Installation and Operation Manual PENTAGRAM

Installation and Operation Manual
PENTAGRAM Cerberus P 6341
The latest versions of manual, drivers and applications are available on
www.pentagram.eu
2009-10-08
NOTE! Any information and technical data are subject to change without prior notification
and/or indication in this manual.
© 2008-2009 PENTAGRAM
All rights reserved; copying and reproduction is strictly forbidden.
PENTAGRAM Cerberus P 6341
INDEX
INTRODUCTION ...................................................................................................... 5
FEATURES.......................................................................................................... 5
PACKAGE CONTENTS ....................................................................................... 7
PRODUCT OVERVIEW............................................................................................ 7
IMPORTANT NOTES........................................................................................... 7
FRONT PANEL.................................................................................................... 8
BACK PANEL ...................................................................................................... 8
DEFAULT SETTINGS.......................................................................................... 9
RESETTING ROUTER ........................................................................................ 9
CONNECTING CERBERUS TO COMPUTER..................................................... 9
Connecting via Ethernet Port (Ethernet Card)................................................................. 9
Connecting via WLAN Interface (Wireless Card) ............................................................ 9
CONFIGURE TCP/IP ......................................................................................... 10
Windows Vista............................................................................................................... 10
Windows 2000/XP ......................................................................................................... 12
Windows 95/98/Me........................................................................................................ 13
CONFIGURE ROUTER VIA WEB BROWSER....................................................... 14
LOGIN................................................................................................................ 14
NAVIGATION..................................................................................................... 14
Configuration Modes ..................................................................................................... 14
Buttons .......................................................................................................................... 14
Save Config to FLASH .................................................................................................. 14
BASIC ..................................................................................................................... 15
MENU ................................................................................................................ 15
STATUS............................................................................................................. 16
QUICK START ................................................................................................... 17
WAN .............................................................................................................................. 17
Select WAN Port ........................................................................................................... 17
ADSL / Select Protocol.................................................................................................. 17
EWAN / Select Protocol ................................................................................................ 20
Please wait… ................................................................................................................ 22
Wireless........................................................................................................................ 22
Set Wireless configuration............................................................................................. 22
WAN................................................................................................................... 23
WLAN................................................................................................................. 28
ADVANCED............................................................................................................ 31
MENU ................................................................................................................ 31
STATUS............................................................................................................. 32
Status / ADSL Status..................................................................................................... 33
Status / ARP Table........................................................................................................ 33
Status / DHCP Table ..................................................................................................... 34
Status / System Log ...................................................................................................... 34
Status / Firewall Log...................................................................................................... 35
Status / UPnP Portmap ................................................................................................. 35
QUICK START ................................................................................................... 36
WAN .............................................................................................................................. 36
Select WAN Port ........................................................................................................... 36
ADSL / Select Protocol.................................................................................................. 36
3
PENTAGRAM Cerberus P 6341
EWAN / Select Protocol ................................................................................................ 39
Please wait… ................................................................................................................ 41
Wireless........................................................................................................................ 41
Set Wireless configuration............................................................................................. 41
CONFIGURATION ............................................................................................. 42
LAN ............................................................................................................................... 42
LAN / Ethernet............................................................................................................... 42
LAN / IP Alias ................................................................................................................ 42
LAN / Wireless............................................................................................................... 43
LAN / Wireless Security................................................................................................. 44
LAN / WPS .................................................................................................................... 47
LAN / DHCP Server....................................................................................................... 48
WAN .............................................................................................................................. 50
WAN / WAN Profile ....................................................................................................... 50
WAN / ADSL Mode........................................................................................................ 57
System.......................................................................................................................... 58
System / Time Zone ...................................................................................................... 58
System / Firmware Upgrade.......................................................................................... 58
System / Backup/Restore.............................................................................................. 59
System / Restart Router ................................................................................................ 59
System / User Management.......................................................................................... 60
System / Mail Alert ........................................................................................................ 60
Firewall ......................................................................................................................... 61
Firewall / Packet Filter ................................................................................................... 61
Firewall / MAC Filter ...................................................................................................... 62
Firewall / Intrusion Detection ......................................................................................... 63
Firewall / Block WAN PING ........................................................................................... 63
Firewall / URL Filter....................................................................................................... 64
QoS ............................................................................................................................... 66
Virtual Server ............................................................................................................... 69
Virtual Server / Port Mapping ........................................................................................ 70
Virtual Server / DMZ...................................................................................................... 71
Wake on LAN ............................................................................................................... 72
Time Schedule ............................................................................................................. 73
Advanced ..................................................................................................................... 74
Advanced / Static Route................................................................................................ 74
Advanced / Static ARP .................................................................................................. 74
Advanced / Dynamic DNS............................................................................................. 75
Advanced / VLAN .......................................................................................................... 76
Advanced / Device Management .................................................................................. 77
Advanced / IGMP .......................................................................................................... 78
Advanced / SNMP Access Control................................................................................ 78
Advanced / Remote Access .......................................................................................... 80
TROUBLESHOOTING............................................................................................ 81
USING LEDS TO DIAGNOSE PROBLEMS....................................................... 81
Power LED .................................................................................................................... 81
Ethernet LEDs ............................................................................................................... 81
DSL / Internet LED ........................................................................................................ 81
PROBLEMS WITH THE WEB INTERFACE ...................................................... 82
PROBLEMS WITH THE LOGIN USERNAME AND PASSWORD ..................... 82
PROBLEMS WITH LAN INTERFACE................................................................ 82
PROBLEMS WITH WAN INTERFACE .............................................................. 82
PROBLEMS WITH THE INTERNET ACCESS .................................................. 83
4
PENTAGRAM Cerberus P 6341
Introduction
Thank you for purchasing the Cerberus P 6341 ADSL Router by PENTAGRAM. Your new
router is an all-in-one unit that combines an ADSL modem, ADSL2/2+ router, Ethernet
network switch and wireless Access Point to provide everything you need to get the machines
on your network connected to the Internet over an ADSL broadband connection.
The Cerberus P 6341 router complies with ADSL2+ standards for deployment worldwide and
supports downstream rates of up to 24 Mbps and upstream rates of up to 1 Mbps. Designed
for small office, home office and residential users, the router enables even faster Internet
connections. You can enjoy ADSL services and broadband multimedia applications such as
interactive gaming, video streaming and real-time audio much easier and faster than ever
before.
Features
•
Fast Ethernet Switch: A 4-port 10/100Mbps fast Ethernet switch is built-in with
automatic switching between MDI and MDI-X for 10Base-T and 100Base-TX ports, with
auto detection allowing you to use either straight or cross-over Ethernet cables.
•
802.11n Wireless AP: With integrated 802.11n Wireless Access Point in the router, the
device offers a quick and easy access among wired network, wireless network and
broadband connection (ADSL) with single device simplicity, and as a result, mobility to
the users. In addition to 300 Mbps 802.11n data rate, it also interoperates backward with
existing 802.11g and 802.11b equipment. The Wireless Protected Access (WPA) and
Wireless Encryption Protocol (WEP) supported features enhance the security level of
data protection and access control via Wireless LAN.
•
Firewall: NAT technology supports simple firewalls and provides options for blocking
access from the Internet, like Telnet, FTP, TFTP, WEB, SNMP and IGMP.
•
Network Address Translation (NAT): Allows multiple users to access outside resources
such as the Internet simultaneously with one IP address/one Internet access account.
Many application layer gateways (ALG) are supported such as web browser, ICQ, FTP,
Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others.
•
Universal Plug and Play (UPnP) and UPnP NAT Traversal: This protocol is used to
enable simple and robust connectivity among stand-alone devices and PCs from many
different vendors, and it makes setting up a network simple and affordable. UPnP
architecture leverages TCP/IP and the Web to enable proximity networking in addition to
control and data transfer among networked devices. With this feature enabled, you can
seamlessly connect to Net Meeting or MSN Messenger.
•
Dynamic Domain Name System (DDNS): The Dynamic DNS service allows you to alias
a dynamic IP address to a static hostname. This dynamic IP address is the WAN IP
address. To use the service, you must first apply for an account from a DDNS service
such as http://www.dyndns.org/.
•
PPP over Ethernet (PPPoE): The Cerberus P 6341 provides an embedded PPPoE
client function to establish a connection. You get greater access speed without changing
the operation concept, while sharing the same ISP account and paying for one access
5
PENTAGRAM Cerberus P 6341
account. No PPPoE client software is required for the local computer. Automatic
Reconnect and Disconnect Timeout (Idle Timer) functions are also provided.
•
Virtual Server: You can specify which services are visible to outside users. The router
detects an incoming service request and forwards it to the specific local computer for
handling. For example, you can assign a PC in a LAN to act as a Web server inside and
expose it to the outside network. Outside users can browse inside the web server directly
while it is protected by NAT. A DMZ host setting is also provided for local computers
exposed to the outside Internet network.
•
Dynamic Host Configuration Protocol (DHCP) Client and Server: On a WAN site, the
DHCP client obtains an IP address from the Internet Service Provider (ISP) automatically.
On a LAN site, the DHCP server allocates a range of client IP addresses, including
subnet masks and DNS IP addresses and distributes them to local computers. This
provides an easy way to manage the local IP network.
•
Domain Name System Relay: Domain Name System (DNS) relay provides an easy way
to map a domain name with a user-friendly name such as www.google.com with an IP
address. When a local machine sets its DNS server to the router’s IP address, every
DNS conversion request packet from the PC to this router is forwarded to the real DNS
on the outside network.
•
Static and RIP1/2 Routing: An easy static routing table or RIP1/2 routing protocol
supports routing capability.
•
SNMP (Simple Network Management Protocol): SNMP allows convenient remote
management of the router.
•
Rich Packet Filtering: This feature filters the packet based on IP addresses as well as
Port numbers. Filtering packets to and from the Internet provides a higher level of
security control.
•
Web-based GUI: A web-based GUI offers easy configuration and management. Userfriendly and with on-line help, it also supports remote management capability for remote
users to configure and manage this product.
•
Firmware Upgradeable: You can upgrade the router with the latest firmware through its
web-based GUI.
•
Quality of Service (QoS): Gives you full control over which types of outgoing data traffic
should be given priority by the router, ensuring important data like gaming packets,
customer information, or management information move through the router ay lightning
speed, even under heavy load. The QoS features are configurable by source IP address,
destination IP address, protocol, and port. You can throttle the speed at which different
types of outgoing data pass through the router, to ensure P2P users don’t saturate
upload bandwidth, or office browsing doesn’t bring client web serving to a halt. In
addition, or alternatively, you can simply change the priority of different types of upload
data and let the router sort out the actual speeds.
•
High Speed Internet Access: downstream rates of up to 24Mbps and upstream rates of
up to 1Mbps. Cerberus ADSL2 Wi-Fi Plus (P6311-6) is compliant with the following
standards:
ANSI T1.413 issue 2,
ITU-T G.992.1 (G.dmt),
6
PENTAGRAM Cerberus P 6341
ITU-T G.992.3 (ADSL2 G.dmt.bis),
ITU-T G.992.5 (ADSL2+ G.dmt.bis.plus),
ITU-T G.994.1 (G.hs),
•
Multi-Protocol to Establish a Connection: The router supports following protocols to
establish a connection with an ISP:
PPPoA (PPP over ATM Adaptation Layer 5 – RFC 2364),
PPPoE (PPP over Ethernet – RFC 2516)
MPoA bridged or routed (Multiprotocol Encapsulation over ATM – RFC 1483/2684),
The router also supports VC-based and LLC-based multiplexing.
