh computers • Web-based configuration

• Centralization of all network address settings (DHCP)

• USB Host Port to connect various devices such as printers and USB flash disks1

• Virtual server to enable remote and secure access to Web, FTP, e-mail, Telnet and other services provided from your network

• Incorporated Firewall for protection against internet hacker attacks • Wireless Security (WEP, WPA, WPA2-PSK) to prevent unauthorized

use of your internet connection.

• NAT functionality that allows multiple users to have access to the Internet through a single user account

• VPN pass-through (IPSec-ESP Tunnel mode, L2TP, PPTP) • Support of applications requiring multiple connections

(user-definable)

• Voice-over-IP (VoIP) functionality supporting existing analogue phones

• Auto Wi-Fi Configuration (WPS)

VoIP Services Using VoIP, instead of making calls over the regular telephone network, calls

are made over internet (IP), either through your Internet Service Provider’s (ISP) connection or through your local network (LAN). Calls made to other VoIP devices, anywhere in the world, are generally free, while long distance calls are much cheaper to regular telephone calls made through the public telephone network.

The basic functionalities of the device include the conversion of an analogue voice signal to digital, the encoding and then compression of the signal into Internet protocol (IP) packets. The device is equipped with a digital signal processor (DSP), which segments the voice signal into frames and stores them in voice packets. These voice packets are encoded using the G.711, G.723.3 and G.729 standards used by encoders - decoders (Codec) of the market.

Networking Capabilities

Connection diagram

The following figure illustrates a typical network.

NetFasteR IAD 2™ provides you the capability of connecting to the Internet.

Simultaneously, it has the capability of directly connect to other computers, therefore expanding your existing network.

The device allows connectivity to 10/100 Mbit/s devices and wireless IEEE 802.11b/g compatible devices, making it easy to create a network in small offices and homes as well as support Internet Access through an ADSL connection. Since many DSL providers use PPPoE or PPPoA to establish communications with end users, the device includes built-in clients for these protocols, eliminating the need to install the related software on your

computer. Splitter VoIP VoIP Ethernet Hub or Switch POTS POTS LAN (extension) Voice Data POTS Line NetFaster IAD Residential Connection Point (NID) Clients Clients LAN USB Wi-Fi

Applications

The advanced networking features of NetFasteR IAD 2™ device are

summarized below.

USB Printer Sharing (LAN & WAN)

Using the implemented USB Host the NetFasteR IAD 2™ can be used for

Printer sharing in a LAN or WAN configuration thus the printer can be accessed remotely from a different location.

USB Printer

WIFI

LAN

Applications,

File Sharing

(LAN & WAN) Using the implemented USB Host the NetFasteR IAD 2™ can be used for

File Sharing by connecting your USB Flash memory stick. Your files could be accessed either from LAN or WAN (Internet).

USB Flash Disk WIFI LAN IP WAN

Hardware Description & Requirements

General description

NetFasteR IAD 2™ incorporates ADSL2+ to allow connection to the Internet

or to a remote site, via the associated port. This device can be connected directly to your PC or to a local area network using any of the four Fast Ethernet LAN ports.

Access speed to the Internet depends on your service type. Full-rate ADSL2+ provides up to 24 Mbit/s downstream and 1 Mbit/s upstream. Data passing between devices connected to your local area network can run at up to 100 Mbit/s over the Fast Ethernet ports and 54 Mbit/s over the built-in wireless network adapter.

The device includes a LED display on the front panel for system power and port indications that simplify installation and operation monitoring.

System Requirements

Your device requires that the computer(s) and components in your network be configured with at least the following:

• An Operating System (could be Windows, OSX, Linux or other Unix variations)

• Each computer to be connected to the available LAN ports of the device should be equipped with a 10Mbit/s or 10 / 100 Mbit/s Ethernet card

• Optionally, an 802.11b/g wireless adapter • At least 60 MB of free hard disk space • At least 256 MB of RAM

• Suitable web browser. Supported are the following: Internet Explorer 5.5 or later, Netscape 4.7 or later, Firefox Mozilla 1.5 or later

Package Contents

The NetFasteR IAD 2™ packaging contains the device itself, the

accompanied components as well as the required equipment.

The following table describes the package contents. If any of these items are missing or damaged, please contact your retailer.

# Depiction Description

1 NetFasteR IAD 2™ unit (ISDN or POTS,

depending on your telephone line type).

2 Power Supply Adapter.

3 Ethernet cable.

4 2 x Phone cables.

5 Resources CD ROM.

6 ADSL splitter and micro filter (only for POTS models).

Front Panel

Indications and Description

The front panel includes fourteen LEDs for optical indication of the networking and operating state of the device:

LEDs

Designation Status Description

Solid Green Normal operation.

Power

Solid Red Power Failure.

Solid Green Ethernet Link Connected.

Blinking Green Transmitting or Receiving Packets.

LAN 1 LAN 2 LAN 3

LAN 4 Off No Connection.

Solid Green WLAN Connected.

Blinking Green Transmitting or Receiving Packets.

WLAN

Off No Connection.

Green DSL Link Up & Connected. Slow Blinking

Green

Modem begins DSL negotiation. Fast Blinking

Green

Modem finishes DSL negotiation.

ADSL

Off No Connection.

