Help

FOR TECHNICAL SUPPORT,CALL:
Phone: +886 - 3 - 5788879

INTERNET
E-Mail address : support@Infineon.com.tw

World Wide Web:
http://www.Infineon.com.tw

Device BASICS
1. Check power connection
2. Verify power light status
3. Check connections for networking interface(s)
4. If you are unable to access the Device's user interface, please check your computer's network settings - verify that your TCP/IP settings are correct. Check User Guide for more details.
5. Ensure that the latest firmware is installed in the Device


Administrator Settings
Use this menu to restrict management access based on a specific password. By default, there is no password. So please assign a password to the Administrator as soon as possible, and store it in a safe place.
Passwords can contain from 3-12 alphanumeric characters,and are case sensitive.
Administrator Time-out - The amount of time of inactivity before the Device will automatically close the Administrator session. Set this to zero to disable it.
Remote Management - By default, management access is only available to users on your local network. However, you can also manage the Device from a remote host by adding the IP address of an administrator to this screen.
top

System Time
Set the time zone for the Device and connecting to a Simple Network Time Protocol(SNTP) server allows the Device to synchronize the system clock to the global Internet. The synchronized clock in the Device is used to recored the security log and control client filtering.
top

LAN Settings
Configure the gateway address of the Device. To dynamically assign the IP address for client PCs, enable the DHCP Server, set the lease time, and then specify the address range. 
Valid IP addresses consist of four numbers, and are separated by periods. The first three fields are the network portion, and can be from 0-255, while the last field is the host portion and can be from 1-254.
top

DHCP Client List
The DHCP client list allows you to see which clients are connected to the Device via IP address, host name, and MAC address.
top

WAN
Specify the WAN connection type required by your Internet Service Provider, then click "Apply Button" to provide detailed configuration parameters for the selected connection type.
top

WAN | Dynamic IP Address
The Host Name is optional, but may be required by some ISPs. The default MAC address is set to the WAN's physical interface on the Device. Use this address when registering for Internet service, and do not change it unless required by your ISP, You can use the "Clone MAC Address" button to copy the MAC address of the Ethernet Card installed by your ISP and replace the WAN MAC address with this MAC address.
top

WAN | Fixed IP
If your Internet Service Provider has assigned a fixed address, enter the assigned address and subnet mask for the Device, then enter the gateway address of your ISP.
top

WAN | PPPoE
Enter the PPPoE user name and password assigned by your Service Provider. The Service Name is normally optional, by may be required by some service providers. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then it will be dropped. You can enable the Auto-reconnect option to automatically re-establish the connection as soon as you attempt to access the Internet again.
Maximum Idle time - The amount of time of inactivity before disconnecting your PPPoE session. Either set this to zero or enable Auto-reconnect to disable this feature.
Auto-reconnect - If enabled, the Device will automatically connect to your ISP after your system is restarted or the connection is dropped.
<Connect> - Clicking the Connect button will trigger the Device to initiate a PPPoE connection.
<Disconnect> - Clicking the Disconnect button will trigger the Device to cut-off the PPPoE connection.
top

DNS
Domain Name Servers are used to map an IP address to the equivalent domain name(e.g.www.Infineon.com.tw). Your ISP should provide the IP address for one or more domain name servers.
top

Virtual Server
If you configure the Device as a virtual server, remote users accessing services such as Web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP address. In other words, depending on the requested service (TCP/UDP port number), the Device redirects the external service request to the appropriate server.

Example:

    ID Private IP Private Port Type Public Port Comment
    1 192.168.2.20 80 TCP 200 Web Server
    2 192.168.2.12 21 TCP 333 FTP Server
    3 192.168.2.28 23 TCP 455 Telnet Server
top

Special Application
Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications cannot work when Network Address Translation (NAT) is enabled. If you need to run applications that require multiple connections,-specify the port normally associated with an application in the "Trigger Port" field,select the protocol type as TCP or UDP, then enter the public ports associated with the trigger port to open them for inbound traffic.

Example:

    ID Trigger Port Trigger Type Public Port Public Type Comment
    1 28800 UDP 2300-2400,
    47624
    UDP MSN Game Zone
    2 28800 UDP 2300-2400,
    47624
    TCP MSN Game Zone
    3 6112 UDP 6112 UDP Battle.net
top

Firewall
The Device provides extensive firewall protection by restricting connection parameters to limit the risk of intrusion and defending against a wide array of common hacker attacks. However, for applications that require unrestricted access to the Internet, you can configure a specific client/server as a demilitarized zone (DMZ).
top

Discard PING from WAN side - When this feature is enabled, hosts on the WAN cannot ping the Device.
top

Client Filtering
You can filter Internet access for local clients based on IP addresses, application types, (i.e., HTTP port), and time of day.
For example, this screen shows that clients in the address range 192.168.2.50-99 are permanently restricted from using FTP (Port 21), while clients in the address range 192.168.2.110-119 are blocked from browsing the Internet from Monday through Friday.
top

MAC Control - You can block certain client PCs accessing the Internet based on MAC address.
top

Virtual DMZ Host - If you have a client PC that cannot run Internet application properly from behind the NAT firewall or after configuring the Special Applications function, then you can open the client up to unrestricted two-way Internet access.
Enter the IP address of a DMZ host to this screen. Adding a client to the DMZ (Demilitarized Zone) may expose your local network to a variety of security risks, so only use this option as a last resort.
top

Status
You can use the Status screen to see the connection status for the Devices' WAN/LAN interfaces, firmware and hardware version numbers, and the number of connected clients to your network.