•
EWAN: Besides using ADSL to get connected to the Internet, Router offers its Ethernet
port 1 as a WAN port to be used to connect to Cable Modems, VDSL, fiber optic lines
and PON. This alternative, yet faster method to connect to the internet will provide users
more flexibility to get online.
Package Contents
1.
2.
3.
4.
5.
6.
7.
PENTAGRAM Cerberus P 6341
Power adapter 12 V, 1 A
Ethernet cable (RJ-45)
Telephone cable (RJ-11)
CD
Quick Installation Guide
Antennas (3 pcs)
Product Overview
Important Notes
•
•
•
•
•
•
•
Do not use the router in high humidity or high temperatures.
Do not use the same power source for the router as other equipment.
Do not open or repair the case yourself. If the router is too hot, turn off the
power immediately and have it repaired at a qualified service center.
Phone landlines are susceptible to the electrical discharges during the
storms. It is recommended to disconnect the phone line from the router
during storm, vacation or other longer absence.
Avoid using this product and all accessories outdoors.
Place the router on a stable surface.
Only use the power adapter that comes with the package. Using a
different voltage rating power adaptor may damage the router.
7
PENTAGRAM Cerberus P 6341
Front Panel
LED
PWR
LAN (1-4)
WLAN
WPS
DSL
NET
Action
Blinking light
Steady light (Red)
Steady light (Green)
Steady light (Green)
Steady light (Orange)
Blinking light
Steady light
Blinking light
Blinking light
Steady light
Steady light (Red)
Steady light (Green)
Description
Router is rebooting / Firmware upgrading.
System initializing.
System is ready.
Connected to an Ethernet port (100 Mbps).
Connected to an Ethernet port (10 Mbps).
Transmitting / Receiving data.
Wireless connection established.
Transmitting / Receiving data.
WPS is in progress.
Successfully connected to an ADSL DSLAM.
WAN port failed to receive IP address.
WAN port received IP address.
Back Panel
Label
RP-SMA Connector
DSL (RJ-11)
Ethernet 1-4 (RJ-45)
RESET
WPS
PWR
Used for...
Connecting the external antenna
Connecting the telephone cable (ADSL)
Connecting with computers/devices through Ethernet cable
Note: Only Ethernet 1 Port can be used for EWAN.
Resetting the device.
Triggering Wi-Fi Protected Setup function
Connecting with supplied power adapter
8
PENTAGRAM Cerberus P 6341
Default Settings
Before changing configuration familiarize yourself with these default settings.
IP Address
192.168.1.100
Subnet Mask
255. 255. 255.0
SSID
PENTAGRAM P6341
DHCP Server
Enabled
DHCP Server IP Address Pool
100 IP addresses
from 192.168.1.101
IP Address Lease Time
43200 seconds (12 hours)
User Name
admin
Password
pentagram
It is recommended to change username and/or password as soon as possible.
If you ever forget the password to log in, you may need to reset router to restore the factory
default settings. This procedure is described below.
Resetting router
•
•
Turn router on and wait about 2 minutes for router initialization.
Press RESET button using the end of paper clip or other small pointed object and release
it after 6 seconds to reset the router and to restore it to factory default settings. In some
cases, when RESET button was pressed longer than 6 seconds, additional reboot is
necessary.
Connecting Cerberus to Computer.
Cerberus can be connected to computer via Ethernet or WLAN:
Connecting via Ethernet Port (Ethernet Card)
All Ethernet ports of router are made in the technology, which automatically activates
Crossover if necessary. Thanks to autonegotiation of connection speed the router will
automatically select the maximum available speed rate. Transfer at 10/100 Mbit/s rate
requires the category 5 cable wired with RJ-45 connectors. In case of "straight" cable both
connectors must be crimped in standard EIA/TIA 568B. In case of Crossover cable one
connector must be in standard EIA/TIA 56A, and the second in EIA/TIA 568B. After connecting
the device to one of the ports, corresponding LED will begin to blink. That signals the process
of the auto-checking of port and the negotiation of connection speed rate.
Connecting via WLAN Interface (Wireless Card)
To connect PC to Cerberus via WLAN, Wireless Adapter must be properly installed and
configured and both router and PC must be in the same subnet.
9
PENTAGRAM Cerberus P 6341
Configure TCP/IP
After connecting the computer to the router (by LAN adapter or WLAN interface) the TCP/IP
protocol should be configured. The protocol should be automatically installed together with
Network card drivers. It is advised that TCP/IP should be configured to receive IP address and
all the necessary network parameters from DHCP server automatically. You can find step-bystep configuration for different Windows systems below.
Windows Vista
Note: Network configuration require administrator privileges. When User Account Control
window pops up, either click Continue (Administrator user) or select Administrator user and
enter valid password (Standard user).
1.
Click Start → Control Panel.
2.
Click View network status and tasks.
3.
Click View
connection.
4.
On General tab, Click the Properties
button.
5.
On General tab, select Internet Protocol
Version
4
(TCP/IPv4)
and
click
Properties.
status
for
appropriate
10
PENTAGRAM Cerberus P 6341
6.
On General tab, select Obtain an IP
address automatically and Obtain DNS
server address automatically.
7.
Click OK to save settings and close
Internet Protocol Version 4 (TCP/IPv4)
Properties window.
11
PENTAGRAM Cerberus P 6341
Windows 2000/XP
1.
Click Start → Settings → Control Panel.
Double-click the Network Connections icon
(2000/XP Classic view) or click Network and
Internet Connections icon and then Network
Connections icon (XP Default view).
2.
Double-click the Local Area Connection icon.
3.
On General tab, Click the Properties button.
4.
On General tab, select Internet Protocol
(TCP/IP) and click Properties.
5.
On General tab, select Obtain an IP address
automatically and DNS server address
automatically.
6.
Click OK to save settings and close Internet
Protocol (TCP/IP) Properties window.
12
PENTAGRAM Cerberus P 6341
Windows 95/98/Me
1.
Click Start → Settings → Control Panel.
Double-click the Network icon.
2.
On Configuration tab, select TCP/IP for
appropriate network adapter and click
Properties.
3.
On IP Address tab, select Obtain an IP
address automatically.
4.
On DNS Configuration tab, select Disable
DNS
5.
Click OK to save settings and close TCP/IP
Properties window.
To make sure that network adapter properly obtained an IP address from router’s DHCP
server:
1. click Start > Run
2. type cmd (Win 2000/XP) or command (Win 95/98/ME) and press Enter
3. in command line type ipconfig /all and press Enter
4. check if the IP Address is 192.168.1.x
13
PENTAGRAM Cerberus P 6341
Configure router via web browser
Cerberus P 6341 router can be configured via web browser, which is usually integrated with
operating system. Router offers clear and simple interface.
Login
1.
2.
Launch the Web browser
In address bar enter the default IP address: http://192.168.1.100
3.
Enter username and password – default admin / pentagram
Navigation
Configuration Modes
Router supports two configuration modes: Basic and Advanced. Each mode can be assigned
to certain users (based on login name), ie. Basic mode for Local Administrator with restricted
access to router functions (only basic configuration of WAN and WLAN connection) and
Advanced for Network Administrator with full access to all router functions (see System /
User Management section for details).
Buttons
This three buttons are available in both configuration modes at the bottom of the screen:
•
Save Settings – Opens Save Config to FLASH page.
•
Restart Router – Opens System / Restart Router page.
•
Logout – Logs out currently logged user.
Save Config to FLASH
After changing the router’s configuration settings, you must save all of the configuration
parameters to FLASH to avoid losing them after turning off or resetting your router. Click
Apply to write your new configuration to FLASH.
14
PENTAGRAM Cerberus P 6341
Basic
Menu
In Basic configuration mode following menu items are available:
•
Advanced – Change Configuration mode to Advanced.
•
Status – Status page.
Quick Start – Quick WAN and WLAN (wireless) connections configuration.
•
•
WAN – WAN connection configuration.
•
WLAN – WLAN (wireless) connection configuration.
15
PENTAGRAM Cerberus P 6341
Status
Device Information
Model Name – Router’s model name.
System Up-Time – Router’s up-time (time passed since router was powered on).
Hardware Version – Chipset version.
Software Version – Firmware version.
Port Status
Status of Ethernet, ADSL, EWAN and Wireless connections:
Connection established.
Connection not established.
Wi-Fi network is protected.
Click on Wireless to go to WLAN configuration page.
WAN
Port – Name of the WAN connection.
Protocol VPI/VCI – Protocol, Virtual Path Identifier and Virtual Channel Identifier.
Operation – Current available operation.
Connection – The current connection status.
IP Address – WAN port IP address.
Netmask – WAN port IP subnet mask.
Gateway – The IP address of the default gateway.
Primary DNS – The IP address of the primary DNS server.
16
PENTAGRAM Cerberus P 6341
Quick Start
Quick Start allows to fast and easy configuration of WAN and WLAN connections. For WAN
configuration you will need parameters such as username, password, protocol, VPI / VCI,
encapsulation method, and so on. You can obtain all required parameters from your ISP.
WAN
Select WAN Port
This is the first screen you will see after clicking on Quick Start in menu.
Connect Mode – Select method you want to use to connect to the Internet: EWAN or ADSL.
Continue – Continue to EWAN or ADSL configuration (based on option selected in Connect
Mode list). If you want to configure ADSL connection, ADSL line must be connected to router
before you can proceed.
Jump to Wireless setting – Skip EWAN/ADSL configuration and go directly to WLAN
configuration.
ADSL / Select Protocol
You will see this screen if you selected ADSL and clicked Continue on previous screen
(Select WAN Port). This screen appearance changes with selected Protocol:
•
PPPoE (RFC2516, PPP over Ethernet)
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
17
PENTAGRAM Cerberus P 6341
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Continue – Click this button to configure and establish connection.
•
PPPoA (RFC2684, PPP over AAL5)
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). It
provides access control and billing functionality in a manner similar to dial-up services
using PPP.
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Continue – Click this button to configure and establish connection.
18
PENTAGRAM Cerberus P 6341
•
MPoA (RFC 1483/RFC2684, Multiprotocol Encapsulation over AAL5)
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single IP account, sharing the single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Encap. mode – Choose whether you want the device to function as bridge mode or
routing mode.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default netmask is 255.255.255.0. User can change it to other such
as 255.255.255.128. Type the netmask assigned to you by your ISP (if given)
Gateway – Enter the IP address of the default gateway.
Continue – Click this button to configure and establish connection.
•
Pure Bridge
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Continue – Click this button to configure and establish connection.
19
PENTAGRAM Cerberus P 6341
•
PPPoE with Pass-through
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Continue – Click this button to configure and establish connection.
EWAN / Select Protocol
You will see this screen if you selected EWAN and clicked Continue on previous screen
(Select WAN Port). This screen appearance changes with selected Protocol:
•
Obtain an IP Address Automatically
If ISP assigns IP address, subnet mask, gateway address, and DNS server addresses
via DHCP router can automatically obtain this information.
Protocol – Change used protocol.
Continue – Click this button to configure and establish connection.
