|
TCP/IP Router
|
NAT
|
Description
|
Network Address Translation (NAT) allows multiple computers on specified networks to share a single IP address simultaneously, to access the Internet or other TCP/IP networks. Equivalent to IP Masquerading or "proxy" server.
Follows RFC1631 but brought up to date and considerably extended with the addition of Network Address and Port Translation (NAPT) to support multiplexing through a single public IP address.
NAT provides Firewall Security.
|
|
Maximum concurrent NAT users
|
5 to unlimited (dependent on licence)
|
|
Maximum concurrent NAT sessions
|
2000
|
|
Inbound Mapping
|
Map incoming NAT traffic Port numbers to specified IP addresses
|
|
Maximum concurrent sessions on inbound mapping
|
Unlimited (One IP address per port number)
|
Special Features |
No user restriction limits due to Operating System when running on Windows 95/98, NT Workstation or Windows 2000.
Can run as a Service under NT4 Workstation or Server.
Router runs as an invisible background application.
|
|
LAN Information
|
Router can be DHCP Client
|
Interfaces
|
Description
|
Connections to networks via a network card, modem or other device
|
|
Multihoming
|
Multiple IP addresses on single Ethernet Interface
|
|
Maximum Logical Interfaces
|
50
|
|
Maximum LAN Interfaces (NIC's)
|
Limited only by system hardware configuration
|
|
LAN Interface Types supported
|
Ethernet - 10 baseT/2/5
Ethernet - 100 baseT
Token Ring
Wireless 802.11
|
|
Maximum WAN Interfaces
|
Limited only by system hardware configuration
|
|
WAN Interfaces supported
|
Any TAPI Compliant device
CAPI2 Compliant device
Device that creates a Virtual Serial Port
|
|
Via Serial Port
|
Modem
ISDN Terminal Adaptor
Leased Line
Ricochet
|
|
Via Internal Card
|
ISDN
GSM telephone networks
|
|
Via Ethernet Interface
|
Cable modem
xDSL Connection
Telco Return
Satellite
|
|
Routing & Protocols
|
Description
|
Routing Traffic Control and Connection Protocols
|
|
Routing Protocols
|
RIP-1
Static Routes
|
|
LAN Protocols
|
IP
|
|
WAN Protocols
|
PPP
PPPoE
SLIP
|
PPP
|
PPP Assignment
|
Dynamic or static address assignment
|
|
PPP Authentication Options
|
PAP
CHAP
Script
Combination of Script & PAP
Combination of Script & CHAP
|
|
PPP Features
|
Configurable timeout and retries on login
Configurable timeout on script login
Automatic redial on link failure option
"keep alive" option
PPP Echo option
Connection time limit option
Configurable timeouts for idle connections
Configurable idle timeout for connection instigator
|
|
Configurable PPP Options
|
Compression
Mapping
Address
MRU
|
|
Configurable Framing
|
Synchronous
Asynchronous
Automatic
|
PPPoE |
PPPoE Assignment
|
Dynamic or static address assignment
|
|
PPPoE Authentication Options
|
PAP/CHAP or No Authentication
Service Name
|
|
PPPoE Features
|
Configurable timeout and retries on login
Configurable timeout on script login
Automatic redial on link failure option
"keep alive" option
PPP Echo option
Connection time limit option
Configurable timeouts for idle connections
Configurable idle timeout for connection instigator
|
|
Configurable PPPoE Options
|
Compression
Mapping
Address
|
SLIP
|
SLIP Assignment
|
Static address assignment
|
|
SLIP Authentication Options
|
Script
|
|
SLIP Features
|
Connection time limit option
Configurable timeout on script login
Automatic redial on link failure option
"keep alive" option
Configurable timeouts for idle connections
Configurable idle timeout for connection instigator
|
|
DHCP Server
|
|
Provides TCP/IP configurations automatically to computers on connected LANs.
