VRT-402N User`s Guide - PLANET Technology Corporation.
Contents
1. 50 6 1 APPLICATION SETTINGS pen ab Wr ce ive distin 50 6 2 VIRTUAL HOST si irte haine ea E ane 52 6 3 STREAM VPN rtr heretice t evene 53 6 4 e ev atus oe aV 54 CHAPTER 7 ADMINISTRATOR 6 nenen 56 7 1 MANAGEMENT sv IE 56 7 2 SYSTEM ere fr eio v oa dune era 57 7 3 UPS PE 59 89 55 2 62 8 1 e PR i CO TN 62 8 2 USER DHC 64 8 3 USER CURRENT AE E A E ovra TER E 64 8 4 D EEEE AA c E E 65 2 2 Neda 67 9 1 EOGOUT 22 o mta obest duet Eo eot as 67 CHAPTER 10 TROUBLESHOOTING eere enne nennen nn intra 68 Chapter 1 Introduction Thank you for purchasing VRT 420N This manual guides you on how to install and properly use the VRT 420N in order to take full advantage of its features 1 4 Package Contents VRT 420N x 1 Antenna Ethernet Cable x 1 Power Adapter x 1 CD ROM in2. sod after 19 21 35 LAN No T A S A 21 LUE MEE oic 21 21 5 DHCP Servo nmas nma reme aod aea eed bos edendi esi 24 21 6 JDBNSU te euet eee senos 24 4 1 7 MAC Adgaress sa oa aire eue 26 4 2 WIBEEESS rtt A 26 4 2v a Dose 26 4 2 2 Wireless security mode WEP nennen nnne nnne nnne nnn nnns 27 4 2 8 Wireless security mode WPA PSK WPA2 28 4 2 4 Wireless security mode WPA Radius WPA2 Radius 28 42 55 ero o 29 LE 31 4 2 7 Universal Repeal oirr iraran a E 31 CHAPTERS SECUR T V 025 iA Aaaa ahaaa nauanta 33 5 1 aseni Mit aly 33 5 2 ACCESS GONTRO Lc 34 5 3 MAG ACGESS GONTROL ix tias erri ci bt euh 35 5 4 oj 37 5 5 WEB FIETER ceu E Fito eie Tee cu PR Rea e eu Verein 38 5 6 41 5 7 sachet coed 42 5 8 BWM QOS EI Eri 46 CHAPTER 6 APPLICATION 5 5
3. Configuration Import 67 Chapter 10 Troubleshooting If you found VRT 420N is working improperly or stop responding to you please kindly read this troubleshooting first Some problems can be solved by you within very short time Please contacts with your local dealer if below methods are failed Router is not responding to me when want to access it by web browser 1 Please check the connection of power cord and network cable of this router All cords and cables should be correctly and firmly inserted to the router 2 LEDs on this router are off please check the status of A C power adapter and make sure it s correctly powered 3 You must use the same IP address section which router uses 4 Are you using MAC or IP address filter Try to connect the router by another computer and see if it works if not please restore your router to factory default settings pressing reset button for over 10 seconds 5 Set your computer to obtain an IP address automatically DHCP and see if your computer can get an IP address 6 If you did a firmware upgrade and this happens contact your dealer of purchase for help Why I can t get connected to Internet 1 Call your Internet service provide and check if there s something wrong with their service 2 If you just can t connect to one or more website but you can still use other internet services please check URL Keyword filter 3 Try to reset the route
4. OpenDNS Service Enable bisable OpenDNS Username OpenDNs Password n DNS Query Redirection to OpenDNS DNS Servers Enable Disable OpenDNs Label Save Settings Cancel Changes 1 Click on Security OpenDNS tab You will see the following screen 2 Configure OpenDNS Settings following the instructions below OpenDNS Service Choose Enable Disable to enable disable OpenDNS OpenDNS Username Enter OpenDNS user name OpenDNS Password Enter OpenDNS password Choose Enable Disable to enable disable the data flow redirect to the DNS Query Redirection to OpenDNS DNS Servers OpenDNS Server Users can get advanced content filtering function through the setting OpenDNS Label Enter the OpenDNS Label 5 5 WEB Filter 38 PU ul Status Setup Wireless Security App Admin Logout Networking amp Communication 802 7 1n VPN Router Security Web Filtering r Web Filtering Web Filtering Enable Disable r Web Content Filtering Activex Filtering Enable Disable Java JavaScript Filtering Enable Disable Proxy Filtering Enable Disable r Web Filtering Rule Filter Keyword facebook com Filter Type host DENY x twitter com host DENY myspace host DENY x hi5 com host DENY Add Delete Modify Up Down Save Settings Cancel Changes 1 Click on Security Web Filtering tab You will see the following screen 2 Configure Web
