Networking — Settings Tab

This is where you configure everything network-related on the Abilis: IP addresses, internet connections, the firewall, DHCP, DNS, and more. Most of these settings are configured once during installation and rarely revisited.

Click Networking > Settings. A row of sub-tabs appears: Ports, Routings, NAT, ACL, IP Shaping, DHCP, DNS, FTP, HTTP.

The defaults work for a typical office. If you have a specific task in mind (set up a VPN, open a port, block a website…), jump straight to the Networking How-To page — each task there tells you exactly which sub-tab to use.

Ports

Lists every network connection the Abilis has — both the physical sockets you plug a cable into (Ethernet, PoE) and the software connections built on top of them (PPP/PPPoE dial-ups, LTE modems, virtual links). Each row is one connection that carries IP traffic, and the table records, for each one, its address, whether it faces your local network (INSIDE) or the internet (OUTSIDE), and the physical interface it runs over.

Ports table — all network ports with their type, interface, IP address, direction, and description.
Ports table — all network ports with their type, interface, IP address, direction, and description.

Each port represents a network interface on the Abilis. The table columns:

ColumnExampleWhat It Means
StatusOKGreen = active, red = inactive.
PortIp-1Internal port identifier.
SubtypeLAN / PPPLAN = local network, PPP = point-to-point (modem/WAN).
OverEth-1, EthLte-1, PoeCli-1, CELLKEY-1Which underlying physical interface this logical port uses — an Ethernet socket, an LTE modem, a PoE port, or a USB cellular dongle.
IP Address192.168.001.001/24, DHCP, RETRIEVEHow the port gets its address: a fixed IP you typed in, DHCP (the port asks a DHCP server), or RETRIEVE (the address is negotiated with the WAN provider during a PPP/PPPoE login).
DirectionINSIDE / OUTSIDEINSIDE = your local network. OUTSIDE = the internet/WAN side.
DescriptionLAN, WAN DHCP, WAN ETHMOD, WAN ETHLTEHuman-readable label.
Abilis IP-address format. Throughout the web interface, IPv4 addresses are displayed with each octet zero-padded to three digits — 192.168.001.001 means 192.168.1.1, 127.000.000.001 means 127.0.0.1, and 000.000.000.000 is the wildcard address (any host / unspecified gateway). This is an Abilis display convention only; the values are ordinary IPv4 addresses. When you type a new address into a field, you can enter it either way — the form accepts 192.168.1.1 or 192.168.001.001.
Do not copy-paste these zero-padded addresses into other tools. Many third-party systems — Linux/BSD networking utilities (ping, ssh, curl, route), some firewalls, scripting languages, and parts of the Windows stack — interpret an octet with a leading zero as octal. For example 192.168.010.001 would be read as 192.168.8.1 (since 010 octal = 8 decimal), silently routing to the wrong host. Always strip the leading zeros before pasting an address into another system, a config file, or a browser URL bar.

Filters (dropdown and search search) are available on most columns. Click New + to add a port.


Routings

Tells the Abilis where to send traffic for each destination — like a signpost that says "to reach this network, go out through that connection." Most entries are created automatically from your ports; you only add entries by hand when you have more than one internet link, or want a backup path that takes over if the main one fails.

Routings table — showing CONNECTED routes with destinations, gateways, output ports, and status indicators.
Routings table — showing CONNECTED routes with destinations, gateways, output ports, and status indicators.

A dropdown at the top lets you filter: Show all routes, or filter by type.

Columns:

ColumnExampleMeaning
TypeCONNECTEDCONNECTED = auto-defined by the port. STATIC = manually defined.
Destination127.000.000.001/32, 192.168.001.000/24, anyWhere the traffic is going.
SourceanyWhere the traffic comes from. Almost all rules use any — the rule applies regardless of source. A specific source lets you route different LANs to different exits, only needed for multi-WAN setups.
GatewayOUT-IP, 192.168.1.254The IP of the next router that should receive the packet — usually your upstream provider's gateway. The pseudo-value OUT-IP means "whichever IP the outbound port currently has" — used for routes whose gateway is dynamic (PPPoE/DHCP-assigned).
Output portLOOP, R-ID, Ip-1, Ip-5, Ip-3Which port to send traffic through. OK = port is up, KO = port is down.
AD (Priority)5, 10, 100, 180Administrative distance — see callout below.
Description(blank)Optional label.
About AD (Administrative Distance). AD works backwards from intuition: a lower number means higher priority. So a route with AD 5 always wins over a route with AD 100. (This matches industry routing convention.) Typical defaults: directly-connected routes use AD 5, manually-added static routes use AD 10, OSPF uses AD 100, RIP uses AD 110–120, and backup routes are usually AD 180+ so they only kick in when the primary fails.