20
PENTAGRAM Cerberus P 6341
•
Fixed IP Address
Select this option to set static IP information. You will need to enter in the IP address,
Netmask, and gateway address, provided to you by your ISP. Each IP address entered in
the fields must be in the appropriate IP form, which is four IP octets separated by a dot
(x.x.x.x).
Protocol – Change used protocol.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default is 0.0.0.0. User can change it to other such as 255.255.255.0.
Type the subnet mask assigned to you by your ISP (if given).
Gateway – You must specify a gateway IP address (supplied by your ISP).
Continue – Click this button to configure and establish connection.
•
PPPoE
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
Protocol – Change used protocol.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Authentication Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
21
PENTAGRAM Cerberus P 6341
Continue – Click this button to configure and establish connection.
Please wait…
After entering correct information and clicking Continue button on Select Protocol screen,
router will be configured and connection established.
If entered values was correct, following screen will appear:
Next to Wireless – Continue to WLAN configuration.
Wireless
Set Wireless configuration
WLAN Service – Enable or Disable built-in Access Point.
ESSID – The ESSID is the unique name of a wireless access point (AP) to be distinguished
from another. For security propose, change to a unique ID name to the AP which is already
built-in to the router’s wireless interface. It is case sensitive and must not excess 32
characters. Make sure your wireless clients have exactly the same ESSID as the device, in
order to get connected to your network.
Channel ID – Select the ID channel that you would like to use.
Security Mode – You can disable or enable with WPA or WEP for protecting wireless
network. It is recommended to enable wireless network protection (see WLAN section for
details).
Continue – Save all settings and return to Status page.
22
PENTAGRAM Cerberus P 6341
WAN
A WAN (Wide Area Network) is an outside connection to another network or the Internet.
This screen appearance changes with selected Main Port and Protocol:
Main Port – Select port which will be used to connect to the Internet: ADSL or EWAN.
Besides using ADSL to get connected to the Internet, router offers its Ethernet port 1 as a
WAN port to be used to connect to Cable Modems, VDSL, fiber optic lines and PON. This
alternative, yet faster method to connect to the internet will provide users with more flexibility
to get online
Protocol – Protocol used by ISP.
•
ADSL / PPPoE (RFC2516, PPP over Ethernet)
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
23
PENTAGRAM Cerberus P 6341
•
ADSL / PPPoA (RFC2684, PPP over AAL5)
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). It
provides access control and billing functionality in a manner similar to dial-up services
using PPP.
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Chap. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
ADSL / MPoA (RFC 1483/RFC2684, Multiprotocol Encapsulation over
AAL5)
24
PENTAGRAM Cerberus P 6341
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single IP account, sharing the single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Encap. mode – Choose whether you want the device to function as bridge mode or
routing mode.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default netmask is 255.255.255.0. User can change it to other such
as 255.255.255.128. Type the netmask assigned to you by your ISP (if given)
Gateway – Enter the IP address of the default gateway.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
ADSL / Pure Bridge
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
25
PENTAGRAM Cerberus P 6341
•
ADSL / PPPoE with Pass-through
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
EWAN / Obtain an IP Address Automatically
If ISP assigns IP address, subnet mask, gateway address, and DNS server addresses
via DHCP router can automatically obtain this information.
Protocol – Change used protocol.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
26
PENTAGRAM Cerberus P 6341
•
EWAN / Fixed IP Address
Select this option to set static IP information. You will need to enter in the IP address,
Netmask, and gateway address, provided to you by your ISP. Each IP address entered in
the fields must be in the appropriate IP form, which is four IP octets separated by a dot
(x.x.x.x).
Protocol – Change used protocol.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default is 0.0.0.0. User can change it to other such as
255.255.255.0.Type the subnet mask assigned to you by your ISP (if given).
Gateway – You must specify a gateway IP address (supplied by your ISP).
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
EWAN / PPPoE
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
Protocol – Change used protocol.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
27
PENTAGRAM Cerberus P 6341
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Authentication Protocol – Default is Chap. Your ISP advises on using Chap or Pap.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
WLAN
Wireless Parameters
WLAN Service – Enable or Disable built-in Access Point.
ESSID – The ESSID is the unique name of a wireless access point (AP) to be distinguished
from another. For security propose, change to a unique ID name to the AP which is already
built-in to the router’s wireless interface. It is case sensitive and must not excess 32
characters. Make sure your wireless clients have exactly the ESSID as the device, in order to
get connected to your network. Note: ESSID is case sensitive and must not excess 32
characters.
Hide ESSID – It is function in which transmits its ESSID to the air so that when wireless client
searches for a network, router can then be discovered and recognized. Select Enable if you
do not want broadcast your ESSID. When Enable is selected, no one will be able to locate the
Access Point (AP) of your router. When Disable is selected, you can allow anybody with a
wireless client to be able to locate the Access Point (AP) of your router.
Regulation Domain – There are seven Regulation Domains for you to choose from, including
North America (N.America), Europe, France, etc. The Channel ID will be different based on
this setting. Select region in which router will be used – broadcasting on channel unavailable
for your region may be against the law.
Channel ID – Select the ID channel that you would like to use.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
28
PENTAGRAM Cerberus P 6341
Security Parameters
Appearance of this section depends on option selected on Security Mode list:
•
Disable
Wireless network in this mode is not protected and anyone who knows ESSID can
connect to this wireless network.
•
WPA Pre-Shared Key
Only wireless stations with security set to WPA-PSK will be able to connect to this
network.
Security Mode – Change security mode.
WPA Shared Key – The key for network authentication. The input format is in character
style and the key size should be in the range between 8 and 63 characters.
Group Key Renewal – The period of renewal time for changing the security key between
wireless client and Access Point (AP). This process is done automatically.
•
WPA2 Pre-Shared Key
Only wireless stations with security set to WPA2-PSK will be able to connect to this
network.
Security Mode – Change security mode.
WPA Shared Key – The key for network authentication. The input format is in character
style and the key size should be in the range between 8 and 63 characters.
Group Key Renewal – The period of renewal time for changing the security key between
wireless client and Access Point (AP). This process is done automatically.
•
WPA/WPA2 Pre-Shared Key
Wireless stations with security set to both WPA-PSK or WPA2-PSK will be able to
connect to this network.
Security Mode – Change security mode.
WPA Shared Key – The key for network authentication. The input format is in character
style and the key size should be in the range between 8 and 63 characters.
Group Key Renewal – The period of renewal time for changing the security key between
wireless client and Access Point (AP). This process is done automatically.
29
PENTAGRAM Cerberus P 6341
•
WEP
Security Mode – Change security mode.
WEP Authentication – To prevent unauthorized wireless stations from accessing data
transmitted over the network, the router offers secure data encryption, known as WEP. If
you require high security for transmissions, there are three options to select from:
•
Open System – No authentication is required to connect to this network.
•
Share key – Authentication is required and is based on Share keys.
•
Both – Used authentication method depends on wireless station security settings.
Default Used WEP Key – Select the encryption key ID; please refer to Key (1~4) below.
Passphrase – This is used to generate WEP keys automatically based upon the input
string and a pre-defined algorithm in WEP64 or WEP128. You can input the same string
in both the AP and Client card settings to generate the same WEP keys. Please note that
you do not have to enter Key (1-4) as below when the Passphrase is enabled.
Key (1-4) – Enter the key to encrypt wireless data. To allow encrypted data transmission,
the WEP Encryption Key values on all wireless stations must be the same as the router.
There are four keys for your selection. The input format is in HEX or ASCII style, 5 and
13 ASCII characters or 10 and 26 HEX characters are required for WEP64 and WEP128
respectively no any separator is included.
30
PENTAGRAM Cerberus P 6341
Advanced
Menu
In Advanced configuration mode following menu items are available:
•
Basic – Change Configuration mode to Basic.
•
Status – Main status page. More detailed status pages and logs are available: Status /
ADSL Status, Status / ARP Table, Status / DHCP Table, Status / System Log, Status /
Firewall Log and Status / UPnP Portmap.
•
Quick Start – Quick WAN and WLAN (wireless) connections configuration.
Configuration – Router settings grouped by categories: LAN, WAN, System, Firewall,
•
QoS, Virtual Server, Wake on LAN, Time Schedule and Advanced.
31
PENTAGRAM Cerberus P 6341
Status
Device Information
Model Name – Router’s model name.
Host Name – Router’s name for identification purposes. Click on Host Name to go to
Advanced / Device Management page.
System Up-Time – Router’s up-time (time passed since router was powered on).
Current Time – Current date and time. Click on Current Time to go to System / Time Zone
page.
Hardware Version – Chipset version.
Software Version – Firmware version.
MAC Address – Router’s MAC Address.
Port Status
Status of Ethernet, ADSL, EWAN and Wireless connections:
Connection established.
Connection not established.
Wi-Fi network is protected.
Click on ADSL to go to Status / ADSL Status page or click on Wireless to go to LAN /
Wireless page.
WAN
Port – Name of the WAN connection. Click on Port or connection name to go to WAN / WAN
Profile page.
Protocol VPI/VCI – Protocol, Virtual Path Identifier and Virtual Channel Identifier.
Operation – Current available operation.
Connection – The current connection status.
IP Address – WAN port IP address.
Netmask – WAN port IP subnet mask.
Gateway – The IP address of the default gateway.
Primary DNS – The IP address of the primary DNS server.
32
PENTAGRAM Cerberus P 6341
Status / ADSL Status
On this page you can find all information about ADSL connection.
DSP Firmware Version – DSP code version.
DMT Status – Current DMT Status.
Operational Mode – Used ADSL standard. Click on Operational Mode to go to WAN / ADSL
Mode page.
Upstream – Upstream rate.
Downstream – Downstream rate.
SNR Margin (Upstream) – This is noise margin in upstream.
SNR Margin (Downstream) – This is noise margin in downstream.
Line Attenuation (Upstream) – This is attenuation of signal in upstream.
Line Attenuation (Downstream) – This is attenuation of signal in downstream.
Status / ARP Table
The router’s ARP (Address Resolution Protocol) Table shows the mapping of Internet (IP)
addresses to Ethernet (MAC) addresses. This is a quick way to determine the MAC address of
the network interface of your PCs to use with the router’s Firewall / MAC Filter function.
IP Address – A list of IP addresses of devices on your LAN (Local Area Network).
MAC Address – MAC (Media Access Control) address for each device on your LAN.
Interface – The interface name (on the router) that this IP Address connects to.
Static – Static status of the ARP table entry:
•
No for dynamically-generated ARP table entries.
•
Yes for static ARP table entries added by the user.
33
PENTAGRAM Cerberus P 6341
Status / DHCP Table
IP Address – IP addresses of devices on your LAN. Click on IP Address to go to LAN /
DHCP Server page.
MAC Address – The MAC Address to which IP address is assigned.
Client Host Name – Expired IP addresses information.
Register Information – Remained DHCP lease time.
Status / System Log
Display system logs accumulated up to the present time. You can trace historical information
with this function.
34
PENTAGRAM Cerberus P 6341
Status / Firewall Log
Firewall Log displays log information of any unexpected action with your firewall settings. This
page displays the router’s Firewall Log entries. The log shows log entries when you have
enabled Intrusion Detection or Block WAN PING in the Firewall section of the interface.
Status / UPnP Portmap
The section lists all port-mapping established using UPnP (Universal Plug and Play). Please
see the Universal Plug and Play (UPnP) section of this manual for more details on UPnP
and the router’s UPnP configuration options.