Solid Green IP Connectivity (no traffic detected) Fast Blinking

Green

IP Connectivity (traffic detected) Solid Red PPP Authentication Failure

Online

Off Power off. No WAN connection available

Front Panel,

Indications and Description, continued

Designation Status Description

Solid Green VoIP Connectivity Detected. Blinking Green Traffic Detected.

VoIP

Off VoIP Handshake Failed. Solid Green Off Hook.

Blinking Green Incoming VoIP Call (phone ringing or call waiting stage).

Phone 1 Phone 2

Off No communication on ADSL or VoIP Solid Green PSTN lifeline backup is connected.

Blinking Green Incoming PSTN Call (phone ringing or call waiting stage).

Line (Optional)

Off There is no PSTN lifeline backup Connection. Solid Green USB Link Established.

Fast Blinking Green

USB Traffic Detected.

USB

Off No USB activity (device is powered off or no USB device is present).

Slow Blink Yellow

In Progress. Fast Blink with

Pauses Red

Fail-overlap Session. Fast Blink Red Fail-no overlap Session.

WPS

Solid Green Successful Connection.

Note that in any case (success or fail) the LED state is maintained until action is performed again or the modem is reset.

WLAN To enable/disable Wi-Fi in NetFasteR IAD 2™ press the WPS button for

approximately 2 seconds.

To auto-configure the Wi-Fi connection (WPS) between your computer and

the NetFasteR IAD 2™ press the WLAN button for approximately 6 seconds

to start the WPS negotiation.

Rear Panel

Connections Description

The following photo displays the rear panel of the device.

# Designation Description

1 DSL Connection port of ADSL line.

2 LAN1 LAN2

LAN LAN4

Fast Ethernet (RJ-45) ports for connecting LAN devices, such as computer, Hub or Switch, etc. 3 USB USB Host to connect a printer or a USB Stick.

4 Power Power adapter receptacle.

5 On/Off Switch to turn the device ON / OFF.

6 Reset Reset button to reset the device and restore default

factory settings.

7 Line

(optional)

Telephone line receptacle (FXO lifeline backup, optional).

8 Phone 1

Phone 2

Analogue Telephone device (FXS) receptacles.

Do not force the antenna beyond its mechanical stops. Rotating the antenna further may cause damage.

Installation of NetFasteR IAD 2™

This chapter will guide you through the installation of NetFasteR IAD 2™,

including:

1. Positioning the device

2. Installing the ADSL splitter or Micro filters 3. Connecting the device to the network

4. Setting up your computer for networking communication with the device

Instructions for Positioning the NetFasteR IAD 2™

You should position NetFasteR IAD 2™ in such a location to ensure that:

• It is located near an electrical outlet and a phone wall socket • Water or moisture cannot penetrate the case of the unit • It is out of direct sunlight and away from sources of heat

• The cabling is away from power lines, fluorescent lighting fixtures, and sources of electrical noise such as radios, transmitters and broadband amplifiers

• It is centrally located to the wireless computers that will connect to the Router. A suitable location might be on top of a high shelf to optimize wireless connections to computers in both horizontal and vertical directions, allowing wider coverage

Installation Using Micro DSL Filters

Introduction _{Before beginning installation, you must locate devices in your house}

requiring a DSL filter such as phones, fax machines, answering machines, dial-up modems, Satellite TV dialers or monitored security systems and attach a DSL filter to any one of them, sharing the same phone line as your

NetFasteR IAD 2™.

Installation To install the DSL Micro filters proceed as follows:

Step Action

1 Disconnect the phone cable from the telephone wall socket. 2 Insert the phone cable into the DSL filter socket identified with a

phone symbol.

3 Insert the DSL filter cable into the telephone wall socket.

Installation Using a Splitter

Introduction _{A splitter separates the frequencies of telephone service from the ADSL}

(Data) service and outputs each to a different splitter port. The “Line” port of the splitter is connected to a telephone wall socket. If you have an ISDN telephone line then, the “Phone” port must be connected to the NT1 unit (i.e. Intracom netMod). If you have a POTS line then, the “Phone” port shall be used to connect telephone sets. The “ADSL” port shall be connected to

NetFasteR IAD 2™, no matter if POTS or ISDN line is used.

Installation To install the splitter proceed as follows:

Step Action

1 Connect the “Line” port of the splitter to the wall socket.

2 Use an RJ11 cable to connect the NetFasteR IAD 2™ ADSL port to the “ADSL” port of the splitter.

3 Connect a telephone set in the “Phone” port of the splitter.

Using a splitter or filter is necessary to avoid interferences between telephony and ADSL services, which may cause problems in the voice quality and the ADSL performance.

Installing NetFasteR IAD 2™

Introduction _{To install NetFasteR IAD 2™, proceed as follows:}

1. Connect the phone cable to the ADSL receptacle 2. Connect the Ethernet cable

3. Power Up the Device

Connecting the Phone Cable

To connect the phone cable, proceed as follows:

Step Action

1 Connect the one end of the phone cable into the “ADSL” splitter port. 2 Connect the other end of the phone cable into the ADSL socket at

the rear of the device.