NAT

Rewrites IP addresses (and optionally ports) on packets as they cross between the inside and outside of your network. The most common use is letting many internal devices share one public IP — but the same machinery can also redirect a specific port to an internal server (port forwarding) or send DNS queries through Abilis.

Pre-NAT = the address as Abilis SEES the packet arriving. Post-NAT = the address Abilis WRITES onto the packet before sending it on. A NAT rule rewrites a Pre-NAT address into the matching Post-NAT one.
NAT table — showing two default rules for DNS redirection and source NAT.
NAT table — showing two default rules for DNS redirection and source NAT.

The columns:

ColumnExampleWhat It Means
PR0, 1, 2 …Priority. The order in which rules are evaluated — PR 0 is checked first, PR 1 next, etc. Lower number = higher priority.
InboundIp-1The port the packet arrived on (which interface it came in through).
OutboundIp-1The port the packet will leave on after translation.
TypeSource / DestinationSource NAT rewrites who sent the packet (typical for "share one internet IP"). Destination NAT rewrites who it's going to (typical for port forwarding to an internal server).
Pre-NAT Source Addr. / /Port192.168.1.0/24 / #Match traffic from these source IPs (and ports). # = any.
Pre-NAT Destin. Addr. / /Port8.8.8.8 / 53Match traffic to these destination IPs (and ports). # = any.
Post-NAT Address / /PortOUT-IP / #Rewrite to this address (and port). # = leave the port unchanged. OUT-IP = use whatever IP the outbound port currently has (auto-selected per packet).
The port/protocol notation. 53/UDP means port 53 carried over UDP — that's how DNS lookups travel. Web traffic uses 80/TCP (HTTP) and 443/TCP (HTTPS).

In the screenshot, two default rules exist:

Rule order matters. NAT rules are evaluated in order of PR (PR 0 first). The first matching rule wins; rules below it never run for that packet. Keep specific rules at lower PR than general ones — otherwise the general rule swallows the traffic before the specific one is reached.
Two-pass evaluation. Internally Abilis scans the table twice for each packet: first all Destination rules, then all Source rules. This means a Destination rule and a Source rule with the same PR don't conflict with each other — they run in different passes.

ACL (Firewall)

Checks every piece of traffic passing through the Abilis and decides whether to allow it or block it, working down a numbered list of rules from top to bottom and acting on the first one that matches. The most common use is blocking known-bad addresses with the built-in blocklist — but you can also write your own rules to allow or block traffic by who sent it, where it is going, or which service it uses.

ACL table — two default Deny rules using the 'Firewall' list.
ACL table — two default Deny rules using the 'Firewall' list.

The columns:

ColumnExampleWhat It Means
PR0, 1, 2 …Priority. The order in which rules are evaluated — PR 0 is checked first. Lower number = higher priority.
TypeAllow / DenyAllow permits matching traffic. Deny drops it. (Internally these are PERMIT / DENY.)
IPCOSDFT, HIGH, NORMAL, LOWIP Class of Service — an optional Quality-of-Service tag that Abilis stamps on matching packets. Downstream routers (and the Abilis's own VLAN/802.1q layer) use it to prioritise traffic. Use HIGH for voice, DFT (default) for everything else.
Source Addresses Rangeany, 192.168.1.0/24, 'Firewall'Match traffic from these addresses. Single IP, range (10.0.0.1:10.0.0.50), a named list in quotes ('Firewall'), or * / any.
Destination Addresses RangeanySame format, but for the destination side.
ProtocolTCP, UDP, *Which IP protocol the rule matches. * = any.
Port SelectionPO, SPO, DPOHow to interpret the Port column. PO matches if either source or destination port matches; SPO matches the source port only; DPO matches the destination port only. (Only meaningful for TCP/UDP rules.)
Port23, 23:161, 'webports', *Port to match: a single number, a mnemonic (telnet, snmp), an interval (23:161), a named list in quotes, or * for any.
Source Port(usually blank)Optional source-port match used in conjunction with SPO/DPO.
Description(blank)Optional label.

The two default rules in the screenshot:

Together these block any traffic to or from an IP address in the 'Firewall' list (a built-in blacklist managed in Tools → Lists). Click New + to add your own rules above or below.

Test new ACL rules immediately after creating them. A wrong Deny rule can block your own access to the Abilis. If that happens, connect a computer directly to a LAN port (bypassing any switch), set its address to the same subnet, and revert the rule from there. As a last resort, see Administration How-To → Lockout recovery.

IP Shaping (Settings)

Keeps an eye on the few devices using the most bandwidth and slows them down so one heavy user can't make the internet feel slow for everyone else. The typical case is a single computer running a large, steady download — the settings let you target that kind of sustained transfer while leaving normal web browsing alone.

