Home
NexusWay 800 Series
Contents
1. Virtual IP Address MAC Address Index All Mac IP Mappings you set will be listed and sorted in this table To delete a mapping right click on it and select Delete You can also move edit enable or disable the mapping by right clicking Pages 46 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 7 Routing Routing 2 IP AddressiNetmask Et Gateway o a Rot gpm IP Address Metmask RIP 1 C Enable Disable RIP 2 C Enable Disable Filter mre uo 9 mA Mham Eea Go AO O nereyes Routing is the action of directing the movement of information across a network from a source to a destination NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page B Click Add to add the settings into the list or click Reset to clear the settings and enter them again After adding new routes a list will be displayed You will see the routes in this table To delete a route right click on it and select Delete You can also move edit enable or disable a route by right clicking Pages 47 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 7 a Static Route Configuration Routing Static Route Configuration IP AddressiMetmask 3006 90C00009097 4 EET Gateway A
2. Help Eee TN ED Logout Network Info shows all the settings you saved in previous options You can check your NexusWay 800 configurations in this option All the information will be updated automatically after you finish setup process B System Status System Si Status This option shows the current status and settings of the system WAN Status and each Internet connection in detail including current system LAN Status CPU Memory s Utilization and Average Load status WAN Firewall Status Information LAN Information and Device Information with Qos Status current loader version and firmware version information You can also view the statistic graphics of current status for CPU Quota Status Free Memory and Loading For more information see section 4 4 1 Diagnostics Admin Password syslog UPN Status B WAN Status WAN Status shows Real time information about all of the Internet connections The Percentage data is updated every few seconds to present the ratio of current figure and specified maximum You can also view the details information of NAT and the statistic graphics of traffic and packet analysis for each port For more information see section 4 4 2 B LANStatus This option shows the current DHCP configuration settings you saved in previous steps For more information see section 4 4 3 E Firewall Status This option shows the current Firewall configuration settings you saved in previous steps
3. NTP Server Address irae stdtime 2ov tw Asia Taipei Adjust NTP Network Time Protocol is a client server UDP protocol for time synchronization on IP networks Enter a NTP server and select the region of your present location before clicking the Adjust button The NexusWay 800 will automatically receive the time information from the server and set the system clock accurately 4 1 12 Misc Settings Misc Settings 7 TCP Timeout o E UDP Timeout po Em OTHER Timeaut o se Enable SSH Console Disable Enable 55H Console Port Number 2 Enable web Management Interface C Disable f Enable Web Interface Management Part Number 443 Eiht S Sone ham fie tienne Go AEE CO netreyes This option allows you to specify timeout values in seconds for TCP UDP and all other protocols 4 1 12 a NAT Timeout Configuration NAT Timeout Configuration TCP Timeout jio Sec UDP Timeout 20 Sec OTHER Timeout po Sec Timeout values specify how long the NexusWay 800 will keep trying to send a packet The maximum duration is 99999 seconds If the timeout value is exceeded without receiving an ACK message which indicates receipt of an uncorrupted packet the packet will be dropped Pages 57 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 12 b Management Interface Configuration Enable 88H onsole C Disable Enable SSH Console Port Number 2 Enable Web Management Interface C Disable Enable Web
4. bottom 3 1 Basic Setup D metesse ns SS O T7 Advance Set T Heitwork Inf ig help English 42244444 This option includes the settings for the following basic functions Read the instructions and find solutions that best meet your requirement before starting any setup procedures for the NexusWay 800 jetri ET f Os EY B Port setting Part Setting wan LAN DHCP Server DHEP MAC IF Routing Outbound P olicy Alarm Hate amp Time Misc Settings P mft Locking uota IP Contral IP Alias Schedule Setting Pages 21 119 There are 6 ports 2 for LAN and 4 for WAN on the front panel of the NexusWay 800 This option is designed for you to configure general settings for all the ports you want to use including media type maximum transmission unit MTU and MAC address You can modify detailed settings in WAN and LAN options after completing the basic settings in this option For more setting information see section 4 1 1 B WAN 4 WAN Ports which provide external connections are available in the front panel of the NexusWay 800 You can setup each for one of the different supported connection types Static IP PPPoE and Dynamic IP With these settings the NexusWay 800 will be a router with multi WAN connection to the Internet For more setting information see section 4 1 2 Multi Service Border Gateway User Manual for NexusWay 800 Series B LAN This option al
5. 10 88 1560 Destination Metmass ath 255 285 245 255 255 255 255 a c n p 0 0 0 0 Lean 155 255 255 2505 255 255 755 755 255 755 24 255 255 2565 255 256 265 755 01 Destination Fart Range au iD 21 ice TEF TUE TC mme TEF TCR TEF TCR IDF A tn ALLEY DENY DENY uem DENY DENY A jn DENN DENY Schedule AW Aawara Aa Baye Ayn ADE E naa Neat UTE Anvers All firewall policies you set will be listed in this table To delete a firewall policy right click on it and select Delete You can also move edit enable or disable the policy by right clicking Pages 78 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 8 DNS Setting DNS Setting 2 DNS Configuration Domain Name DNS Type NS vj ISP Hold CTRL to select ond multiple ISPs IP User Defined P Address ras ale his Preference 1 EET Esempi i AA ia ee cap Aa Oneteyes DNS Domain Name Server Service translates domain names into IP addresses This function allows you to translate between IP addresses and domain names 4 2 8 a DNS Configuration DNS Configuration Domain Name DAS Type ISP Hold CTRL to select LAN TU eee IP User Defined p Address E IP Alias TTL his Preference HM LL Domain Name Enter the domain name you would like to map DNS Type There are NS Name Server Host MX Mail eXchanger Alias and SOA Start Of Aut
6. Connection Interface Select the WAN port Port 3 6 you want to configure in the drop down list before changing any settings Verify the selected interface has an external connection in the corresponding port on the front side of the system Connection Type The supported connection types for WAN include Static IP PPPoE Dialup Dynamic IP and PPTP Contact your ISP provider for more information about Web connection type IP address DNS or other information before completing the following configurations based on various connection modes Achange applied to this field will result in a change of the following field to the selected connection type NAT This function allows a choice of deactivating Network Address Translation for the selected wan port When disabled the NexusWay 800 can only send packets through the configured link using it as a router rather than a gateway B Requirements for Multi Link Multi Link Feature when used with xDSL or Cable modems requires Proxy ARP features to be deactivated in each modem Pages 35 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 2 b Static IP IP Address Subnet Mask IP Alias i Gateway Primary Secondary ONS i Transparent Disable Enable Select this mode if you have a static connection and your ISP provides static IP s Fill in your IP address subnet gateway and primary secondary DNS servers All the fields are required excep
7. To use Round Robin by Weight as the Balance Mode you must specify a weight after the port such as 192 168 0 2 80 20 otherwise it will be functionally equivalent to Round Robin Keep Persistent Connection After a connection has been established with one machine in the server cluster this function will keep the traffic from the external source on the same machine in the cluster For the remainder of the session the traffic between this source and server cluster will not be handled by any other machines in the cluster It is recommended to enable this function Balance Mode Select the load Balancing Mode which handles the load balancing for the traffic to the server cluster For the description of different load balancing algorithms see NexusWay 800 Load Balance Mode table in section 4 1 9 Outbound Policy Pages 69 119 Multi Service Border Gateway User Manual for NexusWay 800 Series NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page B Click Add to add the settings into the Server Cluster List or click Reset to clear the settings and enter them again 4 2 3 b Server Cluster List Address External Part Internal IP Addresses PartsWweight Keep Persistent Connection Balance Madejschedule All server cluster settings will be listed in this table To delete a server clu
8. s guide may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense This device complies with part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation CE Mark Warning This is a Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Pages 1 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Warnung Dies ist ein Produkt der Klasse A Im Wohnbereich kann dieses Produkt Funkstoerungen verursachen In diesem Fall kann vom Benutzer verlangt werden angemessene Massnahmen zu ergreifen Precaucion Este es un producto de Clase A En un entorno dom stico puede causar interferencias de radio en cuyo case puede requerirse al usuario para que adopte las medidas adecuadas Attention Ceci est un produit de classe A Dans un environnement domestique ce produit pourrait causer des interf rences radio auquel cas l utilisateur devrait prendre les mesures ad quates Attenzione Il presente prodotto appartiene alla classe A Se utilizzato in ambien
9. 2 3 4 or 1 2 3 4 32 If you leave the column blank the system will accept all the users without any restriction Pages 99 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 3 4 Certificate Authority N A in the NexusWay 800 Certificate Authority CA Server Crate C Generate Certificate Lead Host Certificate View Host Certiticate Authorization Ege AA s Teens og E AE Gurus O NEyes Please note that this function is only available in NexusWay 805 815 825 and 835 You can generate and sign x509 certificates in this option These certificates are used in place of pre shared keys while setting up IKE policies CA Certificate Authority authentication is typically used in large organizations with internal CA server This requires each VPN gateway to have a certificate from the CA Using CA certificates reduces the amount of data entry required by each VPN endpoint If you want the NexusWay to serve as CA Server push the Create CA button and you will see the following panel displayed Certificate Authority 9 Delete C Sign Certificate Authorization View Host Certificate EFEO we Kars Kier Bak Al its Re CD Afbti amp yes Click Delete CA or Sign Certificate based on your requirement If you select the Sign Certificate button you will be requested to copy and paste your certificate into a box on the popup window Pages 100 119 ulti Service Border Gateway User Manua
10. 3 1 To reserve LAN IP address for Host PC s or servers see information about DHCP in section 4 1 4 4 1 5 and 4 1 6 in this documentation 2 3 1 Check TCP IP Setup Pc s can use either Static or Dynamic IP address however PC s requiring either type should be initially set to Obtain an IP address automatically If a dynamic address is acceptable unless behaving as a server this should have no detrimental effect follow the instructions in the following diagrams If a static address is required follow the diagrams on the next page then see section 4 1 4 and 4 1 6 for system settings to maintain a static address through the integrated DHCP server Pages 16 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series l E eteork and Dihun Connections Network and Dial up Connections i Tye LAM Conneschon Tau Enabled Hetelkgent 10 300 TX PCT LITP Conc er Pages 17 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 3 Select Obtain an IP address automatically NOTE B Windows 98 users are strongly recommended to reboot PCs after changing the TCP IP Setup Pages 18 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 1 Select Start Menu Setup Control Panel Network and Dial up Connections Local Area Connection 2 Select Properties 3 Select TCP IP protocol for your network adapter click Properties 4 Select Obtain an IP
11. 33 4 1 1 POPDSCILUTID ssisctcacctuaiaesianstnannccssseesiassndcadhedsetseasisedsdentsntedsaceascdteeateanstnas 33 SEA ZO CUD receos n EAEE ESE E nia 34 SESS P E 4 ESPRIT TUM 43 421 6 DHCP NWIAC Puis iceuucesis ie scted rta EPEpPEERPEREUbGU 0060 GE RE RT Rv PERS aai 45 A E Voi M 47 4 9 Outbound POMCY m 50 AVI Aa MR oiu AT m 99 4k11 Date amp IME NRI EE E ORA E AREER 56 A l 12 Mise Seting Soros eisai anes dec uate estan TR 57 d TI 15 PPE WEA CG OCR IIe sirier a EEEE 59 A MME OTO MET 60 4 1 15 IP CONTO 6l AlO IP AN e R E teats 62 Pages 3 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 1 17 Schedule SCMING eesnik thori ia Saee the epi uL una Sees o asa E teach totns 63 4 2 Advanced SOUL EEEE 64 a PM airo biu 64 a LP Port WIAD E CN m T 66 452 SEEVEE C USIOE sce costis bekuc b ceo sag NE PRP QUE QUE aus VHRR PRU PSP EU dE N RO NEU CEU aHUR M OE UE 68 a Ep S Lil ST E 71 A 2 5 Advanced Cate sessirnir i o E ado E dU Me HR MEE SU SES 72 42 0 09 Quality Of SOEVICO Giriausicoms iati uiu codcdtut b eridnse c e obi si ea buns 9 V unum TEETE V a DNS rE TR ei 79 a BEP as a E E E E E 8l d Inbound PO y 2c Doruiee redonda Ear ieira na rer aii 83 Bh dB 85 4 2 12 Cache Configuration 14 250 cncsussetasnecawatcueiiosaaaiene tt nau da Uo cesa
12. DNS Schedule Balance Mode Inbound Policy List ME EH kad Traffic f ONS Schedule Balance Mode tne NE Tae Thee Ea Abie O OW T ME RES In this option you can setup the load balancing algorithms to distribute the inbound traffic across the different Internet connections according to the algorithm you selected 4 2 10 a Inbound Policy Configuration External IP Address IP Alias Subnet Mask DNS All Domain v Schedule Always v Balance Mode Round Robin Even Distribution v LET External IP Address Enter an external IP address the source of the incoming traffic that applies to the Load Balancing mode For example 168 95 1 1 Subnet Mask Enter the Subnet Mask of the external IP address For example 255 255 255 0 DNS Select an internal DNS IP address This is the destination of the incoming traffic that the Load Balancing mode applies to Pages 83 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Schedule Select a schedule to specify when you would like the Inbound Policy to be active To set the schedule see 4 1 17 Schedule Setting Balance Mode Select a Load Balance mode for the policy according to your requirements or usage situation For the description of different load balancing algorithms see the NexusWay 800 Load Balance Mode table in 4 1 9 Outbound Policy If you don t desire any load balancing select a single ISP drawn from the list of configured
13. If you don t desire any Load Balancing to be active you ISP can select a single configured WAN connection or not configure any policies NOTE B lfaconnection fails other modes will be chosen automatically to complete the transfer If the system is set to the Total Traffic mode mentioned above for example the system will detect the traffic on each of the four WAN connections and give the load to the one with lowest load ratio to ensure the Quality of Service QoS No overloading would occur on any single line while operating In addition on a connection that is usually used for a specific application you can also limit the load balancing to specific service ports for traffic management optimization For example you can designate FTP connections which require large file transmission most of the time a specific load balancing mode for data transmission Pages 51 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 9 a Outbound Policy Configuration Outbound Policy Configuration Internal IP Address IP Alias Subnet Mask Internal Port T External IP Address IP Alias Subnet Mask External Port Service Schedule Y Balance Mode Round Robin Even Distribution sonet Wan Ip ISPs sonet 1 1 1 1 S 4 p Add Ps Sonet Interfaces TH CheckPoints EET The Outbound Policies will be performed based on Balance Mode ONLY if each condition yo
