Edimax Router BR-6104K User Manual
Have a look at the manual Edimax Router BR-6104K User Manual online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 11 Edimax manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
Example: Special Applications If you need to run applications that require multiple connec tions, then specify the port (outbound) normally associated with that application in the Trigger Port fiel d. Then select the protocol type (TCP or UDP) and enter the public ports associated with the trigger port to open them up for inbound traffic. Example: ID Trigger Port Trigger Type Public Port Public Type Comment 1 28800 UDP 2300-2400, 47624 TCP MSN Game Zone 2 6112 UDP 6112 UDP Battle.net In the example above, when a user tri gger’s port 28800 (outbound) for MSN Game Zone then the router will allow incoming packets for ports 2300-2400 and 47624 to be directed to that user. Note: Only one LAN client can use a particular special application at a time. 2.4.4 ALG Settings You can select applications that need “Application Layer Gateway” to support. Parameter Default Description Enable You can select to enable “Application Layer Gateway” of an applicatio n and then the router will let that application correctly pass though the NAT gateway. Click < Apply> at the bottom of the screen to save the above confi gurations. You can now configure other advance sections or start using the router (with the advance settings in place) 31
2.5 Firewall The Broadband router provides extensive firewall protection by restricting connection parameters, thus limiting the risk of hacker attack, and defending against a wide array of common In ternet attacks. However, for applications that require unrestricted access to the Internet, you can configure a s pecific client/server as a Demilitarized Zone (DMZ). Note: To enable the Firewall settings select Enable and click Apply Parameter Description Access Control Access Control allows you to specify which hosts users can or cannot have access to certain Internet applications URL Blocking URL Blocking allow you to specify which URLs can not be accessed by users. DoS The Broadband routers firewall can block common hacker attacks and can log the attack activities. DMZ The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. Click on one of the firewall selections and proceed to the manual’s relevant sub-section 2.5.1 Access Control If you want to restrict users from accessing certain Internet applications/services (e.g. Internet websites, email, FTP etc.), then this is the place to set that confi guration. Access Control allows users to define the traffic type permitted in your LAN. You can control which PC client c an have access to these services. Parameter Description Filter client PCs by IP Fill “IP Filtering Table” to filter PC clients by IP. 32
Add PC You can click Add PC to add an access control rule for users by IP addresses. Remove PC If you want to remove some PC from the IP Filtering Table, select the PC you want to remove in the table and then click Delete Sele cted. If you want remove all PCs from the table, just click Delete All button. Filter client PC by MAC address Check “Enable MAC Filtering” to enable MAC Filtering. Add PC Fill in “Client PC MAC Address” and “Comment” of the PC that is allowed to access the Internet, and then click “Add”. If you find any typo before adding it and want to retype again, just click Reset and the fields will be cleared. Remove PC If you want to remove some PC from the MAC Filtering Table, select the PC you want to remove in the table and then click Delet e Selected. If you want remove all PCs from the table, just click Delete All button. If you want to clear the selection and re-select again, just click “Reset”. You can now configure other advance sections or start using the router (with the advance settings in place) Add PC Parameter Description Client PC Description The description for this client PC rule. Client PC IP Addresses Enter the IP address range that you wish to apply this Access Control rule. This is the user’s IP address(es) that you wish to setup an Access Control rule. You can select a range of users simply by inputting the starting users’ IP address and the last user’s IP address in the appropriate boxes. If you want to select only one user then input the user’s IP address in both boxes. Note: You need to give your LAN PC client s a fixed/static IP address for the Access Control rule to work properly. Client PC Service You can block the clients from accessing some Internet services by checking the services you want to block. Protocol This allows you to select UDP, TCP or both protocol type you want to block. Port Range You can assign up to five port ranges. The router will block clients from accessing Internet services that use these ports. Apply Changes Click “Apply Changes” to save the setting. Reset Click “Reset” to clear all fields. 33
Click at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) Example: Access Control In the example below, LAN client A can only access websites that use Port 80. However, LAN client B is able to access websites and any other service t hat uses ports between 80 and 999. 34
2.5.2 URL Blocking You can block access to some Web sites from particular PCs by entering a full URL address or just keyword of the Web site. Parameter Description Enable URL Blocking Enable/disable URL Blocking Add URL Keyword Fill in “URL/Keyword” and then click “Add”. You can enter the full URL address or the keyword of the web site you want to block. If you find any typo before adding it and want to retype again, just click Reset and the field will be cleared. Remove URL Keyword If you want to remove some UR L keyword from the Current URL Blocking Table, select the URL keyword you want to remove in the table and then click Delete Selected. If you want remove all URL keyword from the table, ju st click Delete All button. If you want to clear the selection and re-select again, just click “Reset”. You can now configure other advance sections or start using the router (with the advance settings in place) 2.5.3 Denial of Service (DoS) The Broadband routers firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the router can log the events. Parameter Description Intrusion Detection Feature Ping of Death Protections from Ping of Death attack Discard Ping From WAN The router’s WAN port will not respond to any Ping requests Port Scan Protection the router from Port Scan. Sync Flood Protection the router from Sync Flood attack. Click at the bottom of the screen to save the above confi gurations. You can now configure other advance sections or start using the router (with the advance settings in place) 35