35
PENTAGRAM Cerberus P 6341
Quick Start
Quick Start allows to fast and easy configuration of WAN and WLAN connections. For WAN
configuration you will need parameters such as username, password, protocol, VPI / VCI,
encapsulation method, and so on. You can obtain all required parameters from your ISP.
WAN
Select WAN Port
This is the first screen you will see after clicking on Quick Start in menu.
Connect Mode – Select method you want to use to connect to the Internet: EWAN or ADSL.
Continue – Continue to EWAN or ADSL configuration (based on option selected in Connect
Mode list). If you want to configure ADSL connection, ADSL line must be connected to router
before you can proceed.
Jump to Wireless setting – Skip EWAN/ADSL configuration and go directly to WLAN
configuration.
ADSL / Select Protocol
You will see this screen if you selected ADSL and clicked Continue on previous screen
(Select WAN Port). This screen appearance changes with selected Protocol:
•
PPPoE (RFC2516, PPP over Ethernet)
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
36
PENTAGRAM Cerberus P 6341
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Continue – Click this button to configure and establish connection.
•
PPPoA (RFC2684, PPP over AAL5)
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). It
provides access control and billing functionality in a manner similar to dial-up services
using PPP.
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Chap. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Continue – Click this button to configure and establish connection.
37
PENTAGRAM Cerberus P 6341
•
MPoA (RFC 1483/RFC2684, Multiprotocol Encapsulation over AAL5)
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single IP account, sharing the single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Encap. mode – Choose whether you want the device to function as bridge mode or
routing mode.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default netmask is 255.255.255.0. User can change it to other such
as 255.255.255.128. Type the netmask assigned to you by your ISP (if given)
Gateway – Enter the IP address of the default gateway.
Continue – Click this button to configure and establish connection.
•
Pure Bridge
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Continue – Click this button to configure and establish connection.
38
PENTAGRAM Cerberus P 6341
•
PPPoE with Pass-through
Protocol – Change used protocol.
VPI / VCI – Enter the information provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
Encap. method – Select the encapsulation method provided by your ISP (VcMux
or LLC).
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Continue – Click this button to configure and establish connection.
EWAN / Select Protocol
You will see this screen if you selected EWAN and clicked Continue on previous screen
(Select WAN Port). This screen appearance changes with selected Protocol:
•
Obtain an IP Address Automatically
If ISP assigns IP address, subnet mask, gateway address, and DNS server addresses
via DHCP router can automatically obtain this information.
Protocol – Change used protocol.
Continue – Click this button to configure and establish connection.
39
PENTAGRAM Cerberus P 6341
•
Fixed IP Address
Select this option to set static IP information. You will need to enter in the IP address,
Netmask, and gateway address, provided to you by your ISP. Each IP address entered in
the fields must be in the appropriate IP form, which is four IP octets separated by a dot
(x.x.x.x).
Protocol – Change used protocol.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default is 0.0.0.0. User can change it to other such as
255.255.255.0.Type the subnet mask assigned to you by your ISP (if given).
Gateway – You must specify a gateway IP address (supplied by your ISP).
Continue – Click this button to configure and establish connection.
•
PPPoE
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
Protocol – Change used protocol.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 20 alphanumeric characters.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Authentication Protocol – Default is Chap. Your ISP advises on using Chap or Pap.
40
PENTAGRAM Cerberus P 6341
Continue – Click this button to configure and establish connection.
Please wait…
After entering correct information and clicking Continue button on Select Protocol screen,
router will be configured and connection established.
If entered values was correct, following screen will appear:
Next to Wireless – Continue to WLAN configuration.
Wireless
Set Wireless configuration
WLAN Service – Enable or Disable built-in Access Point.
ESSID – The ESSID is the unique name of a wireless access point (AP) to be distinguished
from another. For security propose, change to a unique ID name to the AP which is already
built-in to the router’s wireless interface. It is case sensitive and must not excess 32
characters. Make sure your wireless clients have exactly the same ESSID as the device, in
order to get connected to your network.
Channel ID – Select the ID channel that you would like to use.
Security Mode – You can disable or enable with WPA or WEP for protecting wireless
network. It is recommended to enable wireless network protection (see LAN / Wireless
section for details).
Continue – Save all settings and return to Status page.
41
PENTAGRAM Cerberus P 6341
Configuration
LAN
In this group you can find all settings for LAN network, both wired and wireless.
LAN / Ethernet
The router supports more than one Ethernet IP addresses in the LAN, and with distinct LAN
subnets through which you can access the Internet at the same time. Users usually only have
one subnet in their LAN. The default IP address for the router is 192.168.1.100.
IP Address – The default IP on this router.
Netmask – The default subnet mask on this router.
RIP – RIP v1, RIP v2, RIP v1+v2 and RIP v2 Multicast.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
LAN / IP Alias
This function allows the creation of multiple virtual IP interfaces on this router. It helps to
connect two or more local networks to the ISP or remote node. In this case, an internal router
is not required.
IP Address – Specify an IP address on this virtual interface.
Netmask – Specify a subnet mask on this virtual interface.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
42
PENTAGRAM Cerberus P 6341
LAN / Wireless
Parameters
WLAN Service – Enable or Disable built-in Access Point.
Mode – The default setting is 802.11g + n (Mixed mode). If you do not know or have both 11g
and 11n devices in your network, then keep the default in mixed mode. From the drop-down
list, you can select 802.11g if you have only 11g card. If you have only 11b card, then
select 802.11b. If you have only 11n card, then select 802.11n.
ESSID – The ESSID is the unique name of a wireless access point (AP) to be distinguished
from another. For security propose, change to a unique ID name to the AP which is already
built-in to the router’s wireless interface. It is case sensitive and must not excess 32
characters. Make sure your wireless clients have exactly the same ESSID as the device, in
order to get connected to your network.
Hide ESSID – It is function in which transmits its ESSID to the air so that when wireless client
searches for a network, router can then be discovered and recognized. Select Enable if you
do not want broadcast your ESSID. When Enable is selected, no one will be able to locate the
Access Point (AP) of your router. When Disable is selected, you can allow anybody with a
wireless client to be able to locate the Access Point (AP) of your router.
Regulation Domain – There are seven Regulation Domains for you to choose from, including
North America (N.America), Europe, France, etc. The Channel ID will be different based on
this setting. Select region in which router will be used – broadcasting on channel unavailable
for your region may be against the law.
Channel ID – Select the ID channel that you would like to use.
Channel Width – Select 20Mhz or 20/40MHz.
Tx Power Level – It is function that enhances the wireless transmitting signal strength. User
may adjust this power level from minimum 0 up to maximum 100. Note: The Power Level
maybe different in each access network user premises environment and choose the most
suitable level for your network.
43
PENTAGRAM Cerberus P 6341
AP MAC Address – It is a unique hardware address of the Access Point.
AP Firmware Version – The Access Point firmware version.
WPS service – Enable or Disable WPS (Wireless Protected Setup).
WPS State – Current WPS state in AP. It is used for WCN (Windows Connect Now):
•
Configured – This AP is configured via WPS. It is not allowed to configure via WCN.
•
Unconfigured – This AP is un-configured via WPS. It can be configured via WCN.
WMM – Enable or Disable WMM (Wi-Fi Multimedia) also known as WME (Wireless
Multimedia Extensions).
Wireless Distribution System (WDS)
It is a wireless access point mode that enables wireless link and communication with other
access point. It is easy to be installed, simply define the peer’s MAC address of the connected
AP. WDS takes advantages of cost saving and flexibility which no extra wireless client device
is required to bridge between two access points and extending an existing wired or wireless
infrastructure network to create a larger network.
WDS Service – The default setting is Disable. Check Enable radio button to activate this
function.
Peer WDS MAC Address – It is the associated AP’s MAC Address. It is important that your
peer’s AP must include your MAC address in order to acknowledge and communicate with
each other. Note: For MAC Address, Semicolon “:” or Dash “-“ must be included.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
Security Settings – Click on Security Settings to go to LAN / Wireless Security.
LAN / Wireless Security
Appearance of this page depends on option selected on Security Mode list:
•
Disable
Wireless network in this mode is not protected and anyone who knows ESSID can
connect to this wireless network.
44
PENTAGRAM Cerberus P 6341
•
WPA Pre-Shared Key
Only wireless stations with security set to WPA-PSK will be able to connect to this
network.
Security Mode – Change security mode.
WPA Algorithms – Select encryption algorithm: TKIP (Temporal Key Integrity Protocol)
or AES (Advanced Encryption Standard). AES utilizes a stronger encryption method and
incorporates Message Integrity Code (MIC) to provide protection against hackers.
WPA Shared Key – The key for network authentication. The input format is in character
style and the key size should be in the range between 8 and 63 characters.
Group Key Renewal – The period of renewal time for changing the security key between
wireless client and Access Point (AP). This process is done automatically.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
WPA2 Pre-Shared Key
Only wireless stations with security set to WPA2-PSK will be able to connect to this
network.
Security Mode – Change security mode.
WPA Algorithms – Select encryption algorithm: TKIP (Temporal Key Integrity Protocol)
or AES (Advanced Encryption Standard). AES utilizes a stronger encryption method and
incorporates Message Integrity Code (MIC) to provide protection against hackers.
WPA Shared Key – The key for network authentication. The input format is in character
style and the key size should be in the range between 8 and 63 characters.
Group Key Renewal – The period of renewal time for changing the security key between
wireless client and Access Point (AP). This process is done automatically.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
45
PENTAGRAM Cerberus P 6341
•
WPA/WPA2 Pre-Shared Key
Wireless stations with security set to both WPA-PSK or WPA2-PSK will be able to
connect to this network.
Security Mode – Change security mode.
WPA Algorithms – Select encryption algorithm: TKIP (Temporal Key Integrity Protocol)
or AES (Advanced Encryption Standard). AES utilizes a stronger encryption method and
incorporates Message Integrity Code (MIC) to provide protection against hackers.
WPA Shared Key – The key for network authentication. The input format is in character
style and the key size should be in the range between 8 and 63 characters.
Group Key Renewal – The period of renewal time for changing the security key between
wireless client and Access Point (AP). This process is done automatically.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
WEP
WEP Authentication – To prevent unauthorized wireless stations from accessing data
transmitted over the network, the router offers secure data encryption, known as WEP. If
you require high security for transmissions, there are three options to select from:
•
Open System – No authentication is required to connect to this network.
•
Share key – Authentication is required and is based on Share keys.
•
Both – Used authentication method depends on wireless station security settings.
Default Used WEP Key – Select the encryption key ID; please refer to Key (1~4) below.
Passphrase – This is used to generate WEP keys automatically based upon the input
string and a pre-defined algorithm in WEP64 or WEP128. You can input the same string
in both the AP and Client card settings to generate the same WEP keys. Please note that
you do not have to enter Key (1-4) as below when the Passphrase is enabled.
Key (1-4) – Enter the key to encrypt wireless data. To allow encrypted data transmission,
the WEP Encryption Key values on all wireless stations must be the same as the router.