14. Management Interface Port Number 443 Enable Web Management Interface lt is are not recommended to disable the Web Management Interface unless you want to freeze the setting and let nobody including yourself change any settings via the web When disabling the web or SSH interface export the settings first You can also modify the necessary parameters to connect to via the web And while it is strongly discouraged you can also disable the console connection ability For how to export the settings see section 4 2 5 Pages 58 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 13 IP MAC Locking tS IP MAC Locking Action Default Deny C Default Allow IP Address DE IF Alias MAC Address XXOOCIDCIOOOCOCO Add Reset IP MAC Locking List Index IP Address MAC Address _ _ _ 20 L 1 LLALLe G IL o t XXXL LALLXZL4 LUILLLAAAwCALLAICEOLLULLSAABCLLAULultLi ui L 2212 SS EFEO MHA Ham hema a Aa Onetreves This function is often used in dormitory network where Internet connection is limited When Default Deny is selected all the connections are denied by default except the ones whose IP MAC combinations have been setup with this option When Default Allow is selected enter an IP and MAC address pair t
15. Manual for NexusWay 800 Series CHAP 1 INTRODUCTION 1 1 Overview Thank you for purchasing the NexusWay 800 With a simple installation process and Web interface you can easily enjoy a better networking environment Simply connect several ISP lines to the NexusWay 800 and the product will construct a more reliable network environment automatically by avoiding the squandering of surplus network resources and bypassing component problems In addition the NexusWay 800 can also integrate the bandwidth of multiple linked WAN connections to greatly improve the usage efficiency for enterprise networks This manual provides necessary information for the NexusWay 800 hardware device software instruction settings and configuration parameters 1 2 What s inside the Product Verify the following components are included into your product package One NexusWay 800 Hardware Device One AC Power Cable One CD for NexusWay 800 One Quick Installation Guide for NexusWay 800 Pages 6 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 1 3 External Components A Front Panel m vvere There is 1 console port 2 LAN ports and 4 WAN ports available on the front panel of the NexusWay 800 1 Console Port Connect a PC to this port using a cross over cable to and communicate using terminal emulation software such as hyper terminal on Windows 2 LAN 1 Internal Port Connect a PC a hub or a switc
16. Pages 29 119 Multi Service Border Gateway User Manual for NexusWay 800 Series D raeTeue n s sa cso If you have any trouble problem and need help while configuring click Help button or the question mark on right top of the screen for online help and detailed information 3 6 Pull Down Language List i aw TETTE tat T I bri imen brir iren Pura GE foe bes TS Hm T RE i me Lomo j Next to Help button you will see a pull down language list You can choose to view the web interface in your language Currently the only option available in NexusWay 800 Web interface is English 3 7 Save D rae After entering all the data required on an page please click Save button to save configurations and make your modifications effective Please note that all the settings and information will be lost when you change the page if you have not clicked the Save button first Pages 30 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 3 8 Logout 7 e a PS B H Multi Services Border Gateway Always Find The Best Way BU soo Basic Setup Advance Seti T Network Info Click the Logout button next to the Save button to logout before closing the Web interface of the NexusWay 800 to prevent others from using your account after you leave remember to close your browser to ensure your are logged off Pages 31 119 Multi Service Border Gatew
17. Routing algorithms which are adjusted to change network circumstances by analyzing incoming routing update messages If the message indicates that a network change has occurred the routing software recalculates routes and sends out new routing update messages RIP1 and RIP2 Routing Information Protocol are both protocols that allow routers to exchange routing table information between each other You can enable these settings to allow the NexusWay 800 to receive these routing table updates To view the routing table click Network Info button on top of the main page and click Diagnostics RIP 1 RIP 2 To enable NexusWay 800 s RIP function and receive routing table updates click Enable to disable reception of routing updates click Disable Enabled Interface You can select which interfaces by port number are enabled to receive and act upon dynamic routing protocols NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 49 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 9 Outbound Policy Outbound Policy Outbound Policy Configuration Internal IP Address rm IP Alias subnet Mask NEN Internal Part E mm External IP Address IP Alias subnet Mask External Part Ha E Service tcp gt Schedule Always Balance Mode Ro
18. Select muhale ISP i PE minlg LPP Endipomliss o O Severe by commas Locai VPH Endpoints Secs SA Lifetens I Enabie aH Aullienicisan F Enable ESP Enrwplian T Frabe FSP Aulbanicatean M Enabla Post FER Traffic Selector i Local Subnet IF Address Bubrit Mick 353559850 IF Address E brmt Mask oj I SAME Al Tratfic Select AH Configuration EGS Coreiqursian Policy Name Cornette Local IP 1 3 3 168 0 Auto Folic Ana Policy Typa futon Posey Local Suibimedz 255 755 755 II IKE Paley reer let Raios Pi 10 0 D O Local VPN Endpeartis2D2 150 57 15 202 TBD B 47 Rempte Subpnet 255 2595 255 0 Remme VE Eimin jse 21 8 127 138 137 SA Lifetime 2509 AK Aarthentcadion Disabled ESP Encryption Gisaled ESP AW Erab ac Eille Sec PES fo Policy Name rakes Sect Lacal IP 1 163168 0 c Polity Aula Policy Types Suto Posy Local Submet 255 255 265 0 IKE Polo tree feci Remote IP 367 168 10 0 Local VPM Erdpeliris 262 150 0715 Feqnore Siihen 255 255 255 0 Remote WPH Enilpaintisk 202 13631 45 SA Lisie 20 AH fAarfiertic ation Disabled FSP Finnpine aalrd ESP Awhe mlo Enab ag Enahla ec PFS rn Policy Maa t 23 Local IP 1 0 69 160 0 Atc Falc aua Policy ypac Arn Poescy Local sufimetz 255 755 755 Il IKE Polic Sirmchina Renute Pe 1857 158 1 0 0 Lacal VPN Endpeamisi b 1560587 15 213 TREU RT 47 Remote Suhnat 255 755 255 0 Remme VA Erdpoinlis
19. The Subnet Mask is a mask used to determine what subnet an IP address belongs to A subnet is a portion of a network that shares a common address component For example the address 255 255 255 0 is a standard value for small class C network In other networks use the Subnet Mask for the LAN segment to which the NexusWay 800 is attached the same value as the PCs on that LAN segment The subnet mask of default LAN IP 192 68 0 1 is 255 255 255 0 If you use a different subdomain you must ensure that the subnet mask used on the NexusWay 800 is the same Pages 41 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Interface Select the LAN port to be configured in the drop down list NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page B Click Add to add the settings into the LAN IP List or click Reset to clear the settings and enter them again 4 1 3 b LAN IP List LAN IP Address List IP Address Subnet Mask 1 192 168 168 99 255 255 255 0 PORT 1 All LAN connection settings will be listed in this table To delete a LAN connection right click it and select Delete You can also move edit enable or disable the LAN connection by right clicking Pages 42 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 4 DHCP Server DH
20. button will copy the loader used when starting the NexusWay into the backup slot Startup Firmware Version Number The startup firmware version is shown here this should be the same as the current firmware version The Copy Startup Firmware to Backup Firmware button will copy the firmware used when starting the NexusWay into the backup slot Backup Loader Version Number The backup loader version is shown here this may be different from the current loader version The Copy Backup Loader to Startup Loader button will copy the backup loader into the slot used when starting the NexusWay Pages 73 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Backup Firmware Version Number The backup firmware version is shown here this may be different from the current firmware version The Copy Backup Firmware to Startup Firmware button will copy the backup firmware into the slot used when starting the NexusWay Current Loader Version Number The current loader version is shown here Current Firmware Version Number The current firmware version is shown here Automatic Update The system will check with Neteyes for new firmware version once per day when Automatic Update is enabled When a new version is detected the system will automatically download the file s and prompt you with the version number and by making an Update button active when you log into this screen The system will not automatic
21. certain URLs URL to Filter Enter the URL you wish to block It is acceptable to enter wildcards Schedule Select a schedule to specify when you would like the policy to be active To set the schedule see 4 1 17 Schedule Setting Pages 87 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 2 13 High Availability High Availabilit High Aell ittilite i Enable C Dus bl Furict n 35 Master ar Sive C Maele v fine Virtual IP Aggies I 4 Aimat IP Aden I Hepat Conf fo Sd see eren p Sn Nien erties im AEn Sree CO Or Tee High availability features allow for a second NexusWay device This configuration option will allow you to manage all High Availibility options High Availability This radio button allows the activation or deactivation of the High Availability features Function As This radio button configures which role the active NexusWay will assume in a High Availability configuration Virtual IP Address The Virtual IP Address is the shared gateway address used by LAN machines This virtual address ensures that if one devices physically fails the other can effectively take over without reconfiguring devices on the LAN Alternate IP Address The Alternate IP Address is the physical address of the other NexusWay Pages 88 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 3 VPN Setup 4 3 1 IKE Policy Not applicable in
22. easy to use Web management interface allows you to use the NexusWay 800 easily without complex operation steps or advanced knowledge of network management You can also change the NexusWay 800 configurations via remote connection management from any computer connected to the LAN BH Support VPN Trunk Please note the VPN Trunk support is not applicable for the NexusWay 800 Only NexusWay 805 815 825 and 835 support this function transmitting data accurately and rapidly to the destination with the integrated bandwidth of multiple ports Pages 11 119 Multi Service Border Gateway User Manual for NexusWay 800 Series CHAP 2 INSTALLATION 2 1 Prerequisites B 1 32 DSL Leased Lines and an Internet Access Account provided by an internet service provider ISP Multi Link Feature when used with xDSL or Cable modems requires Proxy ARP features to be deactivated B Standard 10 100Base T network UTP cable with RJ45 connectors B TCP IP network protocol installed PC s which connect to the NexusWay 800 See the following diagram for network connection example Pages 12 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 2 2 Procedure 1 Ensure NexusWay 800 is powered OFF Ensure that NexusWay 800 is turned OFF before starting the installation procedure 2 WAN port connection Connect a DSL Mo
23. entering all the data in this page Click Add to add the settings into the IKE Policy List or click Reset to enter them again Pages 97 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 3 2 e VPN Policy List VPM Policy List Index Disabled Disanlad Genera Policy Names Connecti Type Auto Policy IKE Policy traker tesi Local VPM Endpoiit s202 160 87 15 202 180 8742 Remote VPM Endpoimi si 215 107 148137 SA Lifetime 28010 AH Authentication Disabled ESP Enciu Enabled ESP Authenication Enabled Enahle IPSec PRS Mo Policy Names trexer 18st Type Auto Policy IKE Policy traker_test Local VPM Emnmdpointis 202 16D 87 15 Remote VPN Endpointisi 202 160 01 45 SA Lifetime 200 AH furthemicatien Disabled ESP Encryption Enabled ESP Authenication Enabled Enahle IPSec PFS Mo Policy Names 123 Type Auto Policy IKE Policy Vitec hina Local VPM Endpoints 207 150 8715 707 180 81 42 Remote YPM Endpoimiisk 1 1 7 1 SA Lifetime 300 AH Aumheptic atieq Clsabled ESP Encryptiorr Enabled ESP NRutlienicatien Enabled Enable iPSec PFS Mo Trt Selector Lec al IP 10 28 168 0 Local Saline 255 255 755 0 Remate F 10 0 D D Rene Sailnet 255 255 255 0 Puto Policy Leca IP 10 58 16B D Leta Sabine 255 255 255 0 Remete I 192 168 100 Remate Sailnet 255 255 255 0 Purto Policy Leca IP 10 88 168 0 Local Subnat 255 255 255 0 Remete P 192 168 10 0 Auto Policy Remote Subnet 255 755 755 0 AH Con
24. panel displayed The different buttons show different arrangements of the same information The Health Check Log Button will display information about potential network failures and failover occurrences See figure 3 for an image of the displayed information Pages 104 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series History Data Index Page for Interface Traffic Analysis for POETI HP BR EB p eu D Ti Bytes per Second ra gt 20 16 16 14 12 10 O 22 20 l8 16 14 40 16 16 14 12 10 O 22 20 16 16 14 ef 20 18 16 14 zz 20 18 16 14 Traffic Analysis for FORTS Bytes per Second 20 18 16 14 12 10 0 22 20 18 15 14 Facket Analysis for PORT3 20 18 16 14 12 10 O 22 20 l8 16 14 Figure 1 Graphics showed after clicking the Show History Data button Pages 105 119 Multi Service Border Gateway User Manual for NexusWay 800 Series ONAT Info TESTE Hiniet dialup Neteyes iMeteyes Ads Jesseline Meteyes Meteyes Adsi_leaseline Ads leaseline Hinet elialup Hinet clialiup Ada leazeline i Meteyes Adsl Jeaseline Adsl leaseline Source IP Address B1 230 0 252 1085 163 856 10 88 468 146 10 88 168 217 10 88 158 132 1U 884B58 247 10 85 168 444 10 88 168 132 10 88 1568 60 10 884582 T GGABS A 10 68 168 178 202 160 8745 088168 217 10 88 168 17 1O0 B8 ABB 182 10 88 159 85 10 88 168 217 Past Print Version fusis t
25. remove administrators for your NexusWay 800 After entering a username and password you can also enter an IP in the Allow IP Address column to restrict the administrator so that they may only login from this specific IP address Each administrator can have either read and write access or read only access All the administrators you configure will be listed in the Administrator List The default administrator with user name as admin and password as 123456 is available in the list when you first login to a the NexusWay 800 You can right click the default setting to delete it and then add new administrators NOTE B When using the allow IP Address column if you were to enter 192 168 0 140 only this IP could login into the NexusWay 800 with that username and password However if you enter 192 168 0 IPs from 192 168 0 1 to 192 168 0 255 are allowed to login By keeping this column empty EVERY IP is allowed to login B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 111 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 4 9 Syslog Syslog ki IP Address Syslog Server List mice IP Address Aug 43 08 43 33 Nesey webfadmin User admin logged on Aug 22 02 14 38 Nemea webladmin User admin logged on Aug 22 02 11 07 NexusW ay webjadmin U
26. settings Pages 72 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series Restore to Factory settings Click the Restore button to reset your NexusWay 800 to its original factory configuration Export System Settings to Client To backup the current system settings by saving them locally simply click the Download button The default file name is config hhmmss where hh mm and ss are respectively the hour minute and second of the time you click Download button Import System Settings from Client You can restore the systems configuration settings from a previously exported file using this function Click the Browse button to find an exported configuration file and click the Upload button to modify the configuration for the NexusWay 800 automatically 4 2 5 c Software Update Startup Loader Version 300527 build 0ggs Copy Startup Loader to Backup Load Startup Firmware Version 300527 build tog Copy Startup Firmware to Backup Fir Backup Loader Version 3 00519 builg 1214 Copy Backup Loader to Startup Load Backup Firmware Version v300519buld 1255 Copy Backup Firmware to Startup Fir Current Loader Version 13 0 0577 build 0885 Current Firmware Version v3 U 0527 build 1006 Software Update Bose Upload Startup Loader Version Number The startup loader version is shown here this should be the same as the current loader version The Copy Startup Loader to Backup Loader