Supports all connected local Ethernet networks simultaneously.
|
|
Maximum DHCP Clients
|
1024
|
|
BootP Client Support
|
Yes
|
|
Configurable Lease Time
|
Yes
|
|
Automatic ranges
|
Yes
|
|
Manual Ranges
|
Yes
|
|
Static DHCP Clients support
|
Yes
|
|
Mixed Dynamic And Static Allocation
|
Yes
|
|
DHCP Clients Naming
|
Yes
|
|
Configurations served
|
IP Address |
Subnet Mask |
Router address |
up to 5 DNS addresses |
Default domain name |
WINS Server address |
Boot File Name |
Boot File Server address |
Each address range can have a specific router address assigned.
|
|
|
DHCP serving can be enabled and disabled on specified Ethernet interfaces. |
|
Ping Address Option |
IP addresses can be pinged to confirm non-use before being issued to clients |
|
Domain Name Server
|
|
Domain name Server provides host name resolution to computers on the LAN. |
Domain Name Caching
|
Description
|
Caches remote Domain Name responses for a faster repeat resolution.
|
|
Names are stored for their time-to-live as defined by the originating Domain Name Server.
|
|
Domain Name Caching
|
On/Off
|
|
Domain Name Services
|
Description
|
Provides local domain name services.
|
|
Linked to DHCP server to provide local name resolving of static and dynamic DHCP clients.
|
|
Maximum number of Host name entries
|
Unlimited
|
|
Accepts host names from client TCP/IP configurations that support this feature, such as Windows 95/98/NT and Mac OS 8.5 or later. |
|
Does not currently support zoning or wild card queries.
|
|
Multihosting
|
|
Run multiple web sites on one or more web servers. |
|
Incoming Static NAT
|
Map incoming traffic destined to specified public IP address to private IP address
|
|
Dynamic "on the fly" configuration
|
Yes
|
|
Maximum number of virtual web servers
|
32,000
|
|
Maximum number of physical Web servers
|
32,000
|
|
Network Filters
|
|
Each logical interface, and therefore connected network, can have IP addresses specified to restrict or allow access through the connection.
|
|
Bar or Allow access to specified addresses
|
Up to 20 addresses can be specified
|
|
Bar or Allow traffic from specified addresses
|
Up to 20 addresses can be specified
|
|
Bar or Allow auto connect from specified addresses
|
Up to 20 addresses can be specified
|
|
Connection Teaming |
|
Multiple Internet connections can be used simultaneously to access the Internet, providing faster Internet access to users. Connections can be configured to open and close on demand, or configured to suit specific requirements. |
|
Teaming Options |
Connect on all teamed connections at startup.
Open next connection if load on all currently open connections is above a specified percentage.
|
|
Maximum Teamed Connections that can be used simultaneously |
50 |
|
Teamed connection types |
Any supported connection methods can be used simultaneously. For example: two dial-up modems and a DSL connection. |
|
Teamed Connection Order |
Specified by order of connections in Main Status Window (Connection order can be changed by dragging connections into required order on main status screen )
|
Each Teamed Connection has specified:
|
Teaming enabled for this connection |
Yes/No |
Available bandwidth on connection:
|
Calculate Automatically |
V90 (56 Kbits/sec) |
ISDN (64 Kbits/sec) |
T1 (1.544 Mbits/sec) |
T3 (44.736 Mbits/sec) |
Ethernet (10 Mbits/sec) |
Custom |
|
Threshold of when to open next teamed connection |
Use general teaming preference or
specify percentage of current connection bandwidth in use before opening next teamed connection
|
Router Address |
(Only required for non PPP connections ) |
|
WebCache Server |
|
Transparent caching of Web content, requiring no browser configuration.
High speed concurrent serving to Web browsers and storing content locally.
Includes eight pre-set profiles for caching control.
Remote Web Administration.
