Home

User`s Manual

1. Press Upgrade Button To Upgrade Router Then click Upgrade if necessary please input password admin Then reset to default and refer to 21 How to connect Router However if those methods can not make the router normal please send the unit to the seller to check thanks 5 Why can I not connect Internet even though the cables are plugged in Wan port and Lan port and the leds are blink In addition Status led is also normal and I can configure web management 94 A Make sure that the network cable from DSL or Cable modem is plugged in Wan port of Router and that the network cable from Lan port of router is plugged in Ethernet adapter Then please check which wan type you use If you are not sure please call the 1sp Then please go to this page to input the information isp is assigned x Choose WAH Type Type Usage je Static IP Address ISP assigns you a static IP address Dynamic IP Address Obtain an IP address fram ISP automatically Dynamic IP Address with Road Runner Session Management e g Telstra BigPond over Ethernet came ISPs require the use of PPPoE to their services ie some ISPs require the use af PPTP to connectto their services ip 1 came ISPs require the use of L2TP ta cannectto their services Savel Cancel 6 When I use Static IP Address to roam Internet I can access or pi
2. I seen masa e 1 192 168 122 33 Both 182 158 122 13 182 158 122 22B 182 158 122 228 HL 192 168 122 218 ES 192 168 122 218 192 168 122 218 1 _ 7 ef 67 AOC JC Exanple2 Packet Filter Apply Rule 1 ftp time everyday 14 10 to 16 20 61 Outbound Packet Filter HELP t Outbound Filter Enable 9 Allow all to pass except thase match the following rules Deny all to pass except those match the following rules ceneaul rue il Source IP Ports Destination Ports Schedule Rulez p s L 5L 1 p 62 4 8 Toolbox BASIC SETTING J FORWARDING RULES SECURITY SETTING ADVANCED SETTING 3 TOOLBOX Toolbox View Log Firmware Upgrade View Log gt Backup Setting View the system logs Reset to Default Firmware Upgrade Promptthe administrator far a file and upgrade itto this device gt Reboot Backup Setting re eee Save the settings ofthis device to a file Reset to Default Reset the settings ofthis device ta the default values Reboot Reboot this device Miscellaneous MAC Address for Wake an LAM Let you to power up another network device remotely Domain or IF address far Ping Test Allow you to configure an IP and Hing the device You can ping a secific IP to test whether itis alive
3. Cancel 68 6 The TCP IP protocol shall be listed in the Network window Click OK to complete the install procedure and restart your PC to enable the TCP IP protocol A 2 Set TCP IP Protocol for Working with NAT Router 1 Click Start button and choose Settings then click Control Panel 2 Double click Network icon Select the TCP IP line that has been associated to your network card in the Configuration tab of the Network window Network x Configuration Identification Access Control The following network components are installed zii PCI Fast Ethernet DEC 21140 Based Adapter amp MetBELII gt Dial Up Adapter NetBEUI gt PCI Fast Ethernet DEC 21140 Based Adapter gt Dial Up Adapter gt PCI Fast Ethernet DEC 21140 Based Adapter ee File and printer sharing Microsoft Add Hemove Properties Primary Network Logon Chent Far Microsoft Networks File and Print Sharing Description TCP IP is the protocol pou use to connect to the Internet and wide area networks cancel 3 Click Properties button to set the TCP IP protocol for this NAT Router 4 Now you have two setting methods 69 a Select Obtain an IP address automatically in the IP Address tab TCP IP Properties AA gal 70 c Choose Disable DNS in the DNS Configuration tab TCP IP Properties Bindin
4. RADIUS Server IP address or the 802 1X server s domain name RADIUS Shared Key Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server Multi Functional Wireless Broadband NAT Router R1 97f2a 4 ADMINISTRATOR S MAIN MENU Status Wizard BASIC SETTING 3 FORMARDING RULES J SECURITY SETTING J ADVANCED SETTING TOOLBOX Wireless Settin gt Primary Setup 19 l 9 Enable Disable WATERS Wireless ROC NAR default Wireless 9 Mixed 11 q only SSID broadcast 9 Enable Disable t Security 802 1xand RADIUS mg Encryption Key Length n4bits amp 128 bits RADIUS Server IP 192 158 123 33 RADIUS part 1812 aS LYVDS SENN dun 24 WPA PSK 1 Select Encryption and Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of pre share key is from 8 to 63 2 Fill in the key Ex 12345678 Multi Functional Wireless Broadband NAT Router R1 9 f2a ADMINISTRATOR S MAIN MENU Wizard BASIC SETTING FORWARDING RULES SECURITY SETTING 3 ADVANCED SETTING TOOLBOX Wireless Settin Primary Setup d Le EET Wireless i Enable Disable E default Change Fassword Network ID SSID W
5. Drop i Log led Drap i Log Drop lel Log Drap lel Log Drop lel Log Drop lel Log Drop lel Log Drop lel Log Drap lel Log led Drap led Log Domain Suffix www sina carr www google com fall others Wes 4 Wes 4 d ef e 4 HIC Em e d cma Bee In this example 1 URL include www msn com will be blocked and the action will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www google com will be blocked but the action will not be record in log file 4 IP address X X X 1 X X X 20 can access network without restriction 43 4 6 3 URL Blocking ADMINISTRATOR s MAIN MENU Status Wizard i co P Logout J BASIC SETTING J FORWARDING RULES _ SECURITY SETTING J ADVANCED SETTING TOOLBOX URL Blocking Packet Filters Domain Filters t URL Blocking lel Enable URL Blocking MAC Control Miscellanenus ce EL ms Hg lue 9 1 ee ee URL Blocking will block LAN computers to connect to pre defined Websites The major difference between Domain filter and URL Blocking is Domain filter require user to input suffix like com or org etc while URL Blocking require user to input a keyword only
6. You can upgrade firmware by clicking Firmware Upgrade button 4 8 3 Backup Setting File Download You are downloading the config bin from 192 168 123 254 Would you like to open the fle or save it to your computer v Alwavs ask before opening this type of file You can backup your settings by clicking the Backup Setting button and save it as a bin file Once you want to restore these settings please click Firmware Upgrade button and use the bin file you saved 4 8 4 Reset to default Microsoft Internet Explorer 2 Reset all setting to default 65 You can also reset this product to factory default by clicking the Reset to default button 4 8 5 Reboot Microsoft Internet Explorer You can also reboot this product by clicking the Reboot button 4 8 6 Miscellaneous Items Miscellaneous Items HELP Address forWake on LAN ila Domain address for Ping Test MAC Address for Wake on LAN Wake on LAN 15 a technology that enables you to power up a networked device remotely In order to enjoy this feature the target device must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 22 33 44 55 Clicking Wake up button will make the router to send the wake up frame to the target device immediately Domain Name or IP Address for Test Allow you to configure an IP and ping the
7. pem 00 Odyssey Client Manazer E Beth Commands Web Hel Media State discon poy Connection STIRS EL C Documents and Settings fae gt ping 192 168 686 247 t Adapter TNET1130 WLAN Adapter Profiles Adapter tune irel Pinging 192 168 0 247 vith 32 bytes of data 2 xeu Segun e Networks Connect to network Control C iuo scan List Em C Documents and Settings fae ping 192 168 868 248 t TERR UNES Connection information Trusted Servers Status open Pingi 192 168 0 248 with 32 bytes of data i et Flansed time 00 04 13 Reply from 192 168 8 248 bytes 32 time ins sete Network 55107 123kk Reply from 192 168 686 248 hytes 32 time ims Access point 00 50 18 00 0F F98 Reply from 172 168 8 248 bytes 32 time ims poop 166 246 Heplu from 172 168 Reply From 172 168 Reply From 192 168 Reply From 192 168 Reply from 192 168 Reply from 192 168 248 bytes 32 time ims 248 bytes 32 time ims 248 bytes 32 time ims Reconnect 248 bytes 32 time ims 248 bytes 32 time 4ms 248 bytes 32 time ims 248 bytes 32 time ims 248 bytes 32 time ims Heplu from 172 168 Reply from 192 168 Sea cmo mo mo Cc ma mo Ca ma mi Method2 1 First patch windows XP and have to install Service package 1 Patch http www microsoft com downloads details aspx displaylang en amp FamilyID 5039ef4a 6 1 e0 4c44 94f0 c25c9de0ace9
8. 2 Then reboot 3 Setting on the router and client Router Network ID SSID 123kk Channel security VWPA PSK Key Mode ASCII Preshare Key 12345678 Client Go to Network Connection and select wireless adapter 82 Choose View available Wireless Networks like below Advanced2 choose 123kk 1 Wireless Network Connection Properties HE 123kk properties General Wireless Networks Advanced Association Authentication Use Windows to canfiqure my wireless network settings Network 551 Available networks Wireless network key To connect to an available network click Configure i aa Ne amit Preferred networks Network kep Automatically connect to available networks in the order listed i 123kk Move up Move down indes advanced The key is provided for me automatically Learn about setting up wireless network computer to computer ad hoc network wireless configuration Advanced access points are nat used 83 WPA For this function we need the server to authenticate This function is like 802 1x PC 1 USER A E Wan 1 192 168 122 216 Sie ed LAN USER B Lan ip 192 168 123 254 Authentication Server Windows 2000 Radius server 192 168 122 1 The above is our environment Method 1 1 The UserA or UserB have to get certificate from Radius first http 192 168
9. 255 0 Default Gateway a 2 a 192 168 123 254 Whatever I setup the pc can not get ip Please check Status Led and refer to the Q2 2 Why can I not connect the router even if the cable is plugged in Lan port and 92 the led is light A First please check Status Led If the device is normal the led will blink per second If not please check How blinking Status led shows There are many abnormal symptoms as below Status Led is bright or dark in work The system hanged up Suggest powering off and on the router But this symptom often occurs please reset to default or upgrade latest fw to try again Status led flashes irregularly Maybe the root cause is Flash rom and please press reset Button to reset to default or try to use Recovery mode Refer to Q3 and Q4 Status flashes very fast while powering on Maybe the router is the recovery mode and please refer to Q4 3 How to reset to factory default A There are 2 methods to reset to default 1 Restore with RESET button First turn off the router and press the RESET button in And then power on the router and push the RESET button down until the M1 and or M2 LED or Status LED start flashing then remove the finger If LED flashes about 8 times the RESTORE process is completed However if LED flashes 2 times repeat 2 Restore directly when the router power on First push the RESET button about 5 seconds Status will start flashing about 5 times