5. Detection Type If gateway is chosen the system will generate a PING packet to detect 20 whether the connection is still connected If custom host is chosen the system will generate an ARP broadcast request to detect whether the connection is still connected Custom Detection Host Enter the IP address or domain name of the host to be detected 4 1 3LAN The LAN Port screen below allows you to specify a private IP address for your router s LAN interface PLANE Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Setup LAN LAN 1 Internal IP Address 192168 0 Netmask 2552552550 Spanning Tree Protocol STP O Enable bisable MTU 1500 Bytes Save Settings Cancel Changes Parameters Description Internal IP address Please input the IP address of this router Designate the Access Point s IP Address This IP Address should be IP Address unique in your network The default IP Address is 192 168 0 1 Specify a Subnet Mask for your LAN segment The Subnet Mask of the Subnet Mask Access Point is fixed and the value is 255 255 255 0 If it is enabled this router will use the spanning tree protocol to prevent Spanning Tree Protocol from network loop happened in the LAN ports MTU MPLANETum Transmission Unit 4 1 4Routing Click on Setup Routing tab You will see t
6. Host Name MTU 1500 Bytes Bigpond Login Enable Disable Bigpond Login Server New South Wales 61 9 192 13 Bigpond Login User Name Bigpond Login Password 0000000000000000000904 VPN Client Enable Disable Enable ODisable Connection Type DHCP Host MTU 1500 Bytes Bigpond Login Enable Disable Bigpond Login Server New South Wales 61 9 192 13 Bigpond Login User Name Bigpond Login Password 09900000009000000000004 VPN Client Enable Disable If you choose the VPN Client option you will see the following PPTP and L2TP settings information 17 gt PLANE T Status Setup Vir Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Setup WAN WAN 1 WAN Connection Type Host Name MTU Bigpond Login Enable 9 disable Bigpond Login Server New South Wales 61 9 192 13 Bigpond Login User Name B pond Logn Password VPN Client Enable O Disable VPN Client Type PPTP User Name Password VPN Host 1 23 123 123 123 MPPE1 28 Enable O Disable Select PPTP if your ISP requires the PPTP protocol to connect to the Internet Your ISP should provide all the information required in this section e PLANE T Status Setup Wireless Security App Admin Logout Networking amp Communication 802 1 1n VPN Router Setup WAN
7. Advanced security 64 128 bit WEP WPA WPA2 AES PSK 802 1 e Max WDS mode link cloud is set up to 4 sets Multiple SSID Two SSID and hidden SSID broadcasting 1 3 Specification Product 802 11n VPN Broadband Router Model ardware tandard IEEE 802 11b g 802 11n Draft 2 0 IEEE802 3u 11b mode DSSS Signal Type 11g mode OFDM 11n mode OFDM MIMO 802 11b DBPSK DQPSK 802 11g BPSK QPSK 16QAM 64QAM 802 11n BPSK QPSK 16QAM 64QAM 2 x 10 100Base TX Auto MDI MDI X AN Port 3 x 10 100Base TX Auto MDI MDI X I ntenna connector ED Indicators ata Encryption 11b 17 dBm Output Power 11g 15 dBm 11n 15dBm IEEE 802 11b 11 5 5 2 1 Mbps IG IEEE 802 119 54 48 36 24 18 12 9 6Mbps Data Rate Please check Table 1 11 20 40 2 7 10 PER 67 2 54 OFDM 10 PER 72 2dBm 11Mbps 8 PER 88 20 Access Private LAN Servers from the Public Network Equipped with three LAN ports 10 100Mbps and two WAN port 10 100Mbps Supported Internet types Dynamic Static IP PPPoE PPTP L2TP 802 1D Spanning Tree Protocol Router Feature DHCP Server Client UPnP and DDNS DMZ and Virtual Server SNTP Static Routing IEEE 802 11 wireless technology compliant with 802 11b g standard Supports Wi Fi Protected Setup WPS Advanced security 64 128 bit WEP WPA TKIP PSK WPA2 AES PSK 802 1x Max WDS mode link cloud is set up to 4 sets Multipl
8. PLANET User s Manual 802 11N VPN a Broadband Router ar rar www PLANET com tw Copyright Copyright 2011 by PLANET Technology Corp All rights reserved No part of this publication may be reproduced transmitted transcribed stored in a retrieval system or translated into any language or computer language in any form or by any means electronic mechanical magnetic optical chemical manual or otherwise without the prior written permission of PLANET PLANET makes no representations or warranties either expressed or implied with respect to the contents hereof and specifically disclaims any warranties merchantability or fitness for any particular purpose Any software described in this manual is sold or licensed as is Should the programs prove defective following their purchase the buyer and not this company its distributor or its dealer assumes the entire cost of all necessary servicing repair and any incidental or consequential damages resulting from any defect in the software Further this company reserves the right to revise this publication and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes All brand and product names mentioned in this manual are trademarks and or registered trademarks of their respective holders Federal Communication Commission Interference Statement This equipment has been tested and found t
