© 2003 Compex Systems Pte Ltd All Rights Reserved This document contains information, which is protected by copyright. Reproduction, adaptation or translation without prior permission is prohibited, except as allowed under the copyright laws. Trademark Information Compex®, ReadyLINK® and MicroHub® are registered trademarks of Compex, Inc. Microsoft Windows and the Windows logo are the trademarks of Microsoft Corp. NetWare is the registered trademark of Novell Inc.
FCC NOTICE This device has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Technical Support Information The warranty information and registration form are found in the Quick Install Guide. For technical support, you may contact Compex or its subsidiaries. For your convenience, you may also seek technical assistance from the local distributor, or from the authorized dealer/reseller that you have purchased this product from. For technical support by email, write to support@compex.com.sg.
About This Document The product described in this document, Compex Broadband Internet Gateway Series, NetPassage 16A is a licensed product of Compex Systems Pte Ltd. This document contains instructions for installing, configuring and using Compex NetPassage 16A. It also gives an overview of the key applications and the networking concepts with respect to the product.
Table of Contents Copyrights © 2003 Compex Systems Pte Ltd ..................................................................................i Trademark Information.....................................................................................................................i Disclaimer ........................................................................................................................................i Your Feedback...................................................................
Table of Contents 2.4 2.5 Alternative Approach to connect to the Configuration Interface..........................................15 2.4.1 Web-based Configuration Interface .........................................................................16 2.4.2 TELNET Command Console...................................................................................18 2.4.3 RS232 Serial Command Console.............................................................................
Table of Contents 3.10 Firewall Configuration .........................................................................................................60 3.11 Firewall Log .........................................................................................................................63 3.12 IP Packet Filtering................................................................................................................64 3.12.1 Time-based Access Management.........................................
Table of Contents Appendix C Frequently Asked Question ..................................................................
Chapter 1 Product Overview Chapter 1 Product Overview 1.1 Introduction *Wireless LAN Card not included. Compex NetPassage 16A is a Broadband Internet Gateway supporting external Cable/ADSL modem for broadband Internet sharing. It is integrated with a 4-port 10/100Mbps Fast Ethernet Switch and a PCMCIA slot for Compex Wireless LAN card to provide Wireless LAN option that allows seamless distribution of Internet access to the wired and wireless networks.
Chapter 1 1.2 Product Overview Key Features Compex NetPassage 16A, the Broadband Internet Gateway, is designed with the following features: 1.2.1 Broadband Internet Sharing Compex NetPassage 16A comes with a RJ45 Ethernet WAN port supporting external Cable or ADSL modem, sharing a single Cable/ADSL Internet subscription with multiple users. 1.2.
Chapter 1 1.2.6 Product Overview 56K Dial-Up Backup Connection Designed with a RS232 serial interface, Compex NetPassage 16A may be installed with a V.90 56k analog modem, utilizing the 56K dial-up connection as the backup link to the Internet. In addition, it allows connectivity to Diva ISDN modem. 1.2.7 Built-In DHCP Server Compex NetPassage 16A is integrated with a DHCP server, dynamically assigns IP address, gateway information and DNS server addresses to your PCs in the wired and wireless networks.
Chapter 1 1.2.12 Product Overview Remote Management Remote Management may be activated on Compex NetPassage 16A, enabling the network administrator to manage the Broadband Internet Gateway over the Internet with a HTTP or TELNET session. 1.
Chapter 1 1.4.2 Product Overview Figure 1.4b 7 Side View of Compex NetPassage 16A 8 9 10 Figure 1.
Chapter 1 Product Overview Indicator Description 4 WLAN Link/Act (LED) Steady Green indicates that at least one wireless client is present Flashing Green indicates that activity is detected in the wireless network 5 1, 2, 3, 4 Link/Act/Speed (LEDs) Four Link/Activity/Speed LEDs for the integrated Fast Ethernet Switch.
Chapter 1 Product Overview 12 RS232 (DB9 Serial Interface) 13 Reset (Push Button) 1) Push once and release 2) Push and hold 3-7 sec 3) Push and hold 7-12sec 4) Push and hold >12 sec 1.5 CONN LED Lights 1) Steady On indicates normal reboot 2) Blink fast (2 flash/sec) indicates password reset to default 3) Blink slowly (1 flash/sec) indicates configuration reset to factory default. 4) Steady On indicates normal reboot Specifications 1.5.
Chapter 1 Product Overview x Built-In DHCP Server Yes x DHCP Reservation By MAC Address x NAT Firewall Yes x Load Balancing Parallel Broadband x Fail-Over Redundancy Parallel Broadband x Virtual Server Based on Port Forwarding & IP Forwarding x Time-based Access Management Yes x IP Packet Filtering By TCP Port By Source IP x IP Routing Static & Dynamic Entry x Routing Protocol RIP1 & RIP2 x VPN Client Pass-Through PPTP IPSec L2TP x Microsoft NetMeeting Yes x
Chapter 1 1.5.2 9 Product Overview Wireless LAN Specifications x Industry Standards IEEE 802.11, IEEE 802.11b x Operating Frequency 2.4000 – 2.4835 (US & Canada) 2.4000 – 2.4970 (Europe) 2.4465 – 2.4835 (France) x Radio Technology Direct Sequence Spread Spectrum x Frequency Channels 11 Channels (US & Canada) 13 Channels (Europe) 4 Channels (France) x Data Rates 11Mbps, 5.