27. will display an extended syslog in a new window In the Syslog Server List you can see some logs concerning changes and events in the NexusWay 800 These syslog events are generated by administrators and some internal functions of NexusWay 800 You can see more detailed syslog messages by exporting the messages to a client machine Only several recent events will be listed and most current one will located at the top Pages 112 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series CHAP 5 HELP Sx fF Pe oe E Dra DR Cas z LE q B DXapnoetics T Admin Fare word g rih a n g i3 a CE A ee Dux A eee C TCHNCDENIMEMEN 4 Click the subject which you have problems with while operating or configuring for more online instruction or information Pages 113 119 Multi Service Border Gateway User Manual for NexusWay 800 Series CHAP 6 APPENDIX 6 1 Appendix 1 Trouble Shooting This chapter covers some common problems you may encounter while operating the NexusWay 800 and possible solutions If the NexusWay 800 still does not function properly after performing the following steps please contact your dealer for further advice 6 1 1 General Problems Problem 1 cant connect to my NexusWay for initial configuration Solution 1 Check the following steps 1 Is the NexusWay is properly installed with successful LAN connections and powered ON 2 Ensure that your PC and t
28. you also cant connect to the NexusWay check the power and LAN connections 3 If you can connect to the NexusWay and it is configured correctly check your Internet connections DSL Cable modem etc to ensure they are working properly Pages 115 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 6 2 Neteyes Customer Service Information UK Address The Barracks Wakefield road Pontefract West Yorkshire wf8 4hh Telephone 44 845 6443 226 FAX 44 845 6443 227 Web hitp www neteyes eu com E mail Sales sales neteyes eu com Support support neteyes eu com General info neteyes eu com Southern Asia Address Menara Maxis 36th Floor Kuala Lumpur City Centre Kuala Lumpur 50088 Malaysia Telephone 603 2615 7213 FAX 603 2164 5157 Web http www neteyes biz E mail Sales sales my neteyes biz Support suppornt my neteyes biz General info my neteyes biz Heh Abr ARS A eR Ee 120 4 13 az 6 EZ TREE 886 2 2657 2813 HEL 4886 2 2657 2814 ASH http tw neteyes biz BEA jj sales tw neteyes com ey ZH Support tw neteyes com WA info tw neteyes com Pages 116 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series HEA hbk IES THAME KOEABERA 12 5 01 KE 22 Ez 04A FAT 86 10 6500 7618 EE 86 10 6500 7617 JHE http cn neteyes biz HABA SAE sales cn neteyes com FE Sz EE support cn neteyes com AHE E infogcn neteyes com Pages
29. 117 119
30. 2neteves Neteyes NexusWay 800 Series User Manual Firmware version 3 0 Revised Edition June 2005 Printed In Taiwan ve RECYCLABLE ulti Service Border Gateway User Manual for Nexus Way 800 Series Copyright 2004 Neteyes Network Corp All Rights Reserved No portion of this document may be copied or reproduced in any manner without prior written permission from Neteyes Network Corp Neteyes Neteyes has no warranties to this documentation and disclaims any implied warranty of merchantability or fitness for a particular purpose All information contained herein is subject to change without notice All sample images and electronic files included in the documentation and distribution materials are copyrighted by their respective photographers and are not to be copied or reproduced in any manner Trademarks Windows Windows 98 Windows 2000 Windows XP and Microsoft are registered trademarks of Microsoft Corporation All other trademarks are the properties of their respective owners FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with this user
31. 420932 EB Max Out 421 788 KB Average Cur 421256 EB Coment Out 420932 EH Status for Loading E Eu ES Mar in 03 Average In 0065 Curent In O Max Out 0 3 Averge Cut 006 Cumt Out Q Pages 103 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 4 2 WAN Status WAN Status 9 Interface Statistics IP Address Connection Status Connections ax Percentage Upload Traffics kb s Max 15 232764 Fercentage Download Traffics kos Mas PERTERRITI Display NAT Info Epp ale ge kere a Aa Onereies WAN Status shows the current information about all of the Internet connections including WAN interface name connection status IP address number of connections upload traffic and download traffic The colored bar in the percentage column will change length every few seconds depending on the ratio of the current figures and their specified maximums For more detailed information about these settings see 4 1 2 WAN section in this document After clicking the Show History Data button you will see graphics of traffic and packet analysis for each port See the Figure 1 for a sample of the graphics for Port 1 Port 2 and Port 3 If you click Display Client Info or Display Connection Info you will see detailed information about the current NAT functions including protocol ISP alias IP source and destination transmission amounts and protocols See Figure 2 for the
32. 5 Connection List AN Connection IF 192 168 5 1 Suhnet Mask 255 255 255 0 Index Name ri iE ay 182 158 5 250 DMS 182 158 5 1 Move Up 168 61 J lanG Maye Down t Mask 255 255 255 I Edit av 192 168 686 250 Delete DMS 182 158 5 1 Enable Disable All WAN connection settings will be listed in this To delete a setting right click on it and select Delete You can also move edit enable or disable the setting by right clicking Pages 40 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 3 LAN Setup LAN IP Address is subnet Mask NEN Interface PORT v Add Reset LAN IP Address List IP Address Subnet Mask Interface 1 192 158 158 88 En n 2 enm IT PORT 1 Eee en AmA Tes fires Gr AE Onereyes You can setup the IP address of the NexusWay 800 in your LAN with this page making the NexusWay 800 a Gateway for other PCs external connection s The default value for this option is recommended To change the settings complete the following steps 4 1 3 a LAN IP Configuration IP Address IP Alias Subnet Mask Interface PORT 1 EST s IP address You can enter the IP address of NexusWay 800 in this column Default IP 192 168 0 1 is recommended to be the IP address of NexusWay 800 in LAN unless it is already in use or your LAN is using a different IP address range In this case you can enter an unused IP address from the range used by your LAN Subnet Mask
33. 535 An asterisk can be placed here to match any value Service Select TCP UDP ICMP IP or User Input in the pull down list Schedule Select a schedule to specify when you would like the policy to be active To set the schedule see 4 1 17 Schedule Setting Balance Mode Select the load balancing mode to be used by this Policy according to your requirement or usage situation If you do not select a specific load Balancing Mode the system will automatically perform Round Robin Even Distribution outbound load balancing for this rule ISP This function allows you to select several ISPs for inclusion in this Balance Mode You can select multiple ISPs by clicking Add IPs After that a window will be displayed Select one and enter IP address The options in the pull down list are the connections set in the WAN option menu NOTE B Please make sure to click the Save button in the upper right corner of the panel after you finish entering information on the page or else all your changes will be lost when you change pages B Click Add to add the setting into the policy list or click Reset to enter the data again Pages 53 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 9 b Outbound Policy List Internal IP subnet Internal External IP External Adress Mask Part Address editi Metals Port Balance Mode Disabled 0 0 0 0 218 107 148 142 255 255 255 255 Always ISP NetEyes L
34. CP Server Offered IP Range as Gateway IP Alias subnet Mask DNS IP Alias Default Lease Time Eu Max Lease Time NEN Relay Agent IP Address asl IP Alias Interface PORT 1 tt Pee DHCP Server List Index Offered IP Range amp subnet Mask Default Lease Time Max Lease Time Interface 1 THES ences IR EHI p at BERE ESL P ens o Eon ese ctt n SERE pe a Bb4nn S6400 a ChE S mA g haa r A O netreses DHCP Dynamic Host Configuration Protocol is a protocol for dynamically assigning IP addresses to devices on a network With dynamic addresses a device may have different IP addresses every time it connects to the network The NexusWay 800 provides a DHCP service to assign IP address to internal PCs You can enable or disable DHCP service and set up other configurations with this option Enabling the DHCP server allows the NexusWay 800 to assign IP addresses to internal PCs DHCP clients or other devices on the network by default with Windows Systems DHCP clients can get the IP address automatically from the server If you have already a DHCP server in your internal network do not configure this feature for LAN Ports Offered IP Range Enter an IP Address Range to be assigned by the NexusWay 800 s DHCP server with the first IP in the left column and last one in the right column to activate the service The entered IP range which also determines the number of supported DHCP clients must match up wi
35. Cz 33 nier multiple IF separated by commas Ping Host IP C Connect Moat IP Retry Tires E Interval of Detettion iic E Tiriad sec E Connection List Part Type Connection Mardid and Connections Failover Configuration Max Connections 1000 TTL Hope ner Hama nateyas Weight 0 Resy Times 3 1 panel Jj PPFaE Dialum Paseo semanas Gost Ininreal 52 Lplo dg f Doenheag B305TU T 7000 lim e us eecy 3 Enter the data related to your XDSL Leased Line access as provided by your ISP according to the connection type being used 4 WAN Ports which provide external connection are available in the NexusWay 800 To setup one or more connections complete all the settings in this page for one WAN connection interface whose corresponding port in the rear side of the product has external connection and click the Add button then you can continue to input another connection Repeat the process until the settings for EACH connected WAN interface are completed With these settings the NexusWay 800 will be a router with a multi WAN connecting to the Internet For detailed instruction about these settings see the following sections Pages 34 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 2 a Connection Name Connection Interface PORT 3 Connection Type Static IP IP Bounding Disable Enable Name You can give a name to the WAN connection setting for easy management and identification
36. For more information see section 4 4 4 Pages 28 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series BH QoS Status This option displays the current QoS configuration settings you saved in previous steps For more information see section 4 4 5 B Quota Status This option displays the Quota configuration settings you saved in previous steps For more setting information see section 4 4 6 B Diagnostics This option allows the administrator to perform a variety of diagnostic checks There are three diagnostic tools available which are ping traceroute and nslookup for you to check IP address and status of connections For more information see section 4 4 7 B Admin Password This option allows you add and remove administrators for your NexusWay 800 You can also restrict the administrator to login only from a specified IP address Each administrator may have either both read and write access or read only access For more setting information see section 4 4 8 B Syslog This option allows the administrator to export syslog messages to external machines which have a syslog client installed In the Syslog Server List you can see logs concerning changes and events of NexusWay 800 Administrators and internal functions of the NexusWay 800 generate Syslog events You can see more detailed syslog messages by exporting the messages to a client machine For more setting information see section 4 4 9
37. HCP addresses offered to clients the DHCP address range gateway subnet mask DNS default lease time max lease time and interface The Mac IP Mapped List shows the reserved IP addresses and the MAC addresses they correspond with For more detailed information of these settings see 4 1 4 DHCP Server and 4 1 6 DHCP Mac IP in this documentation Pages 107 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 4 4 Firewall Status Firewall Status Firewall Policy List Source IP source Part Destination IP Destination Destination Port Adress Netmask Range Address Metmask B zks SIM ds BT Rd 2 A B RT rii aA Kies Theor eb Aish Onereyes This option shows the current Firewall customizations For more detailed information of these settings see 4 2 7 Firewall in this documentation 4 4 5 QoS Status QoS Status QOS Policy List Destination Port Range This option shows the current QoS settings For more detailed information of these settings see 4 2 6 QoS in this documentation 4 4 6 Quota Status Quota Status Quota List Quota Setup hibyte Traffic Mbyte Index IP Address Download a Download Erbe rd Tees Teri op AE O neteyes This option shows the current Quota settings For more detailed information of these settings see 4 1 14 Quota in this documentation Pages 108 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 4 7 Diagnost
38. ISP s Session Based Select whether the load balancing mode includes session based management When enabled Balancing will be applied in the selected manner to separate sessions NOTE B Click the Save button on the top right corner of the panel after you finish entering all the data to avoid data loss when exit the page 4 2 10 b Inbound Policy List inbound Policy List p Index External IP Address Subnet Mask INS Schedule ance All policies you set will be listed in this table To delete a policy right click on it and select Delete You can also move edit enable or disable policies by right clicking Pages 84 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 11 NetFlow NetFlow 7 Eoee O O l a Met low C Enable Disable CPi am ham khea Go A CO netreyes Cisco NetFlow is a technology developed by Cisco and is widely used for IP accounting and billing The NexusWay 800 can export network traffic information in flows to an external machine This external machine presumably running a NetFlow application will then collect this NetFlow data for processing NetFlow To enable NetFlow simply click the Enable button IP Address Enter an IP address with port number where you wish the NetFlow data to be exported Port Select the Port whose flow data you want to transfer via NetFlow Version Select the NetFlow version to be exported Pages 85 119
39. Multi Service Border Gateway User Manual for NexusWay 800 Series 4 2 12 Cache Configuration Cache Configuration Transparent Proxy Enable Li Transparent Proxy Filter Port Number i Transparent Proxy Server gx 123 123 123 123 3128 Erie ma hgm Tees ean p AP dA m T R a e You can enable a built in Web Proxy server and a Transparent Proxy with this option A proxy server is a server that sits between a client application such as Web browser and a real server The proxy server will forward the requests to the real server if it detects that the requests can not be fulfilled by itself after intercepted all the requests to the real server Proxy servers can be used to improve performance or filter requests A transparent proxy functions as same as a proxy The only difference between them is that a transparent proxy allows clients to not change any network settings before traffic starts flowing through the proxy After enabling the Transparent Proxy you must also fill in the port number connected to filter as well as the IP and port number of the proxy server Pages 86 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 13 URL Filtering URL Filtering URL Filtering Configuration URL to Filter Action Redirect URL schedule Filtered URL List Index UEL to Filter Action Schedule Erie S So ham Karis Go AG O neteyes This function allows you to prohibit internal users from viewing
40. NexusWay 800 IKE Policy Policy Name Exchange Mode Aggressive Mode v Local Identity Local P Address w paas oo Remote Identity Remote IP Address v Data Encryption Algorithm DES gt Authentication Algorithm MD5 x Pre shared Key C RSA Co Authentication Method ka Diffie Hellman DH Group Group 1 768 Bit v IKE Lifetime es E sil ce Pic Nae ETO AIA Mars Rivers Bal All Rita Roe O Nfbt amp yes Please note that this function is only available in the NexusWay 805 815 825 and 835 In this option you can configure settings to exchange keys that will be used when establishing a VPN such as host authentication negotiation of security parameters for an encrypted connection and key generation as well as key exchange Policy Name Enter an unique name for the IKE policy Pages 89 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Exchange Mode There are two exchange modes available which are Main Mode and Aggressive Mode IKE consists of two phases The Authentication phase includes verification of the identities of the local and remote systems via pre shared secrets or certificates while the Key Exchange phase involves the negotiation of security parameters If the Authentication phase exchange is in Aggressive Mode the Key Exchange phase will not be encrypted When set in Main Mode the Authentication phase will generate session keys if a secure chan