Connecting the Ethernet Cable

To connect the Ethernet cable proceed as follows:

Step Action

1 Connect the one end of the Ethernet cable into one of the four Ethernet (LAN) sockets on the rear of the device.

2 Connect the other end of the Ethernet cable into the Ethernet Network card of your computer.

Installing NetFasteR IAD 2™,

Powering up the device

To power up NetFasteR IAD 2™, proceed as follows:

Step Action

1 Plug the power adapter into the corresponding inlet located on the rear panel of the device.

2 Plug the power adapter into an electrical wall socket.

3 Switch ON the power switch located at the rear panel of the device. 4 Wait for the power LED to turn steady green.

Resetting NetFasteR IAD 2™

Introduction _{You may want to reset the NetFasteR IAD 2™ in case you are experiencing}

problems or if you want to restore the factory default settings.

Procedure To Reset the NetFasteR IAD 2™ press the Reset button located in the rear

panel of the device, next to the ON/OFF button, for approximately 2 seconds. To Restore the NetFasteR IAD 2™ to factory default settings press the

Setting Up your Computer

NetFasteR IAD 2™ has the capability of dynamically allocating network

addresses to the computers on your network, using DHCP.

To realize this, your computers TCP/IP settings should be configured accordingly.

Enabling the TCP/ IP Protocol

Description _{Make sure that TCP/IP is installed and supported by your operating system.}

This connection will require you to enable your computer to receive from the device its own IP Address automatically: in such a case, the device acts like the DHCP server in your local network.

Wi-Fi Connection

Procedure _{To establish a Wi-Fi connection, proceed as follows:}

Step Action

1 Install your wireless adapter according to the manufacturer’s instructions and verify that your computer is set to obtain an IP address automatically (DHCP Client mode).

Note: You will need to properly configure your adapter to

communicate with NetFasteR IAD 2™ according to the configuration

rules. This requires a computer with 802.11b/g wireless adapter installed.

2 In the configuration window of your wireless adapter scan the wireless network (indicated with the relevant SSID name) present in your physical environment

3 Select the SSID of NetFasteR IAD 2™.

4 Complete the configuration of the wireless adapter with the same parameters of NetFasteR IAD 2™ which are:

• RF channel; automatically detect

• Encryption Enable or Disable (default = Enable). Choose between WEP, WPA/WPA2 and WP2 only.

• Set WEP/WPA/WP2 key size/type • Set WEP/WPA/WPA2 key used

5 To check the connection, connect to the NetFasteR IAD 2™ Home

Page, entering http://192.168.2.1/ or http://netfaster.iad in the address bar of your browser.

Important Note: Your ADSL router has been set by default to use

WPA/WPA2 security. The pre-shared key that is intended to be used by the clients is typed on the bottom side of each device.

Configuring NetFasteR IAD 2™

Introduction This chapter provides a description of all menu items accessible from the

Home Page of NetFasteR IAD 2™ on user authentication to the Router.

Attention: any change in the configuration of NetFasteR IAD 2™ could

HOME PAGE

Introduction The device’s setup program is web-based, which means that it is accessed

through your web browser.

To access the web server, proceed as follows:

Step Action

1 Launch your web browser on your computer.

2 Enter the following URL in the address field of your browser:

http://192.168.2.1/or alternatively use the easy URL address

http://netfaster.iad

The device is delivered with a default IP address (http://192.168.2.1/). If you change it, please take note of the new IP address, otherwise a “Reset” (see Resetting ) operation will be required to obtain access to the device gain.

Access Access to the device configuration pages is controlled through user account:

admin :

Admin has unrestricted access to change and view configuration of the

device.

You will be requested to insert an ID and a Password: insert them to access the device’s configuration panels.

The username (ID) and password are set to “admin“ for the administrator account.

It is recommended to change the default password. Make sure you

remember the new password, since this is the only way you will be able to manage your device.

HOME PAGE,

Home Page Description

The main configuration page opens as shown in the following figure. This page contains a menu on the left which is always available in all pages and which is the starting point for any configuration that concerns NetFasteR IAD 2™.

Menu Description The following table provides a description of the menus which are

located on the left side of the main configuration page (Home Page):

Menu Description

Setup Wizard To quickly and easily perform the basic configuration of

NetFasteR IAD 2™.

It is used by novice users who do not want to proceed to detailed settings.

System To set up all the basic parameters.

WAN To configure access parameters to the ISP.

LAN To configure the LAN parameters.

WIRELESS To set up the wireless access point configuration.

HOME PAGE,

Menu Description (Continued)

Menu Description

NAT To allow multiple users to access the Internet.

ROUTE To define the static routes and RIP parameters.

FIREWALL To set up the firewall protection parameters.

SNMP To set the community and trap information.

ADSL To show DSL related parameters and status.

VOIP To set the VoIP accounts.

UPnP To offer UPnP architecture advantages (peer-to-peer

network connectivity, intelligent devices, auto-configuration etc.).

QoS To configure and monitor all the QoS parameters and settings.

DDNS To set the Dynamic DNS feature.

USB To setup the connected USB devices and the related services

TOOLS A set of tools to perform backup / restore, reset or Firmware

upgrade tasks.

STATUS A status summary of IAD running configuration and system

messages.

HOME PAGE,

Home – Logout _{In the top right part of the screen click Home to go to the Home Page or click}

Logout to Logout.