9. WAM 1 WAN GEnable Opisable Connection Type DHCP Host Name MTU Bytes Bigpond Login Enable Disable Bigpond Login Server New South Wales 61 9 192 13 Bigpond Login User Name B pond Log Password VPN Client Enable O Disable VPN Client Type PPTP User Name Password VPN Host 123 123 123 123 MPPE1 28 Enable O Disable 18 this WISP mode the wireless client will connect to ISP access point The is enabled and PCs in Ethernet ports share the same IP to ISP through wireless LAN You must set the WAN port to WISP mode first and connect to the ISP AP in Site Survey page The connection type can be setup in WAN page by using PPPOE DHCP client PPTP client or static IP Setup WAN WAN 1 WAN GEnable Ovisable Connection Type WISP v Target SSID Target BSSID MAC Wireless Channel Channel 6 2 437GHz Extention Channel Above v Site Survey Security Mode Disable e WISP AP AP Client Connection Flexible in installation VRT 420N Flexible in wiring distance WISP mods CPE Router Saving wiring cost Internet WISP Provider Physical Wire Wireless connection Please the Click Next button to proceed to the next step 4 1 2WAN Advance 1 Configure the Setup WAN Advance following the instructions below 19 Setup WAN Advanced Load Balance WAN 1 Connection Mode Backup
10. 18 60 91 8B Router Information Model Name Product model name is shown Firmware Version The firmware version this device is running Current Time Current system time LAN The maximum IP addressed which can be assigned to PCs connecting to the network Wireless Network Wireless SSID SSID of this Wi Fi station Max DHCP Clients Wireless Channel Wireless Channel in use default is 6 MAC Address MAC Address 63 WAN MAC Address MAC Address Connection Type The current connection type PPPoE Static IP and DHCP IP Address WAN IP Address Subnet Mask Number of subnet mask Gateway IP address of the gateway 8 2 User DHCP Click on Status DHCP tab You will see the following screen 3 PLAN Status Setup Wireless Security App BWh Admin Logout Networking 8 amissa 202 1 1n VPN Router Status User DHCP Table 2 users Aadrok 355404354765 182 165 021 64 27 59559357 233142 Westie baag PC 182 168 020 515030017 215211 client name IP Address IP address which is assigned to this client MAC Address MAC address of this client Expiration T The remaining time of the IP assignment ime 8 3 User Current Click on Status Current tab You will see the following screen 64 gt PLANET s Setup Wireless Security App Admin Logout Networking amp Communication 802 1 1n VPN Router Status User ARP Table 2 users IP
11. 37 none root WANI down OK lt S S gt 137 root 802 1X Radius stop OK lt S S 137 none root WANG stop OK lt SYS 37 none root stop OK lt SYS 57 none root WAN1 up OK 210 66 155 30 57 root 802 1X Radius start OK Jun 21 02 42 59 none root AGL WAN service start SYS Jun 21 02 42 59 none root WANG start OK SYS Jun 21 02 42 59 none root OpenDNs client start OK SYS Jun 21 02 43 00 none root DDrS client start OK lt dan 21 02 43 00 nonet rant 119n0p sermer start Log Server Setting Syslog Server Enable pisabie z Remote IP Address Protocol Remote Port Save Settings 65 Log Server Setting Syslog server Enable Disable Sys log feature Remote IP Remote Sys log server address Address Protocol What protocol you want to use for TCP UDP Remote port Sys log remote port 66 Chapter 9 Logout 9 1 Logout To logout the VRT 420N Networking amp Communication 802 1 1n VPN Router Admin Management Administration Interface Language English Administrator Password Re type Password Remote Management Enable Obisable Management Port HTTP 80 Reboot Reboot Reboot Router Configuration Configuration Export Export Default Configuration Restore
12. Cancel Changes Add Delete Modity up VPN PPTP Settings 1 Click on Security VPN PPTP tab You will see the following screen 41 2 Configure PPTP Settings following the instructions below Sequence Number Rule Enable User Name Password Cancel Changes Add VPN PPTP Rule Click on Add tab You will see the following screen Configure Add PPTP Settings following the instructions below Sequence Number This defines the sequence of the PPTP rules Rule Enable Enable Disable this PPTP rule User Name Enter PPTP user name Password Enter PPTP password 5 7 VPN IPSec WAN failure detection works by detecting the presence of traffic on the 3G modem link If the link is idle for too long the router will attempt to ping a target IP address If the ping does not reply the router assumes the link is down and attempts to fail over to Ethernet WAN link 42 9 PLANET Status Setup Wireless Security Admin Logout Networking amp Communicator 802 7 Jn VPN Router Security VPN IPsec IPsec IPsec O Enable S pisable User Rule Connection Name Rule Enable External Interface Remote Gateway Remote Subnet IP Netmask Delete Modify Up Down Save Settings Cancel Changes After add the option you will see the following settings Sequence Number 2 Connection Name Rule Enable M VPN Mode Netto Net Local External Interface WANT Lo