10. Authentication success 4 2DUT authenticate PC2 using PEAP TLS 1 PC2 choose the SSID of DUT as the Access Point 2 Set authentication type of wireless client and RADIUS server both to PEAP TLS 3 Disable the wireless connection and enable again 4 The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PC2 5 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure 6 Terminate the test steps when PC2 get dynamic IP and PING remote host successfully Support Type The router supports the types of 802 1x Authentication PEAP CHAPv2 and PEAP TLS Note 1 1 is on Windows XP platform without Service Pack 1 2 PC2 1s on Windows XP platform with Service Pack 1a 3 PEAP is supported on Windows XP with Service Pack 1 only 4 Windows XP with Service Pack 1 allows 802 1x authentication only when data encryption function is enable 78 Appendix WPA PSK and WPA PC 1 USER A x A Wan ip 192 168 122 216 x1 MBPS em ved LAN USER B Lan ip 192 168 123 254 Authentication Server Windows 2000 Radius server 192 168 122 1 Wireless Router LAN IP 192 168 123 254 WAN IP 192 168 122 216 Radius Server 192 168 122 1 UserA XP Wireless Card Ti 11g Tool Odyssey Client Manager Refer to www funk com Download http www funk com News amp Events ody
11. In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Checked if you want to enable URL Blocking URL If any part of the Website s URL matches the pre defined word the connection will be blocked For example you can use pre defined word sex to block all websites if their URLs contain pre defined word sex Enable Checked to enable each rule 44 BASIC SETTING gt Packet Filters gt Domain Filters URL Blocking Control Miscellaneous In this example HELP Enable un a 1 URL include msn will be blocked and the action will be record in log file 2 URL include sina will be blocked but the action will be record log file 3 URL include 1 will not be blocked but the action will be record in log file 4 URL include espn will be blocked but the action will be record in log file 45 4 6 4 MAC Address Control oe ee eee ST o D d B 1 Se 3 SECTS 4 OM TST 39 CCR Ceca Gb GE o GB ADMINISTRATOR s MAIN MENU Status Wizard Logout 1 BASIC SETTING FORWARDING RULES SECURITY SETTING 3 ADVANCED SETTING TOOLBOX MAC Address Cont
12. Renew or Release button on the Sidenote column You can click this button to renew or release IP manually B Statistics of WAN enables you to monitor inbound and outbound packets 13 4 4 Basic Setting Please Select Advanced Setup to Setup Multi Functional Wireless Broadband NAT Router R1 97f2a D BASIC SETTIHG 21 FORWARDINGRULES O SECURITY SETTIHG ADVAHCED SETTIHG TOOLBOX 210 202 197 192 mam MAC Address 00 50 18 0 Wireless Status ENT RENE MN SSID default I MAC Address 00 50 18 14 4 4 1 Primary Setup WAN Type Virtual Computers Multi Functional Wireless Broadband NAT Router R1 97f2a Primary Setup DHCP Server 0 50 18 AF BE CD MAC Sa Lini Press Change 15 Primary Setup DHCP Server ISP assigns you a static IP address gt Wireless Dynamic IP Address Obtain an IP address fram ISP automatically Change Password Dynamic IP Address with Road Runner Session Management e g Telstra BigPond ips over Ethernet Some ISPs require the use of PPPoE to connect to their services je sume 5 require the use of PPTP to connectto their semices ig IF Some ISPs he use af L2TP ta connectto their services require t This option is primary to enable this product to work properly The setting items and the web appearance depend on the
13. Source IP Ports Destination IP Ports MAC Control Miscellaneous Schedule Rulez Comme Ew T ar xor LL L JL JE TU 3 EN mn m n B C H o feal ei LL fel BJ nM MM 192 168 123 100 192 168 123 149 They are allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 192 168 123 10 192 168 123 20 They can do everything block nothing Others are all blocked 40 Example 2 BASIC SETTING J FORWARDING RULES _ SECURITY SETTING ADVANCED SETTING TOOLBOX SENS Inbound Packet Filter Packet Filters HELP URL Blocking Inbound Filter Enable MAC Control Allow all to pass except thase match the rules il Deny all to pass except those match the following rules Miscellaneous Source IP Ports Schedule Rule 192 169 123 119 l p 192 168 123 100 192 168 123 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the save button 41 4 6 2 Domain Filter ADMINISTRATOR s MAIN MENU Status Wizard Logout J BASIC SETTIHG G FORWARDING RULES 1 SECURITY SETTING AD
14. WAN the port where you will connect your cable or DSL modem or Ethernet router Port 1 4 the ports where you will connect networked computers and other devices 2 1 2 Rear Panel Figure 2 2 Rear Panel LED O Power Power Green Power is being applied to this product indication System Status is flashed once per second to indicate system is Status Green Blinking status alive creen Blinking The WAN port is sending or receiving data Wireless WLAN jl Blinking sending or receiving data via wireless activity Link An active station is connected to the corresponding ink status Green 1 4 LAN port The corresponding LAN port is sending or receiving Blinking opeed data Data is transmitting in 100Mbps on the corresponding LAN port To reset system settings to factory defaults a D D 5 G 5 The WAN port is linked Li 10 100 Data Rate Green me _ 2 2 Procedure for Hardware Installation 2 Decide where to place your Wireless Broadband Router You can place your Wireless Broadband Router on a desk or other flat surface or you can mount it a wall For optimal performance place your Wireless Broadband Router the center of your office or your home in a location that is away from any potential source of interference such as a metal wall or microwave oven This location must be close to power and network connection Setup LAN connection a Wired LAN connection connects
15. remove the finger The RESTORE process 15 completed 4 How to do recovery mode when the router is abnormal A Allocate a Static IP Address on your computer as below Step1 First press the reset button and power on the router until Status blinks very ffast Step2 Find the Inter Protocol TCP IP Properties from My Network Places and check Properties of Local Area Network Connection And click the General icon and assign one IP address which can be from 192 168 123 1 to 192 168 123 253 Here we use the 192 168 123 88 as the IP address The Subnet mask must be 255 255 255 0 and the Default gateway must be 192 168 123 254 Then click OK button to complete TCP IP setup 93 eer Obtain an address automatically Use the following IP address IP address 192 168 123 88 Subnet mask Detault gateway 132 158 123 254 Step2 Open the command mode and input then check if the router replies to ping 192 168 123 254 Type the name of a program Folder document or Internet resource and Windows will open it Far you 192 168 123 254 inging 192 168 123 254 with 32 bytes of data eply from 192 168 123 254 bytes 32 time lt ims TTL 64 eply from 192 168 123 254 bytes 32 timet lt ims TTL 64 eply from 192 168 123 254 bytes 32 timet lt ims TTL 64 Firmware Upgrade Utility Select one device Or you can input manually 192 168 123 254 crash Refresh Upgrade E it
16. uses to encrypt IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits lf ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server 29 SECURITY SETTING ADVANCED SETTING TOOLBOX Wireless Setting HELP gt DHCP Server RADIUS Server IP 0 0 0 0 Primary Setup zx ea I t RADIUS port WDS Wireless Distribution System WDS operation as defined by the IEEE802 11 standard has been made available Using WDS it is possible to wirelessly connect Access Points and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement 30 4 4 4 Change Password MER DA Duc TT BASIC SETTING FORWARDIHG RULES a SECURITY SETTING ADVANCED SETTING TOOLBOX k Mew Password You can change Password here We strongly recommend you to change the system password for security reason 31 4 5 Forwarding Rules Ul LGB s MAN MENL BASIC SETTING FORWARDIHG RULES SECURITY SETTING ADVAHCEDSETTIHG TOOLBOX Forwarding Rules Virtual Server Special d Mirtual Server Miscellaneo
17. 122 1 certsrv account fael passwd fael Connect to 192 168 122 1 Connecting to 192 166 122 1 User name Password Remember my password 2 Then Install this certificate and finish 3 Go to the Web manager of Wireless Router to configure like below 84 Network 1052107 1 23kk Channel Security WPA CE Y otis F RADIUS Server IP 192 1 8841221 RADIUS port 1812 RADIUS Shared Key costra 4 Go to Odyssey Client Manager choose Profiles and Setup Profile name as 1 Add Profile Profile name User Info Authentication ITLS Settings PEAP Settings Login name Password Permit login using password use Windows password C prompt for password use the following password Linmask Certificate Permit login using my certificate Browse Login name and passwd are fael and fael Remember that you get certificate from Radius in Stepl 85 5 Then Choose certificate like above Select Certificate Lei 86 6 Then go to Authentication and first Remove EAP TLS and Add EAP TLS again Edit Profile Properties P 87 7 Go Network and Select 1 and ok Network Properties Network Network name SSID I Connect to any available network Scan Description optional OA Network type Access po
