Edimax ER-1088 Betriebsanweisung

Multi-WAN VPN Link Balancer User’s Guide

Ethernet Ports and Reset Button Ethernet Ports WAN ports: 2 to 8 WAN ports (default is 2), using Port 1 to Port 8 for connecting to Modem(s). LAN por

Rear Panel Figure 1-3: Rear Panel AC 100V ~ 240V Connects to AC100~240V / 50~60Hz with supplied AC power cord. Default Settings When the Multi-W

Note: The supplied Windows TFTP utility also allows you to perform three (3) additional operations: • Save the current configuration settings to you

2: Basic Setup Overview Basic Setup of your Multi-WAN VPN Link Balancer involves the following steps: 1. 2. 3. 4. Attach the Multi-WAN VPN Link Balan

Enter admin for the "User Name" and leave the "Password" field blank. 7. 8. • The "User Name" is always set as admin •

Select LAN & DHCP from the menu. You will see a screen like in the example below. 9. Figure 2-3: LAN & DHCP Setup 10. 11. If your LAN alr

Settings – LAN & DHCP LAN IP Configuration • IP Address – IP address for the Multi-WAN VPN Link Balancer, as seen from the Local LAN. Use the de

2. Installing the Multi-WAN VPN Link Balancer in your LAN Figure 2-4: Installation Diagram 1. 2. 3. 4. Power-Up 5. Ensure that the Multi-WAN VPN Li

• For each PC connected to the LAN ports, the corresponding LAN LED (either 10/Yellow or 100/Green) should be ON. 3. Configuring the Multi-WAN VPN

Figure 2-6: Primary Setup Settings – Primary Setup Connection Mode • Interface – A pull down menu for each WAN port that you are going to connect

Address Information This is for Static IP users only. Enter the address information (IP Address, Subnet Mask, Gateway) provided by your ISP. If your

4: Configure PCs on your LAN Overview For each PC, the following settings may need to be configured: • TCP/IP network settings • Internet Access co

6. 7. Check "Connect using a broadband connection that is always on" and click Next. Click Finish to close the New Connection Wizard. Setup

Fixed IP Address By default, most Unix installations use a fixed IP Address. If you wish to continue using a fixed IP Address, make the following cha

3: Advanced Port Overview • Port Options contains some options which can be set on any WAN port. For most situations, the default values are satisfa

Settings – Port Options Interface • WAN Port – Select a particular WAN port from the pull-down menu to setup WAN port configuration. • MTU – The M

Load Balance This screen is only operational if using Internet connections on multiple WAN ports Figure 3-2: Load Balance Only functional when usin

Settings – Load Balance Load Balance Configuration • Enable – This enables your Load Balance setting options and must be checked for other settings

Advanced PPPoE The Advanced PPPoE screen is required in order to use multiple PPPoE sessions on the same WAN port. It can also be used to manually c

Options • Specified Fix IP Address – If you have a fixed IP address, enter if here. Otherwise, this field should be left at 0.0.0.0. • Assigned Ho

TABLE OF CONTENTS 1: INTRODUCTION ...

Settings – Advanced PPTP WAN Port Select the desired WAN port (click desired WAN on Connection Status). The data of the selected port will then be di

4: Advanced Setup Overview The following features are provided in Advanced Setup: • Host IP • Routing • Virtual Server • Special Application • D

Figure 4-1: Host IP Settings – Host IP Host Network Identity This section identifies each Host (PC) • Host name – Enter a suitable name. General

Host Network Binding • Binding WAN Port / Session – Select Enable if you wish to associate this PC with a particular PPPoE session. All traffic for

Figure 4-2: Routing Note: If there is an entry or entries in the Routing table with an Index of zero (0), these are System entries. You cannot modi

Static Routing • Network Address – The network address of the remote LAN segment. For standard class "C" LANs, the network address is the

For the Multi-WAN VPN Link Balancer Gateway's Routing Table For the LAN shown above, with 2 routers and 3 LAN segments - the Multi-WAN VPN Link

Virtual Server This feature allows you to make Servers on your LAN accessible to Internet users. Normally, Internet users would not be able to access

http://my_domain_name.dyndns.org ftp://my_domain_name.dyndns.org This screen allows you to define your own Server types. Figure 4-5: Virtual Serv

or even bind to all WAN ports together. • LAN Port Range – Enter the range of port number used for outgoing traffic from this Server. If only a sing

