Intellinet 508018 Bedienungsanleitung

1 T able of Content T able o f Content.........................................................................................1 Introductio n ................................................................................................2 Product S pec i f i c ation s ........................................................................2 Bene [...]

2 Introduction T hank y ou for purchasing our inno v ati v e all-in-one solution--- P o w erf u l Ser v er applian c e f or y our net w orking needs. T he S A integrates s er v er ser v ices such a s a Net w ork Address T r anslato r (N A T ), V irtual Pri v ate Net w ork (VPN), SPI f i re w all, and net w orked stora g e into one eas y to manage d[...]

3 Ser v ices n DHC P Client/Ser v er n Prox y DNS n RIP n DDNS Client n F T P Ser v er Ne t w o rk n Programmable S tatic Route n Net w ork Protocols Supported: PPPoE, T C P , UD P , ICM P , ARP PP P A uthentication n P A P , CHA P , MS CHAP v 2 Real T im e Clock R A ID Support n Supports RAID 0, 1 Fil e Sharing n Supports CI F S,SMB, Apple T alk(A[...]

4 functionalit y , an y sub-net w ork can be grouped as though the y are in the same net w ork. Fir e w a ll T he Po w er f u l Ser v er appliance p r o v ides a po w er f u l f ire w all ca p able of pre v enting hackers f rom attack i ng the gate w a y or internal net w ork. Man y famous DoS attacks c an be detected and pre v ented. W hene v er a[...]

5 Ne t w o r k A t t ached S torage Net w ork-attached sto r age (NAS) is the concept o f shared storage on a net w ork. NAS tran s fers da t a using industr y standard f ile s haring protoco ls such a s CIFS, AF P , N FS and F T P . Files c an be sha r ed s i mul t aneousl y by clients r egardless of the operating s y stem the y are using or the n[...]

6 ser v er all o w s y ou full control o v er w ho can login to the Po w erful Ser v er applian c e, w hich f iles the u s er can acces s or the y could upload data. P o w e r Managem e nt We di v ide the po w er management function into three pa r ts. T hese a r e Po w er Do w n and Hard Disk S tandb y . We ’ ll describe ea c h part in detail be[...]

7 Figure 1.2 P h y sical Pa r t s a nd P a nel of the P o w erful Se r v e r n One W A N po r t: 1 0 /100 Mb p s n W A N po r t MDI/MDIX s w itch n Four LAN p or t s: 1 0 /100 Mb p s n Four USB 2 . 0 po r t n Reset B u tton n Po w er Butt o n n Po w er Jack - DC 1 2V n LEDs: Li n k/Acti v it y LEDs fo r E a ch Et h ernet Po r t, Po w er LED, HD Acc[...]

8 W A N Port T he W AN port is used to conne c t to an ADSL/Cable modem f or linking to the Internet. W A N M D I/MDI X S w itch T he W A N MDI/MDIX s w itch is used to adjust the cable connection of the W AN port. I f the port is conne c ted to hub, y ou should mo v e the s w itch to the “ hub ” side; i f the port is connected to P C like ma c[...]

9 Descrip t ion of L E Ds Descrip t ion of LEDs S t atus Meaning On Po w er On Po w er O f f Po w er O f f On HD Abnormal HD Indicator O f f HD Normal Access Indicator Flash HD is reading/ w riti n g data On Link up O f f Link do w n W A N /LAN Link/Acti v it y Flash T he inte r f ace is tran s mitting/recei v ing packets On T he net w ork link is [...]

10 Quick Ins t allation T his c hapter w ill gi v e y ou brief instructions on ho w to ins t all the product. In section 2.1, w e w ill con f igure the hard w are p art o f S A step b y step. In section 2.2, w e w ill check w hether the I P address of y our PC is assigned b y DHC P . Once w e c omplete the ins t allation of the S A hard w are and c[...]

11 Check Y our PC First Please c heck the f ollo w i n g settings on y our PC: Do not assign an I P address to y our PC. 1. Please sele c t sequentiall y : In S tart menu - > Settings -> Contro l panel -> Net w ork connections -> Local Area Connection. Then a “ Local Area Connection S t atus ” w indo w shows up. ( Figu r e 2.2a) 2. [...]