13. must use the same encryption mode and encryption keys Please Note If one of the above fails WDS devices cannot communication with each other 4 2 7Universal Repeater Universal Repeater enables the wireless bridging amongst several wireless devices The bridged devices are identified by the Target SSID and MAC addresses 31 Wireless Universal Repeater WLAN 1 Universal Repeater Enable OkEnable GDisable Target SSID Target BSSID MAC Wireless Channel Extention Channel Site Survey Security Mode In Universal Repeater mode this device can act as a station to connect to Target SSID a Root AP You should enter the SSID of the Root AP here Target MAC Wireless Channel Universal repeater wireless channel Extension Channel Select extension is Above Blow Security Mode Please choose the WEP WPA PSK or WPA2 PSK mode option Please assign the root AP MAC address 32 5 1 Firewall Chapter 5 Security VRT 420N provides extensive firewall protection by restricting connection parameters thus limiting the risk of hacker attack and defending against a wide array of common Internet attacks Security Firewall Firewall Protection SPI Firewall Protection TCP SYN DoS Protection ICMP Broadcasting Protection ICMP Redirect Protection Broadcast Storming Enable Disable Enable Disable Enable O Disable Enable O Disable Enable Disable
14. of the IP addresses supported by the DHCP Server Lease Please choose lease time from the selection list You can choose 1 Hour 3 Hours 6 Hours 1 Day 3 Days or 7 Days Domain Please enter the domain name PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Setup DHCP Server r DHCP Server 1 DHCP Service DHCP Start IP Address Max DHCP Clients Lease Domain DHCP DNS Server Type DHCP DNS Server IP Address Enable Obisable 192 168 0 20 16 11 OpenDNS Server v Save Settings Cancel Changes After configuration complete please click Save Settings button to save the configuration Then you will see a screen to prompt you the settings are saving successfully You may press Confirm for configure other settings or Save Settings to restart VRT 420N with new configuration 4 1 6DDNS DDNS allows you to map the static domain name to a dynamic IP address You must get an account password and your static domain name from the DDNS service providers This router supports DynDNS and TZO 24 gt PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Commerication 802 1 Jn VPN Router Setup DDNS r Dynamic Domain Service WAN 1 DDNS Service O Enable Disable DDNS Type Dyn
15. support the five SSID allow the ability for separate security mode and key settings to be set by users for both convenience and increased protection Users are able to configure their network devices to access the first SSID with the WPA2 PSK Pre Shared Key and secret key whilst share the second SSID with WEP and the periodically changed key for visitors In addition users are able to isolate these SSIDs to avoid malicious attacks and prevent certain access for visitors using the second SSID This then provides users an extremely convenient approach to share the wireless access provide access internet access for visitors while possessing a strong security protection system at all times 26 Wireless Basic WLAN 1 Wireless Connection Enable Disable Wireless Mode BIGIN Mixed Transmission Power 100 Wireless Channel Channel 6 2 437 6Hz Wireless Isolation Between 55105 O Enable 9 Disable WLAN 1 SSID 1 Wireless SSID 9 Enable O Disable Wireless SSID Name defaut Wireless SSID Broadcasting Enable O Disable Wi Fi Multimedia MM Enable Disable Wireless Isolation Enable Disable Security Mode Disable WLAN 1 SSID 2 Wireless SSID Wireless SSID Name Wireless SSID Broadcasting Enable Disable Wi Fi Multimedia MM Enable Disable Wireless Isolation Enable Disable Security Mode Dis able 4 2 2Wireless security mode WEP When you select 64 bit or 128 bit WEP key yo
16. within the EU if applicable Company Name Planet Technology Corp Company Address 10F No 96 Minquan Rd Xindian Dist New Taipei City 231 Taiwan R O C Person responsible for making this declaration Name Surname Jonas Yang Position Title Product Manager Taiwan 28 March 2011 Place Date Legal Singnature PLANET TECHNOLOGY CORPORATION e mail sales planet com tw http www planet com tw 11F No 96 Min Chuan Road Hsin Tien Taipei Taiwan R O C Tel 886 2 2219 9518 Fax 886 2 2219 9528 Q EC PLANET Networking amp Communication Declaration of Confomi English Hereby PLANET Technology Corporation Lietuvi kai iuo PLANET Technology Corporation skelbia declares that this Product Wi Fi is in compliance kad Product Wi Fi tenkina visus svarbiausius with the essential requirements and other relevant 1999 5 EC direktyvos reikalavimus ir kitas svarbias provisions of Directive 1999 5 EC nuostatas esky Spole nost PLANET Technology Corporation Magyar A gy rt PLANET Technology Corporation t mto prohla uje e tato Product Wi Fi spl uje kijelenti hogy ez a Product Wi Fi megfelel az z kladn po adavky a dal p slu n ustanoven 1999 5 EK ir nyelv alapk vetelm nyeinek s a sm rnice 1999 5 EC kapcsol d rendelkez seknek Dansk PLANET Technology Corporation erkl rer Malti Hawnhekk PLANET Technology Corporation herved at f lgende uds