Chapter 2 Getting Started Chapter 2 Getting Started Compex NetPassage 16A may be used in different applications. It is integrated with an embedded HTTP server providing a user-friendly web-based configuration interface to ensure fast and easy configuration process for these applications. This chapter provides the information on how to connect to the configuration interface, how to setup the hardware for configuration and operation. 2.
Chapter 2 2.1.2 Getting Started Distributing Broadband Internet Access to Fast Ethernet & Wireless Network Compex NetPassage 16A may be installed with a PCMCIA Wireless LAN card (iWavePort WL11A) to support broadband Internet sharing with wireless LAN clients. To install the wireless LAN card into Compex NetPassage 16A, you must first turn off the power supply of Compex NetPassage 16A, and gently insert the wireless LAN card into the PCMCIA slot of Compex NetPassage 16A. Figure 2.
Chapter 2 2.1.3 Getting Started Wireless LAN-to-LAN Connection with Broadband Internet Access Figure 2.1c Compex NetPassage 16A operating in Client Mode may access to Compex NetPassage 16A operating as an Access Point. If you have two Fast Ethernet segments that are environmentally not possible to be connected by cable, you may configure two Compex NetPassage 16A in different mode, one in Client Mode and one as an Access Point, as shown in Figure 2.1c.
Chapter 2 2.2 Getting Started Using Universal Configuration (uConfig) Program to access to Internet Compex NetPassage 16A supports Universal Configuration (uConfig) that enables you to connect to the Web-based Configuration Interface in effortlessly. There is no need to fiddle with the TCP/IP configuration of your computer. Compex NetPassage 16A comes with a uConfig agent and a window-based utility UCONFIG.EXE.
Chapter 2 Getting Started Select Compex NetPassage 16A from Compex Product List window and press the OpenWeb button. The login prompt shall appear. Figure 2.2b Logon Page Enter the password and press the Log On! button to login. The default password is password. After you have completed the configuration, click on the ExitUconfig from the Command Menu. The Compex NetPassage 16A will then reboot. Please proceed to Section 3.1 to read more about network configuration.
Chapter 2 Getting Started The program will automatically display the IP address of the device found. Figure 2.3a Contact your area of support@compex.com.sg. 2.4 Npfind discovered Compex Product support for help if needed, or write to us at Alternative Approach to connect to the Configuration Interface Compex NetPassage 16A is integrated with an embedded HTTP Server to provide a user-friendly web-based configuration interface.
Chapter 2 2.4.1 Getting Started Web-based Configuration Interface To connect to the Web-based Configuration Interface of Compex NetPassage 16A, all you need is a web browser. The requirement of the web browser is stated below: Web Browser: JAVA: Proxy Settings: Proxy Auto Discovery: Netscape Navigator 4.0 & above or Internet Explorer 4.0 & above Enabled Cleared Disabled Connecting to Web-based Configuration Interface 1. Launch the Internet Explorer or Netscape Navigator 2.
Chapter 2 Getting Started Once log on, you will see a web page consist of three frames, the Command Menu, Configuration Window and Message Window, as shown below. Command Menu Enable the user to select feature to be configured Configuration Window Enable the user to configure the parameters associated with the selected feature Message Window Display the message (if any) associated with the configuration process Configuration Window Message Window Command Window Figure 2.
Chapter 2 2.4.2 Getting Started TELNET Command Console Alternatively, the user may connect to the Command Console of Compex NetPassage 16A via a TELNET session to the default IP of Compex NetPassage 16A, 192.168.168.1. This section uses Microsoft TELNET command for instruction. You may use any TELNET client. Connecting to Compex NetPassage 16A’s Command Console via TELNET 1. Connect to Compex NetPassage 16A’s Command Console with the following command at DOS prompt.
Chapter 2 2.4.3 Getting Started RS232 Serial Command Console Apart from TELNET session, you may also connect to Compex NetPassage 16A’s Command Console via direct serial connection using the RS232 crossover cable (also known as null modem cable). This section assumes that Hyper Terminal has been installed properly. Direct Serial Connection to Compex NetPassage 16A’s Command Console 1.
Chapter 2 Getting Started 4. The Properties Window for the selected communication port will then be displayed, as shown below. Configure the selected communication port with the following settings and press the OK button to proceed. Figure 2.4f Configuring Communication Port 5. Once the Properties Window is closed, hit the key once for the login prompt to appear. Type in “password” (default password) and press the key to login to the console. Figure 2.
Chapter 2 2.5 Getting Started TCP/IP Configuration of the Computers Compex NetPassage 16A is designed with a built-in DHCP server. You may manually configure the TCP/IP settings of your computers, or simply configure them to dynamically obtain IP address from the DHCP server. If you are not an expert user, you are advised to configure your computers to dynamically obtain IP addresses from the built-in DHCP server of Compex NetPassage 16A.
