Document Outline

• Table of Contents
• List of Figures
• List of Tables
• Introduction
  • 1.1 Features
  • 1.2 System Requirements
  • 1.3 Using this Document
    • 1.3.1 Notational conventions
    • 1.3.2 Typographical conventions
    • 1.3.3 Special messages
• Getting to Know the Internet Security Router
  • 2.1 Parts List
  • 2.2 Front Panel
  • 2.3 Rear Panel
  • 2.4 Major Features
    • 2.4.1 Firewall Features
      • 2.4.1.1 Address Sharing and Management
      • 2.4.1.1 ACL (Access Control List)
      • 2.4.1.2 Stateful Packet Inspection
      • 2.4.1.3 Defense against DoS Attacks
      • 2.4.1.4 Application Command Filtering
      • 2.4.1.5 Application Level Gateway (ALG)
      • 2.4.1.6 URL Filtering
      • 2.4.1.7 Log and Alerts
      • 2.4.1.8 Remote Access
    • 2.4.2 VPN
• Quick Start Guide
  • 3.1 Part 1 — Connecting the Hardware
    • 3.1.1 Step 1. Connect an ADSL or a cable modem.
    • 3.1.2 Step 2. Connect computers or a LAN.
    • 3.1.3 Step 3. Attach the power adapter.
    • 3.1.4 Step 4. Turn on the Internet Security Router, the ADSL or cable modem and power up your computers.
  • 3.2 Part 2 — Configuring Your Computers
    • 3.2.1 Before you begin
    • 3.2.2 Windows[CT6]® XP PCs:
    • 3.2.3 Windows® 2000 PCs:
    • 3.2.4 Windows® 95, 98, and Me PCs
    • 3.2.5 Windows® NT 4.0 workstations:
    • 3.2.6 Assigning static IP addresses to your PCs
  • 3.3 Part 3 — Quick Configuration of the Internet Security Router
    • 3.3.1 Buttons Used in Setup Wizard
    • 3.3.2 Setting Up the Internet Security Router
    • 3.3.3 Testing Your Setup
    • 3.3.4 Default Router Settings
• Getting Started with the Configuration Manager[CT9]
  • 4.1 Log into Configuration Manager
  • 4.2 Functional Layout
    • 4.2.1 Setup Menu Navigation Tips
    • 4.2.2 Commonly Used Buttons and Icons
  • 4.3 The Home Page of Configuration Manager
  • 4.4 Overview of System Configuration
• Configuring LAN Settings
  • 5.1 LAN IP Address
    • 5.1.1 LAN IP Configuration Parameters
    • 5.1.2 Configuring the LAN IP Address
  • 5.2 DHCP (Dynamic Host Control Protocol)
    • 5.2.1 What is DHCP?
    • 5.2.2 Why use DHCP?
    • 5.2.3 Configuring DHCP Server
    • 5.2.4 Viewing Current DHCP Address Assignments
  • 5.3 DNS
    • 5.3.1 About DNS
    • 5.3.2 Assigning DNS Addresses
    • 5.3.3 Configuring DNS Relay
  • 5.4 Viewing LAN Statistics
• Configuring WAN Settings
  • 6.1 WAN Connection Mode
  • 6.2 PPPoE
    • 6.2.1 WAN PPPoE Configuration Parameters
    • 6.2.2 Configuring PPPoE for WAN
  • 6.3 Dynamic IP
    • 6.3.1 WAN Dynamic IP Configuration Parameters
    • 6.3.2 Configuring Dynamic IP for WAN
  • 6.4 Static IP
    • 6.4.1 WAN Static IP Configuration Parameters
    • 6.4.2 Configuring Static IP for WAN
  • 6.5 Viewing WAN Statistics
• Configuring Routes
  • 7.1 Overview of IP Routes
    • 7.1.1 Do I need to define IP routes?