12 Figure 2.2b ` Figure 2.2c[...]

13 Connect to the W eb-Bas e d M a nager Please follo w the step s to connect to the w eb-based manager: 1. Open a bro w ser on the PC that is DIRE C T L Y connected to the SA. T y pe “ http://172.16.1.1 ” in address f i eld. And then press Enter k e y . 2. An authentication w ind o w sho w s up to prompt y ou to t y pe the username and the pa [...]

14 Figure 2.3b[...]

15 W eb-Based M a nager – Basic S ettings S tart to c on f igure y our net w ork en v ironment b y clicki n g the Basic Settings in left menu. The Basic Settings p age is sho w n as Figure 2.4a . Figure 2.4a T he Basic Settings page c ontains N e t work Poli cy , Internal Ne t w o r k Interface , Domain N ame Ser v er , and External N e t w o r k[...]

16 Figure 2.4b • Intern a l Ne t w o rk Int e rface T he de f ault settings are: n Host Name: “ SA ” n Pri v ate IP: “ 172.16.1.1 ” n Pri v ate I P Netmask: “ 255.255.0.0 ” According to the defau l t settings, w e w ill assign the LAN to net w ork “ 172.16.1.x ” Y ou can add more detailed con f i gurations later in sect i on 4.1 D[...]

17 E xtern a l Ne t w o rk Int e rface • E x ternal net w ork inte r face includes A DSL/PPPoE , DHC P Client and Fixed I P A ddress sett i ngs. Make sure that the s y stem information w ebpage sho w s that y our Link s tatus is ‘ L i nk Up ’ . I f not, plea s e che c k y our connect i on and/o r s w itch the MDX switch located ne x t to y ou[...]

18 3. Enter the E x ternal Gate w a y . 4. Enter the E x ternal Netmask. 5. Click the appl y button. E xampl e 2 : DHC P Client / Cable Modem • If y ou ha v e a d y namic I P address f rom y our IS P to access the Internet, please select the DHC P Client radio button. Once the e x ternal I P address is obtained v ia the DHC P p r otocol, there is[...]

19 • E xampl e 3 : A D S L Connection Most ADS L connect i ons do not gi v e y ou a f i x ed I P addres s . In this c ase, y ou must enter the u s er name and pass w ord pro v ided b y y our IS P for authentication. Please follo w the steps belo w . 1. Please s elect the A D S L/PPPoE r adio button. 2. In A DSL/PPPoE Setting : Enter the User N am[...]

20 E xampl e 4 : A D S L/PPT P C lien t Set t ing • If y our IS P pro v ides a PP T P ser v e r , y ou could set up the PP T P client here. Please follo w the step s : 1. Select ADSL/PP T P radio button. 2. Enter the user name. ( Y ou get this f r om y our ISP) 3. Enter the p ass w ord. ( Y ou get this f rom y our ISP) 4. Enter the I P address of[...]

21 Configuration Hierarch y T his c hapter gi v es y o u an o v ervie w o f all the con f iguration options a v ailable. T he Po w er f ul Ser v er appliance is a mult i function product. The s ection3.1 e x plains the c orresponding settings f or each function. And in se c tion3.2, w e describe the po w er management i n de t ail. T here are eight[...]

22 O v e r v i e w of Configurat i on M e nu Figure 3.1[...]

23 Ne t w ork Settings W hen y ou sele c t Net w ork Sett i ngs in the left menu of the w eb page, f i v e con f iguration options appear: DHC P Ser v e r , I P Alias, Multiple N A T , Route Settings and DDNS. Please refer to the corresponding section f or these con f iguration s . • DHC P Ser v er In DHC P Ser v er settings, w e assign the rage [...]

24 as these IPs w ill not be handed out b y the SA. I f the y ha v e mo r e de v ices or w ant a d if ferent I P r ange, then all the y need to do is mod i f y the range that the S A hand s out so it does not hand out an I P in that range. T y pical o f f i c es set their DHC P ser v er to assign IPs f rom 30 th r ough 200. IPs 1 through 29 are usu[...]

25 n Or y ou do n o t h a v e DHC P ser v er on y our n e t w o r k, but y ou w ould like to assign a s t atic I P add r ess to each d e v ice connected to the L A N port of S A . 1. Select Disable radio button. 2. Assign a s t atic I P address to ea c h de v ice connected to the LAN port. For e x ample, y ou ha v e f our PCs, P C 1, PC2, PC3 and P[...]