46
PENTAGRAM Cerberus P 6341
There are four keys for your selection. The input format is in HEX or ASCII style, 5 and
13 ASCII codes or 10 and 26 HEX codes are required for WEP64 and WEP128
respectively no any separator is included.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
LAN / WPS
WPS feature is follow Wi-Fi Alliance WPS standard and it ease set up of security-enabled
Wi-Fi networks in the home and small office environment. Reduces by half the user steps to
configure a network and supports two methods that are familiar to most consumers to
configure a network and enable security.
WPS Service – Enable or Disable WPS function.
Role – Select router’s AP role for WPS.
WPS PIN – Router’s AP PIN required when configuring WPS with AP in Enrolee role.
Enrollee’s PIN – Wireless station’s PIN required when configuring WPS with AP in Registrar
role.
Start – Click this button to begin connection using WPS.
Cancel – Click this button to cancel connection using WPS.
47
PENTAGRAM Cerberus P 6341
LAN / DHCP Server
You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable
the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically
assign IP addresses to PCs on your network if they are configured to obtain IP addresses
automatically. Appearance of this page depends on option selected on DHCP Server Mode
list.
•
Disable
When the DHCP Server is disabled, you will need to manually assign a fixed IP address
to each PC on your network, and set the default gateway for each PC to the IP address
of the router (the default is 192.168.1.100).
Apply – Click this button to apply changes made on this screen.
•
DHCP Server
Domain Name – Domain in which router’s DHCP server operates.
Range Start – First IP address in DHCP server’s IP pool.
Range End – Last IP address in DHCP server’s IP pool.
Default Lease Time – Default time for which DHCP client will lease IP address.
Maximum Lease Time – Maximum time for which DHCP client will lease IP address.
Use Router as DNS Server – Check this box if router will act also as DNS server.
Primary / Secondary DNS Server – IP addresses of primary and secondary DNS
servers. This fields are unavailable when Use Router as DNS Server is enabled.
Apply – Click this button to apply changes made on this screen.
48
PENTAGRAM Cerberus P 6341
Fixed Host – Click on Fixed Host to open Fixed Host list.
Fixed Host list
This list allows you to assign IP address to certain MAC address. This will allow your
network printers or internal servers to receive always the same IP address while using
DHCP server.
Host Name – Name of DHCP client.
MAC Address – MAC address to which IP address will be assigned.
IP Address – IP address which will be assigned to MAC address.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or
to delete list items with selected Delete field.
Return – Click on Return to go back to main DHCP Server page.
•
DHCP Relay
In DHCP Relay mode router’s DHCP server relays all DHCP requests to external DHCP
server. Use this function only if advised to do so by your network administrator or ISP.
DHCP Relay Server – IP address of external DHCP server.
Apply – Click this button to apply changes made on this screen.
49
PENTAGRAM Cerberus P 6341
WAN
A WAN (Wide Area Network) is an outside connection to another network or the Internet.
WAN / WAN Profile
This screen appearance changes with selected Main Port and Protocol:
Main Port – Select port which will be used to connect to the Internet: ADSL or EWAN.
Besides using ADSL to get connected to the Internet, router offers its Ethernet port 1 as a
WAN port to be used to connect to Cable Modems, VDSL, fiber optic lines and PON. This
alternative, yet faster method to connect to the internet will provide users with more flexibility
to get online
Protocol – Protocol used by ISP.
•
ADSL / PPPoE (RFC2516, PPP over Ethernet)
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
Protocol – Change used protocol.
Description – A user-definable name for this connection.
VPI/VCI – Enter the VPI and VCI information provided by your ISP.
Encap. method – Select the encapsulation format, the default is LLC. Select the one
provided by your ISP.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive)
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 15 alphanumeric characters.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single ISP account, sharing a single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
50
PENTAGRAM Cerberus P 6341
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
Connection – Check Always On box if you want the router to establish a PPPoE
session when starting up and to automatically re-establish the PPPoE session when
disconnected by the ISP. Uncheck Always On if you want to establish a PPPoE session
only when there is a packet requesting access to the Internet (i.e. when a program on
your computer attempts to access the Internet). In this mode, you must set Idle Timeout
value at same time.
Idle Timeout – Auto-disconnect the broadband firewall gateway when there is no activity
on the line for a predetermined period of time. The minimum value is 10 minutes.
MTU – Maximum Transmission Unit. The size of the largest datagram (excluding mediaspecific headers) an IP attempts to send through the interface.
MAC Spoofing – Select Enable and enter a MAC address that will temporarily change
your router’s MAC address to the one you have specified in this field. Leave it
as Disabled if you do not wish to change the MAC address of your router.
Apply / Edit / Delete – Click this button to apply and save new values to list.
•
ADSL / PPPoA (RFC2684, PPP over AAL5)
PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). It
provides access control and billing functionality in a manner similar to dial-up services
using PPP.
Protocol – Change used protocol.
Description – User-definable name for the connection.
VPI/VCI – Enter the VPI and VCI information provided by your ISP.
Encap. method – Select the encapsulation format, the default is LLC. Select the one
provided by your ISP
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive).
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single IP account, sharing a single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
51
PENTAGRAM Cerberus P 6341
address from your ISP.
Auth. Protocol – Default is Auto. Your ISP should advises you on whether to use Chap
or Pap.
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
Connection – Check Always On box if you want the router to establish a PPPoA
session when starting up and to automatically re-establish the PPPoA session when
disconnected by the ISP. Uncheck Always On if you want to establish a PPPoA session
only when there is a packet requesting access to the Internet (i.e. when a program on
your computer attempts to access the Internet). In this mode, you must set Idle Timeout
value at same time.
Idle Timeout – Auto-disconnect the broadband firewall gateway when there is no activity
on the line for a predetermined period of time. The minimum value is 10 minutes.
MTU – Maximum Transmission Unit. The size of the largest datagram (excluding mediaspecific headers) an IP attempts to send through the interface.
Apply / Edit / Delete – Click this button to apply and save new values to list.
•
ADSL / MPoA (RFC 1483/RFC2684, Multiprotocol Encapsulation over
AAL5)
Protocol – Change used protocol.
Description – Your description of this connection.
VPI/VCI – Enter the VPI and VCI information provided by your ISP.
Encap. method – Select the encapsulation format, the default is LLC. Select the one
provided by your ISP.
Encap. mode – Choose whether you want the device to function as bridge mode or
routing mode.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single IP account, sharing the single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default is 255.255.255.0. User can change it to other such as
255.255.255.128. Type the netmask assigned to you by your ISP (if given).
Gateway – Enter the IP address of the default gateway.
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
52
PENTAGRAM Cerberus P 6341
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
MAC Spoofing – Select Enable and enter a MAC address that will temporarily change
your router’s MAC address to the one you have specified in this field. Leave it
as Disabled if you do not wish to change the MAC address of your router.
Apply / Edit / Delete – Click this button to apply and save new values to list.
•
ADSL / Pure Bridge
Protocol – Change used protocol.
Description – A user-definable name for this connection.
VPI/VCI – Enter the VPI and VCI information provided by your ISP.
Encap. method – Select the encapsulation format, this is provided by your ISP.
Add – Click this button to add new item to the list.
Apply / Edit / Delete – Click this button to apply and save new values to list item with
selected Edit field or to delete list items with selected Delete field.
•
ADSL / PPPoE with Pass-through
Protocol – Change used protocol.
Description – A user-definable name for this connection.
VPI/VCI – Enter the VPI and VCI information provided by your ISP.
Encap. method – Select the encapsulation format, the default is LLC. Select the one
provided by your ISP.
53
PENTAGRAM Cerberus P 6341
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive)
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 15 alphanumeric characters.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single ISP account, sharing a single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
Connection – Check Always On box if you want the router to establish a PPPoE
session when starting up and to automatically re-establish the PPPoE session when
disconnected by the ISP. Uncheck Always On if you want to establish a PPPoE session
only when there is a packet requesting access to the Internet (i.e. when a program on
your computer attempts to access the Internet). In this mode, you must set Idle Timeout
value at same time.
Idle Timeout – Auto-disconnect the broadband firewall gateway when there is no activity
on the line for a predetermined period of time. The minimum value is 10 minutes.
MTU – Maximum Transmission Unit. The size of the largest datagram (excluding mediaspecific headers) an IP attempts to send through the interface.
MAC Spoofing – Select Enable and enter a MAC address that will temporarily change
your router’s MAC address to the one you have specified in this field. Leave it
as Disabled if you do not wish to change the MAC address of your router.
Apply / Edit / Delete – Click this button to apply and save new values to list.
•
EWAN / Obtain an IP Address Automatically
If ISP assigns IP address, subnet mask, gateway address, and DNS server addresses
via DHCP, router can automatically obtain this information.
Line Speed – Set the downstream and upstream of your connection in kilobytes per
second. The connection speed is used by QoS settings.
Protocol – Change used protocol.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single ISP account, sharing a single IP address. If users on your
54
PENTAGRAM Cerberus P 6341
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
MAC Spoofing – Select Enable and enter a MAC address that will temporarily change
your router’s MAC address to the one you have specified in this field. Leave it
as Disabled if you do not wish to change the MAC address of your router.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
EWAN / Fixed IP Address
Select this option to set static IP information. You will need to enter in the IP address,
Netmask, and gateway address, provided to you by your ISP. Each IP address entered in
the fields must be in the appropriate IP form, which is four IP octets separated by a dot
(x.x.x.x).
Line Speed – Set the downstream and upstream of your connection in kilobytes per
second. The connection speed is used by QoS settings.
Protocol – Change used protocol.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single ISP account, sharing a single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Netmask – The default is 0.0.0.0. User can change it to other such as
255.255.255.0.Type the subnet mask assigned to you by your ISP (if given).
Gateway – You must specify a gateway IP address (supplied by your ISP).
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
MAC Spoofing – Select Enable and enter a MAC address that will temporarily change
your router’s MAC address to the one you have specified in this field. Leave it
as Disabled if you do not wish to change the MAC address of your router.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
55
PENTAGRAM Cerberus P 6341
•
EWAN / PPPoE
PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up
services using PPP.
Line Speed – Set the downstream and upstream of your connection in kilobytes per
second. The connection speed is used by QoS settings.
Protocol – Change used protocol.
Username – Enter the username provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive). This is in the format of username@ispname
instead of simply username.
Password – Enter the password provided by your ISP. You can input up to 128
alphanumeric characters (case sensitive)
Service Name – This item is for identification purposes. If it is required, your ISP
provides you the information. Maximum input is 15 alphanumeric characters.
NAT – The NAT (Network Address Translation) feature allows multiple users to access
the Internet through a single ISP account, sharing a single IP address. If users on your
LAN have public IP addresses and can access the Internet directly, the NAT function can
be disabled.
IP Address – Your WAN IP address. Leave this at 0.0.0.0 to automatically obtain an IP
address from your ISP.
Auth. Protocol – Default is Auto. Your ISP advises on using Chap or Pap.
Obtain DNS – Select Automatic check box to receive DNS via DHCP.
Primary / Secondary – Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and the Netmask.
Connection – Check Always On box if you want the router to establish a PPPoE
session when starting up and to automatically re-establish the PPPoE session when
disconnected by the ISP. Uncheck Always On if you want to establish a PPPoE session
only when there is a packet requesting access to the Internet (i.e. when a program on
your computer attempts to access the Internet). In this mode, you must set Idle Timeout
value at same time.
Idle Timeout – Auto-disconnect the broadband firewall gateway when there is no activity
on the line for a predetermined period of time. The minimum value is 10 minutes.