41. PFS the keys that protect data transmission will not be used to derive additional keys and seeds used to create data transmission keys will also not be reused In the other words if a key becomes compromised no other keys can be derived using that information Since it is very unlikely for any encryption or authentication keys to be compromised PFS is not generally required If you enable PFS you will see a Diffie Hellman group pull down list similar to the one used for IKE however this one is used for PFS only You must select one of the three groups NOTE Setting here must match with remote VPN Endpoint settings Pages 95 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 3 2 c Traffic Selector Traffic Selector Local Subnet IP Addrass 10 63 1560 Subnel Mask 255243 2550 mem bes Subnet IF Address Subnet Mask LE Enter the IP Address and subnet mask of your private local subnet which you wish to make accessible from the remote endpoint of your VPN You must also enter remote IP and subnet mask of your remote location These two subnets can overlap NOTE B if you chose Manual Policy please fill in the following columns for exchanging keys These settings must also match the settings on the remote 4 3 2 d AH Configuration AH Configuration SPI Incoming Hex 3 8 Characters SPI Outgoing Hex 3 8 Characters Authentication Algorithm MD5 Key In MD5 18
42. Static Route can be used to integrate and utilize devices that are connected with the NexusWay 800 such as another firewall or router IP Address Netmask Enter the IP address and subnet mask of the static route Gateway Enter the IP address of the gateway with which the NexusWay 800 needs to connect The gateway could be any device connected with the NexusWay 800 such as a router or a firewall NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page m Click Add to add the settings into the list or click Reset to clear the settings and enter them again B Netmask Notes 10 1 1 1 32 indicates that ONLY 10 1 1 1 will match 10 1 1 1 32 would be identical to 10 1 1 1 and 255 255 255 255 10 1 2 1 24 indicates that any IP From 10 1 2 0 to 10 1 2 255 will match 10 1 2 1 24 would be identical to 10 1 2 1 and 255 255 255 0 10 1 3 1 16 indicates that any IP from 10 1 3 1 to 10 1 255 255 will match 10 1 3 1 16 would be identical to 10 1 3 1 and 255 255 0 0 10 1 4 1 8 indicates that any IP with 10 as the first number will match 10 1 4 1 8 would be identical to 10 1 4 1 and 255 0 0 0 Pages 48 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 7 b Dynamic Route Configuration RIP 1 C Enable Disable mE C Enable Disable Most routing algorithms are Dynamic
43. address automatically Internet Protocol TCP IP Properties oi e fe su ges suonet TTE HS Ihe eran orate vw BUT Pages 19 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 2 4 1 c Windows XP 1 Select Start Menu Control Panel Network Connections 2 Right click the Local Area Connection icon and select Properties 3 Select TCP IP protocol for your network adapter click Properties 4 Select Obtain an IP address automatically Internet Protocol TCP IP Properties po General You can get IP settings assigned automatically if pour network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address IP address Subnet mask D efaull gateway Ilan ONS server add vlteratsc al 5 Use the following DNS server addresses Preferred DNS server Alternate DNS server Pages 20 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series CHAP 3 FUNCTION INSTRUCTIONS When entering the Web management interface of the NexusWay 800 for how to login into the interface see Chapter 4 you ll find the following main options on top of the screen which are Basic Setup Advance Setup Network Info and Help Please note that the instructions in this documentation are sorted according to the options in the Web interface from left to right top to
44. ain names In addition you can set multiple MX records for a host allowing the mail to automatically flow to backup systems when the primary systems are unreachable For more information see section 4 2 8 B DDNS The Dynamic DNS feature assigns a fixed hostname to your ISP assigned dynamic IP address making your computer accessible from any location on the Internet without knowing your current IP address The NexusWay 800 supports 11 different Dynamic DNS services For more setting information see section 4 2 9 Pages 25 119 Multi Service Border Gateway User Manual for NexusWay 800 Series B Inbound Policy In this option you can setup the inbound load balancing algorithms causing the inbound traffic to be distributed across multiple Internet connections according to the algorithm you select The NexusWay 800 will process outside users linking to your Website and load balance by active DNS and Port IP Mapping according to each WAN connections Line flow For more setting information see section 4 2 10 B NetFlow The NexusWay 800 can export network traffic information in flows to an external machine that runs a NetFlow application and can collect NetFlow data for processing For more setting information see section 4 2 11 B Cache You can enable a built in Web Proxy server and a Transparent Proxy in this option Proxy servers are used to improve performance and filter requests while a transparent proxy allows clien
45. ally change the firmware in use this action must be initiated be an administrator Software Update Click the Browse button to find the latest firmware update file and click Upload button to update the software of the NexusWay 800 You can find the newest release of the NexusWay 800 firmware on the Neteyes Web site If you don t have automatic update enabled Please go to the Web site and download the newest firmware released at http Awww neteyes biz firmware asp NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 74 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 6 QoS Quality of Service Quality of Service Qo5 Policy Configuration source IP Address IP Alias source Netmask Source Port E Destination IP Address IP Alias Destination Metmask Destination Port EN HE j Service IP Bandwidth Meit Guarantee Mei Schedule Always Interface PORT Li EEES ane hig Ki r A COnetreses QoS Quality of Service specifies a maximal throughput level The NexusWay 800 s QoS feature provides managed bandwidth for specific services guaranteeing applications don t monopolize bandwidth To apply QoS policy to all available ports place an asterisk in the left column of Source Port for external to internal t
46. andwidth Address Netmask Range Address Netmask Range pes Guarantee pene Ve WEE All policies you set will be listed in this table To delete a policy right click on it and select Delete You can also move edit enable or disable a policy by right clicking Pages 76 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 7 Firewall Access Control source IP Address IP liag source Metmask er source Port H8 j Destination IP Address NENNEN IP Alias Destination Metmask Destination Port EN E Connection Limit E Service P Action DENY Schedule Always w lz Li bh Se a ea a AE COneteves Along with the QoS policies the Firewall can also be used to manage throughput levels based on the certain traffic flows to improve Internet service quality and increase security However the firewall is specifically designed to increase security and limit access by denying unexpected access types and known undesirable connections All the traffic entering or leaving the intranet will be examined by the firewall which will block data meeting none of the specified security criteria 4 2 7 a Firewall Policy Configuration Source IP Address IP Alias Source Netmask Source Port I Destination IP Address IP Alias Destination Netmask Destination Port I Connection Limit Service Action Schedule D i sa Enter the source and destination IP address Netmas
47. ant devices will store data about themselves in Management Information Bases MIB and return this data to SNMP requesters You can enable or disable this SNMP function For more setting information see section 4 2 4 BH Advanced Feature This function allows you to backup all the configuration settings in the NexusWay 800 You can save and restore configuration settings so that you do not need to reconfigure everything after restoring the hardware if some unexpected situation occurs You can also have the system revert to the original factory settings download an updated firmware release from the Neteyes Web site update configurations settings from previously exported file and enable automatic firmware updates For more setting information see section 4 2 5 B QoS Quality of Service The NexusWay 800 s QoS feature provides traffic shaping and maximal bandwidth to specific services by specifying throughput levels for applications For more setting information see section 4 2 6 B Firewall Along with the QoS the Firewall is also to improve Internet service quality However the firewall is designed to increase security by denying unexpected access All the traffic entering or leaving the intranet will be examined by the firewall which blocks data meeting none of the specified security criteria For more setting information see section 4 2 7 B DNS Setting DNS Domain Name System Service associates IP addresses with dom
48. anual for Nexus Way 800 Series 1 4 Specification System Intel X86 Series CF 16 MB Chipset Intel LAN Chip WAN 4 x shield RJ 45 for 10 100 MB Ethernet Auto LAN 2 x shield RJ 45 for 10 100 MB Ethernet Auto Console Port 1 COM Port RS 232 DB 9 Connector Dimensions 24x 4 5x 42 6 CM Certification CE FCC Pages 9 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 1 5 Main Features gt Broadband Em m Modem NexuM Nu 800 e EE Son _ P oun band Modem LAN Internet B Supports Load Balancing for up to 32 XDSL Leased Line DHCP The NexusWay 800 can integrate 32 external links and integrate them into a single enterprise intranet for mutual backup load balancing and increasing the network s overall performance efficiency B Supports Outbound Inbound Load Balancing The NexusWay 800 provides Load Balancing for both Outbound connections internal users connecting to external servers and Inbound connections external users accessing your Web site s or servers Administrators can setup various load balancing modes for different bandwidth usage requirements and service types to achieve optimum bandwidth and network quality by properly distributing traffic to each leased line B Supports NAT and DHCP of LAN NAT Network Address Translation provides an IP address translation function efficiently separating an intranet from the external network The DHCP Cl
49. ay User Manual for NexusWay 800 Series CHAP 4 CONFIGURATION Any Administrator can now configure the NexusWay 800 using a current version of any browser i e Internet Explorer 6 These configurations serve to further enhance the networking environment provided by the NexusWay 800 Once all the hardware is properly connected and one machine is configured as detailed in section 2 2 follow the steps below to begin configuring the NexusWay800 B STEP 1 Open the secure administrative Web interface by entering the NexusWay 800 s IP address by default this is https 192 168 0 1 in the Address Bar on the browser to login NexusWay 800 BH STEP 2 The dialogue box below will be displayed Enter admin as User Name and 123456 as Password which is the default administrator user ID and password Ness Way 800 Login Nexus Wal NOTE m Recommended screen resolution at least 800X600 B You must use https not http when connecting to the NexusWay 800 s administrative Web interface B If you can not connect to the administrative Web interface ping 192 168 0 1 using diagnostic commands on your computer to ensure the network is working normally Pages 32 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 Basic Setup 4 1 1 Port setting Port Setting Media Type MTU et Address Media Type AutoSelect Es 72 1800 MAC Address EE d
50. c DNS feature you must have already signed up for Dynamic DNS service from one of following organizations www dyndns org www tzo com WWW ez ip net WWW easydns com www dhs org www dyns cx www ods org www hn org gnudip cheapnet net www zonenet com www dyn ca Host Enter the host name you registered to associate with your current IP address This is a fixed hostname you have selected or entered when signing up for whichever third party service you use ISP Enter the ISP corresponding to this hostname Service Select the third party Dynamic DNS service you wish to use Pages 81 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Username Password Enter the username and password which apply to your account for the service you use NOTE B Click the Save button on right top corner of the panel after you finish entering all the data in this page Click Add to add the settings into the Dynamic DNS List or click Reset to enter the information again After clicking the Add button the Dynamic DNS settings will be listed in Dynamic DNS List To delete a setting right click on it and select Delete You can also move edit enable or disable a Dynamic DNS setting by right clicking Pages 82 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 10 Inbound Policy Inbound Policy kd Inbound Policy Configuration External IP Address Subnet Mask
51. cause a WAN jam Pages 38 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 2 g Failover Configuration TIL Hopsi Detection Mode O ping O NN Enter multiple IP separated by commas Ping Host IP C Connect Host IP port Retry Times g Interval of Detection sec g Timeout sec E i see The automatic disconnect detection mechanism is activated when NexusWay 800 connects to a WAN Administrators will receive the warning if the WAN is disconnected You can set up the detection policies here to reduce the possibility of erroneous judgment This configuration is available for every connection that is setup TTL Hops You can choose TTL Hops to trace a network node router and to detect network disconnections by Traceroute Enter the number of node you want to detect before assuming failure Ping Host IP You can also determine if the network is working normally by Pinging an IP address Ensure the host you want to ping to test for network connection detection is open and enter its IP addresses in the Host IP column Connect Host IP port If pinging is not supported by the remote computer system enter IP address and port number of the host you want to connect Retry Times Enter the number of continuous retry attempts when Host IP or TTL address is detected as not responding This means that if you set this to 3 times when the Host IP or TTL address is detected as not respon
52. chars SHA 1 20 chars Key Out MD5 16 chars SHA 1 20 chars SPI Incoming SPI Outgoing Enter a Hex value 3 8 characters which matches the settings of remote VPN endpoint in both SPI Incoming and Outgoing columns Authentication Algorithm There are MD5 and SHA 1 available for this option where MD5 is the default value and SHA 1 is more secure Key In Key Out For MD5 the keys should be 16 characters For SHA 1 the keys should be 20 characters Pages 96 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 3 2 e ESP Configuration ESP Configuration SPI Incoming Hex 3 8 Characters SPI Outgoing Hex 3 8 Characters Encryption Algorithm Key In DES 8 chars 3DES 24 chars Encryption Algorithm Key Out DES 8 chars 3DES 24 chars ESP Authenication Key In MDS 16 chars SHA 1 20 chars ESP Authenication Key Out MD5 16 chars SHA 1 20 chars Ed ss SPI Incoming SPI Outgoing Enter a Hex value 3 8 characters which matches the settings of remote VPN endpoint in both SPI Incoming and Outgoing columns Encryption Algorithm Key In Key Out Enter a key with 8 characters for DES or the one with 24 characters for 3DES ESP Authentication Key In Key Out Enter a key with 16 characters for MD5 or the one with 20 characters for SHA 1 NOTE B Clickthe Save button in top right corner of the panel after you finish
53. d Date This field can be configured in minutes hours or days In the example above the policy is configured to run for 5 years and starting at 9AM the policy becomes active for 9 hours and inactive for 15 making 24 hours In time zones where daylight savings time is observed the start and end times can be configured far in advance to maintain correct policies Pages 63 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 2 Advanced Setup 4 2 1 IP Mapping 2 IP Mapping External IP Address IP Alias Service IF Internal IP Address IP Alias EE 1 IP Mapping List External IP Address Internal IP Address Erin abr refte Kis Go Ais Cnereses This function allows you to map external IP addresses to the internal virtual IP addresses of PCs inside your LAN Everything required for the external IP address and network services will be transmitted to the virtual internal IP address NOTE B itis recommended to use this function ONLY when you have the firewall enabled Pages 64 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 1 a IP Mapping IP Mapping External IP Address IP Alias Service IP Internal IP Address IP Alias LE External IP Address Enter an external real IP address in this column Service Select the service type you want Internal IP Address Enter a corresponding int