The following items are included in this screen:
INTERNET - Displays WAN connection type and status.
GATEWAY - Displays system IP settings, as well as DHCP, NAT and Firewall status.
INFORMATION
- Displays the number of connected clients, as well as the Device's hardware and firmware version numbers. 
top

Security Logs
Security Log
- Displays any illegal attempts to access your network.
Example :
Date Time Event Type Packet Type Source IP/Port   Destination IP/Port

1970/01/01 00:02:50 ** UDP Port LoopBack ** <IP/UDP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** Snork ** <IP/UDP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** Smurf ** <IP/ICMP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** TCP Null Scan ** <IP/TCP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** TCP SYN Flooding ** <IP/TCP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** IP Spoofing ** <IP/TCP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** Ping of Death ** <IP/ICMP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** IP with Zero Length ** <IP/TCP> 10.1.16.36:1090 ->> 10.1.16.4:88
1970/01/01 00:02:50 ** Unauthorized HTTP Access ** <IP/TCP> 10.1.16.36:1090 ->> 10.1.16.4:88

DHCP Client Log - Displays information on all DHCP clients on your network.
top

Reset
Reset Device - Reboot this device.And retain all existing configuration settings.
top

Tools
Restore Factory Defaults - Reset the settings of this device to the factory default values.
Backup Settings - Save the settings of this device to a file.
Restore Settings - Restore the settings of this device to the backup settings.
top

GLOSSARY OF TERMS
top

DHCP Dynamic Host Configuration Protocol. This protocol automatically configures the TCP/IP settings of every computer on your home network.
top

DNS Server Address DNS stands for Domain Name System, which allows Internet host computers to have a domain name (such as www.Infineon.com.tw) and one or more IP addresses (such as 192.34.45.8). A DNS server keeps a database of host computers and their respective domain names and IP addresses, so that when a domain name is requested (as in typing " www.Infineon.com.tw" into your Internet browser), the user is sent to the proper IP address. The DNS server address used by the computers on your home network is the location of the DNS server your ISP has assigned.
top

DSL Modem DSL stands for Digital Subscriber Line. A DSL modem uses your existing phone lines to transmit data at high speeds.
top

Ethernet A standard for computer networks. Ethernet networks are connected by special cables and hubs, and move data around at up to 100 million bits per second (Mbps).
top

IP Address IP stands for Internet Protocol. An IP address consists of a series of four numbers separated by periods, that identifies an single, unique Internet computer host. Example: 192.34.45.8.
top

ISP Gateway Address (see ISP for definition). The ISP Gateway Address is an IP address for the Internet router located at the ISP's office. This address is required only when using a cable or DSL modem.
top

ISP Internet Service Provider. An ISP is a business that provides connectivity to the Internet for individuals and other businesses or organizations.
top

LAN Local Area Network. A LAN is a group of computers and devices connected together in a relatively small area (such as a house or an office). Your home network is considered a LAN.
top

MAC Address MAC stands for Media Access Control. A MAC address is the hardware address of a device connected to a network.
top

NAT Network Address Translation. This process allows all of the computers on your home network to use one IP address. The NAT capability of the Device, allows you to access the Internet from any computer on your home network without having to purchase more IP addresses from your ISP.
Network Address Translation can be used to give multiple users access to the Internet with a single user account, or to map the local address for an IP server(such as Web or FTP) to a public address. This secures your network from direct attack by hackers, and provides more flexible management by allowing you to change internal IP addresses without affecting outside access to your network. NAT must be enabled to provide multi-user access to the Internet or to use the Virtual Server function.
top

PPPoE Point-to-Point Protocol over Ethernet. Point-to-Point Protocol is a method of secure data transmission originally created for dial-up connections. PPPoE is for Ethernet connections.
top

Subnet Mask A subnet mask, which may be a part of the TCP/IP information provided by your ISP, is a set of four numbers configured like an IP address. It is used to create IP address numbers used only within a particular network (as opposed to valid IP address numbers recognized by the Internet.
top

TCP/IP Transmission Control Protocol/Internet Protocol. This is the standard protocol for data transmission over the Internet.
top

WAN Specify the WAN connection type required by your Internet Service Provider, then click "Apply" to provide detailed configuration parameters for the selected connection type. Specify one of the first five options to configure a WAN connection through the RJ-45 port.
top