DNS Record...69 9: MANA

Special Application If you use Internet applications which have non-standard connections or port numbers, you may find that they do not function corr

Settings – Special Application Special Application Configuration • Enable – Use this to Enable or Disable the Special Application as required • Na

Dynamic DNS Dynamic DNS is very useful when combined with the Virtual Server feature. It allows Internet users to connect to your Virtual Servers usi

Settings – Dynamic DNS Dynamic DNS Service This pull-down menu can Enable/Disable the Dynamic DNS feature and select the required service provider. •

Multi DMZ This feature allows each WAN port IP address to be associated with one (1) computer on your LAN. All outgoing traffic from that PC will be

Settings – Multi DMZ Multi DMZ Edit • Enable – Use this to enable or disable the DMZ setting, as required. • WAN – Select the desired WAN port bind

UPnP Setup With the UPnP (Universal Plug & Play) function, you can easily setup and configure an entire network as well as enable detection and c

NAT Setup NAT (Network Address Translation) is the technology which allows one (1) WAN (Internet) IP address to be used by multiple LAN users. Figu

Non-Translation Port Range If some packets whose port number cannot be translated for special applications, you must set state to “Enable” and input

Advanced Feature • External Filters Configuration – These settings determine whether the Multi-WAN VPN Link Balancer should respond to ICMP (ping) r

1: Introduction Congratulations on the purchase of your new Multi-WAN VPN Link Balancer. The Multi-WAN VPN Link Balancer not only provides a selectio

Settings – Advanced Feature External Filters Configuration • IDENT Port – Port 113 is associated with the Internet's (Identification / Authenti

Protocol & Port Binding List This list shows the details of all protocol and port configuration data which are currently defined. You can modify

5: Security Management Overview • Block URL – Ability to block a specific website by configuring IP address, URL or Keywords. • Access Filter – Ab

Figure 5-1: Block URL Settings – Block URL Access Group This allows you to have different blocking rules for different Groups of PCs. • All PCs (u

Access Filter The network Administrator can use the Access Filter to gain fine control over the Internet access and applications available to LAN use

Settings – Access Filter Access Group This allows you have different access rights for different Groups of PCs.• If you want the same restrictions t

Figure 5-3: Session Limit Settings – Session Limit Sampling Time The time interval specified by you for new sessions. Only the new sessions that h

SysFilter Exception System Filter Exception - This will reject every packet with an unrecognized port to block port scan programs from hackers. This,

6: VPN Configuration Overview Virtual Private Network (VPN) uses encryption to create the connection between two end points (computers or networks)

Settings – IKE Global Setup Global List (Phase 1) The list will only show the approximate information of all Global Settings on each WAN port. You ca

• Support for all common Connection Methods All popular DSL, Cable Modems and connection methods are supported. These include - Fixed IP, Dynamic IP

Planning the VPN When planning your VPN, you must make the following choices first: 1. If the remote site is a LAN network, the two end-point networ

Settings – IPSec Policy Setup IPSec Traffic Binding • Tunnel Name – In order to distinguish the tunnel, you have to give “Tunnel” a name. • Tunnel

Key Management Key Type – Two key types are available for the key exchange management - Manual Key and Auto Key: • Manual Key – If manual key is sel

Figure 6-3: IPSec Policy Options Settings – IPSec Policy Options Dead Peer Detection Feature • Dead Peer Detection (DPD) – If set to Enable, a d

passes - a Detection packet is sent to the peer. • Retry Times – The number of times a device will attempt to send the Detection packet before the C

Mesh Group Setup (Optional) The Multi-WAN VPN Link Balancer not only provides VPN failover and backup but is also capable of offering VPN load balanc

Once you have added your VPN Policy to the Mesh Group, you can set up your Mesh Group through the VPN Mesh Group Configuration. Figure 6-5:

VPN Logs You can monitor the VPN status through the VPN Logs web page. The log level (priority) can be chosen from the VPN IKE Global Settings

7: QoS Configuration Overview The Multi-WAN VPN Link Balancer incorporates a QoS (Quality of Service) utility to provide high quality network support

Settings – QoS Setup. QoS Feature  Enable QoS – If set to Enable, it activates the QoS function. • Queuing Method – Management method selection for

