High Speed High Speed ADSL2+ ADSL2+ Modem-Router Modem-Router
Connect your PC for high-speed Internet access
Belkin Tech Support Belkin Ltd. US: 877-736-5771 4 Pioneer Avenue 310-898-1100 ext. 2263 Tuggerah Business Park Europe: 00 800 223 55 460 Tuggerah NSW Australia 2259 Australia: 1800 235 546 +61 (0) 2 4372 8600 New Zealand: 0800 235 546 +61 (0) 2 4372 8603 fax Singapore: 800 616 1790 Belkin B.V. Belkin Corporation Boeing Avenue 333 501 West Walnut Street 1119 PH Schiphol-Rijk, The Netherlands Los Angeles, CA 90220-5221, USA +31 (0) 20 654 7300 310-898-1100 +31 (0) 20 654 7349 fax 310-898-1111 fax
Belkin Ltd. Express Business Park, Shipton Way Rushden, NN10 6GL, United Kingdom +44 (0) 1933 35 2000 Connect +44 (0) 1933 31 2000 fax © 2006 Belkin Corporation. All rights reserved. All trade names are registered trademarks of User Manual respective manufacturers listed. 54g is a trademark of Broadcom Corporation in the United States and/or other countries. Mac, Mac OS, AppleTalk, Apple, and AirPort are trademarks of Apple Computer, Inc., registered in the U.S. and other countries. The mark Wi-Fi is a registered mark of the Wi-Fi Alliance. F5D5630au4 Table of Contents Introduction section section 1. Introduction ...... 1 Thank you for purchasing the Belkin ADSL 2+ Modem-Router. In 1 minutes you will be able to connect to the Internet. The following is Product Features ...... 1 a list of features that make your Modem-Router an ideal solution for 2. Make sure you have the following...... 3 your home or small office. Please be sure to read through this User 2 Package Contents ...... 3 Manual completely. System Requirements ...... 3 Product Features 3 Internet Connection Settings ...... 3 Compatibility with both PC’s and Mac® Computers 3. Knowing your Modem-Router ...... 4 The Modem-Router supports a variety of networking environments 4 4. Connecting your Modem-Router ...... 7 including Mac OS® 8.x, 9.x & v10.x, AppleTalk®, Linux®, Windows® Connecting your Computer via Ethernet ...... 7 98SE, ME, NT, 2000 and XP and others. You need an Internet browser 5 Connecting your ADSL Line ...... 7 and a network adapter that supports TCP/IP (the standard language of the Internet). 5. Setting up your computer ...... 8 6 Manually Configuring Network Adapters in Front-Panel LED Display Windows XP, 2000, or NT...... 8 7 Manually Configuring Network Adapters in Windows 98SE or Me . . 9 Lighted LED’s on the front of the Modem-Router indicate which functions are in operation. You’ll know at-a-glance whether your Manually Configuring Network Adapters in Mac OS up to 9.x . . . . 10 Modem-Router is connected to the Internet. This feature eliminates 8 Manually Configuring Network Adapters in Mac OS X ...... 10 the need for advanced software and status-monitoring procedures. Recommended Web Browser Settings ...... 11 9 6. Manually Configuring your Modem-Router...... 13 Web-Based Advanced User Interface Understanding the Web-Based User Interface ...... 13 You can set up the Modem-Router advanced functions easily through Navigating the Web Browser Interface ...... 13 your web browser, without having to install additional software onto 10 Setup Wizard ...... 14 the computer. There are no disks to install or keep track of and, best of all, you can make changes and perform setup functions from any System Settings...... 16 11 computer on the network quickly and easily. WAN ...... 19 LAN ...... 24 Integrated 4 Port 10/100 Ethernet Switch NAT ...... 25 Your Modem-Router has the ability to connect to your PC’s with Route ...... 29 10/100 Ethernet. The Ethernet connection will support any OS that Firewall ...... 34 has an Ethernet connection and support for the TCP/IP Protocol. ADSL ...... 43
UPnP ...... 47 Built-in Dynamic Host Configuration Protocol (DHCP) DDNS...... 48 Built-In Dynamic Host Configuration Protocol (DHCP) on-board makes Tools ...... 48 for the easiest possible connection of a network. The DHCP server Status ...... 50 will assign IP addresses to each computer automatically so there is no need for a complicated networking setup. 7. New Zealand Telepermit Special Conditions ...... 53
1 Introduction Make sure you have the following
Package Contents 1 NAT IP Address Sharing • ADSL Modem-Router section Your Modem-Router employs Network Address Translation (NAT) to • RJ11 Telephone Cable share the single IP address assigned to you by your Internet Service 2 Provider while saving the cost of adding additional IP addresses to • RJ45 Ethernet Networking Cable your Internet service account. • Power Adapter 3 • User Manual CD SPI Firewall System Requirements 4 Your Modem-Router is equipped with a firewall that will protect your • An active ADSL service with a telephone wall jack for connecting the network from a wide array of common hacker attacks including IP Modem-Router 5 Spoofing, Land Attack, Ping of Death (PoD), Denial of Service (DoS), IP with zero length, Smurf Attack, TCP Null Scan, SYN flood, UDP • At least one computer with a Network Interface Card (NIC) and Internet flooding, Tear Drop Attack, ICMP defect, RIP defect, and fragment browser installed and correctly configured 6 flooding. • TCP/IP networking protocol installed on each computer connected to the Modem-Router 7 MAC Address Filtering • No other DHCP server on your local network assigning IP addresses to computers and devices For added security, you can set up a list of MAC addresses (unique client identifiers) that are allowed access to your network. Every Internet Connection Settings computer has its own MAC address. Simply enter these MAC Please collect the following information from your Internet Service addresses into a list using the web-based user interface and you can Provider (ISP) before setting up the ADSL Modem-Router. control access to your network. • Internet connection protocol: ______(PPPoE, PPPoA,1483 Bridged*) • Multiplexing method or Encapsulation: ______(LLC or VC MUX) Universal Plug-and-Play (UPnP) Compatibility • Virtual circuit: VPI (Virtual Path Identifier) ______(a number between UPnP (Universal Plug-and-Play) is a technology that offers seamless 0 and 255) operation of voice messaging, video messaging, games, and other applications that are UPnP-compliant. • VCI (Virtual Channel Identifier) ______(a number between 1 and 65535) • For PPPoE and PPPoA users: ADSL account user name ______Support for VPN Pass-Through and password ______If you connect to your office network from home using a VPN • IP address for Domain Name Server ___ . ___ . ___ . ___ (If specified by connection, your Modem-Router will allow your VPN-equipped your ISP) computer to pass through the Modem-Router and to your office *1483 Bridged turns all advanced features off in the Modem-Router, network. such as Firewall & Dynamic DNS. The username and password is then sent via PPPoE connection software installed on your PC.