18. 192 168 122 101 Client 2 will obtain its IP address from the IP Address pool specified in the DHCP Server page or can use a manually assigned static IP address If for example client 3 tries to use an IP address different from the address listed in the Control table 192 168 122 101 it will be denied to connect to this device 48 5 Clients 2 and 3 and other wired clients with a MAC address unspecified in the Control table are all allowed to connect to this device But client 1 is denied to connect to this device 6 Clients 1 and 2 are allowed to associate to the wireless LAN but a wireless client with a MAC address not specified in the Control table is denied to associate to the wireless LAN Client 3 is a wired client and so is not affected by Association control 4 6 5 Miscellaneous Items Multi Functional Wireless Broadband NAT Router R1 9 f2a 2 ADMINISTRATOR s MAIN MENU t Status Wizard Logout J BASIC SETTING FORWARDING RULES SECURITY SETTING ADVAHCED SETTING TOOLBOX URL Blocking MAC Control seconds 0 to disable Remote Administrator Host Port In general only Intranet user can browse the built in web pages to perform administration task This feature enables you to perform administration task from remote host If this feature is enabled only the specified IP address can perform remote administration If the specified IP address is 0 0 0 0 any host can connect to this product to per
19. If the mechanism of Special Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger packet is detected the inbound packets sent to the specified port numbers are allowed to pass through the firewall This product provides some predefined settings Select your application and click Copy to to add the predefined setting to your list Note At any given time only one PC can use each Special Application tunnel 34 4 5 3 Miscellaneous Items Multi Functional Wireless Broadband NAT Router R1 9 f2a ADMINISTRATOR S MAIN MEHU Status Wizard Logout BASIC SETTING 4 FORWARDING RULES J SECURITY SETTING ADVANCED SETTING TOOLBOX E Miscellaneous Items HELP Virtual Server I Pee IP Address of DMZ Host 192 168 1 2c Non standard FTP port EM B FNIT Address of DMZ Host DMZ DeMilitarized Zone Host 15 a host without the protection of firewall It allows a computer to be exposed to unrestricted 2 way communication for Internet games Video conferencing Internet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP server whose port number is not 21 This setting will be
20. Intranet user can browse the built in web pages ta perform administration task This feature enables you to perform administration task from remate hast Administrator Time out The amount of time af inactivity before the device will automatically clase the Administrator session Set this to zero to disable it Discard PING fram WAN side hen this feature is enabled hosts on the WAR cannot ping the Device 36 4 6 1 Packet Filter gt Packet Filters Domain Fitters URL Blocking Outbound Filter lel Enable fe Allow all to pass exceptthase match the following rules Deny all to pass exceptthase match the following rules re tats em Sc Sq Sorc Control Miscellaneous Schedule Rule 192 168 122 229 Packet Filter enables you to control what packets are allowed to pass the router Outbound filter applies on all outbound packets However Inbound filter applies on packets that destined to Virtual Servers or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can specify 8 rules for each direction inbound or outbound For each rule you can define the following Source IP address e Source port address e Destination IP address e Destination port address e Protocol TCP or UDP or both e Use Rule 37
21. WPA WPAZ PSKIAES WPAZIAES WPA PSK I VyPA2 PSE WPATANPAZ Wireless settings allow you to set the wireless configuration items Wireless The user can enable or disalbe wireless function Network ID SSID Network ID 1s used for identifying the Wireless LAN WLAN Client stations can roam freely over this product and other Access Points that have the same Network ID The factory setting 15 default SSID Broadcast The router will Broadcast beacons that have some information including ssid so that The wireless clients can know how many ap devices by scanning function in the network Therefore This function is disabled the wireless clients can not find the device from beacons Channel The radio channel number The permissible channels depend on the Regulatory Domain The factory setting is as follow channel 6 for North America channel 7 for European ETSI channel 7 for Japan Security Select the data privacy algorithm you want Enabling the security can protect your data while 23 it is transferred from one station to another There are several security types to use WEP When you enable the 128 or 64 bit WEP key security please select one WEP key to be used and input 26 or 10 hexadecimal 0 1 2 8 9 A B F digits 802 1X Check Box was used to switch the function of the 802 1X When the 802 1X function is enabled the Wireless user must authenticate to this router first to use the Network service
22. an Ethernet cable from your computer s Ethernet port to one of the LAN ports of this product b Wireless LAN connection locate this product at a proper position to gain the best transmit performance Existing Connection DSL Cable Modem Power PCs Figure 2 3 Setup of LAN and WAN connections for this product Setup WAN connection Prepare an Ethernet cable for connecting this product to your cable kDSL modem or Ethernet backbone Figure 2 3 illustrates the WAN connection Power on Connecting the power cord to power inlet and turning the power switch on this product will automatically enter the self test phase When it is in the self test phase the indicators M1 will be lighted ON for about 10 seconds and then 1 will be flashed 3 times to indicate that the self test operation has finished Finally the M1 will be continuously flashed once per second to indicate that this product is in normal operation Chapter3 Network Settings and Software Installation To use this product correctly you have to properly configure the network settings of your computers and install the attached setup program into your MS Windows platform Windows 95 98 NT 2000 3 1 Make Correct Network Settings of Your Computer The default IP address of this product is 192 168 123 254 and the default subnet mask is 255 255 255 0 These addresses can be changed on your need but the default values are used in this manual If the T
23. and browse the Internet port 80 1 2 3 10 1 2 3 20 They can do everything block nothing Others are all blocked Example 2 ADMINISTRATOR S MAIN MENU Status Wizard Logout BASIC SETTING FORWARDING RULES SECURITY SETTING 3 ADVAHCEDSETTIHG 3 TOOLBOX Packet Fitters gt Domain Fitters URL Blocking Outbound Filter Enable 9 Allow all to pass except those match the following rules gt MAC Control z Deny all ta pass exceptthose match the following rules Miscellaneous Lr Source IP Ports 1 2 3 100 1 2 3 199 1 2 3 100 1 2 3 199 1 2 3 100 1 2 3 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are all allowed After Inbound Packet Filter setting is configured click the save button Outbound Filter To enable Outbound Packet Filter click the check box next to Enable in the Outbound Packet Filter field 39 Example 1 J BASIC SETTING J FORWARDING RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Inbound Packet Filter HELP Packet Filters gt Domain Filters EC Inbound Filter Enable p Allow all to pass except those match the following rules Deny all ta pass exceptthase match the following rules Schedule OO Always
24. lost after rebooting UpnP Setting The device also supports this function If the OS supports this function enable it like Windows Xp When the user get 1 from Device and will see icon as below 35 X new device is now available on your network For more information click here crazy Browser Untitled Et Address QmynetworkPlaces Local Network 3 Internet Gateway Device UPnP iet ET er Network Tasks m Add network place e View network connections Internet Gateway Device UPnP Set up a home ar small office network The Internet 4 6 Security Settings 3 BASIC SETTING _ FORWARDING RULES SECURITY SETTING 3 ADVANCED SETTING _ TOOLBOX Packet Filters MST ASAT Domain Filters Packet Filters URL Blocking Allows you to control access to a network by analyzing the incoming and MAC Control outgoing packets and letting them pass ar halting them based an the IP address ofthe source and destination Miscellaneous a E Domain Filters Let you prevent users under this device from accessing specific URLS URL Blocking URL Blocking will block LAM computers to connectto pre defined websites MAC Address Control Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address Miscellaneous Remote Administrator Hast In general only
25. product s NAT firewall filters out unrecognized packets to protect your Intranet so all hosts behind this product are invisible to the outside world If you wish you can make some of them accessible by enabling the Virtual Server Mapping A virtual server 1s defined as a Service Port and all requests to this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule For example if you have an FTP server port 21 at 192 168 123 1 a Web server port 80 at 192 168 123 2 and a VPN server at 192 168 123 6 then you need to specify the following virtual server mapping table 192 168 123 2 V 192 168 123 6 V 33 4 5 2 Special Multi Functional Wireless Broadband NAT Router 1 97 2 4 ADMINISTRATOR S MAIN MENU Status Wizard Logout BASIC SETTING lt FORWARDIHG RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Virtual Server Special Miscellaneous Saved Changes take effect immediate Some applications require multiple connections like Internet games Video conferencing Internet telephony etc Because of the firewall function these applications cannot work with a pure NAT router The Special Applications feature allows some of these applications to work with this product
26. to the wireless LAN If a client is denied to associate to the wireless LAN it means the client can t send or receive any data 46 via this device Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table to associate to the wireless LAN Control table oc tee pe 12 lL 192188122 M Control table 1s the table at the bottom of the MAC Address Control page Each row of this table indicates the MAC address and the expected IP address mapping of a client There are four columns in this table MAC Address address indicates a specific client IP Address Expected IP address of the corresponding client Keep it empty if you don t care its IP address C When Connection control is checked check C will allow the corresponding client to connect to this device A When Association control is checked check A will allow the corresponding client to associate to the wireless LAN In this page we provide the following Combobox and button to help you to input the MAC address DHCT chents E select one Copy to ID You select a specific client in the DHCP clients Combobox and then click on the Copy to button to copy the MAC address of the client you select to the ID selected in the ID Combobox Previous page and Next Page To make this setup page simple and clear we have divided t