  • 7.2 Dynamic Routing using RIP (Routing Information Protocol)
    • 7.2.1 Enabling/Disabling RIP
  • 7.3 Static Routing
    • 7.3.1 Static Route Configuration Parameters
    • 7.3.2 Adding Static Routes
    • 7.3.3 Deleting Static Routes
    • 7.3.4 Viewing the Static Routing Table
• Configuring DDNS
  • 8.1 DDNS Configuration Parameters
  • 8.2 Access DDNS Configuration Page
  • 8.3 Configuring RFC-2136 DDNS Client
  • 8.4 Configuring HTTP DDNS Client
• Configuring Firewall/NAT Settings
  • 9.1 Firewall Overview
    • 9.1.1 Stateful Packet Inspection
    • 9.1.2 DoS (Denial of Service) Protection
    • 9.1.3 Firewall and Access Control List (ACL)
      • 9.1.3.1 Priority Order of ACL Rule
      • 9.1.3.2 Tracking Connection State
    • 9.1.4 Default ACL Rules
  • 9.2 NAT Overview
    • 9.2.1 Static (One to One) NAT
    • 9.2.2 Dynamic NAT
    • 9.2.3 NAPT (Network Address and Port Translation) or PAT (Port Address Translation)
    • 9.2.4 Reverse Static NAT
    • 9.2.5 Reverse NAPT / Virtual Server
  • 9.3 Configuring Inbound ACL Rules
    • 9.3.1 Inbound ACL Rule Configuration Parameters
    • 9.3.2 Access Inbound ACL Rule Configuration Page – (Firewall Inbound ACL)
    • 9.3.3 Add Inbound ACL Rules
    • 9.3.4 Modify Inbound ACL Rules
    • 9.3.5 Delete Inbound ACL Rules
    • 9.3.6 Display Inbound ACL Rules
  • 9.4 Configuring Outbound ACL Rules
    • 9.4.1 Outbound ACL Rule Configuration Parameters
    • 9.4.2 Access Outbound ACL Rule Configuration Page – (Firewall Outbound ACL)
    • 9.4.3 Add an Outbound ACL Rule
    • 9.4.4 Modify Outbound ACL Rules
    • 9.4.5 Delete Outbound ACL Rules
    • 9.4.6 Display Outbound ACL Rules
  • 9.5 Configuring URL Filters
    • 9.5.1 URL Filter Configuration Parameters
    • 9.5.2 Access URL Filter Configuration Page – (Firewall URL Filter)
    • 9.5.3 Add an URL Filter Rule
    • 9.5.4 Modify an URL Filter Rule
    • 9.5.5 Delete an URL Filter Rule
    • 9.5.6 View Configured URL Filter Rules
    • 9.5.7 URL Filter Rule Example
  • 9.6 Configuring Advanced Firewall Features – (Firewall Advanced)
    • 9.6.1 Configuring Self Access Rules
      • 9.6.1.1 Self Access Configuration Parameters
      • 9.6.1.2 Access Self Access Rule Configuration Page – (Firewall Advanced Self Access)
      • 9.6.1.3 Add a Self Access Rule
      • 9.6.1.4 Modify a Self Access Rule
      • 9.6.1.5 Delete a Self Access Rule
      • 9.6.1.6 View Configured Self Access Rules
    • 9.6.2 Configuring Service List
      • 9.6.2.1 Service List Configuration Parameters
      • 9.6.2.2 Access Service List Configuration Page – (Firewall Advanced Service)
      • 9.6.2.3 Add a Service
      • 9.6.2.4 Modify a Service
      • 9.6.2.5 Delete a Service
      • 9.6.2.6 View Configured Services
    • 9.6.3 Configuring DoS Settings
      • 9.6.3.1 DoS Protection Configuration Parameters
      • 9.6.3.2 Access DoS Configuration Page – (Firewall Advanced DoS)
      • 9.6.3.3 Configuring DoS Settings
  • 9.7 Firewall Policy List – (Firewall Policy List)
    • 9.7.1 Configuring Application Filter
      • 9.7.1.1 Application Filter Configuration Parameters
      • 9.7.1.2 Access Application Filter Configuration Page – (Firewall Policy List Application Filter)
      • 9.7.1.3 Add an Application Filter
      • 9.7.1.3.1 FTP Example: Add a FTP Filter Rule to Block FTP DELETE Command
      • 9.7.1.3.2 HTTP Example: Add a HTTP Filter Rule to Block JAVA Applets and Java Archives
      • 9.7.1.4 Modify an Application Filter
      • 9.7.1.5 Delete an Application Filter
    • 9.7.2 Configuring IP Pool
      • 9.7.2.1 IP Pool Configuration Parameters
      • 9.7.2.2 Access IP Pool Configuration Page – (Firewall Policy List IP Pool)
      • 9.7.2.3 Add an IP Pool
      • 9.7.2.4 Modify an IP Pool
      • 9.7.2.5 Delete an IP Pool