Users can view searchable catalog of cached content for direct access.
|
|
Maximum Concurrent Users
|
5 to unlimited (dependent on license)
|
|
Maximum Concurrent Web Sessions
|
Unlimited
(depending on available memory) |
|
Caching Profiles
|
Description
|
Pre-configured profiles provide easy changeover between different caching settings.
|
|
Profiles are pre-configured, but can easily be changed by the administrator to suit requirements.
|
|
Number of different Caching Profiles
|
8
|
Each Profile Specifies:
|
Default expiry time
|
Hours:minutes
(used for Web objects that do not have an expiry time supplied by server)
|
Overrun server expiry time
|
Hours:minutes
|
Honor Browser's cache directives
|
Yes/No
|
Honor Server's cache directives
|
Yes/No
|
Cache pages with Cookies
|
Yes/No
|
Cache cgi-bin pages
|
Yes/No
|
|
WebCache Administration
|
|
|
Offline mode
|
Only serves content already in cache.
Does not need Internet connection open. |
|
Passthrough mode
|
Disables the caching facility. |
|
Catalog Enabled |
On/Off
|
|
Displayed catalog item minimum size threshold
|
0-65535 Kbytes
|
Options:
|
Remote Web administration
|
On/Off
|
Administrator Password |
WebHeader Password |
Catalog Administration Password |
General User Password
|
Common Log Format (CLF)
|
On/Off
|
Disk cache size and location
|
0-100% of hard disk
|
Cache refresh frequency
|
Maximum size of cached objects
|
0-999999 Kbytes
|
Days to keep cached files
|
0-65535
|
Upstream proxy
|
On/Off
|
Upstream proxy address and port
Upstream proxy User name & Password
|
Real time status display
|
Bar Graphs of current throughput or average throughput over last hour.
Peak levels are shown with markers.
Each bar graph shows proportion of cached and non-cached content served.
|
Cache ratio
|
Percentage of requests served from cache against new requests.
|
Local throughput
|
Throughput of content provided to the LAN.
|
Web throughput
|
Throughput of content collected from the Internet.
|
|
Remote Administration
|
Description
|
Administration can be performed remotely via any web browser
with suitable login |
|
Remote administration can be enabled or disabled.
Four levels of password can be set to provide user access to full administration, catalog, server locator and WebHeaders.
|
|
Remote Administration Features
|
View catalog of currently cached content.
Change caching profile used.
Change individual caching profile settings.
|
|
Cached Web site operations
|
Protect
Unprotect
Erase
Mark for refresh
|
|
Individual cached items operations
|
Protect
Unprotect
Erase
Mark for refresh
|
|
Off Line Catalog
|
|
Catalog of currently cached content which can be directly accessed from users Web browsers |
|
Search Catalog |
Display items matching search pattern, including wildcards |
|
Search Parameters |
Limit item display to specified sizes or lock status |
|
Pagination |
Choose how many cached items to display per page |
|
Web sites
|
Lists currently cached web sites
|
|
Web Site Friendly Names |
Cached web sites have an associated "Friendly Name" for display and searching, entered by administrator |
|
Web Site contents
|
Lists individually cached items for a web site, including status
|
|
Item status
|
Current
Stale
Protected
|
|
Contents listed, with status
|
Web Pages
Images
Movies
Sounds
|
|
WebHeader Server |
|
Display definable noticeboard within frame in LAN users Browser window. WebHeaders can be any web page, either created using the easy to use WebHeader Editor or a third party HTML editing package.
Access to all WebHeader features are available via a web browser.
|
Administrator Configuration Options:
|
WebHeader Served on Web Pages
|
On/Off
|
Enable Alert Header |
One off Alert message broadcast to LAN users. |
WebHeader Location |
Header or Footer of Browser window |
Size of WebHeader frame within browser window
|
In pixels
|
WebHeader frame includes scrollbars
|
Yes/No
|
Selectable WebHeader Display Options |
Currently selected WebHeader (selected in scrollable list)
The URL of a WebHeader to show LAN users.