To permanently activate and save the changes of parameters of NetFasteR IAD 2™, click the Save Settings button.

In some cases a reboot of the device is required. Rebooting, when required, is performed automatically.

SETUP WIZARD Menu

Introduction _{This menu concerns the basic and quick parameters setting of NetFasteR}

IAD 2™.

The NetFasteR IAD 2™comes already configured from your

Service Provider. Execute the following procedures in case you want to re-configure the NetFasteR IAD 2™ with new

settings.

1st step:

Getting Started

The Setup Wizard menu window and the steps for quick parameters setting

of the device are shown below. Click NEXT to start.

SETUP WIZARD Menu,

2nd step:

Parameter Settings

Select the absolutely necessary parameters that concern the ADSL connection. Make sure you know at least the connection protocol, the VPI/VCI, the encapsulation method and the Username / Password of your ISP. Proceed as follows:

Step Action

1 In the Country drop down list select your country.

If your country is not listed, select “Other”.

2 Select the Internet Service Provider and the connection Protocol

from the corresponding drop down lists. Then, enter the user’s information (username and password) to connect.

3 Click NEXT to proceed.

SETUP WIZARD Menu,

3nd step:

Parameter Settings

First set the connection protocol you have pre-selected (see below), and then click NEXT to proceed.

If you have selected PPPoE / PPPoA:

Select the parameters that concern the PPPoE connection protocol:

Parameter Description

VPI/VCI Enter the VPI/VCI parameters provided by your ISP. The

predefined values may be the same for the ISP you have selected.

Encapsulation Contact your service provider to be informed about the

Encapsulation your connection uses. In most cases the predefined value does not have to be changed.

Username Enter the username provided by your service provider.

Password Enter the password provided by your service provider.

Make sure you enter it correctly.

Confirm Password

Re-enter the password to confirm it is correct.

SETUP WIZARD Menu,

3nd step:

Parameter Settings

(continued)

If you have selected RFC1483 (DHCP):

Select the parameters that concern the 1483 Bridging (DHCP) connection protocol.

Click NEXT to proceed.

Parameter Description

DNS Server Enter the DNS server address provided by your ISP.

Otherwise, NetFasteR IAD 2™ will add it automatically.

VPI/VCI Enter the VPI/VCI parameters provided by your ISP. The

predefined values may be the same for the ISP you have selected.

Encapsulation Contact your service provider to be informed about the

Encapsulation your connection uses. In most cases the predefined value does not have to be changed.

SETUP WIZARD Menu,

4th Step:

Completion of procedure

This screen (see below), provides a summary of the preceding settings. In case a mistake is found, click BACK to return to the preceding screens to

correct.

If all settings are correct, click FINISH to complete the NetFasteR IAD 2™

parameter settings procedure.

NetFasteR IAD 2™ should connect within a few minutes. In case connection

is not established, see Appendix C (Troubleshooting) and /or contact the

SYSTEM Menu

Introduction This menu includes all the basic configuration pages for the device, such as

time zone, password settings and remote management.

Time Settings It is used to ensure that the time-based firewall rules feature, system log

entries and CLIP time information are based on the correct localized time. From this menu item it is possible to enable and configure the NTP time server addresses.

Time Settings Screen

SYSTEM Menu,

Password Settings

Use this screen to change the password for accessing the management interface. Passwords can contain from 3 to 12 alphanumeric characters. Enter a maximum Idle Time Out (in minutes) to define a maximum period of time for which the login session is maintained during inactivity. If the

connection is inactive for longer than the maximum idle time, it will perform a session logout and you will have to log in again to access the management interface.

If you lose your password, or you cannot gain access to the user interface, use a pin to press the reset button on the rear panel of NetFasteR IAD 2™,

and holding it down for at least 5 seconds to restore the factory default settings.

SYSTEM Menu,

Remote Management

Use this screen to manage the VoIP Router from a Remote Location outside of your Local Network.

To do this you must specify the Host Address and Port Number of the

Remote Host and select the Enabled checkbox.

By enabling Remote Management and using the default values for Host Address and Port Number, unauthorized access to your router is possible.

Remote Management Screen

SYSTEM Menu,

DNS _{A Domain Name Server (DNS) is an index of IP addresses and web}

addresses. If you type a web address in your browser, such as

www.somesite.com, a DNS server will find that name in its index and find the matching IP address.

However, if there is a DNS server that you would rather use, you need to specify the IP address here. Fill the Primary and Secondary DNS Addresses fields and click the Save Settings button.

WAN Menu

Introduction The device can be connected to your ISP in any of the following ways:

• ATM PVC: configuring ATM VC parameters

• Clone MAC: configuring the WAN Interface’s MAC Address

ATM PVC The device uses ATM as Layer 2 protocol. ATM PVC is a virtual connection,

which acts as a WAN interface. NetFasteR IAD 2™ supports up to 8 ATM

PVCs.

By clicking the “VCn” link, the related ATM Interface panel is opened to

properly configure ATM parameters.

WAN Menu,

Clone MAC Address

Some ISPs require you to register your MAC address. If you have already registered it, change the MAC address of NetFasteR IAD 2™ to the MAC

LAN Menu

Description You can enable DHCP to dynamically allocate IP addresses to your client

PCs or configure filtering functions based on specific clients or protocols.