54. d enter them again Pages 61 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 16 IP Alias IP Alias Alias Mame IP Address ELS 1 Alias List Index Alias Name IP Address Essere G anne iar Tris Go A Onereses This function allows you to designate an alias name to an IP address so that you can use the alias name for quick setting in other options and easy identification After naming the IP address you can select the alias name by clicking the IP Alias button located by the columns that need an IP Address entered Alias Name Enter an alias name for an IP address IP Address Enter an IP address to which you want to designate with the alias Alias List All the alias will be listed in this table To delete an alias right click on it and select Delete You can also move edit enable or disable the alias by right clicking NOTE B Click Add to add the settings into the Alias List or click Reset to clear the settings and enter them again Pages 62 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 17 Schedule Setting Time Schedule kil Schedule Configuration Hann li Sart Date amp Tire fos I s 2oos ia 53 s a6 Stop Date amp Time ns 51 2005 TE 53 gt a8 Changs cd Wii FF Man Tue Wed Fo Thu Fri F Sat gun Wor
55. dem to the NexusWay 800 s WAN port with standard Ethernet CAT5 cable or network cable supplied with the modem If you are using only one DSL or cable modem connection please connect it to WAN 1 port NOTE B If your WAN Modem is connected to a firewall or a router please locate the NexusWay 800 between the WAN and the firewall or router by connecting the NexusWay 800 s LAN port to the devices 3 LAN port connection Connect to a switch or hub with a 10BaseT 100BaseT cable before connecting to a PC If you connect PC to NexusWay 800 directly please use a cross over cable NOTE B Do not connect the NexusWay 800 s LAN ports to an uplink port on a switch router or hub as the crossover function performed by this action is already integrated into the system 4 Startup Power on other devices such as a DSL Modem Router or Firewall Connect the supplied power adapter to the NexusWay 800 and switch the power on The power indicator should light up immediately Pages 13 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 5 Check LED status The Power Indicator will light up after the NexusWay 800 is switched on When a WAN port is connected or a LAN port is connected the corresponding indicators will light up in green Each WAN and LAN ports has two LED indicators lights The lower green LINK light will light up with a successful physical connection The upper ACT light will flash while data is t
56. ding for more than three attempts the system will determine the line is disconnected Interval of Detection sec Enter the interval time in seconds for contacting IP addresses or checking TTLs Pages 39 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Timeout sec Enter the time in seconds the IP Host IP or TTL must response within If the response time is over the set value the system will determine this line is not responding NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Click Add to add the settings into the Connection List or click Reset to clear the settings and enter them again 4 1 2 h Connection List Connection List Name WAN Tyne Connection Bandwidth and Connections Failover Configuration IF 202 160 87 15 a oremus e ANLE TTL Hops 4 1 MetEves Leaseline 1 Static IP Gateway 202 160 97 1 phe Retry Times 5 Y DU Cost 1 Interval sec 5 Primary OMS 158 85 1 1 Secondary ONS 158 85 1982 1 IF 202 160 81 42 Upload Download 5120007512000 Timeaut sec 5 Srt e tats ta vss ie cbe t a LEES Ue THO Huc niae o 3 Backup Leaseline 2 Static IP Gateway 202 160 81 46 eet 1 Retry Times 5 5 i Jiu Cast 10 Interval sec 5 Primary OMS 158 935 1 1 Secondary DNS 168 85 192 1 Uploads Download 5120007512000 Timeout sec
57. dress and ports to the external IP address and ports by NAT Network Address Translation functions When specific internal PCs provide network services NAT functions can separate an internal network from the external network and ensure the security of the internal network NOTE B The IP address of WAN link should NEVER be used as a mapped IP address UNLESS it is Static IP address B Do not attempt to apply more than one function outbound policies IP mapping or port mapping to a single WAN IP address simultaneously otherwise you can become confused about which function is being used Pages 66 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 2 a Port Mapping Internal IP Address IP Alias Internal Ports User Input v Jf Servich TP z External IP Address User Input v fo IP plias External Ports User Input v NE LECT Internal IP Address Enter an internal IP address of a virtual server in this column Internal Ports Enter internal Port number range which will be used for external connection If the network service property requested by external users matches this range the requirements will be transmitted to the virtual internal IP address If only one port is used for this service enter that port number in the left column and leave the right field blank Type Select the data packet type TCP or UDP External IP Address Enter an external IP address for mapping E
58. eam uit 360 2 026 Sena Protleceal Connections Hye Bytes Le d 419179 Recw Total Bytes oO 4 Sag 409 577 Sena Recw Total Pits Phim Phim 3Bn 8 n 3 5 512 828 755 30 30 2 265 1 257 10 884168132 Hinet clialup Ada Jeazelime 227 217 161 49 T 53 963 500 3 A7015 2 1 366 7 24 304 700 199 601 53 963 500 450 795 1 874 11 24 384 700 243 947 6 132 346 1 664 jHineto dialup 108681681460 Hinet dialig 10881468182 U ladei Ieaseline 221 217 161 751 210 71 50 125 105416460 10881583179 202 96 6470 10 85 1668 157 10 88 158 169 10 83 159 24 Tada leaseline g Nete yes Adsl Ieaseline jMeteyes Meteyez 1 445 3 038 3 4 421 n 15817 Lets 3 Figure 2 The graphics showed after clicking the Display Client Statistics Connection Info Health Check Log amp nbspFilter failover jsp manitar 1 no time data append failover isp monitor 1 received packet 56 bytes from 81 61 128 168 failover isp monitor 1 attempt 1 PING 168 985 1 1 from 202 150 87 15 Send 40 Bytes failover isp monitor 1 timeout 3 identity 27 303 retry 3 Interval 3 failover 2005 05 31 16 34 43 isp_monitor 1 link Neteyes Is UDP made failover isp monitor 3a time data append failover Isp manitor 3 received packet 56 bytes from B1 230 0254 failover Isp monitor 3 attempt 1 PING 158 85 1 1 from 61 230 0 232 send 40 Bytes Tailover isp monitors timeouts identity 20679 retry 3 Inte
59. easeline Disabled 0 0 0 0 10 0 0 460 255 255 255 240 Always ISP NetEyes Leaseline 3 0 0 0 0 0 0 0 0 Always ISP NetEyes Leaseline All load balancing policies you set will be listed in this table To delete a policy right click on it and select Delete You can also move edit enable or disable a policy by right clicking NOTE B The asterisk in this list means ALL For example the asterisk in Internal IP Address column means ALL internal IP addresses Pages 54 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 10 Alarm Notify Alarm Notify 9 Alarm Motify Email Address s ree IP Email Address Pit Sone Mham khera Gr AO CO nereyes This function allows the system to send out the email notifications for network disconnection and reconnection Enter email addresses where you want to receive such notifications 4 1 10 a Alarm Notify Alarm Notify Email Address Add Reset Email Address Enter a maximum of 10 email addresses where you want the notifications to be sent NOTE B Click Add to add the address into the following Alarm List or click Reset to clear the address and enter it again 4 1 10 b Alarm List All the email addresses you set will be listed in this table To delete an address right click on it and sel
60. ect Delete You can also move edit enable or disable the address by right clicking NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 55 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 11 Date amp Time Date amp Time 7 Current System Time Saturday August 23 2003 9 09 Enter New Time 08 23 2003 o9 09 Set Time MTP Server Address ick usnom Asia l Tii Adjust Etsi mmia ham haa esp AE Onerevyes This option allows you to change the system date and time 4 1 11 a Change System Time Change System Time Current System Time Tuesday January 13 2004 11 18 Enter New Time jo JIE 2004 E 19 Set Time Current System Time The NexusWay 800 system time at present Enter New Time If the system time is incorrect change the date and time in the format Month Day Year Hour Min and click Set Time button The new set system time will be displayed in Current System Time column NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 56 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 9 11 NTP Client NTP Client
61. elect Auto Policy See 4 3 1 IKE Policy in this documentation for more information about IKE Policy configuration On the other hand IKE Policies will not be used with a Manual Policy All the required key information will be entered manually Pages 93 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 3 2 b General General Policy Flame IKE Polity With hina GF 200 160 3715 EF 210 1503 42 Hold CTRL to select multiple ISPs Local VPN Endpomit z Remote VPM Endaaoint s nmnaralg D commis EA L relimia secs E Enable AH A mmenicaliari Enable ESP Encryption Des Enable ESP Authenication EE Enable IPSec PFS Cup l ME B Policy Name All VPN Policies must have a unique policy name This name is not supplied to the remote VPN Endpoint It is used only to help you identify your VPN Policy IKE Policy This column is enabled when you have selected Auto Policy so you can choose a configured IKE policy If Manual Policy is enabled this entry will be disabled Local VPN Endpoint s Select the WAN IP address of your network You may select with maximum of four local endpoints Hold the lt CTRL gt key and right click to select multiple endpoints Remote VPN endpoint s Enter the WAN IP address of the remote VPN that you wish to connect to If the remote endpoint is another VPN capable NexusWay product you can enter up to 4 endpoints Multiple endpoints must be
62. elinga ba lier Deen lai impari ysier rs Slams frac ciment i l Choose Upload Software Update Blartup Lowdor Vera hare WoO04TT punc oes Gopr P20 577 pullis 16008 cal fackyp Ledger Firman v3 0 n513 build 1214 Backup Firmae Version BUb arbum Flier Sersinn 94 0513 teil 1 05 3 Dupini Lodedwer r wa 5 D537 mild nani t usraern Firmware version 43 D 02 T builg 1006 Sottenre Lipadals 1 Chaosa Upload iab emm og uam Uem OE Ga Rat C This function allows you to backup all the configuration settings in NexusWay 800 so that you can restore all your configurations after restoring the hardware if an unexpected situation occurs The Software Update buttons allow you to manage saved configurations loader versions and firmware versions For more information see Enable Web Management Interface option in section 4 1 12 Misc Settings 4 2 5 a Operation Configuration Reboot Dene Reboot Click the Done button to reboot the NexusWay 800 when necessary 4 2 5 b System Configuration System Configuration Config Management Copy Running Config t Startup Config Restore Factory Settings Export System Settings to Client Import System Settings fram Client Config Management Click the Copy Running Config to Startup Config button to save active configurations to the disk If the running information is not saved to disk a reboot will result in a loss of
63. er Server Cluster 9 Server Cluster Configuration External IP Address IP Alias External Part Internal IP Addresses PortsYeight 1982 158 0 2 80 20 182 158 0 3 443 30 192 166 0 4 61 405 keep Persistent Connection Balance Mode Round Robin Even Distribution Schedule Always Add Reset Chi S pem TEE TE oo A ne reyes Server clustering allows several internal servers to map to a single external IP for data transmission speed enhancement The transmission reliability can be increased since each server application can failover to other servers It enables high availability additional scalability and easier network management Pages 68 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 3 a Server Cluster Configuration Server Cluster Configuration External IP Address IP Alias External Port Internal IP Addresses Portsmeight 192 169 0 2 90 20 192 169 0 3 443 30 182 168 0 4 81 40 Keep Persistent Connection Hl Balance Mode Rownd Rokin Even Distribution Schedule Always EXE External IP Address Enter an external IP address where the server can be accessed External Port Enter the port number corresponding to the IP address that the server will be accessible from Internal IP Address Port Weight Enter the internal IP addresses ports and weights separated by Colons such as 192 168 0 2 80 20 and use Comma symbol to separate the IP addresses
64. ernal IP address in this column NOTE B The IP address of WAN link should NEVER be used as mapped IP address UNLESS it is Static IP address B Do not attempt to apply more than one function outbound policies IP mapping or port mapping to a single WAN IP address simultaneously otherwise you can become confused about which function is being used B 8 Click the Save button on right top corner of the panel after you finish entering all the data in this page If you do not your changes will be lost when you exit the page B Click Add to add the settings into the following Connection List or click Reset to clear the settings and enter them again 4 2 1 b IP Mapping List I Mapping List External IP Address Internal IP Address All Mappings you set will be listed in this table To delete a Mapping right click on it and select Delete You can also move edit enable or disable the Mapping by right clicking Pages 65 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 2 2 Port Mapping Port Mapping Port Mapping Internal IP Address IP Alias Internal Ports User Input TEP Service External IP Address User Input IP Alias External Ports User Input al Ron Enayyight e e002 ge Net conn onn A Eiahts eser Era You can customize the virtual server by setting an internal IP and port to correspond to a real external IP address and map the internal IP ad
65. exeocececoc Clone My MAC di j MTU 72 1501 Port 1 2 represent the LAN Ports while Port 3 6 represent the WAN Ports Complete the settings accordingly and respectively for each port Media Type There are three modes for Media type Auto Select 100BaseTX and 10BaseT UTP Select the proper mode If you are not sure about the media type leave it as Auto Select MTU This field is for you to define the Maximum Transmission Unit the largest physical package size in bytes from 72 to 1500 Enter proper numeric value based on actual usage and your requirements The default value is 1500 Pages 33 119 Multi Service Border Gateway User Manual for NexusWay 800 Series MAC Address MAC Address the Network Interface Card s physical Address is not required to be setup in general unless your ISP requires a registered MAC address to connect NOTE B The system will detect your MAC address automatically when you click the Clone My MAC Address button 4 1 2 WAN Setup n WAN Setup Connaction Hame Connection Inberface rokr3 Connection Tye 5t IP Biaundirsg Disable Enable ee IP Addrete Subnet Mask Fk l Galmi Prenacy mec ndanr OHE l Transparent C Disable C Enable Bandwidth and Cennaecuens Max Connections xo Cost P Vieight P Upload Dirwriload Baridwidth 5p Fix Ur Fixe allover Contiguratien amp TD Hapsl Detection Moda
66. h to this port Both 10BaseT and 100BaseT connections can be used 3 LAN 2 Internal Port Connect a PC a hub or a switch to this port Both 10BaseT and 100BaseT connections can be used 4 WAN 1 External Port Connect the primary broadband modem here 5 WAN 2 External Port Connect a second broadband modem here if available 6 WAN 3 External Port Connect a third broadband modem here if available Pages 7 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 7 WAN 4 External Port Connect a fourth broadband modem here if available 8 Indicators The indicators on the front panel show the Power status for the system and a 10 100 link indicator for LAN1 LAN2 WAN1 WAN2 WAN3 and WAN4 The Power indicator will show an orange light when the power is on For the 10 100 indicators when the transmission rate reaches 10 MB the indicator will be lightless When 100 MB is reached you will see a green light Every ports indicator has two LED lights which are LINK and ACT The green LINK light will light up to indicate a successful connection when the cable endpoint is properly plugged in The ACT light will flash when data is transmitted through the port B Rear Panel 1 Power Input Plug in the supplied power cable 2 Power Switch To turn on NexusWay 800 switch to I to turn off NexusWay 800 switch to o Pages 8 119 ulti Service Border Gateway User M