26 For additional I P addresses of the internal net w ork inte r f ace to b e accepted, enter the other I P address in I P Alias 2 and I P Alia s 3. En t e r “ 0 ” in ea c h f ield i f none. • Multiple N AT If y ou get se v eral f i x ed I P addres s es f rom y our IS P and the IS P r estrict s the band w idth f o r each f i x ed I P addres s[...]

27 1. Enter the Internal I P range1, e.g. “ 172.16.1.1/24 ” . It mean s the net w ork is “ 172.16.1.x ” 2. Enter the E x ternal I P r ange1, the I P address range y ou get f r om y our IS P . 3. Enter the Internal I P range2, e.g. “ 192.168.1.1/24 ” . It means the net w ork is “ 192.168.1.x ” . 4. Enter the E x ternal I P r ange2, t[...]

28 1. Select Enable radio button i n Routing Setup . 2. Enter the net w ork in D estinat i on net w ork column. (e.g. “ 192.168.6.0/24 ” ) 3. Enter I P address o f the gate w a y in Gate w a y c olumn. (e.g. “ 172.16.1.249 ” ) 4. Enter the number in H op count column. The number means ho w man y gate w a y s y ou ha v e to p ass through. 5.[...]

29 T he Internet u s es DNS ser v ers to lookup domain names and translates then into I P addres s es. Doma i n names, s uch as ww w . y ahoo.com , a r e ju s t eas y to remember aliases f or I P addresses. A d y namic DNS ser v ice pro v ides a means of updat i ng y our I P add r e s s so that y ou listing w ill be current w hen y our I P address [...]

30 6. Click the appl y button. E v er y time y our public IP changes, the SA w ill tell the DDNS ser v er w hat y our ne w IP address i s. Other u s ers, throu g h the magic of DDNS, w ill be sent to the right pla c e. Fir e w all Settings W hen y ou sele c t the F i re w all Settings item in left menu of the w eb p age, fou r con f iguration item [...]

31 T he v irtual ser v er se rv ice is a w a y to s i mu l ate multiple ser v ers on the intranet. Y ou ha v e se v eral I P addres s es w ithin y our LAN. T he s e IPs are not v isible to the users f rom the Internet. W h e n ser v ers are i ns t alled i n t h e o f f i c e that need to be s een f rom the Internet, w e e s tablish som e for w ardi[...]

32 • UR L Filt e r Set u p T he UR L Filter f unction is used to restrict internal host s f rom ac c essing spec i f ic UR L locations. Y ou den y an y acces s to the UR L lo c ation speci f i e d in the Site1 , Si t e2 … Site10 f i elds. Please follo w the step s : 1. Select Enable radio button i n UR L Filte r . 2. In Site 1, plea s e enter t[...]

33 • I P Filter Setup T he I P f ilter funct i on i s similar to UR L Filte r . It pro v ides f urther restr i ction s in ac c ess permission. UR L Filtering onl y blocks port numbe r 80 ( H T T P). In I P f iltering, y ou c an assign a group of I P to be restricted. Y ou can bloc k four indi v idual po r ts o r a range o f ports in the same time[...]

34 • Denial of S e r v i c e It is highl y recommended that the DoS Protection f eatu r e be enabled to pre v ent at t acks on the net w ork. Ho w e v e r , i f y ou allo w someone to manage the router f rom outside or are r unning a w eb ser v e r , e-mail ser v e r , or F T P ser v e r , y ou should either disable Detect SYN Flood A t t ack o r[...]

35 VPN Sett i ngs VPNs ( V irtual Pri v ate Net w orking) pro v ide secure communication bet w een t w o sepa r ate net w or k s w ithout using a dedicated lea s ed line. In order to achie v e this functional i t y , a secure tunnel must be built bet w een the t w o site s for secure communi c ation o v er the Internet. The S A suppo r ts the mo s [...]

36 Figure 6.1[...]

37 S y s tem Man a g e ment W hen y ou s elect the S y stem Management item in the left menu, f i v e con f iguration items appear including; Admin i strator Settings, E v ent Repo r t Settings, Fi r m w are Update, T i me Settings and SNM P . P l ease refer the corresponding section for the s e con f iguration de t ails. • A dministrator S ettin[...]