2 3 Knowing Your Modem-Router Knowing Your Modem-Router
1 The Modem-Router is designed to be placed on a desktop. All of the 3. ADSL DATA LED cables exit from the rear of the Modem-Router for better organization The ADSL Data LED shows you when the Modem-Router is connected to and utility. The LED indicators are easily visible on the front of the the Internet. When the LED is OFF, the Modem-Router is NOT connected 2 Modem-Router to provide you with information about network activity to the Internet. When the LED is solid light, the Modem-Router is section and status. connected to the Internet. When the LED is blinking, the Modem-Router 3 Front Panel is transmitting or receiving data from the Internet. 4 Off Not connected to Internet On - blinking Connected and transmitting or receiving data 5 On Connected to Internet 6 4. ADSL SYNC LED 1. Power LED The ADSL LED flashes light during negotiation with your ISP. It stays 7 light when the Modem-Router is connected properly to your ADSL When you apply power to the Modem-Router or restart it, a short service. period of time elapses while the Modem-Router boots up. When the Modem-Router has completely booted up, the Power LED becomes a SOLID light, indicating the Modem-Router is ready for use. Off No ADSL connection On - blinking Negotiating connection Off Modem-Router is off On ADSL link is up and connected On Modem-Router is on
2. LAN Status LED When a computer is properly connected to a LAN port on the rear of the Modem-Router, the associated LED will light. A solid light means a computer or a network-enabled device is connected. When information is being sent over the port, the LED blinks rapidly.
Off Your computer is not connected On - blinking Connected and transmitting or receiving data On Your computer is connected
4 5 Knowing your Modem-Router Connecting your Modem-Router
1 Back Panel Connecting your Computer via Ethernet 1. Power off your computer and Modem-Router 2 2. Connect your computer to an Ethernet port on the rear of the Modem-Router by using an Ethernet networking cable (an Ethernet network cable is supplied). 3 3. Power on your computer and Modem-Router. section 4 5. ADSL This port is for connection to your ADSL line. Connect your ADSL line Connecting your ADSL Line 5 to this port. Connection for the Modem-Router to the ADSL line varies by country and region. Typically it involves line filter or a line filter with built-in splitter to allow simultaneous use of ADSL service and telephone 6 6. Ethernet service on the same telephone line. Please read the following steps The Ethernet port is RJ45, 10/100 auto-negotiation. Connect your carefully and select appropriate method. 7 network-enabled computers or any networking devices to this port. 1. If your telephone service and ADSL service are on the same telephone line, ADSL line filters are needed for each telephone 7. Reset and device, such as answering machine, fax machine, and caller ID display. Additional splitters may be used to separate telephone The “Reset” button is used in rare cases when the Modem-Router may lines for telephone and the Modem-Router. function improperly. Resetting the Modem-Router will restore the Modem- Router’s normal operation while maintaining the programmed settings. You Note: Do not connect the ADSL line filter between the wall jack can also restore the factory default settings by using the Reset button. Use and the Modem-Router—this will prevent ADSL service from the restore option in instances where you may have forgotten your custom reaching the Modem-Router. password. 2. If your telephone service and ADSL service are on the same a. Resetting the Modem-Router telephone line and you are using an ADSL line filter with built-in splitter, connect the splitter to the telephone wall jack providing Push and hold the Reset button for one second then release it. ADSL service. Then, connect the telephone cord from the ADSL When the PWR light becomes solid again the reset is complete. line filter RJ11 port generally labelled “ADSL” to the RJ11 port b. Restoring the Factory Defaults labelled “ADSL” on the back of your Modem-Router. Connect telephony device to the other port on the ADSL splitter commonly Push and hold the Reset button for ten seconds then release it. labelled “Phone”. An additional ADSL line filter is needed for When the PWR light becomes solid again the restore is complete. another telephone and device on the same line. Note: One RJ11 telephone cord is supplied. When inserting an 8. Power Plug RJ11 plug, be sure the tab on the plug clicks into position to Connect the included 12V 1A DC power supply to this inlet. Using ensure that it is properly seated. the wrong type of power adapter may cause damage to your Modem- 3. If you have a dedicated ADSL service telephone line with an RJ11 Router. wall jack, simply connect a telephone cord from the wall jack to the RJ11 port labelled “ADSL” on the back of your Modem- Router.
6 7 Setting up your Computer Setting up your Computer
1 In order for your computer to properly communicate with your Modem- Manually Configuring Network Adapters in Router, you will need to change your computer’s “TCP/IP Ethernet” Windows 98SE or Me settings to “Obtain an IP address automatically/Using DHCP”. This is 1. Right-click on “My Network Neighbourhood” and select 2 normally the default setting in most home computers. “Properties” from the drop-down menu. Manually Configuring Network Adapters in Windows XP, 2. Select “TCP/IP -> 3 2000, or NT settings” for your 1. Click “Start”, “Settings”, and then “Control Panel”. installed network 4 adapter. 2. Double-click on the “Network and dial-up connections” icon section (Windows 2000) or the “Network Connections” icon (Windows 3. If not already 5 XP). selected, select “Obtain 3. Right-click on an IP address 6 the “Local Area automatically” on Connection” the IP address tab. associated with your 7 network adapter and 4. Click the “Gateway” select “Properties” tab. Highlight from the drop-down anything listed menu. under “Installed Gateways”, and 4. In the “Local click “Remove” Area Connection Properties” window, 5. Click the “DNS Configuration” tab. Click “Disable DNS” click “Internet 6. Click “OK”. Protocol (TCP/ Restart the computer. When the computer restarts, your network IP)” and click the adapter(s) are now configured for use with the Modem-Router. “Properties” button. 5. If not already selected, select “Obtain an IP address automatically” and “Obtain DNS server address automatically”. Click “OK”. Your network adapter(s) are now configured for use with the Modem- Router.