Chapter 2 Figure 2.5a Getting Started Network Configuration Window Figure 2.5b TCP/IP Properties Window When the Microsoft Windows restarts, Compex NetPassage 16A will assign an IP address, Subnet Mask and Gateway information to the computer. For Microsoft Windows 2000/XP: Figure 2.5c Network Connection 1) Right click on the network icon on the task bar and click on status. Click on Properties as in Figure 2.5c. 2) Highlight TCP/IP and click on Properties as in Figure 2.5d.
Chapter 2 Getting Started Figure 2.5d Configuration Screen 1 2.5.2 Figure 2.5e Configuration Screen 2 Configuring your Computer with Static IP Address If you have chosen to configure your computer with Static IP address, please take note of the following default settings on Compex NetPassage 16A. IP (LAN): Netmask: 192.168.168.1 255.255.255.
Chapter 2 Getting Started For Microsoft Windows 95/98/98SE/ME *For Windows 2000/XP, follow the instructions in section 2.5.1 to get to the Network Configuration page. 1. Open the Control Panel from the Start menu 2. Double-click on the Network icon, the network configuration window shall be displayed, as shown in Figure 2.5a. 3. Double-click on the TCP/IP that is bound to your network adapter, the TCP/IP configuration window shall be displayed, as shown in Figure 2.5f.
Chapter 2 Getting Started 5. Select DNS Configuration from the menu and the DNS configuration page shall be displayed, as shown in Figure 2.5h. Select the Enable DNS button. Type in a preferred name as the Host. Type in the IP address of your DNS server in the DNS Server Search Order field and press the Add button. Press the OK button to close this window. Figure 2.5h DNS Configuration Window Figure 2.
Chapter 3 Configuring Compex NetPassage 16A Chapter 3 Configuring Compex NetPassage 16A This chapter explains the features of Compex NetPassage 16A in sections and how to implement them. 3.1 Setting up your LAN Compex NetPassage 16A is pre-configured with a default IP address 192.168.168.1 with a network mask of 255.255.255.0. By default, the DHCP Server has also been preconfigured to assign IP addresses starting from 192.168.168.100 to 192.168.168.254.
Chapter 3 Configuring Compex NetPassage 16A 3. Fill in the parameters in the respective text boxes as shown on the following page: 27 IP Address This is the IP address of your Compex NetPassage 16A Network Mask This is the Network Mask of your Compex NetPassage 16A’s IP address. It decides the subnet of your Compex NetPassage 16A. For example, if the IP address and network mask of your Compex NetPassage 16A are 192.168.168.1 and 255.255.255.
Chapter 3 Configuring Compex NetPassage 16A Primary DNS IP Address If the Always use these DNS servers checkbox is “checked”, fill in an IP address of a DNS server. This information is normally provided by your ISP. Secondary DNS IP Address This field contains the IP address of a secondary DNS server (optional) DHCP Server Enable or disable the DHCP server. If you disable the DHCP server, you need to manually configure the TCP/IP of every computer in the network. 4.
Chapter 3 Configuring Compex NetPassage 16A 2. Specify the reserved IP Address, the Host Name or the Hardware Address in the respective text boxes: IP Address This is the reserved IP address for a specific computer Host Name This is the host name of the computer Hardware Address This is the hardware MAC address of the Ethernet interface of the computer NOTE The reserved IP address must not be within the range of DHCP start and end IP addresses. 3.
Chapter 3 3.2 Configuring Compex NetPassage 16A Configuring Compex NetPassage 16A with your Broadband Internet Account Compex NetPassage 16A shares a single Cable or ADSL Internet account with multiple computers in the network. It supports these broadband Internet connections with different types of WAN protocol. This includes Dynamic IP, Static IP and PPP over Ethernet (PPPoE).
Chapter 3 3.2.1 Configuring Compex NetPassage 16A Cable Internet with Dynamic IP Assignment By default, Compex NetPassage 16A is pre-configured to support a WAN type that dynamically obtain an IP address from the ISP. If you have subscribed to Cable Internet of which your ISP dynamically assign an IP address, you do not need to configure the WAN type.
Chapter 3 Configuring Compex NetPassage 16A NOTE Figure 3.2a shows a WAN interface configured with static IP. If your Compex NetPassage 16A has previously configured with PPPoE or other WAN type, this page will show the respective configuration page. 2. Press the Change button and the list of supported WAN type will be displayed, as shown in Figure 3.2b. Figure 3.2b WAN Type - Dynamic IP Address 3. Check the Dynamic IP Address radio button and press the Save button. 4.
Chapter 3 Configuring Compex NetPassage 16A Cloning MAC Address to Compex NetPassage 16A 1. Click on the WAN Setup from the Command Menu and the WAN configuration page will be displayed as shown. Figure 3.2c Cloning MAC Address 2. Press the Clone Mac button to clone the MAC address of your managing computer to Compex NetPassage 16A. The configuration interface will then prompt you to reboot the router. Press the Reboot button to restart your Compex NetPassage 16A.
Chapter 3 3.2.2 Configuring Compex NetPassage 16A Cable Internet with Static IP Assignment Certain ISPs lease a static IP for their Internet subscriptions. For such Cable Internet subscription, you need to configure the WAN interface of Compex NetPassage 16A with static IP address. 1. Click on the WAN Setup from the Command Menu and the WAN configuration page will be displayed. Figure 3.2d Changing WAN Type 2. Press the Change button and the list of supported WAN type will be displayed as shown.