27. 1 BASIC SETTING FORWARDING RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Schedule Rule HELP k Schedule m Enable You can set the schedule time to decide which service will be turned on or off Select the enable item Press Add New Rule 58 You can write rule name and set which day and what time to schedule from Start Time to End Time The following example configure ftp time as everyday 14 10 to 16 20 ADMINISTRATOR s MAIN MENU k Stat Wizard k Logout i SECURITY SETTING 3 ADVANCED SETTING TOOLBOX BASIC SETTING 2 FORWARDING RULES Schedule Rule Settin gt System Time d eneee 0000000 Schedule Rule oo oo wm wem CC me Lom CC EC mem LC EC 59 Schedule Enable Selected if you want to Enable the Scheduler Edit To edit the schedule rule Delete To delete the schedule rule and the rule of the rules behind the deleted one will decrease one automatically Schedule Rule can be apply to Virtual server and Packet Filter for example 60 Exanplel Virtual Server Apply Rule 1 ftp time everyday 14 10 to 16 20 5 MAIN MENU status Wizard Logout BASIC SETTING 3 FORWARDING RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Virtual Server gt Special Miscellaneous Virtual Server HELP
28. 4 8 1 System Log 63 WAN Type Dynamic Address 1 87123 Display time Sat Jun 24 18 15 35 2006 Time Log POOF BA 248 FF 06 12 00 Black 00 0 18 06 24 because deny all 200668248 FF 06 12 00 Block 0 50 BA 04 D 8 B5 because deny all 2006658248 FTF 06 12 00 Block 00 20 ED 5F F8 35 because deny all 2005658248 FF 06 12 01 Block 00 50 80 50 C6 CA because deny all 200668248 FF 06 12 01 Block 00 0 18 06 24 because deny all 200668248 FF 06 12 01 Block O0 50 18 00 0F FA because deny all 2006682498 FF 06 12 01 Block O0 50 84 04 09 85 because deny all POOF BA 248 FF 06 12 01 Block 0 20 ED 5F F8 35 because deny all 200668248 FF 06 12 02 Block 00 13 04 29 74 05 because deny all 200668248 FF 06 12 02 Block 00 50 64 04 09 B5 because deny all POOF BA 248 FF 06 12 02 Block 00 50 64 04 05 65 because deny all 2006658248 FF 06 12 02 Block U 20 ED 5F F8 35 because deny all 20066568248 FF 06 12 02 Block 00 50 64 04 09 B5 because deny all 200668248 FF 06 12 02 Block O0 50 18 00 0F F6 because deny all 200668249 FF 06 12 02 Block O0 13 04 BA 23 93 because deny all You can View system log by clicking the View Log button 64 4 8 2 Firmware Upgrade Firmware Upgrade Firmware Filename Current firmware version is R1 8712a The Upgrade procedure takes about 20 seconds Mote Do power of the unitwhen itis being upgraded When the Upgrade is done successfully the unit will be restarted automatically Upgrade Cancel
29. CP IP environment of your computer has not yet been configured you can refer to Appendix A to configure it For example 1 configure IP as 192 168 123 1 subnet mask as 255 255 255 0 and gateway as 192 168 123 254 or more easier 2 configure your computers to load TCP IP setting automatically that is via DHCP server of this product After installing the TCP IP communication protocol you can use the ping command to check if your computer has successfully connected to this product The following example shows the ping procedure for Windows 95 platforms First execute the ping command ping 192 168 123 254 If the following messages appear Pinging 192 168 123 254 with 32 bytes of data Reply from 192 168 123 254 bytes 32 time 2ms TTL 64 a communication link between your computer and this product has been successfully established Otherwise if you get the following messages Pinging 192 168 123 254 with 32 bytes of data Request timed out There must be something wrong in your installation procedure You have to check the following items in sequence 1 Is the Ethernet cable correctly connected between this product and your computer Tip The LAN LED of this product and the link LED of network card on your computer must be lighted 2 Is the TCP IP environment of your computers properly configured Tip If the IP address of this product is 192 168 123 254 the IP address of your computer must be 192 168 123 X and default
30. For source or destination IP address you can define a single IP address 4 3 2 1 or a range of IP addresses 4 3 2 1 4 3 2 254 An empty implies all IP addresses For source or destination port you can define a single port 80 or a range of ports 1000 1999 Add prefix T or U to specify TCP or UDP protocol For example T80 U53 U2000 2999 No prefix indicates both TCP and UDP are defined An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule Each rule can be enabled or disabled individually Inbound Filter To enable Inbound Packet Filter click the check box next to Enable in the Inbound Packet Filter field Suppose you have SMTP Server 25 POP Server 110 Web Server 80 FTP Server 21 and News Server 119 defined in Virtual Server or DMZ Host Example 1 J BASIC SETTING J FORVARDIHG RULES SECURITY SETTING J ADVANCED SETTING TOOLBOX Outbound Packet Filter Packet Filters Domain Filters URL Blocking t Outbound Filter Wd Enable MAC Control Allow all to pass exceptthase match the following rules Deny allto pass exceptthase match the following rules Schedule rule 00 Source IP Ports Destination Ports Miscellaneous 38 1 2 3 100 1 2 3 149 They are allow to send mail port 25 receive mail port 110
31. G TOOLBOX Wireless Setting HELP Primary Setup DHCP Server k Wireless Enable Disable Wireless default k Wireless Mode Mixed 4 11 g only SSID broadcast 9 Enable Disable k Security WPAZ AES RADIUS part 1812 t RADIUS Server IP 0 0 0 0 t RADIUS Shared Key SHUR Le A UO e LE ILE U WPA PSK WPA2 PSK The router will detect automatically which Security type the client uses to encrypt 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 2 Fill in the key Ex 12345678 28 Multi Functional Wireless Broadband NAT Router R1 9 f2a 4 ADMINISTRATOR S MAIN MENU Status gt Wizard Logout BASIC SETTING J FORWARDING RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Wireless Settin Primary Setup d LEE DHCP Server Wireless iw Enable Disable Network 155167 default Wireless Made Mixed 6 11 g only SSID broadcast ie Enable Disable Wireless Change Password s EL WPA WPA2 Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server The router will detect automatically which Security type Wpa psk version 1 or 2 the client
32. IUS Server IP 1921 B8 122 1 90 Client Go to Network Connection and select wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Select WirelessCA and Enable in Trusted root certificate authority Wireless Network Connection 4 Properties EE Beneral Authentication Advanced Select this to provide authenticated network access for wired and wireless Ethernet networks Smart Card or other Certificate Properties I When connecting Use my smart card gt Use a certificate on this computer Validate server certificate Connect only if server name ends with qu eee Com Trusted root certific iy Authenticate computer when computer information is available Authenticate as guest when user or computer information is Use a different user name for the connection unavailable _ Wireless Network Connection Properties x 123kk properties General Wireless Networks Advanced Association Authentication Use Windows to configure my wireless network settings Network name 55107 Available networks Wireless network key To connect to an available network click Configure i aa A amit JOYCE Preferred networks This network Automatically connect to available networks in the order listed below Move up ket provided For me automatically
33. Learn about setting up wireless network This is a computer to computer ad hoc network wireless configuration Advanced Ce Then if the wireless client wants to associate it has to request to authenticate 91 Appendix FAQ and Troubleshooting What can I do when have some trouble at the first time 1 Why can I not configure the router even if the cable is plugged in the ports of Router and the led is also light A First make sure that which port is plugged If the cable is in the Wan port please change to plug in Lan port 1 or Lan port 4 4 3 2 E WAN Then please check if the Pc gets 1 address from Router Use command mode as below hb TTE ig findows IP Configuration Ethernet adapter Local Area Connection Connection specific DHS Suffix Address z 192 168 123 115 Subnet Mask 255 255 255 0 Default Gateway 192 168 123 254 If yes please execute Browser like Mozilla and key 192 168 123 254 in address If not please ipconfig release then ipconfig renew lt gt ipconfig release findows IP Configuration thernet adapter Local Area Connection Connection specific DHS Suffix IP Address Subnet Mask 1 Default Gateway ripconfig renew findows IP Configuration thernet adapter Local Area Connection Connection specific DHS Suffix IP Address 2 ew ew VEU ME bk Subnet 1 A55
34. TP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty Connection ID optional Input the connection ID if your ISP requires it Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link upw with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Staus page 18 Multi Functional Wireless Broadband NAT Router R1 97f2a ADMINISTRATOR s MAINMENU Status Wizard Logout 1 BASIC SETTING FORVARDIHG RULES J SECURITY SETTING J ADVAHCED SETTING TOOLBOX 4 Primary 5etup DHCP Server Wireless k LAM IP Address 192188122217 158 122 217 Change Password WAN PPTP IP Made Damit IF m k MyIP Address gt senerPassressmame Lo hann amp hATI I 4 1 6 L2TP First Please check your ISP assigned and Select Static Address or Dynamic IP A
35. User s Manual Copyright The contents of this publication may not be reproduced in any part or as a whole stored transcribed in an information retrieval system translated into any language or transmitted in any form or by any means mechanical magnetic electronic optical photocopying manual or otherwise without the prior written permission Trademarks All products company brand names are trademarks or registered trademarks of their respective companies They are used for identification purpose only Specifications are subject to be changed without prior notice FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against radio interference in a commercial environment This equipment can generate use and radiate radio frequency energy and if not installed and used in accordance with the instructions in this manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause interference in which case the user at his own expense will be required to take whatever measures are necessary to correct the interference CE Declaration of Conformity This equipment complies with the requirements relating to electromagnetic compatibility EN 55022 A1 Class B The specification is subject to chan