WebHeaders in Carousel
Only Display Alert WebHeader
|
Selected WebHeader |
Scrollable list of all currently available WebHeaders
Shows currently selected WebHeader and WebHeaders that can be used to provide alert functionality.
Selected WebHeader is displayed in frame at top of window.
|
Carousel Contents |
Scrollable list of WebHeaders currently
in the Carousel. The Carousel provides automated rotation of WebHeaders
WebHeaders from the available WebHeaders list can be added to the Carousel for inclusion in the rotation cycle.
|
Alert WebHeader |
User dismissable WebHeader that is shown on a once only basis. Selected from the available WebHeader list. |
|
Maximum number of WebHeaders
|
Only limited by the directory size of the operating system.
|
|
WebHeader Editor
|
Description
|
The WebHeader editor is accessed via a Web Browser. A set of easy-to-use WebHeader templates provide the basis for the administrator to quickly and easy create WebHeaders to broadcast to LAN browser users.
|
|
A template can be chosen as a basis for a new WebHeader with entry fields providing access to the WebHeader contents, and popup menus providing access to graphics. Entered details and selected graphics can be previewed within the Browser before being used or stored for future use.
|
|
Predefined Templates |
Range of easy to use Templates Included |
StyleHelper |
Description |
The StyleHelper provides a easy to use graphical environment to set attributes of webheader elements. |
|
StyleHelper attributes per element |
Font size |
Font color |
Bold font |
Italic font |
Underlined font |
Background color |
Alignment (Left / Center / Right) |
|
|
Once created using a template and the StyleHelper, a WebHeader can be modified at a later date using the same methods, without requiring any entry or direct editing of HTML.
|
WebHeader Exclusion List |
Description |
Administrator can specify sites that WebHeaders are not to be shown on, either by domain or specific page using a browser.
|
|
Web Site Name |
Site name to prevent WebHeaders from being displayed when visited. Can include wildcards. |
|
Subdirectory |
Optional subdirectory of web server to prevent the display of WebHeaders, in conjunction with web site name. |
|
Fallback Server |
|
Automatic initiation of a secondary connection if a primary Internet connection fails.
Can use same connection hardware with different parameters (eg use the same modem as primary connection, but with different telephone number)
Primary connection can be re-attempted after specified interval.
Multiple fallback connections can be used.
|
|
Maximum Fallback Connections |
50 |
|
Fallback Connection Order |
Specified by order of connections in Main Status Window (Connection order can be changed by dragging connections into required order on main status screen )
|
|
Temporarily disable a connection after dial attempts |
Yes/No |
|
Temporarily disable a connection after specified dial attempts |
1-9 attempts |
|
Temporarily disable a connection if packets go unanswered |
Yes/No |
|
Temporarily disable a connection if packets go unanswered for (duration) |
minutes:seconds |
|
Re-enable a failed connection |
Yes/No |
|
Re-enable a failed connection (duration) |
hours:minutes |
|
Internet Filters |
|
Internet filters provide restrictions on Internet access.
There are four types of Internet filters. |
CyberNOT Content Filtering
|
Description
|
Prevents access to inappropriate or questionable websites via a weekly updated list.