Chapter 3 Configuring Compex NetPassage 16A 3. Check the Static IP Address radio button and press the Save button. The following Static IP Configuration page will then be displayed. Figure 3.2f Static IP Configuration Page 4. Enter the IP Address, the Network Mask and the ISP’s Gateway IP Address into the fields. These information is provided by your ISP. Press the Save button followed by the Reboot button to complete the configuration process. 3.2.
Chapter 3 Configuring Compex NetPassage 16A 3. Check the PPP over Ethernet radio button and press the Save button. The PPPoE Configuration page will then be displayed. Figure 3.2h PPPoE Configuration Page 4.
Chapter 3 Configuring Compex NetPassage 16A disconnected by the ISP. Once disconnected, Compex NetPassage 16A will stay offline until the next Internet request is detected in the network. Always-On When this box is “checked”, your Compex NetPassage 16A will always connect to the ISP, with and without Internet requests. Reconnect Time Factor This field is associated with Always-On option. This field allows you to specify a Reconnect Time Factor (RTF). The default value is 30 seconds.
Chapter 3 3.2.4 Configuring Compex NetPassage 16A Singapore SingTel Magix SuperSurf You should use this WAN type only if you are a subscriber of SingTel Magix SuperSurf in Singapore. If you have subscribed to SingNet Broadband or Pacific Internet Broadband, please go to Section 3.2.3 titled ADSL Internet using PPP over Ethernet (PPPoE). 1. Click on the WAN Setup from the Command Menu and the WAN configuration page will be displayed, as shown in Figure 3.2a. 2.
Chapter 3 Configuring Compex NetPassage 16A 4. Enter the Username, Password and Idling Timeout value to the fields and press the Save button. 5. Press the Reboot button to complete the configuration process. 3.2.5 Australia Big Pond Cable Internet You should select this WAN type only if you are a subscriber of Big Pond Cable Internet in Australia. If you have subscribed to OPTUS in Australia, please go to Section 3.2.1 titled Cable Internet with Dynamic IP Assignment.
Chapter 3 Configuring Compex NetPassage 16A 3. Check the Australia BPA Cable radio button and press the Save button. The configuration page for Big Pond Australia will be displayed. Figure 3.2l Big Pond Australia Configuration Page 4. Enter the Username, Password and Idling Timeout to the fields and press the Save button. 5. Press the Reboot button to complete the configuration process.
Chapter 3 3.2.6 Configuring Compex NetPassage 16A Point to Point Tunneling Protocol (PPTP) PPTP enables implementation of secure, multi-protocol Virtual Private Networks (VPNs) through public data networks, such as Internet or PPTP. 1. Click on the WAN Setup from the Command Menu and the WAN configuration page will be displayed, as shown in Figure 3.2a. 2. Press the Change button and the list of supported WAN type will be displayed as shown below. Figure 3.
Chapter 3 Configuring Compex NetPassage 16A 3. Check the PPTP radio button and press the Save button. The configuration page for PPTP will be displayed. Figure 3.2n Configuration on PPTP 4. Fill in the parameters for your PPTP service: 42 Connect IP Key in the IP Address of your Service Provider. Username Enter the username of your PPTP subscription. Password Enter the password of the username. VPN Server Enter the IP Address for VPN server.
Chapter 3 Configuring Compex NetPassage 16A 5. Press the Save button followed by the Reboot button to complete the configuration process. 6. Enter all necessary information in the individual fields and press the Save button. 7. Press the Reboot button to complete the configuration process. 3.
Chapter 3 3.3.1 Configuring Compex NetPassage 16A Introduction to Virtual Servers Compex NetPassage 16A supports two types of Virtual Server, one based on Port Forwarding and the other based on IP Forwarding, where IP Forwarding option is only available when the WAN interface of Compex NetPassage 16A has been configured with a static IP.
Chapter 3 Configuring Compex NetPassage 16A Virtual Server based on IP Forwarding If you have subscribed to a range of IP addresses from your ISP, you may also define Virtual Servers based on IP Forwarding. This type of Virtual Server forwards all Internet requests, regardless of the TCP port of the application, to a computer in the private network. Refer to Figure 3.3b. Figure 3.3b Virtual Server based on IP Forwarding Figure 3.3b shows two Virtual Servers based on IP Forwarding.
Chapter 3 Configuring Compex NetPassage 16A To define a DMZ host 1. Click on the NAT from the Command Menu and the NAT configuration page will be displayed as shown below. Figure 3.3c NAT Configuration Page 2. Press the DMZ button and the following DMZ Host Definition Window will be displayed. Figure 3.3d Configuring DMZ 3. Enter the IP address of the your designated computer and press the Apply button. 4. Save the configuration profile. NOTE To disable DMZ, please enter the IP address as 0.0.0.0.
Chapter 3 3.3.3 Configuring Compex NetPassage 16A Defining Virtual Server based on Port Forwarding To define Virtual Server based on Port Forwarding: 1. Click on the NAT from the Command Menu and the NAT configuration page will be displayed, as shown in Figure 3.3c. 2. Press the Port Forwarding button and the list of defined Virtual Server will be displayed, as shown in Figure 3.3e. Figure 3.3e Table Showing Defined Virtual Server based on Port Forwarding 3.