36. VANCED SETTING TOOLBOX Domain Filter HELP t Domain Filter Enable t Lag ONS Query Enable k Privilege IP Addresses Range FromD 00 ef a Ee m 8 8 B EE Lj Packet Fitters Domain Filters URL Blocking MAC Control Miscellaneous Em Il Drap lel Log led Drop lel Log lel Drop lel Log MEN Eorp Elo Domain Filter Let you prevent users under this device from accessing specific URLs Domain Filter Enable Check if you want to enable Domain Filter Log DNS Query Check if you want to log the action when someone accesses the specific URLs Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restricted For example com xxx com Action When someone is accessing the URL met the domain suffix what kind of action you want Check drop to block the access Check log to log these access Enable Check to enable each rule 42 Example BASIC SETTING 2 FORWARDIHG RULES O SECURITYSETTING O ADVAHCED SETTING TOOLBOX _ Domain Filter Packet Filters Domain Filters Domain Filter Ww Enable URL Blocking k Log ONS Query Enable MAC Control zm k Privilege IP Addresses Range Miscellaneous Action
37. WAN type Choose correct WAN type before you start 1 LAN IP Address the local IP address of this device The computers on your network must use the LAN IP address of your product as their Default Gateway You can change it if necessary 2 WAN Type WAN connection type of your ISP You can click Change button to choose a correct one from the following four options A Static IP Address ISP assigns you a static IP address Dynamic IP Address Obtain an IP address from ISP automatically Dynamic IP Address with Road Runner Session Management e g Telstra BigPond PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services PPTP Some ISPs require the use of PPTP to connect to their services mon m L2TP Some ISPs require the use of L2TP to connect to their services 4 4 1 1 Static IP Address WAN IP Address Subnet Mask Gateway Primary and Secondary DNS enter the proper setting provided by your ISP 4 4 1 2 Dynamic IP Address 16 1 Host Name optional Required by some ISPs for example Home 2 Renew IP Forever this feature enables this product to renew your IP address automatically when the lease time is expiring even when the system is idle 4 4 1 3 Dynamic IP Address with Road Runner Session Management e g Telstra BigPond 1 LAN IP Address is the IP address of this product It must be the default gateway of your computers 2 WAN is Dynamic IP Address If the WAN type is
38. _c_wpa_preview_pn asp 79 Or Another Configuration PC 1 USER A Wireless i PC 2 p Wired LAN USER B 192 168 123 254 I entication Server Windows 2000 Radius server 197 168 123 93 WPA PSK In fact 1t is not necessary for this function to authenticate by Radius Server the client and wireless Router authenticate by themselves Method1 1 Go to the Web manager of Wireless Router to configure like below Network ID SSID 423kk Channel 8 Security WPA PSK Key Mode ASCH 12345678 Preshare Key 2 Go to Odyssey Client Manager first choose Network Before doing that you should verify if the software can show the wireless card Open Adapters 80 Odyssey Client Manager petings Commands Web Help Connection Networks The following networks are configured 4 t Profiles Add a 1235kk gt Networks Remove d Auta Scan Lists Properties rs Trusted Servers Adapters 3 Add and edit some settings Hetwork Properties Description optional M etwork Chanel Authentication Authenticate using profile iil be generated automaticaly For data privacy 81 4 Back to Connection Then Select Connect to network You will see
39. a dedicated host or email ta specific receipts Schedule Rule nmamic DNS Ta hast yaur server an a changing IP address vau have to use dynamic domain name service DONS SNMP Gives a userthe capability ta remotely manage a computer network by polling and setting terminal values and monitoring network events Routing Ifyou have more than ane routers and subnets you may wantta enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other Schedule Rule Apply schedule rules ta Packet Filters and Virtual Server 50 4 7 1 System Time J BASIC SETTING J FORWARDIHG RULES SECURITY SETTING ADVAHCED SETTING J TOOLBOX System Time System Time 1 t System Time 20085 EBH24El FF 05 40 48 SHMP ie Get Date and Time by MTP Protocol Routing Time Server time nist gov Schedule Rule Time Zane GMT 08 00 Pacific Time U5 amp Canaday gt Dynamic DHS Set Date and Time Using PC s Date and Time Date and Time 2006108598 EF 11 10 01 Set Date and Time manually Date Year 2008 my Month Jun 01 zy Time Hour 0 23 Minute 0 59 Second 0 0 59 Daylight Saving Enable Disable Start Month Jan Day 01 my Hour 00 zy End Month Jan Hour Get Date and Time by NTP Protocol Selected if you want to Get Date and Tim
40. able this function E mail Alert Enable Check if you want to enable Email alert send syslog via email SMTP Server IP and Port Input the SMTP server IP and port which concated with If you do not specify port number the default value is 25 For example mail your url com or 192 168 1 100 26 Send E mail alert to The recipients who will receive these logs You can assign more than 1 recipient using 5 or to separate these email addresses 52 4 7 3 Dynamic DNS 2 ADMINISTRATOR s MAIN MENU t Status gt Wizard gt Logout J BASIC SETTING J FORWARDING RULES J SECURITY SETTING ADVANCED SETTING TOOLBOX amic DHS System Time TM gt System Log Dynamic DHS DDNS w Disable Enable SHMP Provider Ma IP carm Routing Host Name Fassworgd Key To host your server on a changing IP address you have to use dynamic domain name service DDNS So that anyone wishing to reach your host only needs to know the name of it Dynamic DNS will map the name of your host to your current IP address which changes each time you connect your Internet service provider Before you enable Dynamic DNS you need to register an account on one of these Dynamic DNS servers that we list in provider field To enable Dynamic DNS click the check box next to Enable in the DDNS field Next you can enter the appropriate information about your Dynamic DNS Server You have t
41. ard Advanced Setup Setup Wizard will guide you through a basic configuration procedure step by step Press Next gt 11 _ Multi Functional Wireless Broadband NAT Router 81 97 2 BASIC SETTING J FORWARDING RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Setup Wizard Setup Wizard EXIT Setup Wizard will quide you through a basic configuration procedure step by step Step 1 Set Password Step 2 WAN Setup Step 3 wireless Setup Step 4 Summary Step 5 Finish Start gt Password gt WAH gt Wireless gt Summary gt Finish If the user finishes those steps and the router shows as below It means that customers can enjoy Internet BASIC SETTING J FORMARDING RULES SECURITY SETTING ADVAHCED SETTING TOOLBOX Setup Wizard WAH Connection Test EXIT Congratulations The Internet connection is established Connection information are 2525525820 momen _ Start gt Password gt WAN gt Wireless gt Summary gt Finish 1 12 4 2 Status Wizard O Advanced Setup ee _ memes _ Wireless Status NNNM MN SSID default I MAC Address O0 50 18 00 OF DA This option provides the function for observing this product s working status A WAN Port Status If the WAN port is assigned a dynamic IP there may appear a
42. ddress For example Use Static 1 IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you Server IP Address the IP address of the PPTP server PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty Connection ID optional Input the connection ID 1f your ISP requires it Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will 19 connect to ISP automatically after system is restarted or connection is dropped 6 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link upw with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Staus page Primary 5etup DHCP Server Wireless k LAN IP Address 192 168 122 217 Change Password WAM Type Server IP AddressiMame k PPTP Password t Connection t Connection Control Auto recannect Always on mg 1460 20 4 4 1 7 Virtual Computers Only for Static and dynamic IP address Wan type Virtual Computers Primary Setup p HELP Globa
43. device You can ping a secific IP to test whether it is alive 66 67 Appendix TCP IP Configuration for Windows 95 98 This section introduces you how to install TCP IP protocol into your personal computer And suppose you have been successfully installed one network card on your personal computer If not please refer to your network card manual Moreover the Section B 2 tells you how to set TCP IP values for working with this NAT Router correctly Install TCP IP Protocol into Your PC 1 Click Start button and choose Settings then click Control Panel 2 Double click Network icon and select Configuration tab in the Network window 3 Click Add button to add network component into your 4 Double click Protocol to add TCP IP protocol Select Network Component Type Click the type of network component you want to install Add rm Pratacnl Cancel Protocol a language a computer uses Computers must use the same protocol to communicate 5 Select Microsoft item in the manufactures list And choose TCP IP in the Network Protocols Click OK button to return to Network window Select Network Protocol Click the Network Protocol that pou want to install then click OF IF you have ig an installation disk for this device click Have Disk Manufacturers Network Protocols Fast Infrared Protocal PSP compatible Protocol jJ Microsoft 32 bit DLC i Microsoft DLE NetBEUI Have Disk