8 9 Setting up your Computer Setting up your Computer
1 Manually Configuring Network Adapters in Mac OS up to Recommended Web Browser Settings 9.x In most cases, you will not need to make any changes to your web In order for your computer to properly communicate with your Modem- browser’s settings. If you are having trouble accessing the Internet or 2 Router, you will need to change your Mac computer’s TCP/IP settings the advanced web-based user interface, then change your browser’s to DHCP. settings to the recommended settings in this section. 3 1. Pull down the Apple menu. Select “Control Panels” and select “TCP/IP”. Internet Explorer 4.0 or Higher 4
2. You will see the TCP/IP control panel. Select “Ethernet Built-In” 1. Start your web browser. Select “Tools” then “Internet Options”. section or “Ethernet” in the “Connect via:” drop-down menu. 2. In the “Internet Options” screen, there are three selections: 5 3. Next to “Configure”, if not already set, choose “Using DHCP “Never dial a connection”, “Dial whenever a network connection Server”. This will tell the computer to obtain an IP address from is not present”, and “Always dial my default connection”. If you the Modem-Router. can make a selection, select “Never dial a connection”. If you 6 cannot make a selection, go to the next step. 3. Under the “Internet Options” screen, click on “Connections” and 7 Manually Configuring Network Adapters in Mac OS X select “LAN Settings...”. 1. Click on the “System Preferences” icon. 4. Make sure there 2. Select “Network” from the “System Preferences” menu. are no check marks next to any of the 3. Select “Built-in Ethernet” next to “Show” in the Network menu. displayed options: 4. Select the “TCP/IP” tab. next to “Configure”, you should see “Automatically “Manually” or “Using DHCP”. If you do not, check the PPPoE tab detect settings”, to make sure that “Connect using PPPoE” is NOT selected. “Use automatic configuration 5. If not already selected, select “Using DHCP” next to “Configure”, script”, and “Use a then click “Apply Now”. proxy server”. Click Your network adapter(s) are now configured for use with the Modem- “OK”. Then click Router. “OK” again in the “Internet Options” page.
10 11 Setting up your Computer Manually Configuring your Modem-Router
1 Netscape Navigator 4.0 Understanding the Web-Based User Interface or Higher The Modem-Router can be configured by any browser such as 1. Start Netscape, Internet Explorer 4.0 or above. Using the web management interface, 2 click on “Edit” then you may configure the Modem-Router and view statistics to monitor “Preferences”. network activity. Type “10.1.1.1” (do not type in anything else such 3 2. In the “Preferences” as “http://” or “www”) in your browser’s address bar. Then press the window, click on “Enter” key. “Advanced” then 4 select “Proxies”. In The following screen will the “Proxies” window, appear in your browser 5
select “Direct section to prompt you to log in. connection to the The default Password Internet”. 6 is “admin”. Enter the Password, and then click the “Log In” button to log 7 in. Mozilla FireFox 1.0 or Higher 1. Start FireFox, click on “Tools” then “Options” 2. In the “General” tab, click “Connection Settings” 3. Select “Direct connection to the Internet” and then click OK. Navigating the Web Browser Interface MAC OS – Safari The Modem-Router’s management interface consists of a Setup Wizard and an Advanced Setup section. 1. Start Safari Setup Wizard 2. Click “Preferences”. Use the Setup Wizard to quickly configure the Modem-Router with 3. Click the “Advanced” tab. your username and password. 4. Click “Change Settings”. The Network panel will open to the Proxies tab. Advanced Setup 5. Verify all boxes are unchecked. To remove a checkmark, click in the box once. Advanced Setup offers more advanced functions such as hacker attack detection, IP and MAC address filtering, virtual server setup, 6. Click the “Apply Now” button. virtual DMZ host, and many more functions. 7. Close “System Preferences“ 8. Close the “Preferences”.
12 13 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Making Configuration Changes Advanced Setup Configurable parameters have a dialog box or a drop-down list. Once Clicking the Home icon a configuration change has been made on a page, most times you will returns you to the home 2 need to click the “SAVE SETTINGS” or “NEXT” button at the bottom page. The Main Menu links of the page to enable the new setting. Some options may also have an are used to navigate to 3 “ADD” button also. other menus that display Note: To ensure proper screen refresh after a command entry, be sure configuration parameters that Internet Explorer 5.0 and above is configured as follows: Under and statistics. 4 the menu Tools/Internet Options/General/Temporary Internet Files/ The Modem-Router’s Settings, the setting for “Check for newer versions of stored pages” advanced management 5
should be “Every visit to the page.” interface contains 14 main section menu items as described in the following table. 6 Setup Wizard After successfully logging into the Modem-Router, you will be Menu Description 7 prompted with the following screen. You can quickly select your country, add in your username and password for your ISP into the Modem-Router. Once you have added all details correctly, click “Save Menu Description Settings”. System Sets the local time zone, the password for The status section shows: administrator access, the IP address of a PC that • Line Status – detects if the telephone line has correct line sync will be allowed to manage the Modem-Router • Line Mode – This shows the current line mode, (G.DMT is common for remotely, and the IP address of a Domain Name ADSL and ADSL2/ADSL2+) Server. • Connected/NO Connection – Shows current Internet connection status WAN Specifies the Internet connection settings. • WAN IP – This is the IP LAN Sets the TCP/IP configuration for the Modem- Address that the ISP Router LAN interface and DHCP clients. has assigned to the NAT Shares a single ISP account with multiple users, Modem-Router. sets up Port forwarding. Route Sets routing parameters and displays the current routing table. Firewall Configures a variety of security and specialized functions including: Access Control, URL blocking, Internet access control scheduling, Intruder detection, and DMZ. ADSL Sets the ADSL operation type and shows the ADSL status.