38 1. Ne w Pass w ord : the adm i nistrator could change the administrator pass w ord here. Plea s e enter the ne w pas sw ord y ou w ould like to change to. Note that y ou must f ill the ne w pass w ord in bo t h Pass w ord change and Pass w ord con f irmation f ield s . I f both f i elds a r e not the s ame, the p age w ill not be submitted. 2. C[...]

39 • E v ent Repor t S e ttings Send ale r ts to an e-mail account. T he mail ser v er should allo w e-mails f rom the s ame net w ork. E-mail address to send the alert s to. • F ir m w a r e U p da te Updates and functiona l it y can be added v ia th i s funct i on. Plea s e check the w eb f or the latest f i rm w are if y ou are ha v ing an y[...]

40 T he update percenta g e w ill update the s t atus. Click Res t art w hen the upload is comp l ete. T hough it is not generall y necessar y , Y ou should restore factor y default to make su r e that ne w f eature s and settings are implemented. N ote: Y ou must re- i nitiali z e the hard dri v e if y ou do this.[...]

41 • T im e Set t ings T he NAS ’ s built-in clo c k shou l d be ad j usted to the current local t i me. This w ill insure accurate time report i ng in the logs and f i l e records. Select y our G MT time z one and then enter the date and time. Click on Appl y to make the changes. Y ou can f i nd y our G MT time z one b y double clicking on the[...]

42 • S N MP T he SNM P agent allo w s users with SNM P client applications to con v enientl y inspect the net w ork status o f SA. Please follo w the step s belo w to setup the S N M P agent. 1. Select the Enable rad i o button in the SNM P Agent f ield. 2. Enter the C ommunit y Name. Note that the agent side and the client side must use the s am[...]

43 S y s tem Repor t s W hen y ou sele c t S y stem Report s in the le f t menu o f the w eb p age, f ou r con f iguration items appear inc l uding; S y stem Information, S y stem Log, UR L Log, and DHC P Lease Report. Plea s e refer to the corresponding s ection fo r these con f igurat i on items.[...]

44 • S y stem inform a tion[...]

45 T he S y stem Informat i on displa y s some useful in f o r mation about the s y stem. It s ho w s the f i r m w are v ersion, the s y stem up t i me and the internal and e x ternal net w ork connections. On SA, We ha v e one WAN port and four LAN po r ts. T he W AN port belongs to the e x ternal net w ork inte r face and the LAN port belongs to[...]

46 • S y stem Log Use the in f o r mation pro v ided here to help diagnose an y net w ork related issues. Na v igate through the histor y with these buttons. Y ou can c l ear the e v ent logs under the A dministrator settings page. • UR L Log T he UR L Log f un c tion records the recent c onnections f or each client. I f y ou w ould like to v i[...]

47 • DHC P Lea s e R e port T he DHC P L ease R eport f unction report s all leased I P pro v ided b y DHC P ser v e r . From this page, y ou can f i nd out w hich host w as assigned to w hich I P address. Y ou can clear all the records through admini s trato r settings. Please refer to the sect i on 7.1, Clear DHC P Lease.[...]

48 User Man a g e m e nt T he NAS pro v ides a cl i ent/ s er v er en v ironment f or users to share f iles o v er the net w ork. File sharing w orks b y a uthori z ing the u s ers or groups to ac c ess shared folders b y their username and pass w ord. W hen creating a ne w shared folde r , u s er and groups f rom the current list must be a s signe[...]

49 required. Click A pp ly w hen completed. Highlight a user name and click on Remo ve or Modi fy to delete or change user in f o r mat i on. • Grou p s After creating the u s ers, y ou can categori z e the users into di f ferent grou ps to make assignment easie r . Click on A dd to create a ne w group name. Enter the group name Highlight the use[...]

50 N A S Man a g e m e nt Manage the main fun c tions of the shared s torage f rom this menu. • R A ID Initi a liz a tion W iz a rd T he f irst t i me y ou use the NAS, y ou ma y ha v e to initiali z e the ha r d d i sk. T he w i z ard pro v ides an eas y w a y to initiali z e the hard disk.[...]