44. duction Congratulations on your purchase of this outstanding Wireless Broadband Router This product is specifically designed for Small Office and Home Office needs It provides a complete SOHO solution for Internet surfing and 15 easy to configure and operate even for non technical users Instructions for installing and configuring this product can be found in this manual Before you install and use this product please read this manual carefully for fully exploiting the functions of this product Functions and Features Router Basic functions Auto sensing Ethernet Switch Equipped with a 4 port auto sensing Ethernet switch WAN type supported The router supports some WAN types Static Dynamic PPPoE PPTP L2TP Dynamic IP with Road Runner Firewall All unwanted packets from outside intruders are blocked to protect your Intranet DHCP server supported All of the networked computers can retrieve TCP IP settings automatically from this product Web based configuring Configurable through any networked computer s web browser using Netscape or Internet Explorer Virtual Server supported Enable you to expose WWW FTP and other services on your LAN to be accessible to Internet users User Definable Application Sensing Tunnel User can define the attributes to support the special applications requiring multiple connections like Internet gaming video conferencing Internet telephony and so on then this product can sen
45. e by NTP Protocol Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates Set Date and Time manually Selected if you want to Set Date and Time manually Set Date and Time manually Selected if you want to Set Date and Time manually Function of Buttons Sync Now Synchronize system time with network time server Daylight Saving Set up where the location is 51 4 7 2 System Log guit du e mi Meme maie cies cuenca 3 6 e mm n eum ie Eae e d 2 e i Ee iis em EE es E arma M dei ay eS cei m i ime eiu i a m el Multi Functional Wireless Broadband NAT Router R1 9 f2a 5 MAIN MENU Status gt Wizard t Logout J BASIC SETTIHG J FORWARDIHG RULES J SECURITY SETTING ADVAHCED SETTING TOOLBOX System Log E mail Subject e Username HELP gt System Time SHMP e Password Log Type vi System Activity Debug Information Attacks Dropped Packets Notice This page support two methods to export system logs to specific destination by means of syslog UDP and SMTP TCP The items you have to setup including IP Address for Syslog Host IP of destination where syslogs will be sent to Check Enable to en
46. form administration task You can use subnet mask bits nn notation to specified a group of trusted IP addresses For example 10 1 2 0 24 NOTE When Remote Administration is enabled the web server port will be shifted to 88 You can change web server port to other port too Administrator Time out The time of no activity to logout automatically Set it to zero to disable this feature Discard PING from WAN side When this feature is enabled any host on the WAN cannot ping this product SPI Mode When this feature is enabled the router will record the packet information pass through the router like 49 IP address port address ACK SEQ number and so And the router will check every incoming packet to detect if this packet 1s valid DoS Attack Detection When this feature is enabled the router will detect and log the DoS attack comes from the Internet Currently the router can detect the following DoS attack SYN Attack WinNuke Port Scan Ping of Death Land Attack etc 4 7 Advanced Settings Multi Functional Wireless Broadband NAT Router R1 9 f2a ADMINISTRATOR s MAIN MENU t Status Wizard gt Logout BASIC SETTING J FORWARDING RULES SECURITY SETTING 3 ADVANCED SETTING TOOLBOX System Time Advanced Setting gt System Log System Time Dynarnic DHS Allow you ta set device time manually or consult network time from NTF SHMP Serer System Lo gt Routing Send system log ta
47. gateway must be 192 168 123 254 Chapter4 Configuring Wireless Broadband Router This product provides Web based configuration scheme that 15 configuring by your Web browser such as Netscape Communicator or Internet Explorer This approach can be adopted in any MS Windows Macintosh or UNIX based platforms Desktop B wuuy uy d uu Internet Wireless Router Desktop Fast Ethernet wal 27 Windows Unix like 10 4 1 Login to Configure from Wizard Activate your browser and disable the proxy or add the IP address of this product into the exceptions Then type this product s IP address in the Location for Netscape or Address for IE field and press ENTER For example http 192 168 123 254 After the connection 15 established you will see the web user interface of this product There are two appearances of web user interface for general users and for system administrator To log in as an administrator enter the system password the factory setting is admin in the System Password field and click on the Log in button If the password is correct the web appearance will be changed into administrator configure mode As listed in its main menu there are several options for system administration The user can setup step by step to finish the connection with Wizard ADMINISTRATOR S MAIN MENU Status Logout J Please Select the Operations Wiz
48. ge without notice Table of Contents Chapter T T uttodue OTi e 3 PUNCHONS and secessit ha 3 Piorno 5 Chapter 2 Hardware Installation ce ino ote EE eet 6 2 1 Panel AV 00b soos 6 2 2 Procedure for Hardware 7 Chapter Network Settings and Software Installation 9 3 1 Make Correct Network Settings of Your Computer 9 Chapter 4 Configuring Wireless Broadband Router 10 4 1 Login to Configure from Wizard 11 2398 AU AE AA A OE 13 TSN Lose nba ratus deputat E 14 2 5 Borwardimp RUleS iens ter 32 tne om Ind 36 AY VANCE Segue tun vent edd 50 A S IOO DOX 63 Appendix TCP IP Configuration for Windows 95 98 68 Appendix B 802 TX Sell IP oes e ese T3 Appendix WPA PSK and 79 Appendix D FAQ and 92 What can do when I have some trouble at the first time 92 How do connect router by using wireless 95 Chapter1 Intro
49. gs Me Gateway WINS Configuration IP Address rt search Wen suhi seare Arae B Configure IP manually a Select Specify an IP address in the IP Address tab The default IP address of this product is 192 168 123 254 So please use 192 168 123 xxx xxx is between 1 and 253 for IP Address field and 255 255 255 0 for Subnet Mask field TCPIP Properties 192 168 123 115 71 b In the Gateway tab add the IP address of this product default IP is 192 168 123 254 in the New gateway field and click Add button TCP IP Properties WINS Configuration IP Address 192 158 123 254 c In the DNS Configuration tab add the DNS values which are provided by the ISP into DNS Server Search Order field and click Add button Properties 168 85 192 1 158 35 1 1 72 Appendix 802 1 Setting PC 1 USER A USER 6 Authentication Server Windows 2000 Radius server 192 168 123 353 Figure 1 Testing Environment Use Windows 2000 Radius Server 1 Equipment Details PC1 Microsoft Windows XP Professional without Service Pack 1 AMIT 531C Wireless Cardbus 3 0 3 0 Driver version 2 Microsoft Windows XP Professional with Service Pack 1 or latter AMIT 561C Wireless Cardbus 1 0 1 0 Driver version 1 7 29 0 Driver date 10 20 2001 Authenticati
50. he Control table into several pages You can use these buttons to navigate to different pages 47 Example Status Wizard J BASIC SETTING FORWARDIHG RULES SECURITY SETTING J ADVANCED SETTING TOOLBOX MAC Address Control gt Packet Filters URL Blocking MAC Address Control Enable MAC Control Wireless and wired clients with C checked can connectto this device and Connection control unspecified MAC addresses to connect Miscellaneous Wireless clients with checked can associate to the wireless LAN and Unspecified MAC addresses to associate Lr MAC Address IP Address E 00 12 34 56 7 8 90 192 168 122 100 i Association control DD 12 34 58 78 92 192 168 122 ii 00 09 76 54 32 10 192168122101 CIE In this scenario there are three clients listed in the Control Table Clients 1 and 2 are wireless and client 3 is wired 1 The MAC Address Control function is enabled 2 Connection control is enabled and all of the wired and wireless clients not listed in the Control table are allowed to connect to this device 3 Association control is enabled and all of the wireless clients not listed in the Control table are denied to associate to the wireless LAN 4 Clients 1 and 3 have fixed IP addresses either from the DHCP server of this device or manually assigned ID 1 00 12 34 56 78 90 gt 192 168 122 100 ID 3 00 98 76 54 32 10 gt
51. in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 2 Fill in the key Ex 12345678 26 Multi Functional Wireless Broadband NAT Router R1 9 f2a 1 ADMINISTRATOR S MAIN MENU Status Wizard 3 BASIC SETTING FORWARDING RULES J SECURITY SETTING J ADVANCED SETTING TOOLBOX eee Wireless Settin HELP ee t Wireless Enable Disable Wireless default Wireless Made Mixed 11 g only WPA2 AES Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server 27 m m m m 2 4 Ss P 4 B m 9X R X B X Eb T T B OM E Ww BM X 5 E xp gp Bee X Multi Functional Wireless Broadband NAT Router R1 97f2a J SECURITY SETTING ADVANCED SETTIN
52. in out Reconnect Reauthenticate EF I Proceed to authenticate with this server 9 Result NR omm bytes 32 time ims Odyssey Client Manager bytes 32 tine ins M bytes 32 time ims bytes 32 time ims Connection bytes 32 time ims Adapter TNET1130 WLAN Adapter bytes 32 time ims i Profiles Adapter type wireless bytes 32 time ims Connect to network e lt 123kk gt oe Networks Scan Auto Scan Lists chnection information Reconnect Reauthenticate 4 Method 2 1 The UserA or UserB have to get certificate from Radius first http 192 168 122 1 certsrv account passwd fael 89 Server name must end with bytes bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 time ims time ims time ims time ims time 2ms Trusted Servers Latus open and authenticated bytes 32 time ims Elapsed time 020359 bytes 32 time ims Adapters Network SSID 123kk Rs bytes 32 time ims Access point 00 50 18 00 0F F8 Gutes 32 tine ine Packets in out 12679 13605 bytes 32 time 2ms t ime 2ms time ims time ims Connect to 192 168 122 1 Connecting to 192 166 122 1 Remember my password 2 Then Install this certificate and finish 3 Setting on the router and client Router Network 1065107 12 Channel Security WPA we B02 1X Settings RAD