14 15 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Password Settings UPnP Configures the Modem-Router’s Universal Plug and Play features. Use this page to restrict access based on a 2 DDNS Configures the Dynamic DNS function. password. By default, the Tools Contains options to back up and restore the password is “admin”. 3 current configuration, restore all configuration Passwords can contain settings to the factory defaults, update system from 3 to12 alphanumeric firmware, or reset the system. characters which are case 4 Status Provides WAN connection type and status, sensitive. firmware and hardware version numbers, system Note: If your password 5
IP settings, as well as DHCP, NAT, and firewall is lost, or you cannot section information. gain access to the user 6 interface, press the reset button on the rear panel System Settings (holding it down for at 7 Time Settings least 10 seconds) to restore the factory defaults. (By default the Set the time zone and time server for the Modem-Router. This password is “admin” password.) information is used for log entries and client access control. Enter a maximum Idle Time Out (in minutes) to define a maximum Check “Enable Automatic Time Server Maintenance” to automatically period of time an inactive login session will be maintained. If the maintain the Modem-Router’s system time by synchronizing with connection is inactive for longer than the maximum idle time, it will be a public time server logged out, and you will have to login to the web management system over the Internet. again. (Default: 10 minutes) Then configure two different time servers by Remote Management selecting the options in the Primary Server and By default, management Secondary Server fields. access is only available to users on your local network. However, you can also manage the Modem- Router from a remote host by checking the Enabled check box, and if you wish you can set a HOST ADDRESS, which will only allow that computer to use remote management. The port field should be left as the default setting of 8080
16 17 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 unless you need to change it. After any changes are made you must WAN click on “Save Settings” to apply them. Specify the WAN (Wide Area Network) connection parameters provided Note: If you check “Enabled” and specify an IP address of 0.0.0.0, any by your Internet Service Provider (ISP). 2 host can manage the Modem-Router.
For remote management via WAN IP address you need to connect ATM PVC 3 using port 8080. Simply enter WAN IP address followed by :8080 in the address field of your web browser, for example, 123.123.123.123:8080. The Modem-Router uses This applies unless you change the port setting, in which case you ATM (Asynchronous 4 need to substitute the 8080 for whatever port you assign. Transfer Mode) as its WAN interface. Click on 5 each ATM VC for WAN DNS configuration. section Domain Name Servers 6 are used to map a See the table below domain name (e.g., for a description of the 7 www.somesite.com) to parameters. the equivalent numerical IP address (e.g., 64.147.25.20). Your ISP should provide the IP address of one or more Parameter Description Domain Name Servers. Description Click on the VC to set the values for the If your ISP requires you connection. to manually specify the addresses, enter them VPI/VCI Virtual Path Identifier (VPI) and Virtual Circuit on this page. Identifier (VCI). Encapsulation Specifies how to handle multiple protocols at the ATM transport layer. • VC-MUX - Point-to-Point Protocol over ATM Virtual Circuit Multiplexer (null encapsulation) allows only one protocol running per virtual circuit with less overhead. • LLC - Point-to-Point Protocol over ATM Logical Link Control (LLC) allows multiple protocols running over one virtual circuit (using slightly more overhead).
Protocol Protocol used for the connection
18 19 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 ATM Interface Parameter Description Clicking on the ATM VC Protocol • Disable: Disables the connection. brings up the following 2 screen. The Modem- • 1483 Bridging: Bridging is a standardized layer Router uses ATM as its 2 technology. It is typically used in corporate 3 WAN interface. Protocols networks to extend the physical reach of a single including 1483 Routing, LAN segment and increase the number of stations 1483 Bridging, MAC on a LAN without compromising performance. 4 Encapsulated Routing Bridged data is encapsulated using the RFC1483 (MER), PPPoA and PPPoE protocol to enable data transport. with LLC-SNAP and VC- • PPPoA: Point-to-Point Protocol over ATM is a 5 Mux encapsulations are method of encapsulating data for transmission to section supported for each ATM a far point. 6 PVC. • 1483 Routing: 1483 Routing allows a simple, low- When you have finished cost connection to the Internet via a standard 7 entering your connection parameters, click “SAVE SETINGS”. You Ethernet port. The Modem-Router looks up the can verify that you have established an ADSL connection by clicking network address for each packet seen on the LAN Status at the bottom of the left-hand menu. port. If the address is listed in the routing table as local, it is filtered. If the address is listed under the See the table for a description of the parameters. ADSL port, it is forwarded. Or if the address is not found, then it is automatically forwarded to the default Modem-Router (i.e., the Modem-Router at the head end). • PPPoE: Point-to-Point over Ethernet is a common connection method used for xDSL. • MAC Encapsulated Routing: If your ADSL service is a Bridged mode service and you want to share the connection to multiple PC’s, please select MAC Encapsulated Routing. MER is a protocol that allows you do IP routing with NAT enabled.
20 21 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 VPI/VCI See Virtual Path Identifier (VPI) and Virtual Circuit Username Enter user name. Identifier (VCI). Data flows are broken up into fixed Password Enter password length cells, each of which contains a Virtual Path 2 Identifier (VPI) that identifies the path between two Confirm Confirm Password nodes, and a Virtual Circuit Identifier (VCI) that password 3 identifies the data channel within that virtual path. MTU Leave the Maximum Transmission Unit (MTU) Each virtual circuit maintains a constant flow of at the default value (1500) unless you have a cells between the two end points. When there is particular reason to change it. 4 no data to transmit, empty cells are sent. When data needs to be transmitted, it is immediately 5 inserted into the cell flows. section
Encapsulation Shows the packet encapsulation type. 6 Packet encapsulation specifies how to handle Clone MAC Address multiple protocols at the ATM transport layer. Clicking on the Clone MAC • VC-MUX: Point-to-Point Protocol over ATM Virtual Address brings up the 7 Circuit Multiplexer (null encapsulation) allows only following screen. one protocol running per virtual circuit with less Some ISPs may require overhead. that you register your • LLC: Point-to-Point Protocol over ATM Logical MAC address with them. If Link Control allows multiple protocols running over this is the case, the MAC one virtual circuit (using slightly more overhead). address of the Modem- Router must be changed manually to the MAC QoS Class ATM QoS classes including CBR, UBR and VBR. address that you have PCR/SCR/MBS QoS Parameters - PCR (Peak Cell Rate), SCR registered with your ISP. (Sustainable Cell Rate) and MBS (Maximum Burst Most ISP’s in Australia Size) are configurable. and New Zealand do not require this option. IP Address If your IP address is assigned by the ISP each time you connect, leave this field all zeros. Otherwise, enter your ISP supplied static IP address here. Subnet Mask If your subnet mask is assigned by the ISP each time you connect, leave this field all zeros. Otherwise, enter your subnet mask here. Connect Type Sets connection mode to always connected, automatic or manual connection. Idle Time Enter the maximum idle time for the Internet connection. (minutes) After this time has been exceeded the connection will be terminated.