NetFasteR IAD 2™ must have an IP address for the local network.

VLAN Binding is used to define the VLAN (which corresponds to an Ethernet port) to which the physical ports belong. Each physical port can be assigned to any configured VLAN profile. NetFasteR IAD 2™ VLANs function can be

used to create up to 4 VLAN profiles.

Once a VLAN profile is created, interfaces can be assigned to the VLAN profile. This is achieved with the appropriate VLAN settings.

Only interfaces of IEEE 802 bridging type (LAN ports 1-4 and 1483 Bridging PVC’s) can be assigned to a VLAN.

LAN Menu,

VLAN Screen

LAN Menu,

Adding a VLAN _{Click Add VLAN in the VLAN screen to create a new profile. The VLAN}

Profile screen appears:

The preceding screen contains the following parameters:

Parameter Description

Description To enter a description for the VLAN group.

IP Address To enter the IP address for the VLAN.

Subnet Mask To enter the Subnet Mask address for the

VLAN.

NAT Domain To set a VLAN as private or public.

IGMP Snooping Enable this feature to allow an Ethernet

switch to “listen in” on the IGMP

conversation between the hosts and the routers.

IGMP Querier Enable this function to send out periodic

IGMP queries.

LAN Menu,

DHCP Client List

The DHCP Client List displays the IP Address, Host Name and MAC Address of each client that has requested an IP Address since the last reboot of the router.

DHCP Client List Screen

LAN Menu,

Creating a Fixed DHCP Client

To add a Fixed DHCP Client, proceed as follows:

Step Action

1 In the DHCP Client screen click New. The following screen

appears:

2 Enter the IP Address and the MAC Address of the Client and click

Save Settings to confirm or click Cancel to abort.

3 Click Refresh to refresh the list of the displayed DCHP Clients.

From now on, the client with the specified MAC address will always be assigned the predefined IP.

WIRELESS Menu

Description NetFasteR IAD 2™ can be quickly configured as a wireless access point for

roaming clients by setting the Service Set Identifier (SSID) and channel number. NetFasteR IAD 2™ also supports data encryption and client

filtering.

NetFasteR IAD 2™ also allows wireless computers to communicate with

each other.

To enable the Wireless transmitter click the Enable option button and click

the SAVE SETTINGS button.

WIRELESS Menu,

Definition of Channel & SSID

You must specify a common radio channel and SSID (Service Set ID) to be used by NetFasteR IAD 2™ and all of its wireless clients. Be sure you

configure all of its clients with the same values.

Channel and SSID Screen

Parameters The preceding screen contains the following parameters:

Parameter Description

SSID Service Set ID. The SSID must be the same for NetFasteR

IAD 2™ and all of its wireless clients. SSID

Broadcast

Enables or disables the broadcasting of the SSID. Disabling SSID broadcast will provide increased security by hiding the SSID of your wireless network.

Wireless Mode

This device supports both 11g and 11b wireless networks. Select according to the type of your wireless network. You may use “Mixed (11b+11g)” to provide compatibility with both 11b and 11g wireless clients.

Channel The radio channel used by the wireless device and its clients

to communicate with each other. This channel must be the same for NetFasteR IAD 2™ and all of its wireless clients. NetFasteR IAD 2™ will automatically assign itself a radio

channel, or you may select one manually.

WIRELESS Menu,

Access Control Using the Access Control functionality, you can restrict or allow access

based on a MAC address.

WIRELESS Menu,

Security To make your wireless network safe, you should enable the security function.

The device supports the following security mechanisms:

• WPA/WPA2 • WPA2 Only • WEP

• Disabled (no security)

Important Note: NetFasteR IAD 2™ has been set by default to use

WPA/WPA2 security. The pre-shared key that is intended to be used by the clients is typed on the bottom side of NetFasteR IAD 2™.

WIRELESS Menu,

WPA/WPA2 Wi-Fi Protected Access (WPA) combines Temporal Key Integrity Protocol

(TKIP) and 802.1x mechanisms. It provides dynamic key encryption and 802.1x authentication service.

Wi-Fi Protected Access 2 (WPA2) is a product certification that is available through the Wi-Fi Alliance. WPA2 certifies that wireless equipment is compatible with the IEEE 802.11i standard. The WPA2 product certification formally replaces Wired Equivalent Privacy (WEP) and the other security features of the original IEEE 802.11 standard. The goal of WPA2 certification is to support the additional mandatory security features of the IEEE 802.11i standard that are not already included for products that support WPA.

The following table describes the WPA/WPA2 parameters:

Parameter Description

Authentication Choose 802.1x or Pre-shared Key to use as the

authentication method.

• 802.1x: for the enterprise network with a RADIUS server

• Pre-shared key: for the SOHO network environment without an authentication server

Pre-shared key type

To select the key type to be used in the Pre-shared Key.

Pre-shared Key To type in the Pre-shared key.

WIRELESS Menu,

Security (WPA2 Only) Screen

The following table describes the WPA2 parameters:

Parameter Description

Authentication Choose 802.1x or Pre-shared Key to use as the

authentication method.

• 802.1x: for the enterprise network with a RADIUS server.

• Pre-shared key: for the SOHO network environment without an authentication server.

Pre-shared key type

To select the key type to be used in the Pre-shared Key.