67. he NexusWay are on the same network segment If you don t have a router this is required when using a router it must be on the same network segment 3 Is your PC is set to Obtain an IP address automatically DHCP client Did you restart it 4 If your PC uses a Static Fixed IP address ensure it is using an IP address inside the range of 192 168 0 2 to 192 168 0 254 and is compatible with the NexusWay s default IP address 192 168 0 1 In addition the Network Mask should be set as 255 255 255 0 to match the NexusWay In a Windows environment you can check these settings using the Control Panel Network then checking the Properties of TCP IP protocol See section 2 1 part 6 configuring administrator s IP address Pages 114 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 6 1 2 Internet Access Problem 1 had a time out error occur when I entered a URL or IP address Solution 1 This error has several possible reasons Try the following troubleshooting steps 1 Check if other PCs work correctly If so ensure the IP settings of your PCs are correct To use a Static IP address check the Network Mask Default gateway and DNS as well as the IP address you have configured Ensure these settings fall within the correct settings for the NexusWay s current configuration 2 If other PCs fail to operate properly with the correct configurations check the NexusWay s connections power WAN and LAN If
68. he key into the text box in the new window After the key is saved on the Client machine the key can be displayed by clicking View Host Certificate button Pages 101 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 4 Network Info 4 4 1 System Status System Status 2 days 1 30 58 0 415 872 KB Available 000i mim 002 mim 0 00015 min show History Data AN Information Connect Port Mame Connection Status Connection Type IP Mac i User Name Connected 219 64 60 242 ineteyes subnet Mask Gateway Primare ONS Secondary ONS Fail Over Detect Mode LAN Information lie dares Subnet Mask LIDEN 1 0 1020 build 0970 Firmware version 1 0 1020 build 1097 Eri A a ema Go A a ke O res restes This option shows the current status and settings of the system and each Internet connection in detail including WAN Information LAN Information and Device Information with current loader version and firmware version information Click the Show History Data button for graphics of the current status relating to CPU Free Memory and Loading Pages 102 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series History Data Index Page for system Status for CPU CPU Utilization Maz in 82 Average In 17 Curent m 15 Max Ont 2 Average Out 17 Curent Out 15 4 Status for Free Memory 6 4 2 zz 20 18 i16 i14 12 10 8 6 Max In 421 788 KB Average In 421 255 KB Current ke
69. hority modes available in this pull down list Where Host means any machine on the network MX is to find servers that can deliver mail Alias presents a host name SOA contains some parameters about the domain itself such as contact email addresses and collections of more technical data ISP Hold lt CTRL gt to select multiple ISPs This is a multiple selection list To make a multiple selection hold the Ctrl key and select several ISPs Pages 79 119 Multi Service Border Gateway User Manual for NexusWay 800 Series IP Enter the internal IP address for this DNS Mapping TTL Time to Live The duration of life for LAN requests Enter a value in seconds to specify how long the cached record is valid before being purged It is recommended that you set this value to zero 0 for real time load balancing MX Preference MX Preference is used to determine the order of delivery when a host has multiple MX records A host can have multiple MX records so that the mail can automatically go to backup systems if primary systems are unreachable The lower number you set the higher priority the record has and records with the same priority will equally share the workload NOTE B DNS must be set with IP Port Mapping Verify the IP has been setup in the IP Mapping or the Port Mapping option and shown in the mapping list before assigning a Domain Name to a WAN IP If the WAN IP is not available in the list external user wil
70. i 1 1 1 1 SA Lifetime 230 AH Aarthesttication Disabled ESP Erictyptieu 22316 ESP Amikom Enabso FEnalile Sec PPS ha Disabiac ha Jisabiac SoG ere ree ie ie Siena CI Aaya Please note that this function is only available in NexusWay 805 815 825 and 835 Pages 92 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series VPN Policy A Virtual Private Network VPN is used to provide secure encrypted communication across the public Internet between two remote hosts VPNs allow the establishment of an encrypted tunnel that protects the network traffic flow from eavesdroppers It enables users to access private network data and resources securely over the Internet or other networks Even if using public networks a VPN will inherit the characteristics of a private network That s why it is called Virtual Private Network It s used for tunneling encryption authentication and access control over a public network that supports VPN 4 3 2 a VPN Policy Configuration VPN Palicv Configuration Tipe Aao Policy Type There are two types available which are Manual Policy and Auto Policy The most common configuration Auto Policy automatically manages the authentication and encryption keys with an IKE policy IKE protocols perform negotiations between two VPN Endpoints to automatically generate the required parameters For this reason you will be required to select a configured IKE Policy if you s
71. icrosott Networks Y Network Monitor Driver Internet Protocal TCP IP Install Uninstall Properties Description Transmission Control Protacal Intermet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in taskbar when connected STEP 3 Set up IP the address as 192 168 0 X and subnet mask as 255 255 255 0 where X can be any number from 0 255 For example you can enter 192 168 0 10 Please do not use 192 168 0 1 which is the default IP address of the NexusWay 800 Note What is Administrator B An Administrator is the user with the authority to install the NexusWay 800 in the Local Area Network environment and to configure the NexusWay 800 Administrator can not only configure the LAN WAN Server and DHCP settings on the WEB management interface but can modify the Load Balancing mode according to the requirement s of every unit or segment and the company s bandwidth policies Pages 15 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 2 3 Configure PCs on your LAN With the default Windows 95 98 ME 2000 XP configuration no changes are required After booting rebooting the PC the NexusWay 800 will act as a DHCP Server automatically providing a suitable dynamic IP address and related information to each PC Ensure the PCs on your LAN are DHCP clients and check their TCP IP setup according to section 2
72. ics ES Diagnostics System Information Display ARP Table ARP Table Display Routing Table Renting Table Display Interface Infa Interface Info Display NAT Info NAT Info Diagnostic Tools Ping Traceronte Hslookup tsp ri G SO EE TE oo A O netreyes This option allows the administrator to perform a variety of diagnostic checks Display ARP Table ARP Address Resolution Protocol is a TCP IP protocol used to convert an IP address into a physical address such as a MAC address A host wishing to obtain a physical address will broadcast an ARP request onto the TCP IP network The host on the network with IP address within the request will then reply with its physical hardware address This feature allows you to view the table of these known IP MAC Address mappings Display Routing Table This will show the table which the NexusWay 800 uses when determining which gateway to use while forwarding data Display Interface Info This option shows the information relating to all the interfaces of NexusWay 800 4 WAN and 2 LAN Display NAT Info This shows the information about the current NAT connections and their protocols Pages 109 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Diagnostic Tools The diagnostic tools ping traceroute and nslookup are used as diagnostic tools to check IP addresses and the connection status Enter an IP address or Domain Name and select one of the 3
73. ient Table can send out real time IP address information used by PC clients on network B Multiple Load Balancing Modes Administrators can setup proper load balancing modes based on usage requirements to improve network performance efficiency by distributing traffic over multiple connections Pages 10 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series B Supports PPPoE For connections like a XDSL that require an account name and password the NexusWay 800 s built in PPPoE dialup software allows you to integrate that line by simply entering the account information and password B Supports SNMP The NexusWay 800 s built in SNMP Simple Network Management Protocol can retrieve information on network nodes independently for the purpose of monitoring and managing network traffic B Supports Multi Link The NexusWay 800 can maximize the external bandwidth provided by multiple ISP s by allowing multiple concurrent connections to ISP s on a single WAN Port through a Hub or Switch Multi Link Feature when used with xDSL or Cable modems requires Proxy ARP features to be deactivated B High Availability The NexusWay 800 supports a backup mechanism for high availability If one NexusWay 800 system fails unexpectealy the backup will become active instantaneously to continuing load balancing operations ensuring continual smooth network traffic B Supports Web Management Interface A simple and
74. k and ports in the corresponding columns Connection Limit Connection Limit is the maximum number of connections of the source IP address allowed by the firewall for this rule If leave this column empty no limitations will be applied to this rule Pages 77 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Service Select the data packet type The options are IP TCP UDP ICMP and Userlnput available in this pull down list Action You can DENY or ALLOW the traffic which meets the criteria you set above to be limited Schedule Select a schedule to specify when you would like the firewall settings to activate To set the schedule see 4 1 17 Schedule Setting NOTE B The Firewall policies can only be set by IP address and Netmask not by RANGE B Click Save button on right top corner of the panel after you finish entering all the data in this page Click Add to add the new policy into the Firewall Policy List or click Reset to enter it again 4 2 7 b Firewall Policy List Abut Source IP j mes em niares5 r rj L aT FIG 18 1Bi 3 210 895 682 134 a IAE 22 220 1l 4 41 bs A7 TG ELIT 8 43 1 0 0 0 di 10 0 0 0 256 259 255255 235 258 235 7255 455 255 205 0 0 009 0 0 09 205 258 255 255 458 255 755 0 459 455 255 0 Destirraben IP Ardreas 0 88 163 TE lO 8g 153 15 a T 202 1 BO 37 15 202 160 3142 lu BB B18 10 88 1858 0
75. k ime mu iins imensi tima Mins Add Reset sl Ela Date X Time D amp 8 PON n nm Stop Date amp Time 05 20 TU DS DU OD hore Tine Liays of Weekon Tug Weed TI Fm SatSun Wk Brie Hour ee real Tine T Spars oot HEA Bk Siesta Ts AES Barca O rwn This option allows the NexusWay 800 s functions to be active only for certain periods which you specify in this page For instance you can define a schedule for working hours which are effective from 9am to 5pm on weekdays and apply this schedule to your QoS rules to enable them only in these working hours You can also relax your firewall rules on the weekends or turn off the URL Filtering during off hours with this function Define a schedule with format Month Day Year Hour Min The first selection is the beginning time for this schedule and the second is the finish time These times are intended to be large scale time frames primarily encompassing weeks months or years The check marks labeled with the days of the week allow you to choose which days are included in this schedule The Work Time field indicates how long the policy will be considered active after the start date and time This field can be configured in minutes hours or days The Interval Time is a length of time that the policy will be inactive after this time has expired the policy will become active for the Work Time again completing a single cycle which will continue until Stop time an
76. l for Nexus Way 800 Series In the Authorization section the NexusWay no longer needs the Generate Certificate or the Load Certificate buttons and since it is serving as the CA server these two buttons are removed After clicking View Host Certificate a new window will be displayed with your host certificate This encrypted text is your public key The other endpoint of VPN and CA Clients should copy and paste this key into the IKE Policy page In the Authentication Method option in IKE Policy page the administrator should select RSA and enter the key in the text box on the right of the RSA option For CA Client click Generate Certificate button to generate a certificate request A window will then be displayed with an encrypted key request Copy the contents in the box into your computers buffer For a NexusWay series that is serving as CA Server click the Sign Certificate button and paste the contents into the new window The new signed key it returns should also be copied into your computers buffer This key needs to be pasted in to two places the IKE Policy page and the window opened after clicking the Load Certificate button On the CA Client machine the administrator should select RSA as the Authentication Method section in the IKE Policy page and enter the key in the text box on the right of the RSA option The key generated by CA Server machine also needs to be saved onto the CA Client machine Click Load Certificate button and paste t
77. l never be able to access internal IP through the WAN IP B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page 4 2 8 b DNS Mapping List pns mapping List Index Domain Name DNS Tyne MX Preference 1 VOQUE COM NS I amp SP MetEves Leaseline g 0 E vutqux carm SOA ISP MetEyes Leaseline hi T 3 VUQUE COM d IBSP MetEves Leaseline pi 0 10 4 vutqux carm MR IP User Defined 202 160 87 4 T is 5 Www WO QUE COM Host IP User Defined 202 160 87 16 0 B vutqux carm NS LAK 10 88 1687 E vutqux cam MAR LAM 10 68 168 4 lea B8 vutqux carm MR LAK 10 885 165 25 10 J WWW VU GU cor Hast LAM 10 885 168 16 All DNS mappings you set will be listed in this table To delete a mapping right click on it and select Delete You can also move edit enable or disable mappings by right clicking Pages 80 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 9 DDNS Dynamic DNS 9 Host ISP ISP sonet Service VW dindns crg o Jsername NEN Password E EE GE athe a Tris ps A Onetreses The Dynamic DNS feature assigns a fixed hostname to your ISP assigned dynamic IP address making your computer accessible from any location on the Internet without knowing your current IP The NexusWay 800 supports 11 different Dynamic DNS services To use the Dynami
78. led For more setting information see section 4 1 15 B IP Alias The NexusWay 800 added this function for you to designate an alias name for an IP address allowing quicker setting in other options and to simplify identification After naming the IP address you can select the alias name by clicking the IP Alias button located by columns that need to an IP Address entered For more setting information see section 4 1 16 BH Schedule Setting This function allows you to specify when you want to activate deactivate settings You can set multiple schedules either weekly or applied only once For more information see section 4 1 17 Pages 23 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 3 2 Advance Settings ne a Ada Na UW soo Adve anc 2 Setup 34444444 a lg f E Py i muti SEPUICES border Ee T LETS a The pii Way fivance Setup Network info etur k n 4 Hel D neteseS ooo Advance Setup allows you to configure some advanced functions for more efficient usage Read the instructions and find solutions that best meet your requirement before starting any setup procedures for the NexusWay 800 IP Mapping Port Mapping Server Cluster SHIP Advanced Feature los Firewall ONS Setting DONS Inbound Policy NetFlow Cache URL Filter High Availability Server Cluster B IP Mapping This function allows you to map external IP addresses to the i
79. lows you to setup the IP address of the NexusWay 800 in your LAN and turn the NexusWay 800 into a Gateway for other PC s external connections For more setting information see section 4 1 3 B DHCP Server The NexusWay 800 provides a DHCP service to assign dynamic IP address to internal PCs DHCP clients or other devices on the network With dynamic address a device may have different IP addresses every time it connects to the network You can enable or disable the DHCP service and set up other configurations with this option For more setting information see section 4 1 4 B DHCP MAC IP This MAC IP Mapping function will reserve particular IP addresses for the PCs you set so that they can dynamically receive the same IP address every time In other words fixed IP address will be assigned to fixed MAC address i e PC The PC user can then provide a fixed IP address to other people and applications For more setting information see section 4 1 6 B Routing Routing is the action of moving information across a network from source to destination You can set the route for the transmission from each IP address Netmask to a designated server For more information about static dynamic route and setup see section 4 1 7 B Outbound Policy You can set up load balancing modes provided by the NexusWay 800 according to ISP bandwidth user s requirements for outbound traffic distribution and to avoid overloading a single connectio