22 23 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 LAN DHCP Client List Use the LAN (Local The DHCP Clients List Area Network) menu to displays the IP Address, 2 configure the LAN IP Host Name and MAC address and to enable Address of each client 3 the DHCP server for that has requested an IP dynamic client address address since the last allocation. reboot of the Modem- 4 Router. Check the FIX box to have the IP address and the MAC address linked 5 so that the IP address will section always be assigned as it is 6 on this screen. Parameter Description 7 IP Address The IP address of the Modem-Router. NAT IP Subnet Mask The subnet mask of the Modem-Router. From this section you can configure the Virtual Server, and Special Application features that provide control over the TCP/ UDP port DHCP Server To dynamically assign an IP address to client PCs, openings in the Modem-Router’s firewall. This section can be used to enable the DHCP (Dynamic Host Configuration support several Internet based applications such as web, email, FTP, Protocol) Server. and Telnet. Lease Time Set the DHCP Lease Time
DHCP Option If you wish you can Specify the Name of your NAT Settings 60 Vendor ID DHCP Server (Optional) NAT allows one or more Lease Time Specify the length of time that the DHCP will public IP addresses to be assign an IP address to a computer for. shared by multiple internal Start IP Specify the start IP address of the DHCP pool. Do users. You can enable not include the gateway address of the Modem- or disable NAT here. Router in the client address pool. (See “TCP/IP Recommended setting = Configuration”). If you attempt to include the Enable. Modem-Router gateway address (10.1.1.1 by default) in the DHCP pool, an error dialog box will appear. If you change the pool range, make sure the first three octets match the gateway’s IP address, i.e., 10.1.1.xxx. End IP Specify the end IP address of the DHCP pool. Domain Name If your network uses a domain name, enter it here. Otherwise, leave this field blank.
24 25 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Address Mapping Special Applications Use Address Mapping to Some applications, such allow a limited number of as Internet gaming, 2 public IP addresses to be video conferencing, translated into multiple Internet telephony and 3 private IP addresses for others, require multiple use on the internal LAN connections. These network. This also hides applications cannot work 4 the internal network for with Network Address increased privacy and Translation (NAT) enabled. security. If you need to run 5 applications that require section multiple connections, 6 use the following screen to specify the additional public ports to be opened for each application. 7 Port Forwarding Specify the public port number normally associated with an If you configure the Port application in the Trigger Port field. Set the protocol type to TCP Forwarding settings, or UDP, and then enter the ports that the application requires. The remote users accessing ports may be in the format 7, 11, 57, or in a range, e.g., 72-96, or a services such as web combination of both, e.g., 7, 11, 57, 72-96. or FTP at your local site via public IP addresses Popular applications can be automatically requiring multiple ports redirected to local servers are listed in the Popular configured with private Applications field. From IP addresses. In other the drop-down list, choose words, depending on the the application and then requested service (TCP/ choose a row number to UDP port number), the copy this data into. Modem-Router redirects Note: Choosing a row the external service request to the appropriate server (located at that already contains data another internal IP address). will overwrite the current For example, if you set Type/Public Port to TCP/80 (HTTP or web) settings. and the LAN IP Address/LAN Port to 10.1.1.3/80, then all HTTP requests from outside users will be transferred to 10.1.1.3 on port 80. Therefore, by just entering the IP address provided by the ISP, Internet users can access the service they need at the local address to which you redirect them. The more common TCP service ports include: HTTP: 80, FTP: 21, Telnet: 23, and POP3: 110.
26 27 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 NAT Mapping Table Route NAT Mapping Table These pages define displays the current routing related 2 NAPT (Network Address parameters, including Port Translation) address static routes and Routing 3 mappings. The NAT Information Protocol (RIP) address mappings are parameters. listed 20 lines per page, Static Route Parameters 4 click the control buttons to move forwards and Static routing is the backwards. As the NAT manual method used to 5 mapping is dynamic, a set up routing. A network section Refresh button is provided administrator enters 6 to refresh the NAT routes into the Modem- Mapping Table with the Router using the following most up-to-date values. screens. This method has 7 the advantage of being predictable, and simple to set up. It is easy to The content of the NAT Mapping Table is described as follows: manage in small networks but does not scale well. • Protocol - protocol of the flow. • Local IP - local (LAN) host’s IP address for the flow. Parameter Description • Local Port - local (LAN) host’s port number for the flow. • Pseudo IP - translated IP address for the flow. Index Displays the number of the route. • Pseudo Port - translated port number for the flow. Network Displays the IP address of the remote computer Address for which to set a static route. • Peer IP - remote (WAN) host’s IP address for the flow. Subnet Mask Displays the subnet mask of the remote network • Peer Port - remote (WAN) host’s port number for the flow. for which to set a static route. Gateway Displays the WAN IP address of the gateway to the remote network. Configure Allows you to modify or delete configuration settings
28 29 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Click Add or Edit to RIP Parameter display the following page The device supports and add a new static route Routing Information 2 to the list. Protocol (RIP) v1 and v2 to dynamically exchange 3 routing information with adjacent Modem-Routers. 4 5 section 6
Parameter Description 7 Parameter Description RIP mode Globally enables or disables RIP. Index Displays the number of the route. Auto summary If Auto summary is disabled, then RIP packets will Network Enter the IP address of the remote computer for include sub-network information from all sub¬net Address which to set a static route. works connected to the ADSL Modem-Router. Subnet Mask Enter the subnet mask of the remote network for If enabled, this sub-network information will be which to set a static route. summarized to one piece of information covering all sub-networks. Gateway Enter the WAN IP address of the gateway to the remote network. Interface The WAN interface to be configured. Operation Disable: RIP disabled on this interface. Mode Enable: RIP enabled on this interface. Silent: Listens for route broadcasts and updates its route table. It does not participate in sending route broadcasts. Version Sets the RIP version to use on this interface. Poison Reverse A method for preventing loops that would cause endless retransmission of data traffic.