53. int infrastructure mode l Channel Association made Encryption method data privacy Pre shared key WFA Fassphrase Linmask Cancel 88 8 Back to Connection and Select 123kk If successfully the wireless client has to authenticate with Radius Server like below Piwork Properties Odyssey Client Network Network name 5510 1 23kk Scan fou are about to authenticate to an untrusted server Connect to any available network To terminate communication press Na To temporarily trust this server press Yes Description optional 3 Odyssey Client Manager To permanently trust this server check add this trusted server to Network type Connection 6 Connection t Profiles oe Networks db Auto Scan Lists TNET1130 WLAN Adapter wireless Association mode Adapter Adapter type Connect to network e 123kk Scan Encryption method Authentication Authenticate using Connection information the database and press Yes Certificate chain WirelessCA tw V Keys will be genera Trusted Servers Status authenticating View Elapsed time p Adapters Network SSID 123kk ermanent trust Pre shared key WPA Access point 00 50 18 00 0F F8 Add this trusted server to the database Packets
54. ireless amp Mixed WW 114 only SSID broadcast Enable Disable Channel Security WPA PSK Ea Encryption TKIP 49 AES gt Preshare Key Made ASCII m Presta 1 LSave_ Lundo__ L_wos Setting MAC Address Control WPA Check Box was used to switch the function of the WPA When the WPA function 1s enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select Encryption and RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server 25 amp Multi Functional Wireless Broadband NAT Router R1 9712a ADMINISTRATOR S MAIN MENU Status Wizard 000505050002 _ Logout J BASIC SETTING Lj FORWARDING RULES SECURITY SETTING ADVANCED SETTING TOOLBOX j Wireless Settin DHCP Server Wireless Enable Disable Wireless Security PM Encryption TKIF AES RADIUS Server IP 192 168 123 353 RADIUS 1812 t RADIUS Shared 1234 WPA2 PSK AES 1 Select Pre share Key Mode If you select HEX you have to fill
55. l IP Local IP DHCP Server om X 1 8 ELM 8 DEL B Virtual Computer enables you to use the original NAT feature and allows you to setup the one to one mapping of multiple global IP address and local IP address e Global IP Enter the global IP address assigned by your ISP Local IP Enter the local IP address of your LAN PC corresponding to the global IP address e Enable Check this item to enable the Virtual Computer feature 21 4 4 2 DHCP Server ADMINISTRATOR S MAIN MENU Status Wizard J BASIC SETTING JJ FORMARDING RULES J SECURITY SETTING 3 ADVANCED SETTING TOOLBOX 3 DHCP Server HELP Primary Setup DHCP Server tom Setting 0 Press More gt gt The settings of a TCP IP environment include host IP Subnet Mask Gateway and DNS configurations It is not easy to manually configure all the computers and devices your network Fortunately DHCP Server provides a rather simple approach to handle all these settings This product supports the function of DHCP server If you enable this product s DHCP server and configure your computers as automatic IP allocation mode then when your computer is powered on it will automatically load the proper TCP IP settings from this product The settings of DHCP server include the following items 2 DHCP Server Choose Disable or Enable IP pool starting Add
56. nction is enabled the Wireless user must authenticate to this router first to use the Network service Support WPA PSK and WPA version 1 and 2 When the WPA function 1s enabled the Wireless user must authenticate to this router first to use the Network service SPI Mode Supported When SPI Mode is enabled the router will check every incoming packet to detect if this packet 15 valid DoS Attack Detection Supported When this feature is enabled the router will detect and log the DoS attack comes from the Internet Advanced functions System time Supported Allow you to synchronize system time with network time server E mail Alert Supported The router can send its info by mail Dynamic dns Supported At present the router has 3 ddns dyndns TZO com and dhs org SNMP Supported The router supports basic SNMP function Routing Table Supported Now the router supports static routing Schedule Rule supported Customers can control some functions like virtual server and packet filters when to access or when to block Other functions UPNP Universal Plug and Play Supported The router also supports this function The applications X box Msn Messenger Packing List Wireless broadband router unit Installation CD ROM Power adapter CAT 5 UTP Fast Ethernet cable Chapter 2 Hardware Installation 2 1 Panel Layout 2 1 1 Front Panel Figure 2 1 Front Panel LED Ports Port Description PWR Power inlet
57. ng global IP 202 93 91 218 But I can not access the site that inputs domain name for example http espn com A Please check the dns configuration of Static IP Address Please refer to the information of ISP and assign one or two in dns item How do connect router by using wireless 1 How to start to use wireless A First make sure that you already installed wireless client device in your computer Then check the Configuration of wireless router The default is as below gJ Wireless Setting HELP Item Setting k Wireless 9 Enable Disable t Network ID SSID Wireless Made Mixed 11 g only SSID broadcast Enable Disable t Channel Security LODS Selling MAC Address Control 95 About wireless client you will see wireless icon e Then click and will see the ap list that wireless client can be accessed default Signal Strength Related Tasks 1 Y Man secure wireless network E Change preferred es BombTest Signal Strength ool wireless network 7 Security enabled wireless network 2 Learn about wireless If the client can not access your wireless router please refresh network list again However I still can not fine the device which ssid 1s default please refer to Q3 Network Tasks Choose a wireless network 2 Refresh Click an item in the list below ba connect bo a wireless network in range ar bo get more network lis
58. not correct change it 3 Host Name optional Required by some ISPs e g 4 Renew IP Forever this feature enable this product renew IP address automatically when the lease time is being expired even the system is in idle state 4 4 1 4 PPP over Ethernet ly PPPoE Account and Password the account and password your ISP assigned to you For security this field appears blank If you don t want to change the password leave it empty 2 PPPoE Service Name optional Input the service if your ISP requires it Otherwise leave it blank 3 Maximum Idle Time the amount of time of inactivity before disconnecting your PPPoE session Set it to zero or enable Auto reconnect to disable this feature 4 Maximum Transmission Unit MTU Most ISP offers MTU value to users The most common MTU value is 1492 5 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link upw with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Staus page 4 4 1 5 PPTP First Please check your ISP assigned and Select Static IP Address or Dynamic IP Address 17 IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you Server IP Address the IP address of the PPTP server PP
59. o define Provider Host Name 53 Username E mail Password Key You will get this information when you register an account on a Dynamic DNS server Example Ses Se O3 m se CO ow ee Se ww Gm OW CR OG CW UM CR G6 OB mo 030 x sss Multi Functional Wireless Broadband NAT Router R1 9 BASIC SETTING FORWARDING RULES 3 SECURITY SETTING 3 ADVAHCED SETTING TOOLBOX gt System Time gt System Log Dynamic DHS DONE i9 Disable Enable SHMP Provider Routing Host Name eae eae t Username E mail costrai amit com tw Password Key After Dynamic DNS setting 1s configured click the save button 4 7 4 SNMP Setting J SNMP Setting HELP Enable SNMP Ww Local bel Remote Get Community public Set Community private EWAN Access IP Address 0 0 0 0 In brief SNMP the Simple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events Enable SNMP You must check either Local or Remote or both to enable SNMP function If Local is checked this device will response
60. on Server Windows 2000 RADIUS server with Service Pack 3 and HotFix Q313664 Note Windows 2000 RADIUS server only supports PEAP after upgrade to service pack 3 and HotFix Q313664 You can get more information from Configuration 13 1 Enable DHCP server 2 WAN setting static IP address 3 LAN IP address 192 168 123 254 24 4 Set RADIUS server IP 5 Set RADIUS server shared key 6 Configure WEP key and 802 1X setting The following test will use the inbuilt 802 1X authentication method such as EAP TLS PEAP CHAPv2 Windows XP with SP1 only and PEAP TLS Windows XP with SP1 only using the Smart Card or other Certificate of the Windows XP Professional 3 DUT and Windows 2000 Radius Server Setup 3 1 1 Setup Windows 2000 RADIUS Server We have to change authentication method to MD5 Challenge or using smart card or other certificate on RADIUS server according to the test condition 3 1 2 Setup DUT 1 Enable the 802 1X check the Enable checkbox 2 Enter the RADIUS server IP 3 Enter the shared key The key shared by the RADIUS server and DUT 4 We will change 802 1 X encryption key length to fit the variable test condition 3 1 3 Setup Network adapter on PC 1 Choose the IEEE802 1X as the authentication method Fig 2 Note Figure 2 is a setting picture of Windows XP without service pack 1 If users upgrade to service pack 1 then they can t see MD5 Challenge from EAP type list any more but they will get a ne
61. oper routing path and allow different subnets to communicate with each other Routing Table settings are settings used to setup the functions of static Dynamic Routing Routing Information Protocol RIP will exchange information about destinations for computing routes throughout the network Please select RIPv2 only if you have different subnet your network Otherwise please select RIPv1 if you need this protocol Static Routing For static routing you can specify up to 8 routing rules You can enter the destination IP address subnet mask gateway hop for each routing rule and then enable or disable the rule by checking or unchecking the Enable checkbox 56 Example 192 155 123 311 Submask Router Router 182 168 123 216 Client 192 168 173 108 Configuration NAT Router Destination SubnetMask Gateway 192 168 1 0 253 235 253 0 192 168 123 216 192 168 0 0 255 255 255 0 192 168 123 103 Enabled 1 V 1 V So if for example the client3 wanted to send an IP data gram to 192 168 0 2 it would use the above table to determine that it had to go via 192 168 123 103 a gateway And if it sends Packets to 192 168 1 11 will go via 192 168 123 216 Each rule can be enabled or disabled individually After routing table setting 1s configured click the save button 57 4 7 6 Schedule Rule A mlt Choe eT zi sz Darn 2