51 B y enabling SMA R T , the NAS w ill report w h e n the hard dri v e is about to fail. Y our hard dri v e must support this f eature. T he HD Po w er Mana g ement s hou l d be enab l ed to prolong the life of the hard dri v e. W hen there is no acti v it y f or the set time period, the hard dri v e w ill po w er do w n to conser v e po w e r , s[...]

52 Y ou must assign at least one user to this share folde r . ( 1 ) Highlight the user on the list to the right. ( 2 ) Select the permission y ou w ant them to ha v e: Read / W r ite or Read Onl y . ( 3 ) Click on the ß butto n to mo v e the user o v er to the Allo w ing User List. I f y ou choo s e Single con f iguration, y ou also ha v e to deci[...]

53 Hard D i sk St atus W hen Po w er f ul Ser v er appliance c annot detect hard dri v e ( S tatu s of Disk 1 as illustrated i n Figure 3.8a) or detect an er r or in S.M.A.R. T . ( S t atus o f Disk 2 also illustrated i n Figure 3.8a), y ou w ill see “ Not Acti ve ” sho w n in S tatus f ield column. I f all hard disks in “ Not Acti ve ” mod[...]

54 T hen onl y Single con f i guration operab l e, RAID con f iguration una v ailable as illustrated in Figure 3.8d. Figure 3.8d Disk si z e w ill be sho w n in Si z e f i eld co l umn of Hard Disk(s) A v ailabilit y as illustrated in Figure 3.8e Figure 3.8e R A I D 1 ( M irror) A f ter initiali z ing to RAID 1 (Mirror), y ou shou l d see a screen [...]

55 W hen a ne w HD is ins t alled to repla c e a bro k en one in RAID 1 (Mirror), the Po w er f ul Ser v er appliance w ill set in Degraded mode. Y ou c an s ee Recall button i n the S t atus f i eld column of V olume s tatus and see onl y HDD- A ( F igure 3.8g). Press Recall to add H DD-B in RAID 1. T he w arning message w ill appear a f ter pu s [...]

56 W hen an y HD is remo v ed or broken and cannot be operated in RAID 1, y ou w ill see "Not Acti v e" sho w n in S t atus f i e l d. T he s y stem w ill set in Degraded mode and R ecall cannot be r un (F i gure 3.8j). Figure 3,8j R A I D 0 ( S tri p e) A f ter initiali z ing to RAID 0 (Stripe), as sho w n in Figure 3.8k, y ou can see th[...]

57 Single After being initiali z ed to Single, y ou w ill see 2 hard disks acti v ated in V olume S t atu s in Po w er f ul Ser v er applian c e ( Figure 3.8m). W hen choosing single con f iguration, Po w erful Ser v er appliance w ill f o r mat all hard disks and make them respecti v e ones. For initiali z ing onl y one hard disk, please refer to [...]

58 • US B HD Infor m ation Each o f formatted part i tions ( F A T 32, EXT2 and EXT3) on the atta c hed USB storage dri v e w ill be sho w n in the USB HD i n f ormation p age. T he nam i ng rule f or “ Mounting p ath ” is based on the connecting port. F or e x amp l e, i f the USB hard dri v e w as attached on port A and here are three forma[...]

59 • Eras e CD/DVD Be f ore y ou erase CD/DVD- R W disc, the cur r ent media information w ill be sho w n as the picture on the right side. The mo s t impo r tant th i ng is y ou can kno w ho w much data ha v e been stored in this dis c . W hen y ou pres s the “ Apply ” button on the “ Current Media Information ” p age, the w arning dialo[...]

60 Ne x t, y ou can sele c t f i l es to bac k up f rom the connected USB HD in the S tep1 p age. All a v ailable USB storage be sho w n in the USB HD List. Highlight the f ile(s) on the right side and click on the ß button to se l ect the burning f ile. Select the f iles on the left side and click the à button to remo v e f ile f rom burning Fil[...]

61 Please w ait the p r ogress bar up to 100% and disc w ill be ejected automaticall y w hen the burning comp l ete. • A d v anced Settings All the f ile protocols settings are located here. Disable an y protocols not in use b y the computers on the net w ork to increase pe r f orman c e. Most users w ill not need to c hange an y o f the s etting[...]