30 31 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Routing Table Authentication None: No authentication.
Required Password: A password authentication key is 2 included in the packet. If this does not match what is expected, the packet will be discarded. This method provides very little security as it 3 is possible to learn the authentication key by watching RIP packets. 4 MD5: An algorithm that is used to verify data integrity through the creation of a 128-bitmessage digest from data input (which may be a message 5 of any length) that is claimed to be as unique to section that specific data as a fingerprint is to a specific 6 individual. Authentication Password or MD5 Authentication key. Parameter Description Code 7 Flags Indicates the route status: C = Direct connection on the same subnet. RIP sends routing-update messages at regular intervals and when the S = Static Modem-Router network topology changes. When a Modem-Router receives a routing R = RIP (Routing Information Protocol) assigned update that includes changes to an entry, it updates its routing table route. to reflect the new route. RIP Modem-Routers maintain only the best I = ICMP (Internet Control Message Protocol) route to a destination. After updating its routing table, the Modem- Redirect route. Router immediately begins transmitting routing updates to inform Network Destination IP address other network Modem-Routers of the change. Address Netmask The subnetwork associated with the destination. This is a template that identifies the address bits in the destination address used for routing to specific subnets. Each bit that corresponds to a “1” is part of the subnet mask number; each bit that corresponds to “0” is part of the host number. Gateway The IP address of the Modem-Router at the next hop to which frames are forwarded. Interface The local interface through which the next hop of this route is reached. Metric When a Modem-Router receives a routing update that contains a new or changed destination network entry, the Modem-Router adds 1 to the metric value indicated in the update and enters the network in the routing table. 32 33 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Firewall Access Control Add PC The Modem-Router’s The settings in the screen firewall enables access shot below will block 2 control of client PCs, all email sending and blocks common hacker receiving. 3 attacks, including IP Define the appropriate Spoofing, Land Attack, settings for client PC Ping of Death, IP with services (as shown 4 zero length, Smurf Attack, above). Click “OK” to save UDP port loopback, Snork your settings. The added Attack, TCP null scan, and 5
PC will now appear in the section TCP SYN flooding. Access Control page. 6 Access Control 7 Access Control allows MAC Filter users to define the outgoing traffic permitted or not-permitted through the WAN interface. Use this page to block access to your network The Modem-Router can also limit the access of hosts within the local using MAC addresses. area network (LAN). The MAC Filtering Table allows the Modem-Router to enter up to 32 MAC addresses that are not allowed access to the The Modem-Router can WAN port. also limit the access of hosts within the local area The following items are displayed on the Access Control screen: network (LAN). The MAC Filtering Table allows the Modem-Router to enter Parameter Description up to 32 MAC addresses Enable Filtering Enables or disables the filtering function. Function that are allowed access to the WAN port. All other Normal Filtering Displays the IP address (or an IP address range) devices will be denied Table filtering table. access.
Click Add PC on the Access Control screen to view the following page.
34 35 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 URL Blocking Edit Schedule Rule To configure the URL You can create and edit Blocking feature, use the schedule rules on this 2 table below to specify the page. web sites (www.somesite. Define the appropriate 3 com) and/or keywords settings for a schedule you want to filter on your rule (as shown on the network. above screen). The rule 4 To complete this in the screen shot above configuration, you will prohibits emailing after 5
need to create or modify 8.00am to 11.59pm. Upon section an access rule in “Access completion, click “OK” to Control”. To modify an save your schedule rules. 6 existing rule, click the Edit option next to the rule you 7 want to modify. To create a new rule, click on the Add PC option. Intrusion Detection From the Access Control Page, Add PC section, check the option for The Modem-Router’s “WWW with URL Blocking” in the Client PC Service table to filter out firewall inspects packets the web sites and keywords selected below, on a specific PC. at the application layer, maintains TCP and UDP The Modem-Router allows the user to block access to web sites from session information a particular PC by entering either a full URL address or just a keyword. including timeouts and This feature can be used to protect children from accessing violent or number of active sessions, pornographic web sites. and provides the ability to detect and prevent certain Schedule Rule types of network attacks such as Denial-of-Service (DoS) attacks. You may filter Internet access for local clients based on rules. Each access control rule may be activated at a scheduled time. Define the schedule on the Schedule Rule page, and apply the rule on the Access Control page. Click Add Schedule Rule.
36 37 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Network attacks that deny Stateful Packet This option allows you to select access to a network device Inspection different application types that are are called DoS attacks. using dynamic port numbers. If you 2 DoS attacks are aimed wish to use Stateful Packet Inspection at devices and networks (SPI) for blocking packets, click on the with a connection to the 3 Yes radio button in the “Enable SPI and Internet. Their goal is not Anti-DoS firewall protection” field and to steal information, but then check the inspection type that you 4 to disable a device or need, such as Packet Fragmentation, network so users no longer TCP Connection, UDP Session, FTP have access to network 5 Service, H.323 Service, and TFTP resources. section Service. It is called a “Stateful” packet The Modem-Router inspection because it examines the 6 protects against DoS contents of the packet to determine attacks including: Ping of the state of the communication; i.e., Death (Ping flood) attack, it ensures that the stated destination 7 SYN flood attack, IP computer has previously requested the fragment attack (Teardrop current communication. This is a way Attack), Brute-force of ensuring that all communications are attack, Land Attack, IP initiated by the recipient computer and Spoofing attack, IP with are taking place only with sources that zero length, TCP null scan are known and trusted from previous (Port Scan Attack), UDP interactions. In addition to being more port loopback, Snork rigorous in their inspection of packets, Attack. stateful inspection firewalls also Note: The firewall does not close off ports until a connection to significantly affect system the specific port is requested. When performance, so we advise particular types of traffic are checked, enabling the prevention only the particular type of traffic features to protect your network. initiated from the internal LAN will be allowed. For example, if the user only Parameter Defaults Description checks FTP Service in the Stateful Packet Inspection section, all incoming Enable SPI Yes The Intrusion Detection feature of the traffic will be blocked except for FTP and Anti- VoIP Modem-Router limits the access connections initiated from the local DoS firewall of incoming traffic at the WAN port. LAN. protection When the Stateful Packet Inspection (SPI) feature is turned on, all incoming Discard Ping Prevents a ping on the Modem- packets are blocked except those from WAN Router’s WAN port from being routed types marked with a check in the Discard to the network. Stateful Packet Inspection section at the top of the screen.