17. 1st rule from the top of the list Rule Name Enter the name of the port forwarding rule Rule Enable Check Uncheck to enable disable this port forwarding rule 6 2 Virtual Host 52 Status Setup Wireless Security App BAM Admin Logout N Networking amp Communication 802 7 1n VPN Router Applications Virtual Hosts Virtual Hosts Virtual Hosts Enable Obisable Virtual Host Rule Rule Enable External Interface External IP Address Mapped LAN IP Address aaa Delete Modity Up Down After enable the add and modify the function WEB UI will show the following information Sequence Number Rule Name Rule Enable External Interface External IP Address Mapped LAN IP Address Cancel Changes Sequence Number Please key the number Rule Name Please key the Name Rule Enable Enable Disable the Rule External Interface Choice the interface for this rule External IP Address Please key the WAN Port IP address Mapped LAN IP Address Please key the LAN Port IP address 6 3 Stream VPN 53 e PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 7 1n VPN Router Applications Streaming VPN Streaming RTSP Enable O Disable MMS Enable Disable Video Conference H 323 Enable Obisable VPH Enable Opisable Enable O Disable Save Settings C
18. 44 Configure Add IPsec Settings following the instructions below Local External Interface Choose the external WAN for the local VPN gateway Local Internal IP Address Choose the subnet IP address for the VPN gateway Local Netmask Choose the netmask for the local VPN gateway Remote Gateway Enter the IP address or domain name of the remote VPN gateway This option is Remote Subnet IP Enter the subnet IP address of the remote VPN gateway This option is needed in eem m men Remote Netmask Enter the subnet netmask of the remote VPN gateway This option is needed in _ m s Connection Initiation Check the local VPN gateway to initiate the connection This option is needed in m deeem emm DPD Interval The interval time for DPD Phase 1 Group Key Choose the phase 1 group key management as DH1 DH2 or DH5 Management Phase 2 Authentication Choose the phase 2 authentication as MD5 or SHA1 Phase 2 Encryption Choose the phase 2 encryption as DES 3DES or AES Phase 2 Group Key Choose the phase 2 group key management as DH1 DH2 or DH5 Management 45 5 8 BWM QoS The Bandwidth Management System in VRT 420N provides Static Bandwidth Management SBM feature to control the packet flow through the router in order to meet the service of quality SBM provides users or groups with the option to allocate a fixed amount of bandwidth for a specific computer IP or a particular application Port BWM Settings The essential configuration ne
19. 68 0 X where X is a number between 2 and 99 Make sure that the number you choose is not in use on the network Set Default Gateway the same as the LAN IP address of your router 192 168 0 1 Set Primary DNS the same as the LAN IP address of your router 192 168 0 1 The Secondary DNS is not needed or you may enter a DNS server from your ISP 5 Click OK twice to save your settings 13 Chapter 3 Web Login We suggest manage the VRT 420N In the browser IE version 7 or later version Microsoft Internet Explorer VRT 420N with an assigned IP address allows you to monitor and configure via web browser e g MS Internet Explorer or Netscape 1 Open your web browser 2 Enter the IP address of your VRT 420N in the address field default IP address is http 192 168 0 1 3 Please enter your User Name and Password in the dialog box Default User Name and Password are both admin Click OK Connect to 192 168 0 1 Default admin admin User name Password Remember my password 4 Then you will see the VRT 420N HOME screen as below 14 Q PLANET Setup WAN 1 WAN Connection Type External IP Address Netmask Gateway Static DNS 1 Static DNS 2 MTU VPN Client Connection Type Host Name MTU Bigpond Login Bigpond Login Server Bigpond Login User Name Bigpond Login Password VPN Client Networking amp Communication 802 1 1n VPN Router Status Setup Wirel
20. Address MAC Address 210 66 155 94 00 03 c9 ab 4b 9b Dynamic 192 168 0 24 00 0 4 77 11 99 Dynamic IP Address IP address assigned by Static ARP matching MAC Address MAC address in the Static ARP matching ARP Type Static or dynamic 8 4 Log Click on Status Log tab You will see the following screen PLANET 8 umm 02 7 7 WP Router Status Log System Log Log Class SYS refresh SYS Jun 21 02 41 57 none root WAN1 down OK 1 lt SYS gt 57 none root 802 1X Radius stop OK SYS 157 none root WANG stop OK SXS 57 none root TurboLink stop OK SXS 17 none root WAN1 up OK 210 66 155 90 SxXS Jun 21 02 42 17 none root 802 1X Radius start OK SYS Jun 21 02 42 19 none root AGL WAN service start SYS Jun 21 02 42 19 none root WANG start OK SYS Jun 21 02 42 19 none root OpenDNs client start OK SY2S 20 none root DDriS client start OK lt SYS gt 20 none root LIPnP server start OK lt SYS 28 root NTP client start OK lt SY S 23 none root IPSEC server start OK SYS 29 nione root TurboLink start OK SYS 29 none root WANI down OK 210 66 155 90 SXS Jun 21 02 42 30 none root 802 1X Radius stop OK SYS Jun 21 02 42 30 none root WANG stop OK lt S S gt Jun 21 02 42 30 none root TurboLink stop OK SYS Jun 21 02 42