Pre-shared Key To type in the pre-shared key.

WIRELESS Menu,

802.1X activation & parameters

If 802.1x is used in your network, then you should enable this function for the device. The following table describes the 802.1X parameters:

Parameter Description

Authentication To select 802.1x authentication.

Session Idle timeout

Defines a maximum period of time for which the connection is maintained during inactivity.

Re –

Authentication Period

Defines a maximum period of time for which the

authentication server will dynamically re-assign a session key to a connected client.

Quiet Period Defines a maximum period of time for which the device will

wait between failed authentications.

Server IP The IP address of your authentication server.

Server Port The port used for the authentication service.

Secret Key The secret key shared between the authentication server

and its clients.

NAS-ID Defines the request identifier of the Network Access

Server.

WIRELESS Menu,

WEP If you want to use WEP to protect your wireless network, you have to set the

same parameters for NetFasteR IAD 2™ and all your wireless clients.

WEP Parameters

You may automatically generate encryption keys or manually enter the keys. To generate the key automatically with a passphrase, select the Passphrase box and enter a string of characters. Select the default key from the drop down list. Click the SAVE SETTINGS button.

Parameter Description

WEP Mode Select 64 bit or 128 bit key to use for encryption.

Key Entry Method

Select Hex or ASCII to use for encryption key.

Key

Provisioning

Select Static if there is only one fixed key for encryption. If you want to select Dynamic, you would need to enable the 802.1x function first.

The passphrase can consist of up to 32 alphanumeric characters.

To manually configure the encryption key, enter five hexadecimal pairs of digits for the 64-bit key, or enter 13 pairs for the 128-bit key (A hexadecimal digit is a number or letter in the range 0-9 or A-F).

WEP protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet.

WIRELESS Menu,

WDS The Wireless Distribution System (WDS) provides a means to extend the

range of a Wireless Local Area Network (WLAN).

WDS allows an Access Point (AP) to establish a direct link to other APs and to allow stations to roam freely within the area covered by the WDS.

• Enable or disable WDS features: if you want to use the WDS function, select enable

• AP MAC Address Table (up to 4 APs): select up to 4 stations

WIRELESS Menu,

WPS _{Wi-Fi Protected Setup (WPS) is the industry standard method to simplify the}

security setup and management of Wi-Fi networks. You can easily setup and connect to a WPA-enabled 802.11 network with WPS-certificated devices using either Personal Information Number (PIN) or Push Button

Configuration (PBC) method. Legacy devices without WPS can be added to the network using the traditional manual configuration method.

While NetFasteR IAD 2™ is in WPS enable mode (a maximum of 2

minutes), wireless security is not enabled thus computers can connect over wireless networks at a range of several hundred feet.

Before using WiFi Protected Setup (WPS) push-button procedures, verify that your device (a notebook, adapter, or other device) supports WPS. If you do not have any other WPS-enabled devices, there is no need to open the 2 minute period when security will be disabled, or to configure your router security for WPS.

NAT Menu

Description Network Address Translation (NAT) allows multiple users at your local site to

access the Internet through a single public IP address or multiple public IP addresses. NAT can also prevent hacker attacks by mapping local

addresses to public addresses for key services such as the Web or FTP.

Address Mapping

Allows one or more public IP addresses to be shared by multiple internal users. This also hides the internal network for increased privacy and security. Enter the Public IP address you want to share in the Global IP field.

Enter a range of internal IPs that will share the global IP in the “from” field.

NAT Menu,

Virtual Server If you configure the device as a virtual server, remote users accessing

services, such as web or FTP, at your local site (via public IP addresses) can be automatically redirected to local servers configured with private IP

addresses. In other words, depending on the requested service (TCP/UDP port number), NetFasteR IAD 2™ redirects the external service request to

the appropriate server (located at another internal IP address).

For example, if you set Type / Public Port to TCP / 80 (HTTP or web) and the Private IP / Port to 192.168.2.2 / 80, then all HTTP requests from outside users will be transferred to 192.168.2.2 on port 80. Therefore, just by entering the IP address provided by the ISP, Internet users can access the service they need at the local address to which you redirect them.

The most common TCP service ports include: HTTP (80), FTP (21), Telnet (23) and POP3 (110).

NAT Menu,

Special Applications

Some applications require multiple connections, such as Internet gaming, Video conferencing, Instant Messaging and Internet telephony. These applications may not work when Network Address Translation (NAT) is enabled.

If you need to run applications that require multiple connections, use the

Special Applications screen to specify the additional public ports to be

opened for each application.

The preceding screen contains the following parameters:

Parameter Description

Trigger Port To set the main port that the application uses for communication. This port usually performs the role of a “trigger” for the other ports to be open (see online help for more information)

Trigger Type To select the protocol that uses the Trigger port

Public Port To set the Public triggered ports (see online help for more information)

Public Type To select the protocol that uses the triggered ports Enabled To enable the Trigger rule

NAT Menu,

NAT Mapping Table

The NAT Mapping Table screen displays the current NAPT (Network

Address Port Translation) address mappings. As NAT mapping is dynamic, you may click the Refresh button to refresh the NAT Mapping Table with the

most updated values.

The following table describes the parameters of the NAT Mapping Table:

Parameter Description

Protocol The transmission protocol.