62 Linu x users need to c r eate NFS Mappings in order to c onnect to the NAS. Enab l e the Net w ork File S y stem and click on A dd to create the mapping. Enter the R emote UID, I P , netmask and the local mapping u s e r . Once c omplete, mount the s hare on the Linu x ma c hine. A t y pical mount command line: # mount <I P address>:/<s[...]

63 • F il e Sh a ring For f ile sharing, y ou must create u s ers and groups f irst. Use this to organi z e the da t a on the NAS. Y ou can create pri v ate and public f olders. B y managing w hich u s ers ha v e acces s to the shares, users c an on ly access information that the y are allo w ed to. This access is the same w hether the y are acce[...]

64 For USB S torage Sharing As mentioned abo v e, each partition of the attached USB storage w ill be presented to one s ha r ed f olde r . So, i f one USB storage de v ice be p l ugged into A port and it ha v e 2 p artitions. The s y stem create the USBHDA1 and USBHDA2 automati c all y and assigned the guest ha v e read/ w rite permission b y defa[...]

65 y our NAS ’ s fixed I P address . R e f er to the D DNS and port for w arding/ v irtual ser v er chapter of y our router manual for de t ails. Enab l e the F T P s er v er on the NAS. Y ou can c hange the default F T P port in the same c on f iguration screen. This is use f ul for making y ou F T P ser v er less v isi b le to users w hom y ou [...]

66 Personal W eb Server T he Web Ser v er settings are currentl y under 'Nas Management- > Web Ser v er'. Getting s t arted Enab l e the w eb ser v er b y selecting the ‘ Enable ’ radio button. It w ill then create a shared folder called ' www'. Set the ser v er port number to '80 ' i f y ou w ant all de f ault [...]

67 A c cessing the w e bsite Users w ith a static W A N I P address can ac c ess the w ebsite simpl y b y t y ping in the I P addres s on an y bro w s e r . I f y ou are on the inside of the net w ork, y ou must use the WAN I P address to access the w ebsite, not the inte r nal applian c e I P address. I f y ou ha v e a domain name, then y ou c an [...]

68 should limit the ma x imum si z e a mailbo x under the quota f ie l d and the si z e of each e-mail in the f ollo w i n g f ield. De f ault settings are ‘ 0 ’ f or unlimited. E-mail n a mes After appl y ing the sett i ngs, y our e-mail ac c ounts are no w acti v e. T he y are based on y our user names that are created under u s er management[...]

69 W ind o w s USB Printer Server S tandard USB 1.1 and 2.0 printers can easil y be shared bet w een W i ndo w s users on the net w ork w ith the built-in USB p r inter ser v e r . Note: Some or all functions of multi - f un c tion printers ma y not w ork depending on the dri v er support b y the r espe c ti v e printer manufactu r ers. Please make[...]

70 the printer the s ame w a y as an y other net w orked printer under W i ndo w s. • St andard TC P /I P Por t for W ind o w s 2K/X P ( LPR & R a w mode ) T he f ollo w ing t w o pictures demonstrate ho w to setup the T CP/I P pr i nter port under W i ndo w s 2K/X P . As mentioned before, i f the printer c onnected to USB port A position, w [...]

71 Appendix A PPT P VP N (W2K a nd X P on l y ) Impor t a n t: Make sure that the subnet o f y our Appliance i s di f ferent the net w ork y ou are tr y i n g to connect f r om. For e x ample: User ’ s o f f ice I P addres s es are 192.168.1. x , set y our Appliance to 192.168.2.1 Netmask 255.255.255.0. Make sure that y ou ha v e created a u s er[...]

72 6. Name y our connection and sele c t i f y ou w ant to ha v e an icon on y ou r desktop. Click Finish w hen done. 7. Use the user name and p ass w ord on y our Appliance to log in. Y ou should be able to s ee the Appliance i n y our net w ork neighborhood no w . Y ou must init i ate the VPN connection each time unless y ou selected other w ise.[...]

73 Searching the Ne t w o rk f o r th e N A S If y ou are not able to l ocate the NAS in the Ne t w ork N eighborhood or M y Ne t w ork Places , y ou can tr y to search for it. Click Search under M y Ne t w ork Places . Enter the name o f the NAS or the Fi x ed I P address i f con f igured that w a y and click Sea r ch N ow . All o ther c o m p any[...]