The defaults work for typical home/office bandwidth. Only adjust these if you have a specific quality-of-service problem — e.g. one user choking the line with a steady, high-volume download.
IP Shaping Configuration — all settings for traffic throttling.
IP Shaping Configuration — all settings for traffic throttling.

The IP Shaping Configuration (IPSH) panel with Apply Changes button:

SettingDefaultWhat It Controls
EnabledMaster switch for IP Shaping.
Manage the top __ traffic-generating hosts5How many of the heaviest users are tracked for potential throttling.
Upload speed over __ Mb/s0Only throttle hosts uploading above this threshold (0 = any).
Download speed over __ Mb/s0Only throttle hosts downloading above this threshold (0 = any).
Traffic is throttled down if its average variance is under __ %50Only throttle if the traffic pattern is steady (low variance = consistent download, not bursty web browsing).
The average variance is calculated over the last __ seconds30Time window for measuring traffic variance.
The traffic throttling rate is adjusted up or down every __ seconds15How often the throttle is recalculated.

DHCP

Gives devices on your network their IP address automatically, so nobody has to set one by hand. The Abilis can either hand out the addresses itself (DHCP Server mode) or pass the requests along to another device that does (Relay mode); it can also reserve a fixed address for specific devices such as printers or cameras.

How DHCP is configured here. Three layers:
  1. The DHCP protocol table picks which port runs DHCP and in what mode.
  2. Clicking an entry opens three sub-tabs — Settings (the address pool and what to hand out to clients), Manually assigned (fixed reservations by MAC address), Automatically assigned (currently-leased addresses).
  3. The separate Manual DHCP protocol table on the main page is for reservations that exist outside any specific DHCP service.
DHCP main page — protocol table showing one enabled DHCP Server on Ip-1.
DHCP main page — protocol table showing one enabled DHCP Server on Ip-1.

The main page shows two tables:

Click on a DHCP entry (e.g. Ip-1 | Lan_for_Ip-1) to open the detail panel with three sub-tabs:

Settings

DHCP Settings — Server mode, Pool, gateway, and DNS configuration.
DHCP Settings — Server mode, Pool, gateway, and DNS configuration.
FieldDefaultWhat It Controls
DHCP ModeServerDropdown: Server (Abilis hands out IPs directly) or Relay (forwards requests to another server).
PoolAUTOThe range of IP addresses available for automatic assignment.
Advanced DHCP optionsTick to reveal additional settings.

The Profile section below defines what settings DHCP clients receive:

FieldDefaultWhat Clients Get
Primary GatewayIp-1The router IP that DHCP clients should use to reach the internet. Use the Abilis's own port (e.g. Ip-1) if Abilis is also the gateway, or your upstream router's IP otherwise.
Primary DNSIp-1DNS server for resolving website names.
Secondary DNS#Backup DNS server (# = none).
Advanced profile optionsTick for more settings (lease time, domain name, etc.).

Manually assigned addresses

Manually assigned addresses — static MAC-to-IP reservations.
Manually assigned addresses — static MAC-to-IP reservations.

Reservations that tie a specific IP to a specific MAC address — click New + to add one. Use this for printers, cameras, servers, anything that needs a fixed address that never changes.

Automatically assigned addresses

Automatically assigned addresses — devices that received an IP from the pool.
Automatically assigned addresses — devices that received an IP from the pool.

Devices that received an IP from the pool. This is a live view, not a configuration table — entries appear and disappear as devices join, renew, and leave. Columns:

ColumnExampleMeaning
MAC Address9C-2D-CD-D6-29-64Unique hardware identifier of the device.
IP Address192.168.001.100The IP address assigned to it.
Last Request19/01/2012 17:32:45When the device last requested/renewed its address.
Expiry On20/01/2012 03:...When the assignment expires (the device must renew before this time).

Buttons on each row: delete delete the assignment, + convert it to a manual (permanent) reservation.

Click Save after any changes, or Close to return to the DHCP main page.

HTTP Settings

Controls the built-in web server — the same one serving the screens you are using right now to manage the Abilis. Here you set which port it listens on, whether connections must be encrypted (HTTPS), and how long you can stay logged in before being signed out for inactivity.

HTTP Settings — basic configuration including listening port, HTTPS options, and session timeouts.
HTTP Settings — basic configuration including listening port, HTTPS options, and session timeouts.
HTTP Settings — Advanced tab showing detailed server parameters and security options.
HTTP Settings — Advanced tab showing detailed server parameters and security options.
Anteklab Technical Support Email: tem@antek.it
Tel: +39 0376 16262,27