|
|
Categories
|
Categories of CyberNOT can be activated or deactivated
Violence/Profanity
Satanic or Cult
Partial Nudity
Drugs/Drug Culture
Full Nudity
Militant/Extremist
Sexual Acts
Sex Education
Gross Depictions
Questionable/illegal & gambling
Intolerance
Alcohol & tobacco
Search Engines
|
|
CyberNOT check host facility
|
Test if access can be made to a specified host
|
|
User Defined Filters
|
Description
|
Specify independent implicit and wildcard domains to allow or disallow access. Override CyberNOT controls to grant access to specified sites
|
|
User defined filter Host list limit
|
32766
|
|
User defined filter wildcard list limit
|
32766
|
|
Protocol Filtering
|
Description
|
Stop access to specific Internet protocols
|
|
Predefined Protocols
|
Stop Web |
FTP |
Email |
News |
Telnet |
IRC by port number
|
|
|
User-defined Protocols
|
Stop access by any port number
|
|
Timed Access Controls
|
Description
|
Restrict access by time of day or total Internet access time per day
|
|
By Day
|
Specific times that Internet access is available can be specified per day of the week, in half-hour divisions
|
|
Duration
|
Set maximum duration of time spent connected to the Internet per day
|
|
Remote Access Server / PPP Server
|
|
Description
|
Direct dial-in support for remote users
|
|
Interfaces supported
|
Modem
ISDN
|
|
Features
|
Dynamic and static address allocation
Reusable Address Pool for dynamic addresses
Can act as SLIP Server
Configurable timeout and retries on login
Configurable timeout on script login
"keep alive" option
PPP Echo option
Connection time limit option
Configurable timeouts for idle connections
Configurable idle timeout for connection instigator
Configurable PPP options (compression, mapping, address)
Configurable Framing (Sync, Async, Automatic)
|
|
Secure Dial-in Authorization/ Authentication
|
Vicomsoft Users - Script/PAP/CHAP
Radius Server - PAP/CHAP
|
|
Dial-in Prompts
|
Full prompts
Minimal Prompts
No Prompts
|
|
Maximum Dial-in ports
|
Limited only by hardware configuration
|
|
Service Locator
|
|
Provides a browser accessible sorted list of TCP/IP services on your LAN maintained automatically by the service locator module.
Each server is shown as a definable type and can be accessed from the browser list, either directly using the browser in the case of a web server or FTP server, or using the correct helper application when accessing servers of other types.
|
|
Services are shown using a related icon, service type, Name, and TCP/IP port number.
|
|
Service List can be sorted by
|
Type, Name, TCP/IP Port Number
|
|
Standard Service Types Listed
|
Web Server |
FTP Server
|
AppleShareIP Server
|
|
|
Standard Service Type Port Numbers
|
21
|
FTP
|
FTP Server
|
80
|
HTTP
|
Web Server
|
548
|
AFP
|
AppleShareIP Server
|
|
|
TCP/IP Service icons included
|
Web Server |
FTP Server |
POP Mail Server |
SMTP Mail Server |
News Server |
Filemaker Pro Server |
Secure Web Server |
AppleShareIP Server |
Unknown Server |
|
|
Administrator can specify required service types to be displayed in the list.
|
|
Remote Administration |
|
Description
|
The Internet Gateway can be optionally monitored and administered remotely using the Remote administrator console.
|
|
Security
|
By default, the Remote administration is switched off
|
|
Users with Password Protection
|
Multiple users and passwords can be specified with access privileges for the administrator to selectively allow just remote monitoring, or full remote administration for specified users.
|
User options:
|
User Name
|
Yes/No
|
Password
|
Yes/No
|
Can monitor Internet Gateway
|
Yes/No
|
Can administer Internet Gateway
|
Yes/No
|
|
Address Restrictions
|
Remote administration or monitoring is also protected with multiple options for defining IP addresses which will be accepted for remote administration.
|
|
Local administration from console
|
When enabled the Internet Gateway can be administered from any LAN computer with the administrator console, provided the user has been given password access and privileges in the User section.
|
|
Administration from specified ranges of IP addresses
|
Ranges can be specified to implicitly state IP addresses that will be accepted for remote administration or monitoring.
|
|
Ranges available
|
5
|
|
Administration & Statistics
|
|
Real-time status display
|
Preset scale, or autoscaling option
Packet count/throughput per connection
Total router throughput, showing local and Internet traffic |
|
Real-time routing table display
|
Shows active routes
|
|
Real-time users display
|
Selectable display, showing:
Client Name
User Name (If logged in using administration console)
IP Address
Port in Use
Services Used Display:
N |
Network Address Translation |
D |
DHCP |
B |
BootP |
C |
WebCache |
I |
Dial In |
A |
Administrator |
W |
Watcher |
Port Time Left
DHCP Client Lease Time Left
Hardware address (MAC address)
|
|
Disconnect User Facility
|
Disconnect users network or Internet connections.