21. Admin Logout Networking amp Communication 802 1 1n VPN Router Admin Management Administration Interface Language English Administrator Password Password Remote Management Enable Obisable Management Port 80 Reboot Reboot Reboot Router Configuration Configuration Export Export Default Configuration Restore Configuration Import Firmware Firmware Upgrade Save Settings Cancel Changes Click on Admin Management tab You will see the following screen 56 Configure Administration Interface Settings based on the instructions listed below Select the language of administration Interface you wish to use Maximum input is 36 alphanumeric characters case sensitive Please change the administrator s password if the remote Administrator Password management is enabled Otherwise a malicious user can access the management interface This user can then have the ability to change the settings and damage your network access Re type Password Enter the password again to confirm Select Enable to enable Remote Management Remote Management Select Disable to disable Remote Management Management Port HTTP port which users can connect to default port is 8080 Configure Configuration Settings based on the instructions listed below Configuration Export C
22. Configure Security Settings following the instructions below SPI Firewall Protection TCP SYN DoS Protection ICMP Broadcasting Protection Select Enable to enable SPI Firewall Protection Select Disable to disable SPI Firewall Protection Check to enable TCP SYN DoS Protection Uncheck to disable TCP SYN DoS Protection TCP SYN DoS attack sends a flood of TCP SYN packets Each of these packets are like a connection request causing the server to consume computing resources e g memory CPU to reply and to continuously wait for the incoming packets Without TCP SYN Dos Protection the resources in the server will be easily consumed completely This will then consequently result in the dysfunction of the server VRT 420N is able to detect TCP SYN DoS attacks and limits the resource consumption by lowering the incoming request rate by fast recycling the resource Check to enable ICMP Broadcasting Protection Uncheck to disable ICMP Broadcasting Protection ICMP broadcasting attack is a type of DoS attacks A flood of ICMP broadcasting packets is generated and sent to a server Consequently this server will suffer from a huge amount of interruptions and consumption of computing resources VRT 420N is able to stop responding to ICMP broadcasting echo packets in order to avoid a potential ICMP broadcasting DoS attack 33 Redirect Protection Broadcast Storming 5 2 Access Control Check to enable ICMP Redir
23. DNS org User Name Password Host Name Action Update r Dynamic Domain Service WAH 2 DDNS Service O Enable S pisable DDNS Type DynDNS org User Name Password Host Name Action Update Parameters Description DDNS Service Enable Disable the DDNS function of this router DDNS Type Select a DDNS service provider The default setting is DynDNS User name Your static domain name that use DDNS Password The password you set for the DDNS service account above Host Name The account that your DDNS service provider assigned to you 25 4 1 Address Clone To connect to Internet your ISP will require MAC address from your PC Type in this MAC address in this section or use the Clone MAC Address button to replace the WAN port MAC address with the your PC s To find out the PC s MAC address see Appendix A also see Glossary for an explanation on MAC address f PLANET 55 Security App BAM Admin Logout amp Communication 802 1 1 VPN Router Setup MAC Address Clone MAC Address Clone 1 Clone WAN MAC O Enable Disable MAC Address Address Clone WAH 2 Clone WAN MAC OEnable disable MAC Address Address Clone LAH 1 Clone WAN MAC O Enable disable MAC Address Save Settings Cancel Changes 4 2 Wireless 4 2 1Basic Multiple SSIDs VRT 420N Max