38 39 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 RIP Defect Enabled If the Modem-Router does not reply to H.323 data 180 secs The length of time for which an H.323 an IPX RIP request packet, it will stay channel idle session will be managed if there is no in the input queue and not be released. timeout activity. 2 Accumulated packets could cause Total 300 Defines the rate of new un-established the input queue to fill, causing severe incomplete sessions sessions that will cause the software to 3 problems for all protocols. Enabling TCP/UDP start deleting half-open sessions. this feature prevents the packets sessions HIGH accumulating. 4 Total 250 Defines the rate of new un-established Your E-mail Enter your email address. incomplete sessions sessions that will cause the software to Address TCP/UDP stop deleting half-open sessions. 5 SMTP Server Enter your SMTP server address sessions LOW section Address (usually the part of the email address Incomplete 250 Maximum number of allowed 6 following the “@” sign). TCP/UDP sessions incomplete TCP/UDP sessions per POP3 Server Enter your POP3 server address sessions (per minute. 7 Address (usually the part of the email address min.) HIGH following the “@” sign). Incomplete 200 Minimum number of allowed User Name Enter your email account user name. TCP/UDP sessions incomplete TCP/UDP sessions per sessions (per minute. Password Enter your email account password. min.) LOW Fragmentation 10 secs Configures the number of seconds that Maximum 10 Maximum half-open fragmentation half-open wait a packet state structure remains active. incomplete packet number from same host When the timeout value expires, the TCP/UDP Modem-Router drops the unassembled sessions packet, freeing that structure for use number from by another packet. same host TCP SYN wait 30 secs Defines how long the software will Incomplete 300 secs Length of time before an incomplete wait for a TCP session to reach an TCP/UDP TCP/UDP session is detected as established state before dropping the sessions detect incomplete session. sensitive time TCP FIN wait 5 secs Specifies how long a TCP session will period be managed after the firewall detects a Maximum 30 Maximum number of half-open FIN-exchange. half-open fragmentation packets from the same TCP connection 3600 secs (1 hour) The length of fragmentation host. idle timeout time for which a TCP session will be packet number managed if there is no activity. from same host UDP session 30 secs The length of time for which a UDP idle timeout session will be managed if there is no activity.
40 41 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 ADSL Maximum 1 secs Length of time before a half-open number of fragmentation session is detected as ADSL Parameters 2 half-open half-open. We recommend leaving fragmentation the Operation Mode at packets from the default Automatic 3 the same host. setting, to automatically Flooding 300 secs Length of time from detecting a flood negotiate with remote 4 cracker block attack to blocking the attack. DSLAM (Digital Subscriber time Line Access Multiplexer). A DSLAM is owned and 5
managed by your ISP, section if the Modem-Router DMZ is having problems 6 If you have a client PC connecting to the Internet, that cannot run an Internet it may be necessary to 7 application properly from force the Operation Mode to your ISP’s preferred connection. behind the firewall, you can open the client up Operation Mode to unrestricted two-way Internet access. Enter • Automatic the IP address of a DMZ • T1.413 Issue 2 (Demilitarized Zone) host • G.992.1 (G.DMT) on this screen. Adding a client to the DMZ • G.922.2 (G.Lite) may expose your local network to a variety of security risks, so it is only recommended that this is used option as a last resort. It is also recommended that you disable and software firewall installed on your PC, this will continue to block ports even if the PC is entered into the DMZ.
42 43 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Status Noise Margin: The Status page displays Upstream Minimum noise margin upstream. ADSL status information. 2 Downstream Minimum noise margin downstream. Maximum
fluctuation in the output power 3 Output Power Attenuation:
Upstream Maximum reduction in the strength of the 4 upstream signal. Downstream Maximum reduction in the strength of the 5
downstream signal. section Fast Path FEC There are two latency paths that may be used: fast 6 Correction and interleaved. For either path a forward error correction (FEC) scheme is employed to ensure higher data integrity. For maximum noise immunity, 7 an interleaver may be used to supplement FEC. Interleaved An interleaver is basically a buffer used to Path FEC introduce a delay, allowing for additional error Correction correction techniques to handle noise Interleaving slows the data flow and may not be optimal for real-time signals such as video transmission. Fast Path CRC Indicates the number of Fast Path Cyclic Error Redundancy Check errors. Interleaved Indicates the number of Interleaved Path Cyclic Path CRC Error Redundancy Check errors. Loss of Signal Momentary signal discontinuities. Defect Loss of Frame Failures due to loss of frames. Parameter Description Defect Line Status Shows the current status of the ADSL line. Loss of Power Failures due to loss of power. Defect Data Rate: Upstream Actual and maximum upstream data rate. Fast Path HEC Fast Path Header Error Concealment errors. Error Downstream Actual and maximum downstream data rate. Interleaved Interleaved Path Header Error Concealment errors. Operation Data/Defect Indication: Path HEC Error
44 45 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 UPnP Statistics (Superframes represent the highest level of data presentation. UPnP (Universal Plug-and- Play) is a technology that 2 Each superframe contains regular ADSL frames, offers seamless operation one of which is used to provide superframe of voice messaging, video synchronization, identifying the start of a 3 messaging, games, and superframe. Some of the remaining frames are other applications that are also used for special functions.) UPnP-compliant. Some 4 Received Number of interleaved superframes received. applications require the Superframes Modem-Router’s firewall Interleaved to be configured in a 5 section Transmitted Number of interleaved superframes transmitted. specific way to operate Superframes properly. This usually 6 Interleaved requires opening TCP and UDP ports, and in Received Number of fast superframes received. some instances, setting 7 Superframes trigger ports. An application that is UPnP compliant has the ability to Fast communicate with the Modem-Router, basically “telling” the Modem- Transmitted Number of fast superframes transmitted. Router which way it needs the firewall configured. The Modem-Router Superframes ships with the UPnP feature disabled. If you are using any applications Fast that are UPnP-compliant, and wish to take advantage of the UPnP features, you can enable the UPnP feature. Click on the “Enable” button then click on the “SAVE SETTINGS” button to save your settings.
