6400G千兆安全接入网关

千兆安全接入网关ESR-6400G具负载平衡，LAN口千兆接入，带宽管理，与网络安全功能1目录物品清单····················································3第一章用户手册简介···················································41.1用途·····························································41.2约定·····························································41.3用户手册概述······················································4第二章产品概述······················································52.1产品简介························································52.2产品特性和规格说明···············································52.2.1产品特性························································52.2.2规格···························································5第三章硬件安装··············································63.1面板布置·························································63.1.1前面板··························································63.1.2后面板··························································63.2连接到你的网络上·················································6第四章配置指南···············································84.1概述···························································84.2WEB管理的连接···················································84.2.1准备工作························································84.2.2连接···························································124.3WEB管理界面及操作方法············································134.3.1系统信息························································154.3.2网口配置······················································154.3.3网络配置······················································204.3.4防火墙······················································264.3.5VPN配置························································344.3.6服务管理························································394.3.7流量管理·······················································414.3.8系统日志······················································424.3.9修改账号·····················································434.3.10重新启动·······················································43附录·············································································442物品清单小心打开包装盒，检查包装盒里应有以下配件：一台ESR系列路由器一条电源线一张产品说明光盘一张保修卡注意如果打开包装时发现产品有所损坏或者任何配件短缺的情况，请及时和当地经销商联系。3第一章用户手册简介(Introduction)感谢您购买本公司的千兆安全接入网关ESR-6400G。千兆安全接入网关具备有4个千兆LAN连接端口，4个百兆WAN连接端口，允许局域网以千兆速度进行转发，允许多台计算机共享4条宽带连接和4个不同的ISP帐号同时连接因特网，几倍于普通路由器的带宽。可混合使用不同的因特网连接方式，如CableModem，ADSL，ADSLPPPoE，LANPPPoE或LANtoLAN的高带宽网络连接，通过线路负载平衡设置将4条宽带连接达到最高效率的使用。千兆安全接入网关是为用户提供高度网络安全和网络资源共享的极好产品。