Chapter 3 Configuring Compex NetPassage 16A 7. Press the Save or Reset Settings from the Command Menu and press the Save button. 3.3.4 Defining Virtual Server based on IP Forwarding If you have configured your Compex NetPassage 16A with Static IP WAN type, you have the option to define Virtual Server based on IP Forwarding. 1. Click on the NAT from the Command Menu and the NAT configuration page will be displayed as shown below. Figure 3.3g NAT Configuration Window for Static IP WAN Type 2.
Chapter 3 Configuring Compex NetPassage 16A Figure 3.3i Defining New Virtual Server based on IP Forwarding 4. Enter the Public IP Address and the Private IP Address which it maps to. Please ensure that you have subscribed to this Public IP Address. 5. Press the Add button to add this new Virtual Server into the list. 6. Click on the Save or Reset Settings from the Command Menu and press the Save button.
Chapter 3 3.4 Configuring Compex NetPassage 16A Static Address Translation (SAT) If you are a notebook user, it is probably very often that you connect to the Internet at your home to retrieve emails or surf the Internet. Static Address Translation function that allows your notebook computer to connect to the Internet even if it is NOT configured with the same subnet as Compex NetPassage 16A’s. For example, if Compex NetPassage 16A is configured with a Class C IP of 192.168.168.
Chapter 3 3.5 Configuring Compex NetPassage 16A DNS Redirection Compex NetPassage 16A enables you to access to the internet without knowing the IP Address of DNS server. You can simply key in any legal IP Address in the field of the TCP/IP Properties window such as 10.10.10.10. Please refer to the figures shown below: Figure 3.5a TCP/IP for Window 95/98 Figure 3.5b TCP/IP for Window 2000 Click on the Enabled radio button followed by Apply button as shown below. Figure 3.
Chapter 3 Configuring Compex NetPassage 16A NOTE If you set the IP Address of your PC to dynamic, enabling the DNS Redirection function will not be activated. CAUTION You should not leave the DNS Server field in the TCP/IP Properties window blankly or the router will not be able to assign an IP Address to your PC. And this leads to inaccessible to the internet. 3.6 Configuring Routing Protocol Compex NetPassage 16A allows the network administrator to add a static routing entry into the routing table.
Chapter 3 Configuring Compex NetPassage 16A In this network, the main office of subnet 192.168.168.0 contains two routers, one connected to the broadband Internet via Compex NetPassage 16A (IP 192.168.168.1) and the other connected to a remote office via NetPassage 11A (IP 192.168.168.254). The remote location resides on subnet 192.168.100.0. You may add a static routing entry into Compex NetPassage 16A’s routing table to point the gateway 192.168.168.254 to subnet 192.168.100.0.
Chapter 3 Configuring Compex NetPassage 16A 2. To define a new static routing entry into the routing table, press the Add button. The following page will be displayed, as shown in Figure 3.6c. Figure 3.6c Adding New Static Routing Entry into the Routing Table 3. Enter the destination network address into the Destination IP Address field and the IP address of the gateway connected to this network into the Gateway IP Address field. For example if a gateway of IP 192.168.168.
Chapter 3 3.7 Configuring Compex NetPassage 16A Managing Compex NetPassage 16A from the Internet Compex NetPassage 16A is integrated with an HTTP Server, enabling router management from the private network with just a JAVA-enabled web browser. It may also be managed via a Command Console. In addition, Compex NetPassage 16A supports Remote Router Management, allowing the network administrators to manage the router from the Internet, either by a web browser or via a TELNET session. 3.7.
Chapter 3 Configuring Compex NetPassage 16A TELNET Port Specify the desired port for remote router management via a TELNET session (Command Console). If you have specified a non-standard TCP port for this field, you need to specify the port number when you connect to the command console from the Internet. For example, if your ISP has assigned 203.120.12.
Chapter 3 3.8.1 Configuring Compex NetPassage 16A Implementing Parallel Broadband To implement Parallel Broadband, you need to install two or more units of Compex NetPassage 16A in the network, each connected to its broadband Internet service account. There is no restriction on the type of broadband Internet accounts that they are connected to. For example, if you have two Compex NetPassage 16As in the network, you may have one connected to Cable Internet whereas the other connected to ADSL line.
Chapter 3 3.9 Configuring Compex NetPassage 16A 56K analog Dial-Up/ISDN Modem as Backup Link An external V.90 56K analog/ISDN modem (selective) may be connected to the RS232 serial port of Compex NetPassage 16A, utilizing a 56K or ISDN modem dial-up Internet account as the backup link to the Internet. In case of down time of your broadband ISP, Compex NetPassage 16A will automatically establish a backup Internet connection via the 56K or ISDN modem dial-up access. 3.9.
Chapter 3 Configuring Compex NetPassage 16A 3. Click on the “Change” button to switch between the options of Direct and Backup modem. The following GUI will appear. Figure 3.9b Select the types of modem 4. Select the radio button of either Direct or Backup Modem and hit on Apply button. 5. Next, check the Enable radio button, choose the Modem Type, enter the dial-up Phone number, the Username & Password, and the Modem Init String in the text box.