Local IP Local (LAN) host’s IP address.

Local Port Local (LAN) host’s port number.

Pseudo IP Translated IP address.

Pseudo Port Translated port number.

Peer IP Remote (WAN) host’s IP address.

ROUTE Menu

Description These pages define the routing-related parameters including static routes

and RIP.

The following table describes the Static Route Parameters:

Parameter Description

Index Select the box of the route you wish to delete or

modify.

Network Address Enter the IP address of the remote computer for

which you want to set a static route.

Subnet Mask Enter the subnet mask of the remote network for

which you want to set a static route.

Gateway Enter the WAN IP address of the gateway to the

remote network.

Configure Not Applicable in this version of Software

Entering / Editing /

Deleting a route

Click Add to add a new static route to the list or select the box of an already

existing route and click Edit.

Clicking Delete will remove an entry from the list.

ROUTE Menu,

RIP _{RIP sends routing-update messages at regular intervals and when the}

network topology changes. When a router receives a routing update that includes changes to an entry, it updates its routing table to reflect the new route. RIP routers maintain only the best route to a destination. After

updating its routing table, the router immediately begins transmitting routing updates to inform other network routers of the change.

The following table describes the RIP Parameters:

Parameter Description

RIP mode Globally enables or disables RIP.

Auto summary

If Auto summary is disabled, then RIP packets will include sub-network information from all sub-networks connected to the router. If enabled, this sub-network information will be summarized in one piece of information covering all sub-networks

Interface The WAN interface to be configured.

Operation Mode

Disable: RIP disabled on this interface. Enable: RIP enabled on this interface.

Silent: Listens for route broadcasts and updates its route

table. It does not participate in sending route broadcasts.

Version Sets the RIP (Routing Information Protocol) version to

use on this interface.

ROUTE Menu,

RIP (Continued)

Parameter Description

Poison Reverse A method for preventing loops that would cause endless

retransmission of data traffic.

Authentication Required

• None: No authentication

• Password: A password authentication key is included

in the packet. If this does not match what is expected, the packet will be discarded. This method provides very little security as it is possible to learn the authentication key by watching RIP packets

• MD5: An algorithm that is used to verify data integrity

through the creation of a 128-bit message digest from data input (which may be a message of any length) that is claimed to be as unique to that specific data as a fingerprint is to a specific individual.

Authentication Code

Password or MD5 Authentication key.

Routing Table Screen

FIREWALL Menu

Description NetFasteR IAD 2™ incorporates firewall protection that inspects packets at

the application layer, maintains TCP and UDP session information, including time-outs and the number of active sessions, and provides the ability to detect and prevent certain types of network attacks.

Network attacks that deny access to a network device are called Denial-of-Service (DoS) attacks. DoS attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources.

NetFasteR IAD 2™ provides protection against the following DoS attacks: IP

Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP SYN flooding.

To enable the firewall, click Enable and then click the SAVE SETTINGS

button.

The firewall does not significantly affect the performance of your system. We therefore recommend enabling the security features to protect your network.

FIREWALL Menu,

Access Control The Access Control screen allows users to define the outgoing traffic

permitted or not-permitted through the WAN interface. NetFasteR IAD 2™ is

set by default to permit all outgoing traffic.

The following table describes the Access Control parameters:

Parameter Description

Enable Filtering Function

Enables or Disables the Access Control function.

Normal Filtering Table

Displays a descriptive list of defined Filtering rules.

Creating a new Access Control rule

To create a new Access Control rule proceed as follows:

Step Action

1 Click Add PC in the Access Control screen. The Access Control Add PC screen appears.

2 Define the appropriate settings for client PC services.

3 Click the OK button and then click the SAVE SETTINGS button to

save your settings.

FIREWALL Menu,

MAC Filtering Table

The MAC Filter allows you to define which client PCs can access the Internet. When enabled, only the MAC addresses defined in the MAC Filtering table will have access to the Internet. All other client devices will be denied access.

The following table describes the MAC Filtering Table parameters:

Parameter Description

MAC Address Control

Select Enable or Disable to enable or disable the

MAC filtering respectively.

MAC Filtering Table

Enter the MAC address to be granted access in the respective field.

FIREWALL Menu,

URL Filter The URL filter allows the user to block access to web sites by entering either

a full URL address or just a keyword. This feature can be used to protect children from accessing violent or pornographic web sites. You can define up to 30 sites.

FIREWALL Menu,

Scheduling of access rules

NetFasteR IAD 2™ has the capability to filter Internet access for local clients

based on rules. Each access control rule may be activated at a scheduled time. Define the schedule in the Schedule Rule screen, and apply the rule

in the Access Control screen.

To add a schedule rule proceed as follows:

Step Action

1 Click Add Schedule Rule in the Schedule Rule screen. The Edit Schedule Rule appears.

2 Define the appropriate settings for a schedule rule.

3 Click OK and then click SAVE SETTINGS to save your settings.

Intrusion Detection

The Incorporated firewall can block common hacker attacks, and provide protection against: IP Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP SYN flooding.

When the SPI (Stateful Packet Inspection) firewall feature is enabled, all packets can be blocked. Stateful Packet Inspection (SPI) allows full support of different application types that are using dynamic port numbers.