MTU – Maximum Transmission Unit. The size of the largest datagram (excluding mediaspecific headers) an IP attempts to send through the interface.
MAC Spoofing – Select Enable and enter a MAC address that will temporarily change
your router’s MAC address to the one you have specified in this field. Leave it
as Disabled if you do not wish to change the MAC address of your router.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
56
PENTAGRAM Cerberus P 6341
WAN / ADSL Mode
ADSL Mode – There are five modes Open Annex Type and Follow DSLAM’s Setting,
Annex A, Annex L, Annex M and Annex J that user can select for this connection.
Modulator – There are seven modes AUTO, ADSL multimode, ADSL2, ADSL2+, G.Lite,
T1.413 and G.DMT that user can select for this connection.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
57
PENTAGRAM Cerberus P 6341
System
System / Time Zone
The router does not have a real time clock on board; instead, it uses the Simple Network Time
Protocol (SNTP) to get the current time from an SNTP server outside your network. Choose
your local time zone, click Enable and click the Apply button. After a successful connection to
the Internet, the router retrieves the correct local time from the SNTP server you have
specified. If you prefer to specify an SNTP server other than those in the drop-down list,
simply enter its IP address as shown above. Your ISP may provide an SNTP server for you to
use.
Resync Period (in minutes) is the periodic interval the router waits before it resynchronizes
the router’s time with that of the specified SNTP server. To avoid unnecessarily increasing the
load on your specified SNTP server you should keep the poll interval as high as possible – at
the absolute minimum every few hours or even days.
System / Firmware Upgrade
Your router’s firmware is the software that allows it to operate and provides all its functionality.
Think of your router as a dedicated computer, and the firmware as the software it runs. Over
time this software may be improved and modified. Your router allows you to upgrade the
software it runs to take advantage of these changes.
Clicking on Browse allows you to select the new firmware image file you have downloaded to
your PC. Once the correct file is selected, click Upgrade to update the firmware in your router.
Restart Router with – To choose Factory Default Setting or Current Settings that user
want.
New Firmware Image – Type in the location of the file you wish to upload in this field or
click Browse... to find it.
58
PENTAGRAM Cerberus P 6341
Browse... – Click Browse... to find the .afw file you wish to upload. Remember that you must
decompress compressed (.zip) files before you can upload them.
Upgrade – Click upgrade to begin the upload process. This process may take up to two
minutes.
Warning: DO NOT power down the router or interrupt the firmware upgrade while it is
still in process. Improper operation may damage the router.
System / Backup/Restore
These functions allow you to save and backup your router’s current settings to a file on your
PC, or to restore a previously saved backup. This is useful if you wish to experiment with
different settings, knowing that you have a backup handy in the case of any mistakes. It is
advisable to backup your router’s settings before making any significant changes to your
router’s configuration.
Press Backup to select where on your local PC to save the settings file. You may also change
the name of the file when saving if you wish to keep multiple backups.
Press Browse to select a file from your PC to restore. You should only restore settings files
that have been generated by the Backup function, and that were created when using the
current version of the router’s firmware. Settings files saved to your PC should not be
manually edited in any way.
Select the settings files you wish to use, and press Restore to load those settings into the
router.
System / Restart Router
Click Restart with option Current Settings to reboot your router and restore your last saved
configuration.
If you wish to restart the router using the factory default settings (for example, after a firmware
upgrade or if you have saved an incorrect configuration), select Factory Default Settings to
reset to factory default settings.
59
PENTAGRAM Cerberus P 6341
You may also reset your router to factory settings by pressing in the small Reset pinhole
button on the back of your router for about 6 seconds while the router is turned on.
System / User Management
In order to prevent unauthorized access to your router’s configuration interface, it requires all
users to login with a password. You can set up multiple user accounts, each with their own
password. Once you have clicked Edit on the account you want to edit, the information of the
account will be displayed above.
Valid – Select this box to enable or deselect to disable user account..
User – Enter user name.
Password / Confirm – In both fields enter password for this user.
Login Mode – Configuration mode after user logon. Advanced mode is available only for
users with Super privileges.
Level – Privileges level for this user.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
System / Mail Alert
Send a log via email, if WAN IP is changed or if intruders accessing your computer without
permission
60
PENTAGRAM Cerberus P 6341
Firewall
Firewall / Packet Filter
Packet filtering enables you to configure your router to block specified internal/external users
(IP address) from Internet access, or you can disable specific service requests (Port number)
to /from Internet. This configuration program allows you to set up to 6 different filter rules for
different users based on their IP addresses or their network Port number. The relationship
among all filters is “or” operation, which means that the router checks these different filter
rules one by one, starting from the first rule. As long as one of the rules is satisfied, the
specified action is taken.
Rule Name – Users-define description to identify this entry. The maximum name length is 32
characters, and then can choose application that they want from listbox.
Internal IP Address / External IP Address – This is the Address-Filter used to allow or block
traffic to/from particular IP address(es). Input the range you want to filter out. If you leave
empty or 0.0.0.0, it means any IP address.
Protocol – Specify the packet type (TCP, UDP, ICMP, etc.) that the rule applies to.
Select TCP if you wish to search for the connection-based application service on the remote
server using the port number. Or select UDP if you want to search for the connectionless
application service on the remote server using the port number.
Action – If a packet matches this filter rule, Forward (allows the packets to pass) or Drop
(disallow the packets to pass) this packet.
Internal Port – This Port or Port Range defines the ports allowed to be used by the
Remote/WAN to connect to the application. Default is set from range 0 ~ 65535. It is
recommended that this option be configured by an advanced user.
External Port – This is the Port or Port Range that defines the application.
Direction – Determine whether the rule is for outgoing packets or for incoming packets.
Time Schedule – It is self-defined time period. You may specify a time schedule for your
prioritization policy. For setup and detail, refer to Time Schedule section.
Log – Check this box if you wish to generate logs when the filer rule is applied to a packet.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
Reorder – Use arrows in Order column to change order of rules and then click Reorder
button to apply new order.
61
PENTAGRAM Cerberus P 6341
Attention: If the DHCP server option is enabled, you must be very careful in assigning
IP addresses of a filtered private IP range to avoid conflicts because you do not know
which PC in the LAN is assigned which IP address. The easiest and safest way is that
the filtered IP address is assigned to a specific PC that is not allowed to access an
outside resource such as the Internet. You configure the filtered IP address manually
for this PC, but it stays in the same subnet with the router.
Firewall / MAC Filter
A MAC (Media Access Control) address is the unique network hardware identifier for each PC
on your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your
router’s MAC Address Filter function, you can configure to block specific machines from
accessing your LAN.
There are no pre-defined MAC address filter rules; you can add the filter rules to meet your
requirements.
MAC Address – Enter the MAC address you wish to manage.
Time Schedule – It is self-defined time period. You may specify a time schedule for your
prioritization policy. For setup and detail, refer to Time Schedule section.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
62
PENTAGRAM Cerberus P 6341
Firewall / Intrusion Detection
Check Enable if you wish to detect intruders accessing your computer without permission.
The router automatically detects and blocks a DoS (Denial of Service) attack if a user enables
this function. This kind of attack is not to access confidential data on the network; instead, it
aims to disrupt specific equipment or the entire network. If this happens, users are not able to
access network resources.
Intrusion Detection – Check Enable if you wish to detect intruders accessing your computer
without permission.
Maximum TCP Open Handshaking Count – This is a threshold value to decide whether a
SYN Flood attempt is occurring or not. Default value is 100 TCP SYN per seconds.
Maximum Ping Count – This is a threshold value to decide whether an ICMP Echo Storm is
occurring or not. Default value is 15 ICMP Echo Requests (PING) per second.
Maximum ICMP Count – This is a threshold to decide whether an ICMP flood is occurring or
not. Default value is 100 ICMP packets per seconds except ICMP Echo Requests (PING).
Log – Check Log if you wish to generate logs when the filer rule is applied to the Intrusion
Detection.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
Firewall / Block WAN PING
Block WAN PING – Check Enable if you wish to exclude outside PING requests from
reaching this router.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
63
PENTAGRAM Cerberus P 6341
Firewall / URL Filter
URL (Uniform Resource Locator – e.g. an address in the form of http://www.pentagram.eu or
http://www.example.com) filter rules allow you to prevent users on your network from
accessing particular websites from their URL. There are no pre-defined URL filter rules; you
can add filter rules to meet your requirements.
Keywords Filtering – Allows blocking by specific keywords within a particular URL rather
than having to specify a complete URL (e.g. to block any image called “advertisement.gif”).
When enabled, your specified keywords list is checked to see if any keywords are present in
URLs accessed to determine if the connection attempt should be blocked. Note that the URL
filter blocks web browser (HTTP) connection attempts using port 80 only. Click on Detail to
open Keywords Filtering list.
Domains Filtering – Checks the domain name in URLs accessed against your list of domains
to block or allow. If it matches, the URL request is sent (Trusted) or dropped (Forbidden).
Please be note that the completed URL www.[domain name] shall be specified. Click
on Detail to open Domain Filtering list.
Restrict URL Features – This function enhances the restriction to your URL rules. You can
select to Block Java Applet (Blocks Web content which includes the Java Applet to prevent
someone who wants to damage your system via the standard HTTP protocol), Block ActiveX,
Block Cookies or Block Proxy.
Except IP Address – Click on Detail to open Except IP Address list.
Time Schedule – It is self-defined time period. You may specify a time schedule for your
prioritization policy. For setup and detail, refer to Time Schedule section.
Log – Click Log if you wish to generate logs when the filer rule is applied to the URL Filter.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
•
Keywords Filtering
Keyword – Enter keyword which will be blocked.
64
PENTAGRAM Cerberus P 6341
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or
to delete list items with selected Delete field.
Return – Click on Return to go back to Firewall / URL Filter page.
•
Domain Filtering
Domain – Enter domain for which filter will be created.
Type – Select whether entered domain is Trusted Domain or Forbidden Domain.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or
to delete list items with selected Delete field.
Return – Click on Return to go back to Firewall / URL Filter page.
•
Except IP Address
Internal IP Address – Type IP address of range of IP addresses for which URL filtering
won’t be applied.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or
to delete list items with selected Delete field.
Return – Click on Return to go back to Firewall / URL Filter page.
65
PENTAGRAM Cerberus P 6341
QoS
Quality of Service Introduction
If you’ve ever found your ‘net’ speed has slowed to a crawl because another family member is
using a P2P file sharing program, you’ll understand why the Quality of Service features in the
routers is such a breakthrough for home users and office users.
QOS: Keeping Your Net Connection Fast and Responsive
Configurable by internal IP address, external IP address, protocol, and port, the Quality of
Service (QoS) gives you full control over which types of outgoing data traffic should be given
priority by the router, ensuring bandwidth-consumption data like gaming packets, latencysensitive application like voice, or even mission critical files, move through the router at
lightning speed, even under heavy load. You can throttle the speed at which different types of
outgoing data pass through the router. In addition, you can simply change the priority of
different types of upload data and let the router sort out the actual speeds.
Non-Assigned Bandwidth Ratio – Total available (Non-assigned) bandwidth, in percentage,
that can be assigned for QoS purposes.
Application – A name that identifies an existing policy.