2.5.4 DMZ If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, then you can open the client up to unrestricted two-way Inter net access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP addre ss to a particular IP address in your LAN. The difference between the virtual server and the DMZ functi on is that the virtual server re-directs a particular service/Internet application (e.g. FTP, websites) to a particular LAN client/server, wherea s DMZ re-directs all packets (regardless of services) going to your WAN IP address to a particular LAN client/server. Parameter Description Enable DMZ Enable/disable DMZ Note : If there is a conflict between the Virtua l Server and the DMZ setting, then Virtual Server function will have priority over the DMZ function. Public IP Address The IP address of the WAN port or any other Public IP addresses given to you by your ISP Client PC IP Address Input the IP address of a particular host in your LAN that will receive all the packets originally going to the WAN port/Public IP address above Note: You need to give your LAN PC clients a fixed/static IP address for DMZ to work properly. You can now configure other advance sections or start using the router (with the advance settings in place) 36
Chapter 3 Status The Status section allows you to monitor the current status of your router. You can use the St atus page to monitor: the connection status of the Br oadband routers WAN/LAN interfaces, the current firmware and hardware version numbers, any illegal attempts to access your network, and information on a ll DHCP client PCs currently connected to your network. Parameter Description Status and Information Shows the router’s system information Internet Connection View the Broadband router’s current Internet connection status and other related information Device Status View the Broadband router’s current setting status Security Log View any attempts that have been made to illegally gain access to your network. DHCP Client Table View your LAN clients information that is currently linked to the Broadband routers DHCP server Statistics Shows the statistics Select one of the above five St atus selections and proceed to t he manual’s relevant sub-section 3.1 Status and Information The Status and Information section allows you to view the router’s system information Parameter Description Information You can see the router’s system information such as the router’s: LAN MAC Address, WAN MAC Address, Hardware version, Seri al Number, Boot code Version, Runtime code Version 3.2 Internet Connection View the Broadband router’s current Internet connection status and other related information 37
Parameter Description Internet Connection This page displays whether the WAN port is connected to a Cable/DSL connection. It also displays the router’s WAN port: WAN IP address, Subnet Mask , and ISP Gateway as well as the Primary DNS and Secondary DNS being used. 3.3 Device Status View the Broadband router’s current conf iguration settings. The Device Status displays the configuration settings you’ve configured in the Quick Setup Wizard/General Setup section. Parameter Description Device Status This page shows the Broadband router’s current device settings. This page displays the Broadband router LAN port’s current LAN IP Address, MAC Address and Subnet Mask. It also shows whether the DHCP Server function is enabled/disabled. 3.4 Security Log View any attempts that have been made to illegally gain access to your network. Parameter Description Security Log This page shows the current security log of the Broadband router. It displays any illegal attempts to access your network. At the bottom of the page, the security log can be saved to a local file for further processing or the security log can be cleared < Clear> or it can be refreshed < Refresh> to get the most updated situat ion. When the system is powered down, the security log will disappear if not saved to a local file. 38
3.5 Active DHCP Client Table View your LAN clients information that is currently linked to the Broadband routers DHCP server Parameter Description DHCP Client Log This page shows all DHCP clients (LAN PCs) currently connected to your network. The “Active DHCP Client Table” displays the IP address and the MAC address and Time Expired of each LAN Client. Use the Refresh button to get the most updated situation 3.6 Statistics View the statistics of packets sent and received on WAN and LAN. Parameter Description Statistics Shows the counters of packets sent and received on WAN and LAN. 39
Chapter 4 Tool This page includes the basic configuration tools, such as Configuration Tools (save or restore configuration settings), Firmware Upgrade (upgrade system firmware) and Reset. Parameter Description Configuration Tools You can save the router’s curr ent configuration, restore the router’s saved configuration files and restore the router ’s factory default settings Firmware Upgrade This page allows you to upgrade the router’s firmware Reset You can reset the router’s system should any problem exist Select one of the above three Tools Settings selection and proceed to the manual’s relevant sub-section 4.1 Configuration Tools The Configuration Tools screen allows you to save ( Backup) the router’s current configuration setting. Saving the configuration settings provides an added protection and convenience should problems occur with the router and you have to reset to factory defa ult. When you save the configuration setting (Backu p) you can re-load the saved configuration into the router through the Restore selection. If extreme problems occur you can use the Restore to Factory Defaults selection, this will set all configurations to its original default settings (e.g. when you first purchased the router). Parameter Description Configuration Tools Use the Backup tool to save the Broadband router current configuration to a file named config.bin on your PC. You can then use the Restore tool to restore the saved configuration to the Br oadband router. Alternatively, you can use the Restore to Factory Defaults tool to force the Broadband router to perform a power reset and restore the original factory settings. 40