62. prompt that the authentication process is success or fail and end the authentication procedure Fig 6 Terminate the test steps when get dynamic and PING remote host successfully 76 Certificates Intended purpose lt All Personal Other People Intermediate Certification Authorities Trusted Root Certificatior Issued By Expiratio Certificate intended purposes Export Figure 4 Certificate information on PC1 Network Connections File Edit view Favorites Tools BE Advanced Help a Search 2 Folders Hak Address Network Connections v ian LAN or High Speed Internet Network Tasks hn zl A b Create a new connection Local Area Connection Wireless n gt Disabled Set up a home ar small Eu e attempting to authenticate U dh D Link DFE 530TX PCI Fast Et q office network Figure 5 Authenticating 77 Network Connections w Fie Edit wiew Favorites Tools Advanced Help Back 2 d Search 22 Folders Hak Address Network Connections v Ir LAN or High Speed Internet Network Tasks A c Local Area Connection Mieter CON Create new Disabled Authentication succeeded connection L ga D Link DFE S30T PCI Fast Et we Mrmereteeirmtesschertaprer 9 Set up a home or small office network Figure 6
63. request from LAN If Remote is checked this device will response request from WAN Get Community Setting the community of GetRequest your device will response Set Community Setting the community of SetRequest your device will accept WAN Access IP Address IF the user wants to limit to specific the 1p address to access please input in the item The default 0 0 0 0 and means every ip of Internet can get some information of device with snmp protocol 55 4 7 5 Routing ADMINISTRATOR s MAIN MENU gt Status System Time gt System Log Dynamic DHS SHMP Rnuting Schedule Rule Multi Functional Wireless Broadband NAT Router R1 97f2a Wizard Logout BASIC SETTING J FORWARDIHG RULES SECURITY SETTING ADVAHCED SETTING TOOLBOX Routing Table HELP Dynamic Routing Disable amp RIPv1 amp 9 2 Static Routing Disable Enable 182 158 123 U 255 255 255 0 142 165 122 3 192 168 19 0 255 255 2551 132 158 122 18 Cod F Cod Ed Ed ae ae aed Cod bad Ed Fd Lu Sa ui Routing Tables allow you to determine which physical interface address to use for outgoing IP data grams If you have more than one routers and subnets you will need to enable routing table to allow packets to find pr
64. ress IP pool starting Address Whenever there is a request the DHCP server will automatically allocate an unused IP address from the IP address pool to the requesting computer You must specify the starting and ending address of the IP address pool Domain Name Optional this information will be passed to the client Primary DNS Secondary DNS This feature allows you to assign DNS Servers Primary WINS Secondary WINS This feature allows you to assign WINS Servers Gateway The Gateway Address would be the IP address of an alternate Gateway This function enables you to assign another gateway to your PC when DHCP server offers an IP to your PC 22 4 4 3 Wireless Setting 802 1 setting WDS kte e CU UR 3G COO UP CM C CE OW CA WD UE C UW9R UM OW OX GX 03 3t UE CE UN OW C9 SW UE ON UNO OO 09 Multi Functional Wireless Broadband NAT Router R1 9 f2a 4 ADMINISTRATOR S MAIN MEHU Status Wizard J BASIC SETTING J FORWARDING RULES J SECURITY SETTING 3 ADVANCED SETTING J TOOLBOX J Wireless Settin Primary Setup d e Wireless Wireless W Enable Disable default Wireless 9 Mixed 4 11 q only SSID broadcast Enable Disable Security rrr m NN WPA PSE
65. rking ZyXEL Signal Strength Non secure wireless network Change settings af this connection X Aaron Signal Strength sgg If SSID is default and click Properties to check if the driver of wireless client supports AES encryption default properties x Association Authentication Connection Network name 5510 Wireless network key This network requires key for the following Network Authentication RIS Data encryption AES Network kep J Confirm network key 97 3 When I use wireless to connect the router but I find the signal is very low even if I am close to the router A Please check if the wireless client is normal first If yes please send the unit to the seller and verify What the problem is 98
66. rol Packet Filters URL Blocking MAC Address Control Enable MAC Control Wireless and wired clients with C checked cannectta this device and Connection control unspecified MAC addresses to connect Miscellaneous Wireless clients with A checked can assaciate to the wireless LAM and lel Association control Unspecified MAC addresses to associate DHCP clients Select one ID Address Address O0 90 CC 10 9D 40 182188122113 00 50 4 24 05 7 192 168 122 18 00 80 15 78 182 188 122 218 ES O0 50 18 FF 1 2 34 192 168 122 226 Era pub p MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address MAC Address Control Check Enable to enable the Address Control All of the settings in this page will take effect only when Enable is checked Connection control Check Connection control to enable the controlling of which wired and wireless clients can connect to this device If a client 15 denied to connect to this device it means the client can t access to the Internet either Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table please see below to connect to this device Association control Check Association control to enable the controlling of which wireless client can associate
67. se the application type and open multi port tunnel for it DMZ Host supported Lets a networked computer be fully exposed to the Internet this function is used when special application sensing tunnel feature is insufficient to allow an application to function correctly Statistics of WAN Supported Enables you to monitor inbound and outbound packets Wireless functions High speed for wireless LAN connection Up to 54Mbps data rate by incorporating Orthogonal Frequency Division Multiplexing OFDM Roaming Provides seamless roaming within the IEEE 802 11b 11M and IEEE 802 11g 54M WLAN infrastructure IEEE 802 11b compatible 11M Allowing inter operation among multiple vendors IEEE 802 11g compatible 54M Allowing inter operation among multiple vendors Auto fallback 54M 48M 36M 24M 18M 12M 6M data rate with auto fallback in 802 11g mode 11M 5 5M 2M 1M data rate with auto fallback in 802 11b mode Security functions Packet filter supported Packet Filter allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination Domain Filter Supported Let you prevent users under this device from accessing specific URLs URL Blocking Supported URL Blocking can block hundreds of websites connection by simply a keyword VPN Pass through The router also supports VPN pass through 802 1X supported When the 802 1X fu
68. t information Hw default Signal Strength 2 d Non secure wireless network Connected Choose the one that you will want to connect and Connect default Signal Strength Related Tasks 1 Mon secure wireless network 4 Change preferred mee fed For access Bev rim oe eee TE wireless network LLEESICEER A d Learn about wirele networking default does nok require a network key Information sent over this network is nok encrypted and may visible to others 5j Change settings ol connection IF vau are sure you want to connect bo this network click Connect Otherwise click Cancel If successfully the computer will show ij Wireless Network Connection 5 is now connected X Speed 54 0 Mbps nmand Prompt W untitled Paint 7 and get 1p from router 96 thernet adapter Wireless Network Connection 5 Gonnection specific DNS Suffix IP Address Subnet Mask Default Gateway 192 168 123 165 255 255 255 H 192 168 123 254 2 When I use AES encryption of WPA PSK to connect even if I input the correct pre share key A First you must check if the driver of wireless client supports AES encryption Please refer to the below Related Tasks j Mon secure wireless network E Change preferred 217 Signal Strength wireless network T Security enabled wireless network 2 ij Learn about wireless netwo
69. us Allows others to access WAAN and other services on your LAN Special Application This configuration allows some applications to connect and work with the NAT router Miscellaneous Address of DMZ Host Allows a computer to be exposed to unrestricted 2 communication Mate that this feature should be used only when heeded Non standard FTP port rau have ta configure this item if you wantto access server whose part numberis nat 21 when Client uses active mode UPnP Setting If yau enable UPnP function the router will work with UPnP devices sothwares 32 4 5 1 Virtual Server Ts Multi Functional Wireless Broadband NAT Router R1 9 f2a ADMIMISTRATOR s MAIN MENU Status Wizard Logout J BASIC SETTING FORWARDIHG RULES SECURITY SETTING ADVANCED SETTING TOOLBOX Virtual Server gt Virtual Server I HELP Special AP Well known services select one iz use Schedule rule Always Both D Miscellaneous Schedule Rule 192 168 122 13 192 168 122 13 20699 20700 Both 1821881 22 22 1 Both 182 158 122 228 Bot 192 168 122 218 5 Both 14333 EO 2005 192 168 122 218 10 Both 192 168 122 218 2 Both 182 158 122 218 Both nmm 182 158 122 13 Both cog T c cu I c cu hu A Tz esp Both This
70. w Protected EAP PEAP option 2 Choose MD5 Challenge or Smart Card or other Certificate as the EAP type 3 If choosing use smart card or the certificate as the EAP type we select to use a certificate on this computer Fig 3 74 4 We will change EAP type to fit the variable test condition 4 Wireless Network Connection Properties General Wireless Networks Authentication Advanced Select this option to provide authenticated network access for wired and wireless Ethernet networks Enable network access control using IEEE S02 17 EAP type Smart Card ar other Certificate MD5 Challenae Smart Card ar other Certificate Authenticate as computer when computer information is available Authenticate as quest when user or computer information is unavailable Figure 2 Enable IEEE 802 1X access control 75 Figure 3 Smart card or certificate properties 4 Windows 2000 RADIUS server Authentication testing 4 1DUT authenticate PCI using certificate PC2 follows the same test procedures 1 2 Download and install the certificate on PCI Fig 4 choose the SSID of DUT as the Access Point Set authentication type of wireless client and RADIUS server both to EAP TLS Disable the wireless connection and enable again The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PCI Fig 5 Windows XP will

User`s Manual

Contents

Download Pdf Manuals

Related Search

Related Contents