由于它包含强大的防火墙引擎，所以能够防DDOS/DOS攻击，同时因为包含了数据包过滤，可以关闭特殊端口，可以防止用户的私人网络免受因特网黑客袭击。通过基于WEB页面的配置方式，此千兆安全接入网关易于安装和维护。所有的功能均可通过网络浏览器，如NetscapeCommunicator和InternetExplorer来配置业务。本产品除了具有高效能的传输速率之外，更结合简易的设置接口，让用户在使用上本产品只需要极短的时间，便能完成基本的设置步骤，让用户使用起来更轻松更方便。1.1用途本手册的用途是帮助您熟悉和正确使用千兆安全接入网关。1.2约定在本手册中所提到的路由器，指千兆安全接入网关。1.3用户手册概述第一章：用户手册简介。第二章：产品概述。简述路由器的主要特性和规格。第三章：硬件安装。帮助您进行路由器的硬件安装。第四章：配置指南。帮助您配置路由器的基本网络参数和高级特性。4第二章产品概述感谢您购买千兆安全接入网关。本手册将会帮助您正确的安装、使用本产品。2.1产品简介千兆安全接入网关专为企业和网吧用户设计，采用IntelIXP网络专用处理器，基于IntelXSCale技术，主频最高达533MHz，多CPU分布式处理，性能优越，并内置高冗余电源模块，充分保证整机的稳定可靠。金浪千兆安全接入网关除支持宽带路由器常见的功能外，还支持带宽控制、系统安全日志等高级功能，内建先进防火墙功能，数据包控制策略功能，可防止DoS攻击、扫描、嗅探式攻击，有效防止Nimda、冲击波、木马等病毒攻击，能灵活指定IP、用户或应用分配带宽和设定优先级，保证特殊用户、特殊应用（如VoIP等）的服务质量，全中文配置界面，配置简单，全面满足企业、机关、大型网吧、大型宽带社区、校园网等对网络的高性能、多功能、高可靠性、高安全性的需求。2.2产品特性和规格说明2.2.1产品特性¾采用IntelIXP网络专用处理器,多CPU分布式处理,主频533MHz¾符合IEEE802.3,IEEE802.3u,IEEE802.3ab标准¾支持TCP/IP,DHCP,ICMP,NAT,PPPoE,SNTP,HTTP,DNS,TFTP等协议¾提供4个10/100M自适应WAN口¾提供4个10/100/1000M自适应RJ45端口¾支持NAT模式,路由模式,透明桥模式¾可根据线路情况自动选择最优线路¾不同ISP数据流选择对应WAN口线路传输¾支持基于IP和基于端口的QoS设置,可限制单机带宽¾端口镜像功能(LAN1为镜像口,LAN4为被镜像口)¾支持VPNPass-through¾内建防火墙,支持IP地址过滤,域名过滤,MAC地址过滤¾支持虚拟服务器,特殊应用程序,DMZ主机和静态路由等功能¾支持连接数设置,可限制单机连接数¾提供线路状态显示和联机检测功能¾提供攻击防护,有效防范网络攻击和病毒攻击¾支持IP与MAC地址绑定,有效防范ARP攻击¾提供配置文件备份与载入¾提供Https安全管理¾提供系统日志功能,支持外挂Syslog服务器记录信息¾支持Web和远程管理,全中文配置界面,支持在线升级¾内置电源,1U钢壳,19英寸标准机架结构设计2.2.2规格产品型号千兆安全接入网关支持的标准和协议IEEE802.3、IEEE802.3u、IEEE802.3x、TCP/IP、FTP、PPPoE、PPTP、HTTP、TFTP、DHCP、NAT、IPSecWAN4个10/100M自适应RJ45端口LAN4个100/1000M自适应RJ45端口端口其他LAN1:镜像口;LAN4:被镜像口网络介质10Base-T:3类或3类上UTP100Base-T：5类UTP1000Base－T；CAT-5E5UTP或6类UTP过滤和转发速率10Mbps:14880pps；100Mbps:148800pps；1000Mbps：1488100WANLink/Act(连接/工作)、100MLANLink/Act(连接/工作)、1000MLED指示其它M1（系统灯），Power（电源）外形尺寸（L×W×H）单位（mm）440×290×44使用环境工作温度：0ºC到40ºC；工作湿度：10%到90%不凝结存储温度：-40ºC到70ºC；存储湿度：5%到90%不凝结输入电源功耗输入：220VAC，50Hz功耗：最大15W第三章硬件安装3.1面板布置3.1.1前面板LED灯号说明LED描述意义Power电源状态指示灯绿灯常亮：电源开启连接Status系统状态指示灯绿灯常亮：路由器非正常工作绿灯闪烁：路由器工作正常Link/Act端口连接/传输指示灯绿灯常亮：以太网络联机正常绿灯闪烁：以太网络端口正在传送/接收封包数据传输1000M端口1000M传输速率指示灯绿灯常亮：以太网络端口传输速率为1000M3.1.2后面板交换机后面板有—个电源接口。电源工作范围：180-260V～50Hz-60Hz。¾电源插座这是—个二相三线电源插座，把电源线阴性插头接到这个插座上，阳性插头接到交流电源上。提示：如果您忘记了路由器的密码或IP地址，您可通过此按钮恢复出厂设置。路由器通电状态下，按住此按钮10秒以上，直到Status灯常亮后，松开按钮，即可恢复出厂设置。3.2连接到你的网络上首先，请您参考以下步骤完成千兆安全接入网关的网络连接。1)建立局域网连接用一根网线连接路由器的LAN口和局域网中的集线器或交换机。您也可以用一根网线将路由器LAN口与您的计算机网卡直接相连。2)建立广域网连接用两根网线连接路由器和xDSLModem／CableModem或以太网。6设备连接图：3)连接电源将电源连接好，路由器将自行启动。7第四章配置指南4.1概述本路由器采用WEB方式进行管理。用户可以使用WEB浏览器登录路由器，友好、直观的管理界面将让您觉得配置路由器是一件轻松的事。4.2WEB管理的连接4.2.1准备工作首先，必须确保管理电脑安装了网页浏览器软件(比如MicrosoftInternetExplorer，简称IE)，而且浏览器必须支持JavaScript脚