Chapter 3 3.10 Configuring Compex NetPassage 16A Firewall Configuration Compex NetPassage 16A is specially designed with firewall function to prevent unauthorized access to or from the network. All messages entering or leaving Compex NetPassage 16A will pass through the firewall. It will then examines each message and blocks those that do not meet the specified security criteria. The firewall can be activated by purchasing an activation key from www.compex.com.sg or www.cpx.com website.
Chapter 3 Configuring Compex NetPassage 16A Security level The level of security that you have chosen (low, medium, high) will determine how many of these threats can be stopped by firewall. The highest level of security would be to simply block almost everything. You can restrict the traffic flows through the firewall so that only certain information, such as email, can get through.
Chapter 3 Configuring Compex NetPassage 16A Adding Firewall Rules If you wish to add in more rules for security purposes, simply, 1. Click on Add button and the following GUI will appear. Figure 3.10b Firewall Rule configuration 2. After entering your preference entry to individual field, hit on the Apply button to confirm the rules configuration.
Chapter 3 3.11 Configuring Compex NetPassage 16A Firewall Log This Firewall log displays all necessary information such as the reasons on why the packets are being accepted or discarded. The log will also inform you about the attack on UDP flooding or SYN flooding. Figure 3.11a Firewall Log Click on Refresh button to update the latest information.
Chapter 3 3.12 Configuring Compex NetPassage 16A IP Packet Filtering Compex NetPassage 16A enables the users to define administrative functions based on packet filtering rule. With IP packet filtering, you may perform Time-based Access Management and Internet Application Filtering. Time-based Access Management selectively allow or disallow certain computers in the network to access to the Internet in different time frame.
Chapter 3 Configuring Compex NetPassage 16A 3. Press the Add button to define a new function for Time-based Access Management. The following page will be displayed as shown. Figure 3.12b Defining Filtering Function 4. To define a rule for Time-based Access Management, you need to know the IP address of the computers where this rule applies. For example, if you wish to disallow two computers (IP address of 192.168.168.10 and 192.168.168.
Chapter 3 Configuring Compex NetPassage 16A 5. Press the Apply button to add this filtering function into the list. 6. Ensure that the Sent radio button is “checked”. 7. Press the Apply button for the changes to be effective. 3.12.2 Internet Application Filtering To define a function to perform Internet Application Filtering: 1. Press the Add button at the filtering configuration page as shown in Figure 3.12a. 2.
Chapter 3 3.13 Configuring Compex NetPassage 16A 8e6 Internet Filtering 8e6 Technologies is the original developer of X-Stop filtering solutions which has been a pioneer in Internet Access Management technology. It develops customized Internet Access Management network applications for businesses, ISPs and the education market.
Chapter 3 Configuring Compex NetPassage 16A URL Addition For some of the website which the system administrator do not wish to others to access, he can simply: 1. Open a new text document. 2. Type in the URL address and saved the document. 3. Click the URL Addition option as shown in Figure 3.13a. 4. The GUI in Figure 3.13c will appear. Click on the Browse.. button and locate your saved text document. 5. Hit on the Load button to activate the filtering configuration. Figure 3.
Chapter 3 3.14 Configuring Compex NetPassage 16A Compex NetPassage 16A’s System Tools The web-based configuration interface of Compex NetPassage 16A comes with a set of system tools for you to define the name for your Compex NetPassage 16A, setting the router’s clock, upgrading the firmware, saving & restore router’s profile and changing the administrative password. 3.14.1 Setting Router Identity You may define a name for your Compex NetPassage 16A.
Chapter 3 3.14.2 Configuring Compex NetPassage 16A Synchronizing Router’s Clock with your Computer Compex NetPassage 16A is specially designed with a SNTP compatibility and router’s clock that can be synchronized with the managing computer. The administrative function such as Time-based Access Management relies on the router’s clock. Therefore, it is important that the router’s clock is set correctly. 1.
Chapter 3 3.14.3 Configuring Compex NetPassage 16A Upgrading Router’s Firmware Compex NetPassage 16A comes with the firmware upgrade capability. You may download the latest firmware from Compex corporate website (http://www.compex.com.sg or http://www.cpx.com) and update the firmware of your Compex NetPassage 16A. 1. Click on the Firmware Upgrade from the Command Menu and the firmware upgrade page will be displayed as shown below. Figure 3.14c Upgrading Router’s Firmware 2.
Chapter 3 3.14.4 Configuring Compex NetPassage 16A Profile Saving, Restore & Reset to Defaults You may save the configuration profile of your Compex NetPassage 16A onto the hard disk of your managing computer and restore this profile in a later time. You may also reset the configuration of your Compex NetPassage 16A to factory defaults. 1. Click on the Save or Reset Settings from the Command Menu and the following page will be displayed as shown below. Figure 3.14d Saving, Restore and Reset Profile 2.
Chapter 3 3.14.5 Configuring Compex NetPassage 16A Rebooting Compex NetPassage 16A You may reboot your Compex NetPassage 16A manually from the web-based management interface. Please always ensure that the changes have been saved before rebooting the router. CAUTION If you reboot Compex NetPassage 16A without saving the configuration, all the unsaved configuration will be lost after reboot. 1. Click on the Reboot Router from the Command Menu. 2. Press the Yes button to reboot the router. 3.14.