Direction – The traffic flow direction to be controlled by the QoS policy. There are two settings
to be provided in the Router:
•
LAN to WAN – You want to control the traffic flow from the local network to the outside
world. e.g., you have a FTP server inside the local network and you want to have a
limited traffic rate controlled by the QoS policy. So, you need to add a policy with LAN to
WAN direction setting.
•
WAN to LAN – Control Traffic flow from the WAN to LAN. The connection may be either
issued from LAN to WAN or WAN to LAN.
Protocol – The Protocol will be controlled. For GRE protocol, there is no need to specify the
IP addresses or Application ports in this page. For other protocols, at least one value shall be
given.
•
ANY – No protocol type is specified.
•
TCP
•
UDP
•
ICMP
•
GRE – For PPTP VPN Connections.
DSCP Marking – Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS
byte. DSCP Marking allows users to classify traffic based on DSCP value and send packets to
next Router.
Note: Make sure that the router(s) in the backbones network have the capability in
executing and checking the DSCP through-out the QoS network.
66
PENTAGRAM Cerberus P 6341
DSCP Mapping Table
Disabled
None
Best Effort
Best Effort (000000)
Premium
Express Forwarding (101110)
Gold service (L)
Class 1, Gold (001010)
Gold service (M)
Class 1, Silver (001100)
Gold service (H)
Class 1, Bronze (001110)
Silver service (L)
Class 2, Gold (010010)
Silver service (M)
Class 2, Silver (010100)
Silver service (H)
Class 2, Bronze (010110)
Bronze service (L)
Class 3, Gold (011010)
Bronze service (M)
Class 3, Silver (011100)
Bronze service (H)
Class 3, Bronze (011110)
Rate Type – 2 types are provided:
•
Limited (Maximum) – Specify a limited data rate for this policy. It also is the maximal
rate for this policy. For example, you may want to “throttle” the outgoing FTP speed to
20% of 256K and limit to it, you may use this type.
•
Guaranteed (Minimum) – Specify a minimal data rate for this policy. For example, you
want to provide a guaranteed data rate for your outside customers to access your internal
FTP server with, say at least, 20% of your total bandwidth. You can use this type. Then, if
there is available bandwidth that is not used, it will be given to this policy by following
priority assignment.
Ratio – Assign the data ratio for this policy to be controlled. For example, we want to only
allow 20% of the total data transfer rate for the LAN-to-WAN direction to be used for FTP
server. Then we can specify here with data ratio = 20. If you have ADSL LINE with
256K/bps.rate, the estimated data rate, in kbps, for this rule is 20%*256*0.9 = 46kbps. (For 0.9
is an estimated factor for the effective data transfer rate for a ADSL LINE from LAN to WAN.
For WAN-to-LAN, it is 0.85 to 0.8).
Priority – Specify the priority for the bandwidth that is not used. For example, you may specify
two different QoS policies for different applications. Both applications need a minimal
bandwidth and need more bandwidth, beside the assigned one, if there is any available/nonused one available. So, you may specify which application can have higher priority to acquire
the non-used bandwidth. For the sample priority assignment for different policies, it is served
in a First-In-First-Out way.
Internal IP Address – The IP address values for Local LAN machines you want to control.
(For IP packets from LAN to WAN, it is the source IP address. For IP packages from WAN to
LAN, it is the destination IP address.)
Internal Port – The Application port values for local LAN machines you want to control. (For
TCP/UDP packets from LAN to WAN, it is the source port value. For TCP/UDP packets from
WAN to LAN, it is the destination port value.)
External IP Address – The IP address values for Remote WAN machines you want to
control. (For IP packets from LAN to WAN, it is the destination IP address. For IP packages
from WAN to LAN, it is the source IP address.)
External Ports – The Application port values for remote machines you want to control. (For
TCP/UDP packets from LAN to WAN, it is the destination port value. For TCP/UDP packets
from WAN to LAN, it is the source port value.)
Time Schedule – Scheduling your prioritization policy.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
67
PENTAGRAM Cerberus P 6341
Example QOS Plan
Application
VoIP User
IP or Ports
192.168.1.1
Control Flow
Outgoing
FTP Sever
192.168.1.100
Incoming and
Outgoing
HTTP web
browsing
users
80
Incoming and
Outgoing
Data Rate
Minimal 20% with high
priority for non-used
bandwidth with SDCP
marking Class 1 Gold
Service
Outgoing:
minimal 30%. Data rate.
Incoming:
minimal 30%. Data rate.
Both with low priority for
non-used bandwidth.
Outgoing :
limited 20%. Data rate.
Incoming:
limited 30%. Data rate.
Time Schedule
Always
Only Working
Hours 9:00 to
17:00 Monday
to Friday.
Always
ADSL Subscription Rate
Upstream: 256 kbps
Downstream: 2048 Mbps
Example QOS Setup
VoIP application
Voice is latency-sensitive application. Most VoIP devices are used SIP protocol and the port
number will be assigned by SIP module automatically. Better to use fixed IP address for
catching VoIP packets as high priority.
68
PENTAGRAM Cerberus P 6341
Virtual Server
In TCP/IP and UDP networks a port is a 16-bit number used to identify which application
program (usually a server) incoming connections should be delivered to. Some ports have
numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers
Authority), and these are referred to as “well-known ports”. Servers follow the well-known port
assignments so clients can locate them.
If you wish to run a server on your network that can be accessed from the WAN (i.e. from
other machines on the Internet that are outside your local network), or any application that can
accept incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging
applications and P2P file-sharing applications) and are using NAT (Network Address
Translation), then you need to configure your router to forward these incoming connection
attempts using specific ports to the PC on your network running the application. You also need
to use port forwarding if you wish to host an online game server.
The reason is that when using NAT, your publicly accessible IP address is used by and points
to your router, which needs to deliver all traffic to the private IP addresses used by your PCs.
Please see the WAN configuration section of this manual for information on NAT.
The Internet Assigned Numbers Authority (IANA) is the central coordinator for the assignment
of unique parameter values for Internet protocols. Port numbers range from 0 to 65535, but
only port numbers 0 to 1023 are reserved for privileged services and are designated as “wellknown ports”. The registered ports are numbered from 1024 through 49151. The remaining
ports, referred to as dynamic ports, or private ports, are numbered from 49152 through 65535.
Examples of well-known and registered port numbers are shown below, for further
information, please see IANA’s website at: http://www.iana.org/assignments/port-numbers
Note: Using port forwarding does have security implications, since outside users are
able to connect to PCs on your network. For this reason you are advised to use specific
Virtual Server entries just for the ports your application requires instead of simply
using DMZ or creating a Virtual Server entry for “All” protocols, as doing so results in
all connection attempts to your public IP address accessing the specified PC.
Attention: If you disable the NAT option in the WAN / WAN Profile section, the Virtual
Server function becomes invalid.
Attention: If the DHCP server option is enabled, you have to be very careful in
assigning the IP addresses of the virtual servers in order to avoid conflicts. The easiest
way of configuring Virtual Servers is to manually assign a static IP address to each
virtual server PC, with an address that does not fall into the range of IP addresses that
are issued by the DHCP server. You can configure the virtual server IP address
manually, but it must still be in the same subnet as the router.
69
PENTAGRAM Cerberus P 6341
Well-known and Registered Ports
Port
Number
20
21
22
23
25
53
69
80
110
119
123
161
443
1503
1720
4000
7070
Protocol
Description
TCP
TCP
TCP & UDP
TCP
TCP
TCP & UDP
UDP
TCP
TCP
TCP
UDP
TCP
TCP & UDP
TCP
TCP
TCP
UDP
FTP Data
FTP Control
SSH Remote Login Protocol
Telnet
SMTP (Simple Mail Transfer Protocol)
DNS (Domain Name Server)
TFTP (Trivial File Transfer Protocol)
World Wide Web HTTP
POP3 (Post Office Protocol Version 3)
NEWS (Network News Transfer Protocol)
NTP (Network Time Protocol)
SNMP
HTTPS
T.120
H.323
ICQ
RealAudio
Virtual Server / Port Mapping
Application – Select the service you wish to configure
Protocol – Automatic when you choose Application from listbox or select a protocol type
which you want.
External Port / Internal Port – Enter the public port number & range you wish to configure.
Internal IP Address – Enter the IP address of a specific internal server to which requests
from the specified port is forwarded.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
Since NAT acts as a “natural” Internet firewall, your router protects your network from access
by outside users, as all incoming connection attempts point to your router unless you
specifically create Virtual Server entries to forward those ports to a PC on your network. When
your router needs to allow outside users to access internal servers, e.g. a web server, FTP
server, Email server or game server, the router can act as a “virtual server”. You can set up a
local server with a specific port number for the service to use, e.g. web/HTTP (port 80), FTP
70
PENTAGRAM Cerberus P 6341
(port 21), Telnet (port 23), SMTP (port 25), or POP3 (port 110). When an incoming access
request to the router for a specified port is received, it is forwarded to the corresponding
internal server.
In addition to specifying the port number used, you also need to specify the protocol used. The
protocol is determined by the particular application. Most applications use TCP or UDP,
however you can specify other protocols using the drop-down Protocol menu. Setting the
protocol to “all” causes all incoming connection attempts using all protocols on all port
numbers to be forwarded to the specified IP address.
Virtual Server / DMZ
The DMZ Host is a local computer exposed to the Internet. When setting a particular internal
IP address as the DMZ Host, all incoming packets are checked by the Firewall and NAT
algorithms, then passed to the DMZ host when a packet received does not use a port number
in use by any other Virtual Server entries.
Internal IP Address – Enter the IP address of a specific internal host to which all external
requests is forwarded.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
71
PENTAGRAM Cerberus P 6341
Wake on LAN
This page allows you to control to which hosts Magic Packet will be forwarded.
MAC Address – Enter the MAC address you wish to manage.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
72
PENTAGRAM Cerberus P 6341
Time Schedule
The Time Schedule supports up to 16 time slots which helps you to manage your Internet
connection. In each time profile, you may schedule specific day(s) i.e. Monday through
Sunday to restrict or allowing the usage of the Internet by users or applications.
This Time Schedule correlates closely with router’s time, since router does not have a real
time clock on board; it uses the Simple Network Time Protocol (SNTP) to get the current time
from an SNTP server from the Internet. Refer to System / Time Zone for details. You router
time should correspond with your local time. If the time is not set correctly, your Time
Schedule will not function properly.
Name – A user-define description to identify this time portfolio.
Day in a week – The default is set from Sunday through Saturday. You may specify the days
for the schedule to be applied. Selected days on list are displayed in capital letters.
Start Time – The default is set at 8:00 (AM). You may specify the start time of the schedule.
End Time – The default is set at 18:00 (6:00PM). You may specify the end time of the
schedule.
Edit / Clear – Click this button to save new values to list item with selected Edit field or to
clear list items with selected Clear field.
73
PENTAGRAM Cerberus P 6341
Advanced
Advanced / Static Route
Destination – The destination subnet IP address.
Netmask – Subnet mask of the destination IP addresses based on above destination.
Gateway – The gateway IP address to which packets are forwarded.
Interface – Select the interface through which packets are forwarded.