• VPN (Virtual Private Network) Support is provided for up to 50 VPN tunnels with a failover and back-up mechanism. • VPN Mesh Group. The Multi-WAN

Settings – QoS Policy Policy Priority This section identifies each policy: • Policy Name – Enter a suitable name. Generally, you should use the &quo

8: DNS Configuration (Optional) Overview The DNS configuration web pages are setup steps provided for users requiring Inbound Load Balance. Domain

Settings – Domain SOA Domain List The Domain List catalogs all DNS configuration data that you have entered. You can modify any of the Domain SOA re

DNS Record Apart from setting up the DNS SOA configuration, to complete the whole DNS setup - it is also necessary to configure the DNS record. Fi

Settings – DNS Record SOA Record Lists all SOA records stored in the Domain SOA shown above. Record • Host Name – The second level Domain name (host

9: Management Assistant Overview The following advanced features are provided: • Admin. Setup • Email Alert • SNMP • Syslog • Upgrade Firmware

Settings – Admin. Setup Remote Access Configuration • Remote Upgrade – If enabled, you can use the supplied Windows utility to remotely upgrade th

Email Alert This feature will send a warning Email to the system administrator when any WAN port is disconnected, has received excessive ping floodin

Email Alert Configuration • Email (SMTP) Server Address – An email sever to which a warning email will be sent, if email alert has been enabled. For

SNMP This section is only useful if you have SNMP (Simple Network Management Protocol) software on your PC. If you have SNMP software, you can use a

• UPnP When UPnP (Universal Plug & Play), is set to “Enable” - the Multi-WAN VPN Link Balancer becomes a network device. This feature is useful

Syslog This feature can send the real time system information to a web page or to specified PCs. Syslog Configuration – Syslog Configuration allows

Settings – Syslog Syslog Delivery • Sending Out – Set to “Enable”, if you want to send system log messages to other machines (PCs). • Keep Sent Me

Using Remote Web-based Setup To connect to the Multi-WAN VPN Link Balancer from a remote PC via the Internet: 1. Ensure that both your PC and the Mu

Upgrade Firmware The Upgrade Firmware Screen allows you to upgrade the firmware or backup the system configuration. Figure 9-6: Upgrade Firmware

10: Network Info Operation Once the Multi-WAN VPN Link Balancer and the PCs are configured, operation is automatic. However, there are some situation

Data – System Status WAN Interface • Connection Type – The type of connection used – DHCP, Fixed IP, PPPoE or PPTP. • Connection Status – Either &q

Device Statistics • System UpTime – The time since the device system was last reinitialized. • CPU Usage – The current CPU percentage usage. • Mem

WAN Status Use the WAN Status link on the main menu to view this screen. Figure 11-3: WAN Status Data – WAN Status NAT Statistics This section dis

Interface Statistics This section displays cumulative statistics. Use the "Restart Counter" button to restart these counters when required

Appendix A Specifications Model Multi-WAN VPN Link Balancer Dimensions 423mm (W) x 155mm (D) x 43mm (H) Operating Temperature 0° C to 40° C Storag

Package Contents The following items are included in the Multi-WAN VPN Link Balancer package: • Multi-WAN VPN Link Balancer Unit • Power Cord • Qu

Appendix B Windows TCP/IP Setup Overview TCP/IP Settings If using the default Multi-WAN VPN Link Balancer settings and the default Windows 95/98/ME/2

Figure B-2: IP Address (Win 95) Ensure your TCP/IP settings are correct as follows: Using DHCP To use DHCP, select the radio button Obtain an IP Add

• On the DNS Configuration tab, ensure Enable DNS is selected. If the DNS Server Search Order list is empty, enter the DNS address provided by your

Figure B-6: TCP/IP Properties (Win 2000) 5. Ensure your TCP/IP settings are correct: Using DHCP To use DHCP, select the radio button Obtain an IP A

Checking TCP/IP Settings - Windows XP: 1. 2. Select Control Panel - Network Connection. Right click the Local Area Connection and choose Properties.

Figure B-8: TCP/IP Properties (Windows XP) 5. Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button Obtain an I

Appendix C Troubleshooting Overview This chapter covers some common problems that may be encountered while using the Multi-WAN VPN Link Balancer and

Problem 2: Some applications do not run properly when using the Multi-WAN VPN Link Balancer. Solution 2: The Multi-WAN VPN Link Balancer processes t