Chapter 4 Wireless LAN Option Chapter 4 Wireless LAN Option Compex NetPassage 16A supports a wireless LAN option fully compliant with IEEE 802.11b. If you wish to activate the wireless LAN option, you may install a Compex iWavePort WL11A or WL11A+ into the PCMCIA slot of your Compex NetPassage 16A.
Chapter 4 4.2 Wireless LAN Option Operating Mode of Compex NetPassage 16A Wireless LAN Option Compex NetPassage 16A wireless LAN option supports two operating modes, the AP Mode and the Client Mode. You may selectively choose the operating mode based on your application. In AP Mode, Compex NetPassage 16A distributes the broadband Internet access to the Fast Ethernet & wireless network, and bridge the wireless LAN to the Fast Ethernet network. Please refer to Figure 4.2a. Figure 4.
Chapter 4 4.3 Wireless LAN Option Wireless Pseudo VLAN With more deployments of IEEE 802.11b Wireless LAN in the public premises such as the airport, university campus and fair ground, there has been a rising concern over the privacy level that the 11Mbps wireless LAN can offer.
Chapter 4 4.3.2 Wireless LAN Option Per Group Wireless Pseudo VLAN In contrasting with Per Node Pseudo VLAN that supports a single user for each VLAN with a common WEP key, Per Group Pseudo VLAN supports multiple wireless nodes per VLAN, with different WEP key for each Pseudo VLAN. Users from the same Pseudo VLAN may access to one another provided that the WEP key is correct. Users from two different Pseudo VLANs, however, cannot communicate with one another. Please refer to Figure 4.3b. Figure 4.
Chapter 4 4.4 Wireless LAN Option Configuring Compex NetPassage 16A’s Wireless LAN Option Before you start configuring Compex NetPassage 16A’s wireless LAN, you must ensure that your Compex iWavePort WL11A or WL11A+ is inserted into the PCMCIA slot of Compex NetPassage 16A.
Chapter 4 Wireless LAN Option 2. Select Access Point from the drop down menu and press the Apply button. The access point configuration page will then be displayed. Figure 4.4b Configuring Compex NetPassage 16A In AP Mode 3. Enter the parameters into the respective fields: 79 Access Point Name Enter a preferred name for your Access Point. ESSID Enter a name as the ESSID. Your wireless clients must be configured with the same ESSID in order to access this Compex NetPassage 16A.
Chapter 4 Wireless LAN Option Frag Threshold This field is the Fragmentation Threshold. Packet larger than Fragmentation Threshold will be broken into pieces for transmission. Do not modify the default value if you are not sure what to do. 4. Press the Save button followed by the Reboot button. Once your Compex NetPassage 16A restarts, it is ready to distribute broadband Internet access to your wireless clients as well as sharing resources between the Fast Ethernet and Wireless network.
Chapter 4 Wireless LAN Option 4. Press the Apply button and the access point client configuration window will then be displayed, as shown in Figure 4.4c. Figure 4.4c Configuring Compex NetPassage 16A In Client Mode 5. Enter the parameters into the respective fields: 81 Station Name Enter a preferred name for your Access Point Client. SSID Enter the SSID of the wireless access point that you wish this access point client to access to. Tx Rate Select a transmission rate from the drop down menu.
Chapter 4 Wireless LAN Option Frag Threshold This field is the Fragmentation Threshold. Packet larger than Fragmentation Threshold will be broken into pieces for transmission. Do not modify the default value if you are not sure what to do. 6. Press the Save button followed by the Reboot button to restart your Compex NetPassage 16A. Once restarts, this Compex NetPassage 16A will be operating in Client Mode.
Chapter 4 Wireless LAN Option To implement Per Group Wireless Pseudo VLAN: 1. Click on the WLAN Setup from the Command Menu and the Wireless LAN operating mode setup window will be displayed, as shown in Figure 4.4a. 2. Press the Apply button and the access point configuration window will be displayed, as shown in Figure 4.4b. 3. Expand the Pseudo VLAN drop down menu and select Per Group. 4.
Chapter 4 Wireless LAN Option 6. Press the Add button to begin adding members into the Per Group Pseudo VLAN, as shown in Figure 4.4e. The Per Group Pseudo VLAN membership is defined based on the MAC address. Figure 4.4e Configuring Compex NetPassage 16A In Client Mode 7. Select the Per Group Pseudo VLAN that you wish to add a member to by selecting from the GroupID drop down menu.
Chapter 4 4.4.4 Wireless LAN Option Defining WEP Private Encryption Compex NetPassage 16A Wireless LAN option supports two types of WEP private encryption, 64-bit WEP and 128-bit WEP. WEP Private Encryption in AP Mode – Without Pseudo VLAN 1. Click on the WLAN Setup from the Command Menu and the Wireless LAN operating mode setup window will be displayed, as shown in Figure 4.4a. 2. Press the Apply button and the access point configuration window will be displayed, as shown in Figure 4.4b. 3.