FIREWALL Menu,

Intrusion Detection Screen

FIREWALL Menu,

Intrusion Detection Features

Intrusion Detection Feature:

SPI and Anti-DoS firewall protection: the Intrusion Detection Feature of

the device limits access for incoming traffic at the WAN port. When the SPI (Stateful Packet Inspection) feature is enabled, all incoming packets will be blocked except for those types indicated in the SPI section.

RIP Defect: If the device does not acknowledge a RIP request packet, it will

remain in the input queue and not be released. Accumulated packets could cause the input queue to fill, causing severe problems for all protocols. Enabling this feature prevents the packets from accumulating.

Discard Ping to WAN Interface: Prevents a ping on the device’s WAN port

from being routed to the network.

When hackers attempt to enter your network, we can alert you by email:

Enter your email address. Specify your SMTP and POP3 servers, user name, and password. In case of hacker attack you will be notified through email.

FIREWALL Menu,

Enter the appropriate values for TCP / UDP sessions as described in the following table:

Field Defaults Description

Fragmentation half open wait

10 sec Configures the number of seconds that a packet state structure remains active. When the time-out value expires, the router drops the unassembled packet, freeing that structure for use by another packet.

TCP SYN wait 30 sec Defines how long the software will wait

for a TCP session to synchronize before dropping the session.

TCP FIN wait 5 sec Specifies how long a TCP session will

be maintained after the firewall detects a FIN packet.

TCP connection idle time-out

3600 sec (1 h) The length of time for which a TCP session will be managed if there is no activity.

UDP session idle time-out

30 sec The length of time for which a UDP session will be managed if there is no activity.

H.323 data channel idle time-out

180 sec The length of time for which an H.323 session will be managed if there is no activity.

Maximum

incomplete TCP/ UDP sessions number from same host

10 Maximum number of incomplete TCP/UDP sessions from the same host.

FIREWALL Menu,

Intrusion Detection Features, continued

Field Defaults Description

Incomplete TCP/ UDP sessions detect sensitive time period

300 msec Length of time before an incomplete TCP / UDP session is detected as incomplete.

Maximum half-open

fragmentation packet number from same host

30 Maximum number of half-open fragmentation packets from the same host.

Half-open fragmentation detect sensitive time period

10000 msec Length of time before a half-open fragmentation session is detected as half-open.

Flooding cracker block time

300 sec Length of time from detecting a flood attack to blocking the attack.

Intrusion Detection Features,

continued

DoS Detect Criteria:

The following table provides a description of the relevant parameters:

Field Defaults Description

Total incomplete TCP/UDP sessions HIGH

300 sessions Defines the rate of new non-established sessions that will cause the software to start deleting half-open sessions.

Total incomplete TCP/UDP sessions LOW

250 sessions Defines the rate of new non-established sessions that will cause the software to stop deleting half-open sessions.

Incomplete TCP/ UDP sessions (per min.) HIGH

250 sessions Maximum number of allowed incomplete TCP/UDP sessions per minute.

Incomplete TCP/ UDP sessions (per min.) LOW

200 sessions Minimum number of allowed incomplete TCP/UDP sessions per minute.

FIREWALL Menu,

DMZ (De-Militarized Zone)

If you have a client PC that cannot run an Internet application properly behind the firewall, you can open the client up to unrestricted two-way Internet access.

Enter the IP address of a DMZ (Demilitarized Zone) host in the DMZ (Demilitarized Zone) screen.

Adding a client to the DMZ may expose your local network to a variety of security risks, so only use this option as a last resort.

SNMP Menu

Introduction _{This menu includes SNMP settings that concern the features of the}

communities and traps.

SNMP Menu,

SNMP community features

In the context of SNMP, a relationship between an agent and a set of SNMP managers defines security characteristics. The community concept is a local one, defined at the agent. The agent establishes one community for each desired combination of authentication, access control, and proxy

characteristics. Each community is given a unique (within this agent) community name, and the management stations within that community are provided with and must employ the community name in all get operations. The agent may establish a number of communities, with overlapping management station membership.

SNMP Menu,

SNMP Trap In the context of SNMP, an unsolicited message can be sent by an agent to

the management station. The purpose is to notify the management station of some unusual event.

ADSL Menu

Description This menu concerns the ADSL-related parameters and status. You can

define the settings for a specific ADSL standard or select Automatic to

automatically negotiate with remote DSLAM.

ADSL Menu,

Monitoring Index: Page

This page summarizes the ADSL Status, Data Rate Information, Defect / Failure Indication and Statistics information:

Select the type of your ADSL and click Retrain. The following screen

VOIP Menu

Description Voice over Internet Protocol (VoIP) enables the routing of voice

conversations over the Internet or any other IP-based network.

The voice data flows over a general-purpose packet-switched network, instead of traditional dedicated, circuit-switched voice transmission lines.

VoIP Account Data

To open a VoIP account, you must obtain the following from your VoIP provider: • Username • Password • Phone Number • SIP Domain • Realm (optional)

• SIP Proxy Server address and port • SIP Registrar Server address and port • Preferred Codec

Outbound Proxy Server & Port (optional)

VOIP Menu,

VoIP Account Screen

In the following screen, you can set the VoIP Account settings:

In the preceding screen, click Edit to edit or Delete an existing VoIP Account