24. Filtering Settings following the instructions below Web Filtering Choose Enable Disable to enable disable Web Filtering ActiveX Filtering Choose Enable Disable to enable disable ActiveX Filtering Java JavaScript Filtering Choose Enable Disable to enable disable Java JavaScript Filtering Proxy Filtering Choose Enable Disable to enable disable Proxy Filtering 39 Added Web Filtering Rules 3 Click on Add tab You will see the following screen Sequence Number 1 Rule Enable o Filter Keyword web page name Filter Type v Action Cancel Changes 4 Configure Web Filtering Settings following the instructions below This defines the sequence priority of all the Web Filtering rules 5 Example Block a URL with Keyword If one need to block sex related web page can follow the settings as below Sequence Number Rule Enable Filter Keyword Filter Type Action Cancel Changes 40 5 6 VPN PPTP PLANET Status Setup VW ss Security App BAM Admin Logout etwertong 4 NET 802 1 1n VPN Router Security VPN PPTP PPTP PPTP O Enable cisable MTU 1452 Bytes VPN Start Address 192 168 3941 Max VPN Clients Auto DNS Enable Disable DNS CHAP Enable Enable Disable MSCHAP Enable Enable Disable MSCHAP v2 Enable Enable Disable MPPE1 28 Enable Enable Disable Proxy ARP Enable Enable Disable NAT Enable Enable Disable User Rule Down
25. Guard Interval GI 9 Enable O Disable Operation Mode Mixed Mode v HT Band Width 20 40 MHz Block Ack Setup Automatically Enable O Disable Block Ack Window Size B4 x18 Bits 1 64 Reject Block Ack O Enable 9 Disable MCS Auto v 29 Choose different transmission mode MPDU data length The transmission rate is increase when you choose a larger number but usually the max value will be 4 in the wireless card A kind of packet aggregation method it can improve the transmission efficiency MSDU Aggregate Please make sure you Wireless card has this function supported Some 802 11g wireless card can supported this mode and the transmission rate can Tx Burst be increased when enable this function An aggregation method like A MSDU it can improve the transmission efficiency Packet Aggregate Please make sure you Wireless card has this function supported HT Control Field Choose Enable Disable It is useful when you need to debug the wireless network Reverse Direction Grant Choose Enable Disable The response time can be shorter when enable this function Choose Enable Disable The function is use to dynamically change the modulation Link Adapt and encode mechanism between wireless devices Choose Enable Disable Short Gl can improve some transmission rate but with less Short Guard Interval SGI immunity when interference exist Choose Mixed mode or Greenfield You may choose Greenfield mode
26. If PWD LED is not on or any LED you expected is not on please recheck the cabling or jump to Troubleshooting for possible reasons and solution ADSL TF Bil lo LAN3 LAN2 WANT Power Adapter 5V 2A SH LAN p 7 NB PC Note 1 ONLY use the power adapter supplied with the VRT 420N Otherwise the product may be damaged 2 If you want to reset VRT 420N to default settings press and hold the WLAN ON OFF USB Eject button over 30 seconds and release And then wait for VRT 420N restart 11 2 3 Network Setup After you install your VRT 420N the TCP IP settings should be set to obtain an IP address from a DHCP server VRT 420N automatically To verify your IP address please follow the steps below 1 Click on Start Run home user Internet My Documents B Internet Explorer e 4 Recent Documents gt J E mail Outlook Express 5 27 Pictures B gt Command Prompt 27 My Music 2 Computer MSN Control Panel e Windows Media Player Set Program Access and Defaults 8 Windows Messenger Printers and Faxes e Tour Windows XP Help and Support Files and Settings Transfer Search Wizard 72 Log Off 0 Turn Off Computer All Programs gt 2 Inthe run box type and click OK Windows Vista users type cmd in the Start Search box At the prompt Type the name of a pr
27. WAN Load Balance Weight Wait Time External Connection Detection Connection Detection Threshold Detection Timeout Detection Type Custom Detection Host Load Balance WAM 2 Connection Mode Backup WAN Load Balance Weight Wait Time External Connection Detection Connection Detection Threshold Detection Timeout Detection Type Custom Detection Host Always Mone z 4 O Enable Disable rime s Seconds Always On None 1 10 O Enable cisable Time s Seconds Save Settings Cancel Changes Parameters Description Detection Interval Load balance detection interval seconds Connection mode Choose Always on Backup to define this WAN is for load balance always on or just for backup Backup WAN None Load Balance Weight The priority is set from 1 to 10 1 indicates the lowest priority and 10 indicates the highest The system would route according to the ratio of priority Wait Time The time to re send the request seconds External Connection Detection Choose Enable Disable to enable disable connection detection Connection Detection Threshold The system will generate a PING packet to detect whether the connection is still connected If the Host is not response for this threshold value the system is considered to be WAN lost Detection time out How long Load balance detection will seems time out