      • 9.7.2.6 IP Pool Example
    • 9.7.3 Configuring NAT Pool
      • 9.7.3.1 NAT Pool Configuration Parameters
      • 9.7.3.2 Access NAT Pool Configuration Page – (Firewall Policy List NAT Pool)
      • 9.7.3.3 Add a NAT Pool
      • 9.7.3.4 Modify a NAT Pool
      • 9.7.3.5 Delete a NAT Pool
      • 9.7.3.6 NAT Pool Example
    • 9.7.4 Configuring Time Range
      • 9.7.4.1 Time Range Configuration Parameters
      • 9.7.4.2 Access Time Range Configuration Page – (Firewall Policy List Time Range)
      • 9.7.4.3 Add a Time Range
      • 9.7.4.4 Modify a Time Range
      • 9.7.4.5 Delete a Time Range
      • 9.7.4.6 Delete a Schedule in a Time Range
      • 9.7.4.7 Time Range Example
  • 9.8 Firewall Statistics – Firewall Statistics
• Configuring VPN
  • 10.1 Default Parameters
  • 10.2 VPN Tunnel Configuration Parameters
  • 10.3 Establish VPN Connection Using Automatic Keying
    • 10.3.1 Add a Rule for VPN Connection Using Pre-shared Key
    • 10.3.2 Modify VPN Rules
    • 10.3.3 Delete VPN Rules
    • 10.3.4 Display VPN Rules
  • 10.4 Establish VPN Connection Using Manual Keys
    • 10.4.1 Add a Rule for VPN Connection Using Manual Key
    • 10.4.2 Modify VPN Rules
    • 10.4.3 Delete VPN Rules
    • 10.4.4 Display VPN Rules
  • 10.5 VPN Statistics
  • 10.6 VPN Connection Examples
    • 10.6.1 Intranet Scenario – firewall + VPN and no NAT for VPN traffic
      • 10.6.1.1 Configure Rules on Internet Security Router 1 (ISR1)
      • 10.6.1.2 Configure Rules on Internet Security Router 2 (ISR2)
      • 10.6.1.3 Establish Tunnel and Verify
    • 10.6.2 Extranet Scenario – firewall + static NAT + VPN for VPN traffic
      • 10.6.2.1 Setup the Internet Security Routers
      • 10.6.2.2 Configure VPN Rules on ISR1
      • 10.6.2.3 Configure VPN Rules on ISR2
      • 10.6.2.4 Establish Tunnel and Verify
• Configuring Remote Access
  • 11.1 Remote Access
  • 11.2 Manage User Groups and Users
    • 11.2.1 User Group Configuration Parameters
    • 11.2.2 Access User Group Configuration Page – (Remote Access User Group)
    • 11.2.3 Add a User Group and/or a User
    • 11.2.4 Modify a User Group or a User
    • 11.2.5 Delete a User Group or a User
    • 11.2.6 User Group and Users Configuration Example
  • 11.3 Configure Group ACL Rules
    • 11.3.1 Group ACL Specific Configuration Parameters
    • 11.3.2 Access Group ACL Configuration Page – (Remote Access Group ACL)
    • 11.3.3 Add/Modify/Delete Group ACL Rules
  • 11.4 Remote User Login Process
  • 11.5 Configure Firewall for Remote Access
  • 11.6 Virtual IP Address Configuration for Remote Access VPN
    • 11.6.1 Access VPN Virtual IP Configuration Page – (Remote Access VPN Virtual IP)
    • 11.6.2 Assign VPN Virtual IP Address for Remote Access Users
    • 11.6.3 Change Virtual IP Assignments for Remote Access Users
    • 11.6.4 Delete Virtual IP Address for Remote Access Users
  • 11.7 Configure VPN for Remote Access
    • 11.7.1 Main Mode Remote Access
    • 11.7.2 Aggressive Mode Remote Access
• System Management
  • 12.1 Configure System Services
  • 12.2 Change the Login Password
  • 12.3 Modify System Information
  • 12.4 Setup Date and Time
    • 12.4.1 View the System Date and Time
  • 12.5 System Configuration Management
    • 12.5.1 Reset System Configuration
    • 12.5.2 Backup System Configuration
    • 12.5.3 Restore System Configuration
  • 12.6 Upgrade Firmware
  • 12.7 Reset the Internet Security Router
  • 12.8 Logout Configuration Manager
• ALG Configuration
• IP Addresses, Network Masks, and Subnets
  • 14.1 IP Addresses
    • 14.1.1 Structure of an IP address
  • 14.2 Network classes
  • 14.3 Subnet masks
• Troubleshooting
  • 15.1 Diagnosing Problem using IP Utilities
    • 15.1.1 ping
    • 15.1.2 nslookup
• Glossary
• Index