|
|
Traffic logging
|
Selectable daily, weekly reports
Sites visited
Attempted barred site accesses
Total time on-line
Dial-in user access and times
|
|
Basic & Advanced modes
|
Basic mode provides access to widely used features
Advanced mode gives access to full feature set
|
|
Administrator Password with timeout
|
Prevents changes being made to configuration
|
|
Built-in Utilities
|
|
Description
|
Diagnostic utilities to aid configuration and troubleshooting
|
|
ICMP Ping
|
For testing Basic IP connectivity
With name and address resolution
|
|
Connection tracing
|
Traces all dial-up connection communications and negotiations
|
|
Router tracing
|
Traces all router activity
|
|
AppleScript Support
|
N/A
|
|
Configuration
|
|
Auto Configuration
|
Auto-setup wizard simplifies installation
|
|
Performance
|
Throughput
|
Full ethernet speed or better depending upon host machine configuration and interfaces
|
Internet Throughput
|
Individual Connection Method
|
Available Internet Access Bandwidth
(On Pentium PC)
|
|
14.4, 28.8, 33.3, 56k Modem
|
100% of Device Bandwidth
|
|
64k ISDN Line
|
100% of Device Bandwidth
|
|
128k two-channel ISDN
|
100% of Device Bandwidth
|
|
640kbps downstream - 90kbps upstream ADSL
|
100% of Device Bandwidth
|
|
1.5Mbps downstream - 416kbps upstream ADSL
|
100% of Device Bandwidth
|
|
1.6Mbps downstream - 90kbps upstream ADSL
|
100% of Device Bandwidth
|
|
7.1Mbps downstream - 680kbps upstream ADSL
|
100% of Device Bandwidth*
|
|
160kbps downstream - 160kbps upstream SDSL
|
100% of Device Bandwidth
|
|
416kbps downstream - 416kbps upstream SDSL
|
100% of Device Bandwidth
|
|
1.5Mbps downstream -
1.5Mbps upstream SDSL
|
100% of Device Bandwidth
|
|
1.5Mb T1 Line
|
100% of Device Bandwidth
|
|
4Mb Cable Modem
|
100% of Device Bandwidth*
|
|
4Mb xDSL
|
100% of Device Bandwidth* |
*200mhz system or better
|
NAT Supported Protocols and Applications
|
|
Supports peer-to-peer networking in Activision games.
Supports almost all TCP/IP applications regardless of platform, including (but not restricted to):
|
|
Protocol
|
Application
|
|
HTTP (web traffic)
|
Netscape Navigator
Internet Explorer
|
|
SMTP, POP3
|
Eudora Pro
Outlook Express
|
|
DNS
|
Any application making a DNS request
|
|
ICMP
|
Ping
|
|
NNTP (news)
|
Netscape Navigator
Internet Explorer
Other popular newsreaders
|
|
FTP
(File Transfer Protocol)
|
Netscape Navigator
Internet Explorer
Other popular FTP clients
|
|
CU See Me
|
CU See Me
|
|
Timbuktu
|
Timbuktu
|
|
Telnet
|
Any
|
|
Traceroute
|
Any
|
|
Real Audio
|
Any
|
|
Real Video
|
Any
|
|
RTP/RTSP
|
QuickTime 4 / Streaming video
|
|
Gopher
|
Any
|
|
WAIS
|
Any
|
|
Finger
|
Any
|
|
IRC
(Not CTCP) |
Any
|
|
ICQ
|
Any
|
|
Protocols and Applications supported when NAT is not in use
|
|
All TCP/IP packets are routed transparently regardless of the underlying protocol or application in use.
All TCP/IP compliant applications present and future are therefore supported.
|