Cost – Represents the cost of transmission for routing purposes. The number need not be
precise, but it must be between 0 and 65535.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
Advanced / Static ARP
Enter IP Address and MAC_Address of host which will be added to static ARP table.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
74
PENTAGRAM Cerberus P 6341
Advanced / Dynamic DNS
The Dynamic DNS function lets you alias a dynamic IP address to a static hostname, so if
your ISP does not assign you a static IP address you can still use a domain name. This is
especially useful for hosting servers via your ADSL connection, so that anyone wishing to
connect to you may use your domain name, rather than having to use your dynamic IP
address, which changes from time to time. This dynamic IP address is the WAN IP address of
the router, which is assigned to you by your ISP.
You first need to register and establish an account with the Dynamic DNS provider using their
website, for example http://www.dyndns.org/
Dynamic DNS – Check Disable to disable or Enable to enable the Dynamic DNS function.
Dynamic DNS Server – Select the DDNS service you have established an account with.
Wildcard – Select this check box to enable the DYNDNS Wildcard.
Host – Enter one domain name you have registered.
Domain Name, Username and Password – Enter your registered domain name and your
username and password for this service.
Period – Set the time period between updates, for the router to exchange information with the
DDNS server. In addition to updating periodically as per your settings, the router performs an
update when your dynamic IP address changes.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
75
PENTAGRAM Cerberus P 6341
Advanced / VLAN
VLAN (Virtual Local Area Network) is a group of devices on different physical LAN segments
that can communicate with each other as if they were all on the same physical LAN segment.
While clients and servers may be located anywhere on a network, they are grouped together
by VLAN technology, and broadcasts are sent to devices within the VLAN.
VLAN Group Name – There are eight groups that user can setup by themselves.
VLAN ID – Group name ID
LAN Tagging – Tagging VLAN ID to the specific VLAN group for Ethernet interface.
Ethernet port – Port name of Router
Link VLAN Group to WAN connection Interface / WAN Tagging – Select the WAN
connection interface that VLAN group link. Select check box to enable WAN Tagging (only for
Bridge connections).
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
76
PENTAGRAM Cerberus P 6341
Advanced / Device Management
The Device Management advanced configuration settings allow you to control your router’s
security options and device monitoring features.
Device Host Name
Host Name – Router’s name for identification purposes.
Embedded Web Server
HTTP Port – The port number of the router’s embedded web server (for web-based
configuration uses. The default value is the standard HTTP port, 80. You may specify an
alternative if, for example, you are running a web server on a PC within your LAN.
Expire to auto-logout – Time after which user will be automatically logged out.
For Example: User A changes HTTP port number to 100, specifies their own IP address of
192.168.1.55, and sets the logout time to be 10 minutes. The router only allows User A access
from the IP address 192.168.1.55 to logon to the Web GUI by typing: http://192.168.1.100:100
in their web browser. After 10 minutes, the device automatically logs out User A.
Universal Plug and Play (UPnP)
UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with
control and data transfer between devices. UPnP offers many advantages for users running
NAT routers through UPnP NAT Traversal, and on supported systems makes tasks such as
port forwarding much easier by letting the application control the required settings, removing
the need for the user to control advanced configuration of their device.
Both the user’s Operating System and the relevant application must support UPnP in addition
to the router. Windows XP and Windows Me natively support UPnP (when the component is
installed), and Windows 98 users may install the Internet Connection Sharing client from
Windows XP in order to support UPnP. Windows 2000 does not support UPnP.
Note: For security reasons (Flash UPnP attack) UPnP is disabled by default.
Disable – Check to disable the router’s UPnP functionality.
Enable – Check to enable the router’s UPnP functionality.
UPnP Port – The default setting is 2800. It is highly recommended that you use this port
value. If the value conflicts with other ports already in use you may wish to change the port.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
77
PENTAGRAM Cerberus P 6341
Advanced / IGMP
IGMP, known as Internet Group Management Protocol, is used to management hosts from
multicast group.
IGMP Proxy – Accepting multicast packet. Default is set to Disable.
IGMP Snooping – Allowing switched Ethernet to check and make correct forwarding
decisions. Default is set to Enable
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
Advanced / SNMP Access Control
Simple Network Management Protocol software on a PC within the LAN is required to use this
function.
Parameters
SNMP – Enable or Disable SNMP.
SNMP V1 and V2
Read Community – Specify a name to be identified as the Read Community, and an IP
address. This community string is checked against the string entered in the configuration file.
Once the string name is matched, you can obtain this IP address and are able to view the
data.
Write Community – Specify a name to be identified as the Write Community, and an IP
address. This community string is checked against the string entered in the configuration file.
Once a string name is matched, users from this IP address are able to view and modify data.
78
PENTAGRAM Cerberus P 6341
SNMP V3
Specify a name and password for authentication, and define access rights from the identified
IP address. Once authentication has succeeded, users from this IP address are able to view
and modify data.
Apply – Click this button to apply changes made on this screen.
Cancel – Click this button to discard changes made on this screen.
SNMP Version: SNMPv2c and SNMPv3
SNMPv2c is the combination of the enhanced protocol features of SNMPv2 without the
SNMPv2 security. The "c" comes from the fact that SNMPv2c uses the SNMPv1 community
string paradigm for "security" but is widely accepted as the SNMPv2 standard.
SNMPv3 is a strong authentication mechanism with fine granularity for remote monitoring.
Traps supported: Cold Start, Authentication Failure.
The following MIBs are supported:
From RFC 1213 (MIB-II):
System group
Interfaces group
Address Translation group
IP group
ICMP group
TCP group
UDP group
EGP (not applicable)
Transmission
SNMP group
From RFC1650 (EtherLike-MIB):
dot3Stats
From RFC 1493 (Bridge MIB):
dot1dBase group
dot1dTp group
dot1dStp group (if configured as spanning tree)
From RFC 1471 (PPP/LCP MIB):
pppLink group
pppLqr group
From RFC 1472 (PPP/Security MIB):
PPP Security Group)
From RFC 1473 (PPP/IP MIB):
PPP IP Group
From RFC 1474 (PPP/Bridge MIB):
PPP Bridge Group
From RFC1573 (IfMIB):
ifMIBObjects Group
From RFC1695 (atmMIB):
atmMIBObjects
From RFC 1907 (SNMPv2):
only snmpSetSerialNo OID
79
PENTAGRAM Cerberus P 6341
Advanced / Remote Access
Remote Access Control
Enable – Select Enable to allow management access from remote side (mostly from internet).
Duration – Set how many minutes to allow management access from remote side. Zero
means always on.
Apply – Click this button to apply changes made on this screen.
Allowed Access IP Address Range
Valid – Select Valid to allow remote management from these IP ranges.
IP Address Range – Specify what IP address to be allowed to access device from remote
side.
Add – Click this button to add new item to the list.
Edit / Delete – Click this button to save new values to list item with selected Edit field or to
delete list items with selected Delete field.
80
PENTAGRAM Cerberus P 6341
Troubleshooting
If the router is not function properly, first check this session for simple troubleshooting before
contacting your Internet service provider (ISP) for support.
Using LEDs to Diagnose Problems
The LEDs are useful aides for finding possible problem causes.
Power LED
The Power LED on the front panel does not light up.:
1. Make sure that the power adaptor is connected to the router and plugged in to an
appropriate power source. Use only the supplied power adaptor;
2. Check that the router and the power source are both turned on and the router is receiving
sufficient power;
3. Turn the router off and on;
4. If the error persists, you may have a hardware problem. In this case, you should contact
your vendor.
Ethernet LEDs
The Ethernet LED on the front panel does not light up.:
1. Check the Ethernet cable connections between your router and the computer or hub;
2. Check for faulty Ethernet cables;
3. Make sure your computer’s Ethernet card is working properly;
4. If these steps fail to correct the problem, contact your local distributor for assistance.
DSL / Internet LED
The DSL and/or Internet LED on the front panel does not light up:
1. ADSL Check the telephone wire and connections between the router ADSL port and the
wall jack;
EWAN Check cable between router and ISPs access device and connections between
access device and signal line; make sure that Ethernet 1 port is used for connection with
access device;
2. ADSL Make sure that the telephone company has checked your phone line and set it up
for ADSL service;
EWAN Make sure that ISP setup line for Internet service;
3. ADSL Reset your ADSL line to reinitialize your link to the DSLAM;
EWAN Reset your access device;
4. If these steps fail to correct the problem, contact your local distributor for assistance.
81
PENTAGRAM Cerberus P 6341
Problems with the Web Interface
I cannot access the web Interface:
1. Make sure you are using the correct IP address of the router. Check the IP address of the
router;
2. Your computer’s and the router’s IP addresses must be on the same subnet for LAN
access;
3. If you changed the router’s LAN IP address, then enter the new one as the URL;
4. Remove any filters in LAN or WAN that block web service.
Problems with the Login Username and Password
I forgot my login username and/or password:
1. The default username is “admin”. The default password is “pentagram”. The Password
and Username fields are case-sensitive. Make sure that you enter the correct password
and username using the proper casing;
2. Press the RESET button for 10-12 seconds, and then release it - the defaults have been
restored and the router restarts;
Problems with LAN Interface
I cannot access the router from the LAN or ping any computer on the LAN:
1. Check the Ethernet LEDs on the front panel. A LAN LED should be on for a port that has
a PC connected. If it is off, check the cables between your router and the PC. Make sure
you have uninstalled any software firewall for troubleshooting;
2. Make sure that the IP address and the subnet mask is consistent between the router and
the workstation.
3. In EWAN mode Ethernet 1 port is used as WAN port and computer connected to this port
won’t work in local network.
Problems with WAN Interface
Initialization of the ADSL connection failed:
1. Check the cable connections between the ADSL port and the wall jack. The ADSL LED
on the front panel of the router should be on;
2. Check that your VPI, VCI and type of encapsulation settings are the same as what you
collected from your telephone company and ISP;
3. Restart the router. If you still have problems, you may need to verify your VPI, VCI and
type of encapsulation settings with the telephone company and ISP.
I cannot get a WAN IP address from the ISP:
1. Ensure that all other devices connected to the same telephone line as your router (e.g.
telephones, fax machines, analogue modems) have a line filter connected between them
and the wall socket (unless your are using a Central Splitter or Central Filter installed by
the qualified and licensed electrician), and ensure that all line filters are correctly installed
and right way around;
2. Missing line filters or line filters installed the wrong way around can cause problems with
your ADSL connection, including causing frequent disconnects.
82
PENTAGRAM Cerberus P 6341
Frequent loss of ADSL line sync (disconnections):
1. The ISP provides the WAN IP address after authenticating you. Authentication may be
through the user name and password, the MAC address or the host name;
2. The username and password apply to PPPoE and PPPoA connections only. Make sure
that you have entered the correct Service Name, Username and Password (be sure to
use the correct casing).
Problems with the Internet Access
I cannot access the Internet:
1. Make sure the router is turned on and connected to the network;
2. If the DSL and/or Internet LED is off, refer to Section DSL / Internet LED of this
troubleshooting;
3. Verify your WAN settings;
4. Make sure you entered the correct user name and password;
5. For wireless stations, check that both the router and wireless station(s) are using the
same ESSID, channel and encryption keys (if encryption is activated).
Internet connection disconnects:
1. If you use PPPoA or PPPoE encapsulation, check the idle time-out setting;
2. Contact your ISP.
If you have any troubles to configure or setup this ADSL Ethernet Router, please feel free to
contact us.
83
PENTAGRAM Cerberus P 6341
84
Download PDF
Similar pages