Chapter 4 Wireless LAN Option WEP Private Encryption in AP Mode – With Per Node Pseudo VLAN 1. Click on the WLAN Setup from the Command Menu and the Wireless LAN operating mode setup window will be displayed, as shown in Figure 4.4a. 2. Press the Apply button and the access point configuration window will be displayed, as shown in Figure 4.4g. Figure 4.4g AP Mode Configuration Page 3. Expand the WEP encryption method drop down menu and select the preferred private encryption, 64-bit or 128-bit.
Chapter 4 Wireless LAN Option WEP Private Encryption in AP Mode – With Per Group Pseudo VLAN 1. Click on the WLAN Setup from the Command Menu and the Wireless LAN operating mode setup window will be displayed, as shown in Figure 4.4a. 2. Press the Apply button and the access point configuration window will be displayed, as shown in Figure 4.4h. Figure 4.4h AP Mode Configuration Page 3. Expand the WEP encryption method drop down menu and select the preferred private encryption, 64-bit or 128-bit.
Chapter 4 Wireless LAN Option 4. The 64-bit WEP and 128-bit WEP are defined as 40-bit and 104-bit binary number respectively, in hexadecimal format. Each Per Group Pseudo VLAN supports its own WEP key. Enter the WEP private encryption keys into the respective text boxes. 5. Press the Save button followed by the Reboot button to complete the process. WEP Private Encryption in Client Mode 1.
Appendix A Console Commands Appendix A Console Commands SHOW Command SHOW IP SYNTAX DESCRIPTION Display the IP information of the LAN and WAN interface SHOW IP STAT Display the statistics of the IP packets SHOW ICMP STAT Display the statistics of the ICMP packets SHOW UDP STAT Display the statistics of the UDP packets SHOW TCP STAT Display the statistics of the TCP packets SHOW IP ROUTE TABLE Display the routing table SHOW IP STATIC NAT TABLE List defined virtual servers based on IP forwa
Appendix A Console Commands SYNTAX SHOW ARP TABLE DESCRIPTION Display the ARP table in the router SHOW FILTER List defined IP packet filtering rules SET Command SYNTAX SET IP LAN DESCRIPTION Set the IP address of the LAN interface SET IP WAN Set the IP address of the WAN interface SET GATEWAY Set the gateway IP address of the WAN interface SET CONSOLE Set the baud rate used by RS232 serial console management SET SYSTEM NAME
Appendix A Console Commands PING Command SYNTAX PING DESCRIPTION Ping a host by its IP address RESET Command SYNTAX RESET SYSTEM Reboot the router DESCRIPTION RESET CONFIG Reset the configuration back to factory defaults ADD Command SYNTAX ADD IP ROUTE DESCRIPTION Add an entry to the routing table ADD IP STATIC NAT Add a virtual server based on IP forwarding ADD PORT STATIC NAT “” Add a virtual serv
Appendix A Console Commands DISABLE Command SYNTAX DISABLE RIP Disable RIP DESCRIPTION DISABLE NAT Disable Network Address Translator DISABLE DHCP SERVER Disable DHCP server SAVE Command SYNTAX SAVE CONFIG DESCRIPTION Save the changes in configuration to the router’s flash ROM DISCONNECT Command SYNTAX DISCONNECT TELNET SESSION DESCRIPTION Disconnect from the TELNET console management EDIT Command SYNTAX EDIT FILTER 92 DESCRIPTION Edit a defined IP packet filtering rule
Appendix B ISP Specific Notes Appendix B ISP-Specific Notes B.1 Singapore SingNet Broadband WAN Type: Username Format: B.2 Singapore Pacific Internet Broadband WAN Type: Username Format: B.3 PPP over Ethernet (PPPoE) @singnet.com PPP over Ethernet (PPPoE) @pacific.net.sg Germany T-DSL & T-Online WAN Type: Username Format: PPP over Ethernet (PPPoE) #0001@t-online.de NOTE The and are provided by German Telecom.
Appendix C Frequently Asked Questions Appendix C Frequently Asked Questions C.0 In the process of firmware upgrade, an error message appears on the message window and stops the upgrading process or the upgrade process was not completed. To rectify this error, please RESET the NP16A by depressing the RESET button for 5 seconds. Next, log onto the configuration page using uConfig software and reinitiate the upgrade process again. C.
A ppendix C Frequently A sked Q uestions C .6 I have installed a C om pex iW avePortW L11A into m y N etPassage 16A .H ow ever,I couldn’t seem to get m y w ireless LA N w orking. I saw a m essage “N O TIC E: w ireless card firm w are m usthave v0.8.3 or higher” in the m essage w indow . The iW avePortW L11A thatyou have installed into N etPassage 16A does nothave the required firm w are revision.Y ou should update the W L11A firm w are to 0.8.3 or higher.
A ppendix C Frequently A sked Q uestions 3)Configure yourcom puter's IP to:192.168.168.100 w ith netm ask 255.255.255.0. By defaultPC w illalso learn the IP 192.168.168.100 from router. 4)InsertN P16A CD containing the recovery file in CD -RO M and run the batch file, np16arcv.bat. 5) H old the reset button and at the sam e tim e, pow er on the router, and it w ill autom atically dow nload the firm w are to the router. 6)W hen com pleted,the D IA G LED w illbe O FF and the CO N N LED w illblink slow ly.