46 47 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 DDNS Configuration Tools DDNS (Dynamic Domain 2 Name Server) provides Check Backup Modem- a way to tie a domain Router Configuration name to the Modem- and click “NEXT” to save 3 Routers WAN IP. DDNS your Modem-Router’s allows your domain configuration to a file name to follow your IP named “backup.cfg” on 4 Address automatically your PC. by having your DNS records changed You can then check 5 when your IP Address Restore from saved section changes. Configuration file (backup. 6 cfg) to restore the saved With a DDNS connection backup configuration file. you can host your own 7 web site, email server, To restore the factory FTP site and more at your own location even if you have a dynamic IP settings, check Restore Modem-Router to Factory Defaults and click Address. “NEXT.” You will be asked to confirm your decision. Click “APPLY” to proceed, or “CANCEL” to go back. This Modem-Router supports both DynDNS (www.dyndns.org) and TZO (www.TZO.com) DDNS connections only. You will need to register an account with either of these Dynamic DNS websites in order to Firmware Upgrade utilize this function. Use this screen to update the firmware or user interface to the Parameter Description latest versions. You Provider Select either DynDNS or TZO can download the latest firmware from http://www. Dynamic DNS Enable or Disable DDNS Function belkin.com/dslModem- DDNS Domain Type in your domain name (e.g. mydns.dyndns.org) Routers. Name It is recommended that DDNS Account/ Add your account username or email address you back up your Modem- Email (DDNS Provider will specify) Router’s settings prior to updating the firmware, DDNS Add your account password you may loose all your Password/Key current settings. Refer to
“Backup Modem-Router Configuration”. Tools Use the Tools menu to back-up the current settings, to restore previously saved settings, or to restore the factory default settings.
48 49 Manually Configuring your Modem-Router Manually Configuring your Modem-Router
1 Please note: If your Modem-Router is functioning correctly, we do The following items are included on the Status screen: not recommend you update the firmware. Belkin is not responsible for any consequence as result of a firmware update. Please 2 consult Belkin Technical Support prior to updating the Modem- Parameter Description Router’s firmware. INTERNET Displays WAN connection type and status. 3 Download the file to your hard drive. Then click Browse... to find the Release Click on this button to disconnect from file on your computer. Select the firmware file and click “Open.” Click the WAN. Renew Click on this button to establish “BEGIN UPGRADE” to start the upgrade process. a connection to the WAN. 4 GATEWAY Displays system IP settings, as well as DHCP Reset Server and Firewall status. 5 section This function will reboot INFORMATION Displays the number of attached clients, the the Modem-Router, no firmware versions, and the physical MAC address 6 settings will be lost for each media interface and for the Modem- during this proccess. Router, as well as the hardware version and serial 7 Should your unit number. become unresponsive ATM PVC Displays ATM connection type and status. for any reason, you can simply perform a reset from this page. Performing a reset will DHCP Client List reboot the device. Your configuration settings will remain the same.
Status The Status screen displays WAN/LAN connection status, firmware and hardware version numbers, as well as information on DHCP clients connected to your network.
50 51 Manually Configuring your Modem-Router New Zealand Telepermit Special Conditions
1 Security Log PTC General Warning The security log may The grant of a Telepermit for any item of terminal equipment indicates be saved to a file by only that Telecom has accepted that the item complies with minimum 2 clicking “Save” and conditions for connection to its network. It indicates no endorsement choosing a location. of the product by Telecom, nor does it provide any sort of warranty. 3 DHCP Client Log Above all, it provides no assurance that any item will work correctly in displays information on all respects with another item of Telepermitted equipment of a different DHCP clients on your make or model, nor does it imply that any product is compatible with 4 network. all of Telecom’s network services. 5 This Belkin F5D5730au ADSL Router on Long Lines This Belkin F5D5730au ADSL Router may not achieve the type of 6
“high speed” operation expected when attached to a line that is section longer than intended by the ITU-T ADSL standard i.e. >3 km of 0.4mm cable or a shorter cable length with several tails or multiples. If the 7 Router is installed in such conditions and does not give the expected Parameter Description performance do not refer the matter to the Telecom Fault Service. Security Log Displays illegal attempts to access your network.
Save Click on this button to save the security log file. The Service Covered by These Telepermits Refresh Click on this button to refresh the screen. This Telepermit shows that this Belkin F5D5730au ADSL Router is Clear Click on this button to delete the access log. suitable for connection to Telecom’s existing ADSL1 service. This service is defined by the specification PTC270. When compliance with the specification is proved a PTC272 Telepermit is issued for each product. This Telepermit does not show suitability for connection to a new ADSL2 service when Telecom introduces it. Telecom will require proof of compliance with a new PTC specification when the new ADSL2 service is introduced. This note should be attached to each of the boxes containing these Belkin F5D5730au ADSL Routers:
ADSL2 & ADSL2+ Services ADSL2 and ADSL2+ services are only available from the network of the ADSL Service Provider. Telecom does not currently provide either of the services to customers from its Broadband network. When Telecom introduces either ADSL2 and/or ADSL2+ service this Belkin F5D5730au ADSL Router will have to prove itself suitable for connection to the service.
52 53