80. n For more setting information see section 4 1 9 B Alarm With this function the system will send out the email notifications about network disconnection and reconnection to a specified email address For more information see section 4 1 10 B Date amp Time You can change the system date and time with this option After being set the NexusWay 800 will automatically receive the time information from a network time server and set the system clock accurately For more information see section 4 1 11 B Miscellaneous Settings Pages 22 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series This option allows you to specify timeout values in seconds for TCP UDP and all other protocols For more information see section 4 1 12 B IP MAC Locking This function is usually used in dormitory network where Internet connection is limited This function allows you to decide which PC s can or can not access the network For more setting information see section 4 1 13 Quota You can specify daily traffic volume limitation either download upload or total for any one IP address with this function Once the machine exceeds any of the traffic quotas all further traffic to or from the IP will be denied For more setting information see section 4 1 14 B IP Control You can specify real time traffic volume limitations for any IP address with this function Traffic beyond this limit will be denied or thrott
81. nel is required for the Key Exchange phase Due to additional key generation steps Main Mode is about three times slower than Aggressive Mode however it has higher security Local Identity Remote Identity Enter your Fully Qualified Domain Name box if you select Local User_FQDN or Local FQDN For using X509 Certificates for Authentication select Remote User asn1dn for your Local and Remote Identities Encryption Algorithm Select either DES Data Encryption Standard using 56 Bit Keys or 3DES Triple DES which uses 168 bit keys Authentication Algorithm You can select MD5 returns a 32 byte hash or SHA 1 returns a 160 byte hash SHA 1 is more secure but much slower than MD5 and requires more system resources For general application MD5 is secure enough and much more suitable choice Authentication Method To use a Pre shared Key select Pre shared Key button and enter the key To use RSA Rivest Shamir Adleman a public key algorithm for asymmetric Encryption copy and paste the signed public key of the desired endpoint as provided by a Certification Authority For more information about Certificate Authorities please see 4 3 4 Certificate Authority Diffie Hellman DH Group DH is an algorithm for developing a shared secret between endpoints by separately integrating endpoints public key combination result with private key Essentially this is a method for authenticating and negotiating keys allowing two hosts to crea
82. ng information see section 4 3 1 B VPN Policy A Virtual Private Network VPN is used to provide secure encrypted communication between a network and a remote host over the public Internet VPNs allow the establishment of an encrypted tunnel that protects the network traffic flow from eavesdroppers It enables a specific group of users to access private network data and resources securely over the Internet or other networks Please note that settings in this option must match with remote VPN settings For more setting information see section 4 3 2 B PPTPServer The NexusWay 800 s PPTP Server allows connections from PPTP clients You must enter the users that can access your VPN For more setting information see section 4 3 3 B Certification Authority This option is about functions related to the generation and signing of x509 certificates These certificates are used in place of pre shared keys while setting up IKE policies CA Certificate Authority authentication is typically used in large organizations with an internal CA server Using CA certificates reduces the amount of data entry required by each VPN endpoint For more information see section 4 3 4 Pages 27 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 3 4 Network Info de E s ME The Best Way OO neresec U soo muri seni mm T J X IL 1 ay A i Advance Setup 1 min Ne t wor k Info cinta
83. nternal virtual IP addresses of PCs inside your LAN All service requirements for external IP or network services will be transmitted to the virtual internal IP address It is recommended to use this function ONLY when you have the firewall activated For more setting information see section 4 2 1 B Port Mapping You can customize the virtual server by setting an internal virtual IP and port to correspond to an external IP and port Mapping the virtual IP address and ports with external IP address and ports accomplishes NAT Network Address Translation functions if certain internal PCs serve as a server for network services NAT functions can separate an internal network from the external network and help ensure the security of internal network For more setting information see section 4 2 2 Server cluster allows several internal servers to map to one external IP for data transmission speed enhancement The transmission reliability can be increased since each server application can failover to other servers Additional advantages include scalability high availability and easier network management For more setting information see section 4 2 3 Pages 24 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series SNMP SNMP Simple Network Management Protocol is a set of protocols for managing complex networks SNMP is performing by sending PDUs Protocol Data Unit to different parts of a network SNMP compli
84. o lock together If a user tries to connect using that IP from another MAC address or uses that MAC address but a different IP the connection will be denied Connections will be allowed if both of the IP and MAC address match a single entry or neither match a single entry Every connection matching exactly one condition of one rule will be dropped You can also enter a in the IP field and enter a MAC address This will deny all connections using any IP from this MAC address Any machines not matching any entries on the list will be allowed by default Please note that if you do not set the IP Address and MAC Address these 2 options will be invalid NOTE B Click Add to add the setting into the IP MAC Locking List or click Reset to clear the settings and enter them again Pages 59 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 14 Shota Quota 2 Quota Configuration a IP Address IP Alias Upload Traffic Quota MByte Download Traffic Quota MByte Total Traffic Quota Byte j jen Quota IP Address List Index IP Address Unload Traffic Quota Download Traffic Quota Total Traffic Quota Erb Snr Tees Paes Go Ae O neteyes This function allows you to specify daily traffic volume limitation for any IP address and Netmask After entering the IP Address you can specify Upload Download and Total traffic limitations in megabytes Once any one of the 3 specified
85. raffic or Destination Port for internal to external traffic If you enter an asterisk in both Source and Destination Port options then the QoS policy will apply to all the traffic in both directions 4 2 6 a QoS Policy Configuration source IP Address IP Alias Source Netmask Source Fort oo Destination IP Address IP Alias Destination Netmask Destination Port o E Service IF Bandwidth Mtis Guarantee utis Schedule Always Interface FORT 1 Es Bee Enter the source and destination IP address Netmask port in the corresponding columns Pages 75 119 Multi Service Border Gateway User Manual for NexusWay 800 Series Service Select the data packet type such as TCP or UDP Direction Select ingress for this rule to apply to inbound traffic and egress for it to apply to outbound traffic Bandwidth Enter the bandwidth you would like to maintain as a minimum in Bytes KB or MB Schedule Select a schedule to specify when you would like the policy to be active To set the schedule see 4 1 17 Schedule Setting NOTE B The QoS policy can only be set by IP address and Netmask not by RANGE B Click the Save button after you finish entering all the data on this page Click Add to add the settings into the QoS Policy List or click Reset to reenter them 4 2 6 b QoS Policy List QoS Policy List k source IP source source Port Destination IP Destination Destination Port i B
86. ransmitting through the port For detailed information please see Section A in 1 3 External Components 6 Configure administrator s IP address After successfully connecting to the NexusWay 800 you must establish the link between an administrator s PC and the NexusWay 800 for further network configuration Select one PC as an administrator and change its TCP IP settings to place it in the same network segment as the NexusWay 800 s default segment To set administrator s IP to 192 168 0 X 255 255 255 0 please follow the steps below STEP 1 Select Control Panel Network and Dial up Connections and click Properties F3 ebuork and Dial up Connections Die Ed Wee Faworkes Too Advanced tel dick E esearch rers dC OS u FD tethers dB Network erdwhupconencns OOO Foe r dh cC 1 at 3 Make New ote area Network and Dial up omection EIS Connections Local Area Cerne ti Tyee LAN Connection status Enabled Metelgent LOJTODTE PCI LITP Controller L3 Diskai the properties of the selected correction Pages 14 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series STEP 2 Select the TCP IP component of the NIC Network Interface Card and click Properties Local Area Connection Properties General Connect using Ba Netelligent 10 100T PCI UTP Controller Components checked are used by this connection File and Printer Sharing Far M
87. riguraton ESP Configuration Puto Policy Aubo Policy Purto Policy All the VPN policies will be listed in VPN Policy List To delete a policy right click on it and select Delete You can also move edit enable or disable a VPN policy by right clicking Pages 98 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 3 3 PPTP Server Not applicable in NexusWay 800 N PPTP Server Server configuration PPTP Server Enable C Disable IP Address Range 192 168 254 240 _ 192 168 254 249 DNS Server 10 88 168 21 IP lias WINS Server 08816821 IP Alias access Conte User Name p Password IP Address nce Bed s IP Address 1 roy dete 2 alex TERRIER 3 jun deieieieieteie Gogh AA Kars Kiar Gay ADA ec CD Aves Please note that this function is only available in NexusWay 805 815 825 and 835 In this option you can enable or disable the NexusWay s PPTP Server which will allow connections from PPTP clients Server Configuration If you enable the PPTP Server you must select an IP address range for PPTP connections This range should be as same as your LAN subnet The maximum number of IP addresses in this range for the NexusWay series is 15 Access Control Enter the users that can access your VPN It is necessary to provide a name password and IP address for each user The NexusWay will accept users according to the IP address with optional Netmask ranges such as 1
88. rval 3 failover 2005 05 31 18 34 42 isp_monitar 3 link HiNet_Dialuyis UDP mode failover isp monitor 2 fiatime data append failover isp monitor 2 received packet 5B bytes from 21 1 78 0 253 failover isp monitor 2 attempt 1 PING 158 985 1 1 from 202 1 60 51 45 send 40 Bytes failover isp monitor 2 timeout 3 identity 53808 retry 3 Interval 3 failover 2005 05 31 16 34 40 isp_monitor 2 linkADSL Leaseline is UDP mode failover Isp monitor na time data append failover jsp monitor 1 received packet 5B bytes from 861 61 128 1 55 failover isp_monitor attempt 1 PING 158 95 1 1 from 202 160 87 15 send 40 Bytes failover isp_monitor 1 timeout 3 identity 27302 retry 3 Interval 3 failover 2005 05 31 16 34 40 isp monitor link Neteyes Ig UDP mode failover isp monitor 3 no time data append failover isp monitor 3 recelved packet 46 bytes from 81 230 0 254 Figure 3 The graphics shown after clicking the Display Health Check button Pages 106 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 4 3 LAN Status LAN Status DHCP Server Offered IP Range i Subnet Mask 1 ipe Sco ten HL Sle Hen E 1 SUE nre Do P lernen en enses db ET Hei DUE Mac IP Mapped List Index Virtual IP Address MAC Address Host Name Ere S AO GEER seers Ge All a Res Ens era This option shows information on the current LAN configuration The DHCP Server section lists settings related to the D
89. sed on one of these four settings to achieve a balanced traffic load Max Connections The maximum number of allowed connections default value 1000 Cost The value you enter here will be a used as a basis for calculation when the balance mode Link Cost is activate see 4 1 9 section New traffic will be directed to the WAN with the lowest cost For example if the relative cost of WAN 1 and WAN 2 is 1 3 enter 1 in the Cost column for WAN 1 and 3 for WAN 2 When you select Link Cost in Balance Mode column system will give priority to WAN 1 for traffic flow If your link cost is not charged by data flow amount you can ignore this field Weight Set the load ratio of traffic in this column For example if the ratio of bandwidth between WAN 1 and WAN 2 is 1 3 enter 1 in the Weight column for WAN 1 and 3 for WAN 2 Traffic will then be distributed to the leased lines according to this radio Upload Download Bandwidth Enter the maximum allowed bandwidth of the line you selected Upload means upload speed while Download means download speed For example for an ADSL with a two way speed of 512K enter 512 in both Upload and Download columns in Kbps You are recommended to enter the exact same maximum allowed bandwidth as it is provided by your ISP If you set it too high the WAN will be detected as not being fully utilized and the system will then direct more network traffic the flow to it which may
90. ser admin logged on Aug 71 10 34 59 Ness va webjadmin User admin logged on Aug 21 08 09 03 Mexus ay web admin User admin logged on Sep 20 21 13 53 cyclone CEDO SF hinet activated Sep 20 71 13 59 cyclone web adrmin 197 16 amp 1568 90 WAN Settings Saved Sep 20 20 58 04 cyclone web admrnin User admin logged on Sep 2012 57 43 cyclone CHID cluster ciated Sen 20 17 57 43 cyclone CEID vpn indiaized Sep 20 12 57 43 cyclone CENO vpn server started Sep 20 12 57 42 cyclone CBOO Timezone Asira Talpei Sen 201257 42 cyclone CHID prom stoped Sep 20 12 57 42 cyclone CHIO transparent proxy stoped Sep 20 12 57 87 cyclone CBDO qas initialtzad Sen 70 1275747 cyclone CEID feewall rules added Sep 20 12 57 39 cyclone CEOD LAN activated Sep 20 12 57 38 cyclone CBDO WAN Interface Sel sen 701757 39 cyclone CHID WAN Iriderace 3 Sel Sep 20 12 57 38 cyclone CEDU WAN Interface 2 Set Sep 20 12 57 38 cyclone CEDO WAN Interface 1 Sei Sep 20 12 57 39 cyclone CEDO LAN Interface Sel iret g SEES oie fees Bem A Gite Goel This option allows the administrator to export syslog messages to external machines and view some critical messages Enter the IP address of the machine where you want to export the syslog messages to UDP packets on port 514 The client machine must have a syslog client installed to properly receive the syslog messages RFC 3164 describes the protocol used There is a Show syslog in a New Window button which
91. ster setting right click on it and select Delete You can also move edit enable or disable a server cluster setting by right clicking Pages 70 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 2 4 SNMP SNMP F SNMP Enable C Disable Read Only Community Jim Eiht 9 MIA Ham khera oo A O re esee SNMP Simple Network Management Protocol is a set of protocols for the management of complex networks SNMP is performed by sending PDUs Protocol Data Units to different portions of a network SNMP compliant devices can store the data about themselves in Management Information Bases MIB and when requested return the data to the SNMP requesters SNMP Enable Disable Select Enable or Disable to start or stop the SNMP function Read Only Community This option will only be displayed when you have selected the SNMP Enable option You can Define a name for SNMP requesters to prevent unknown users from accessing the information NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 71 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 2 5 Advanced Feature Advanced Feature rd Operation Configuration Roditi Duns ii Gyitem Configuration Contig Manager Restor Factory Dating Fiasiorn Benet Seiten B
92. t bees a pru nes 86 Bhs Dey URL FION EE ETT 87 oN FAV Ay at AD OY acces sice sath mU mM 88 LION PU E 89 4 3 1 IKE Policy Not applicable in NexusWay 800 s 89 4 3 2 VPN Policy Not applicable in the NexusWay 800 92 4 3 3 PPTP Server Not applicable in NexusWay 800 99 4 3 4 Certificate Authority N A in the NexusWay 800 100 A CGV OTIC HID Os a 102 d ped S Stet SII lS ee en 102 ae VV MENU I NEN OO T OT 104 dA LAN Stalis eirinen rnn a a DT 107 4 4 4 Firewall Status isons caversinescomossvavevsdacecsuetosaiianstnentactsuesauelonctecoteasieestsacet 108 E OO UII a E EE TE 108 Asd O E RITE E TT 108 4 4 7 IDIAPDOSLIOS sinincecncsexssaesnineeanetestasaeuineecacnetmedeveceeneheqasseveaasshaneureaeueness 109 4 4 8 Admin PassSWOER spss 01scapesicnnetosanssdageecamobsysinassaatinsedtyusiedestecamebeuwinesseasics 111 udo 112 A sui e PT 113 PIECE SOIT UL LLL 114 6 1 Appendix I Trouble Shooting sesseeessesssssssssseee enne 114 O I T General PLODIGIIS oec or ue ORO E toc arua E b need tata baud ian 114 D 1 7 Internet JC CORB eoe ceases AE O A ET reas 115 6 2 Neteyes Customer Service Information esses 116 Pages 4 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series Pages 5 119 Multi Service Border Gateway User
93. t the secondary DNS field The Transparent function only applies to Static IP B IP address 163 200 200 250 as provided by ISP B Subnet Mask 255 255 255 0 as provided by ISP B Gateway 163 200 200 254 as provided by ISP B Primary DNS 168 95 1 1 as provided by ISP BH X Secondary DNS 168 95 1 2 as provided by ISP Pages 36 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 2 c PPPoE Dialup PPPoE Dialup Wiser Name Password A user name and password will be provided by ISP if PPPoE Dialup mode is used as the Connection Type If this is the type of connection provided enter the User Name and the Password in the corresponding field 4 1 2 d Dynamic IP Dynamic IP Hostname For Dynamic IP mode you only need to fill in the Hostname You can either enter a name or leave it blank 4 1 2 e PPTP IPPTP IP Address Subnet Mask IP Alias Server IP Address Liser Mame Password Fill out each field with the information provided to you by your ISP PPTP is only available from ISPs in the Europe and US region Pages 37 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 2 f Bandwidth and Connections Bandwidth and Connections Max Connections 1000 Cast o Weight 0 Upload Download Bandwidth g Kbps 512 Kbps Complete the settings in this option for the connection type you just selected The traffic flow is distributed ba
94. t to not change any network settings before having traffic flow through the proxy For more information about the Web proxy server and the transparent proxy see section 4 2 12 B URL Filter This function allows you to prohibit internal users from viewing certain URL s for security or confidentiality considerations For more setting information see section 4 2 13 B High Availability This function allows you to manage configurations for a dual device setup Configurations can be transferred between machines and the machines selected mode configured For more setting information see section 4 2 14 Pages 26 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 3 3 VPN Setup Not applicable in NexusWay 800 Please note that this function is only available on the NexusWay 805 815 825 and 835 VPN Setup allows you to setup the functions about the IKE Policy VPN Policy PPTP Server and Certification Authority Read the instructions and find a solution that meets your requirement best before starting to perform any setup procedures for the NexusWay 800 B IKE Policy EE In this option you can configure settings to exchange keys that IHE Policy d P SER UPN Policy PPTP Server are used when creating a VPN Please note that Main Mode is about three times slower than Aggressive Mode due to additional key generation steps but is more secure For more Certification Authority setti
95. te and share a secret key A 768 bit algorithm is used by Group 1 a 1024 bit by Group 2 and a 1536 bit by Group 5 which subsequently has the highest security requires the longest time and the most resources Pages 90 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series IKE Lifetime Enter a value between 60 to 86 400 seconds for how long you want an IKE Security Association to remain valid after establishment Generally the shorter the lifetime is the more secure your IKE negotiations will be However with longer lifetimes Security Associations between two points can be set up more quickly after the first one If you have no idea what is a good lifetime it is suggested to enter the default value of 28 800 seconds 8 hours NOTE B Click Save button on right top corner of the panel after you finish entering all the data on this page Click Add to add the settings into the IKE Policy List or click Reset to enter them again After clicking the Add button the settings will be listed in the IKE Policy List To delete an IKE Policy right click and select Delete You can also move edit enable or disable the IKE policy by right clicking Pages 91 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 3 2 VPN Policy Not applicable in the NexusWay 800 j VPN Policy Lom Policy Marie EE Faller Wb hra NH TEC E o gt 3 0 AEAF Hold CTL to
96. te domestico il prodotto pu causare interferenze radio nel cui caso possibile che l utente debba assumere provvedimenti adeguati Pages 2 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series Table of Contents Chap L E OCU CUO IN NR 6 PINGUIS a 6 1 2 What s inside the Product eeeeseeseeeeeeeeeeeeeseeeeeee eene eene nnn nennen 6 1 3 External Components uu eeevescessioueteex tested eio Ia PeEeU EUR SURE atta M eae tUa one a ove URN UE Phe SCLC IEW 9 DD WE COLLE TUTTO TE 10 CAD 2 dns CAM AUN OM o occi Od ODER E EE OGERTEIEU E RISE EE EE ERAN UERRUI DIR EAE ET 12 2ed r2 2o TUI NOR 12 AN 1010727217 I CLP u 13 24 Con eurer CSO VOUT LAN esci edet HIR OU EH ISBN Mm ONE 16 2 32 Check I CRP S tu p 16 Chap 3 F UNCON InstEUCLDIOIS s sesiesesccdscssssescessscocssnsssessesescedscusssescevessocbecsssesseyestonssesess 21 Tn TASES OUI T c E 21 3 2 Advance Sele S NETTEN 24 3 3 VPN Setup Not applicable in NexusWay amp 00 cessere 27 3 4 Network INJO P 28 SUL 30 DO Pull Down LAN UAL E TASS ERE 30 5575 7 30 bow H 31 Chap 4d OM BUNT AON oo eese E 32 Heed IASG SCID Em
97. th your LAN s subnet Gateway Enter a default gateway IP address This IP must be one of the LAN IP s of the NexusWay 800 Subnet Mask The default subnet mask address of your LAN must be entered in this column Pages 43 119 Multi Service Border Gateway User Manual for NexusWay 800 Series DNS The IP address of DNS Server to be used Default Lease Time This is the Periodical IP address release time in seconds with recommended default value 86400 24 hours The IP address will be released after using for the lease time you set Please note that zero 0 is not allowed in this column Max Lease Time This is the maximum IP lease time in seconds with recommended default value 86400 24 hours The maximum time in seconds you want the system to hold the DHCP address Please note that zero 0 is not allowed in this column Interface Select the LAN port you want to configure this DHCP server for NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 44 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 6 DHCP MAC IP MAC MAC IP Mapped Virtual IP Address IP Alias MAC Address Hostname ai mee Er anne TEES feto Ea A Ria eo T m a The DHCP server will continuously assign IP addresses to the PCs on LAN If
98. tools you want to use Ping is used to determine whether a specific IP address is accessible by sending several data packets to the specified address and waiting for a reply Ping is primarily used to troubleshoot Internet connectivity Traceroute is used to trace the path a packet from your computer travels along to reach a remote host the tool shows how many hops the packet requires to reach the host and the time each hop takes Traceroute can help determining where the longest delays are occurring And traceroute works by sending packets with low time to live TTL fields The TTL value specifies how many hops the packet is allowed before it is returned When a packet can t reach its destination due to an excessively low TTL value the last host returns the packet and identifies itself By sending a series of packets and incrementing the TTL value with each successive packet traceroute finds out which are the intermediary hosts Nslookup is a tool to query a DNS server and look up the IP address information of computers in the Internet Pages 110 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 4 8 Admin Password Admin Password Admin Configuration User Name Wiser Password Allow IP Address IF Alias Authority Read Only Read Write Add Reset Administrator List Index User Name User Password Allow IP Address Eri mA Ets Kees Ga ARS O netreuves This option allows you add and
99. traffic quotas is exceeded all further traffic to or from the target will be denied The traffic volume will be recalculated from 0 at midnight If you wish to allow traffic to or from a computer that has exceeded its daily quota you can disable the quota rule for that computer To reset a quota you must edit the rule to add the additional traffic allowance Disabling and enabling a rule will not clear the daily traffic amount used by that machine NOTE B Click Add to add the settings into the following Quota IP Address List or click Reset to clear the settings and enter them again Pages 60 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series 4 1 15 IP Control IP Control IP Cantral Canfiguratian IP Adiy timeri Ugplgad Traffic Linilaien Download Traffic Limitation Total Trafic Limitation Connagction Limrafion IP ontrol List P AddresaNetmashupload Trame Limitation ooanioad Traffic Mota 1 rti n Limitation Bean a NEN og io How Maa CO Cee This function allows you to shape traffic volume for any IP address and Netmask After entering the IP Address information you can specify Upload Download Total traffic and connection limitations in kilobytes per second This is a feature designed to maintain a speed limit for the selected IP address and Netmask NOTE B Click Add to add the settings into the following Quota IP Address List or click Reset to clear the settings an
100. u select is fully matched Policies are evaluated in a top to bottom fashion so if a rule has a match at position two and position five position two will take precedence Policies can be reordered or disabled after creation Internal IP Address Enter the internal IP address to which you want to provide the load balancing the start point of the outgoing traffic flow such as 192 168 0 1 An asterisk can be placed here to match any value Subnet Mask Enter the internal IP subnet mask that you want to provide the load balancing to such as 255 255 255 0 which represents whole Class C or 255 255 255 255 which represents one IP Internal Port Enter the internal port range to be set The range must be numbers between 1 and 65535 An asterisk can be placed here to match any value External IP Address Enter the external IP address to which you want to provide load balancing the destination of the outgoing traffic flow For example 168 95 1 1 An asterisk can be placed here to match any value Pages 52 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series Subnet Mask Enter the external IP subnet mask to which you want to provide the load balancing such as 255 255 255 0 which represents every Class C and 255 255 255 255 which is a single IP External Port Enter the external port range for the outbound policy As with internal ports the numbers must be between 1 and 65
101. und Robin Even Distribution sonet van ip ims sonet il 1 1 1 Add IPs sonet Interfaces CheckPoints ail Ree Gre Sobel SEs TE bp AE CO nereyves s The NexusWay 800 provides many load balancing modes see the following table for details for LAN users to connect external server from internal users Outbound You can set the load balance mode according to ISP bandwidth and user requirements to distribute network traffic and avoid overloading a single connection Pages 50 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series NexusWay 800 Load Balancing Modes Distribute network traffic evenly in turns WAN1 WAN2 Round Robin Even Distribution WANS automatically Same as above but the lines with larger load ratings will Round Robin by Weight receive more traffic go to Weight option in section 4 1 2 f for setup Line with smallest number of connections has priority for Least Connections new traffic go to Max Connection option in section 4 1 2 f to configure The Line with lowest specific traffic ratio will have priority Upload Download Total for new connections go to Bandwidth option in section Traffic Based 4 1 2 f to setup traffic options Line with lowest number of Sessions gets priority for new Session Based connections See section 4 1 2 f to configure the maximum number of sessions Links with the lowest cost as configured in section Link Cost 4 1 2 f Wan Setup
102. valid Internet addresses separated by commas SA Lifetime Security Association lifetime Enter a value between 60 to 86 400 seconds for how long you want an IKE Security Association to remain valid after initial establishment As a general rule the shorter the lifetime is the more secure your IKE negotiations will be However with longer lifetimes Security Associations can be set up more quickly afterward If you don t know what a good lifetime length is we suggest entering a default value of 28 800 seconds 8 hours Enable AH Authentication Enable this to verify that the contents of a packet have not been changed and to validate the identity of the sender An Authentication Header does not provide packet encryption NOTE Setting here must match with remote VPN Endpoint settings Pages 94 119 ulti Service Border Gateway User Manual for Nexus Way 800 Series Enable ESP Encryption Encapsulated Security Payload Encryption ESP Encryption provides security for the payload data sent through the VPN tunnel NOTE Setting here must match with remote VPN Endpoint settings In general cases AH Authentication and ESP Encryption will be enabled Enable ESP Authentication If you enable ESP Authentication both the IP datagram and ESP Header will be encrypted providing an additional layer of security NOTE Setting here must match with remote VPN Endpoint settings Enable IPSec PFS Perfect Forward Secrecy To enable IPSec
103. xternal Ports Enter an external Port number or range which will be used for internal network services The number of ports mapped from the external IP must match the number of ports mapped to the internal IP If only one port is used for this service enter that port number in the left column NOTE B Some port number are in use by the NexusWay 800 such as SSL 443 SSH 22 and DNS 25 B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page Pages 67 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 2 2 b Port Mapping List Internal IP Address Internal Ports Ype Exterial IP Address External Forts 1 10 88 158 128 z0 z1 TCF All Soi n ELT 4 qp 2 B 10 88 158 128 5800 TCF 202 160 87 15 5800 3 10 88 158 128 S400 TCF 202 160 87 15 S400 4 10 88 158 147 a TCP 202 160 57 15 81 5 10 88 158 25 29 TCF 202 160 87 15 ao B 10 88 158 25 11 TOP 202 160 8715 110 F 10 858 168 25 a TCP 202 160 87 15 a Disabled 10 86 1665 53 TCF 202 160 87 7 53 Disabled 10 88 158 7 53 Upr 202 160 87 7 53 Disabled 10 88 168 7 a TCF 202 160 87 7 al 11 10 88 158 241 443 TOP 202 160 87 15 92 All Mappings you set will be listed in this table To delete a Mapping right click on it and select Delete You can also move edit enable or disable the Mapping by right clicking 4 2 3 Server Clust
104. you want a certain PC on LAN to use a fixed IP address you can specify an IP address to map with a specific MAC address of particular PC This MAC IP Mapping function will reserve particular IP addresses for the PCs you set so that they can dynamically receive the same IP address every time In other words fixed IP address will be assigned to fixed MAC address i e PC The PC user can then provide a fixed IP address to other people and applications Pages 45 119 Multi Service Border Gateway User Manual for NexusWay 800 Series 4 1 6 a MAC IP Mapped LL Virtual IP Address NEN MAC Address Hostname IEEE aio Virtual IP Address Enter a virtual IP address you want to assign to certain MAC address MAC Address MAC Address is also called Physical Address or Network Adapter Address Enter the MAC address of a host PC to which you want to assign above IP address The format of a MAC address should be aa bb cc dd ee ff using the characters 0 9 and a f Hostname Give a name to the combination MAC virtual IP address you just set NOTE B Click the Save button on right top corner of the panel after you finish entering all the data on this page otherwise you will immediately lose all the settings when exiting the page B Click Add to add the settings into the following MAC IP Mapped List or click Reset to clear the settings and enter them again 4 1 6 b MAC IP Mapped List LIZIUTTCIX
Download Pdf Manuals
Related Search
Related Contents
シネマ 3D モニター Manual de usuario del proyecto AI-Live 船舶インシデント調査報告書 Manuale d`uso per l`utente Robot estrattore con nastro di Senior Design II Report - University of Central Florida Samsung SC650 Senseo Senseo HD7825/61 coffee maker Manual de instruções do medidor de energia modelo Monitor AutoWhiteAdjustment SN75DP130 EVM Users Manual (Rev. A) Copyright © All rights reserved.
Failed to retrieve file