28. a presente PLANET Technology Slovensky Vyrobca PLANET Technology Corporation tymto Corporation declara que Product Wi Fi cumple deklaruje Ze t to Product Wi Fi je v s lade so con los requisitos esenciales y cualesquiera otras z kladn mi po iadavkami a al mi relevantn mi disposiciones aplicables o exigibles de predpismi smernice 1999 5 EC la Directiva 1999 5 CE Fran ais Par la pr sente PLANET Technology Slovensko PLANET Technology Corporation s tem potrjuje Corporation d clare que les appareils du Product da je ta Product Wi Fi skladen a z osnovnimi Wi Fi sont conformes aux exigences essentielles et zahtevami in ustreznimi dolo ili Direktive 1999 5 EC aux autres dispositions pertinentes de la directive 1999 5 CE Italiano Con la presente PLANET Technology Suomi PLANET Technology Corporation vakuuttaa t ten Corporation dichiara che questo Product Wi Fi ett Product Wi Fi tyyppinen laite on direktiivin conforme ai requisiti essenziali ed alle altre 1999 5 EY oleellisten vaatimusten ja sit koskevien disposizioni pertinenti stabilite dalla direttiva direktiivin muiden ehtojen mukainen 1999 5 CE Latviski Ar o PLANET Technology Corporation apliecina Svenska H rmed intygar PLANET Technology Corporation ka Product Wi Fi atbilst Direkt vas 1999 5 EK pamatpras b m un citiem atbilsto iem noteikumiem att denna Product Wi Fi st r i verensst mmelse med de v sentliga egenskapskrav och vriga rel
29. ancel Changes You can enhance your media streaming quality by enabling RTSP MSS and H 323 protocols Moreover VPN Pass through functionality can also be enabled Click on App Streaming VPN tab You will see the following screen Configure Streaming Settings following the instructions below RTSP Select Enable Disable to enable disable RTSP Select Enable Disable to enable disable MMS Configure Video Conference Settings following the instructions below H 323 Select Enable Disable to enable disable H 323 Configure VPN Settings following the instructions below IPSec Pass through Select Enable Disable to enable disable IPSec Pass through PPTP Pass through Select Enable Disable to enable disable PPTP Pass through 6 4 UPnP NAT Click on Applications UPnP NAT PMP tab You will see the following screen 54 gt PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Applications UPnP UPnP UPnP Enable Disable UPnP Port 49152 Save Settings Cancel Changes Configure UPnP Settings following the instructions below UPnP Select Enable Disable to enable disable UPnP NAT PMP Select Enable Disable to enable disable NAT PMP UPnP Port Enter the number for UPnP port 55 Chapter 7 Administrator 7 4 Management LANET Status Setup Wireless Security App
30. and 2 this Device must accept any interference received including interference that may cause undesired operation Federal Communication Commission FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure set forth for an uncontrolled environment In order to avoid the possibility of exceeding the FCC radio frequency exposure limits human proximity to the antenna shall not be less than 20 cm 8 inches during normal operation CE mark Warning This is a class B device in a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Energy Saving Note of the Device This power required device does not support Stand by mode operation For energy saving please remove the DC plug or push the hardware Power Switch to OFF position to disconnect the device from the power circuit Without remove the DC plug or switch off the device the device wills still consuming power from the power circuit In the view of Saving the Energy and reduce the unnecessary power consuming it is strongly suggested to switch off or remove the DC plug for the device if this device is not intended to be active R amp TTE Compliance Statement This equipment complies with all the requirements of DIRECTIVE 1999 5 CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal Equipment and the mutual recognition of their conform
31. andwidth type according to your Internet service Bandwidth Type subscription Download Upload If the bandwidth type is not available on the list select Custom Download Bandwidth Enter the value to customize download bandwidth Upload Bandwidth Enter the value to customize upload bandwidth Reserved Buffering Enter the value to provide bandwidth buffer Bandwidth 5 Advanced Setting Example A user subscribed 10M 2Mbps bandwidth from ISP After performing some speed test the user found that the actual bandwidth is about 1135KByte sec downloading and 200KByte s uploading We change the dimension in Kbps as follows Upload Speed 200KB s x 8 1600Kbp s The settings can be done as below Bandwidth Type Select custom gt Download Upload Upload Bandwidth Enter the value to 1600 Reserved Buffering User can firstly set the value about 1096 and adjust this value later If your Bandwidth network is very stable you could lower this value 47 Add Bandwidth Management Group Rules Click on Add tab You will see the following screen Sequence Number Rule Name Rule Enable Internal IP Address Protocol Service Port Range From External Interface WANI v Available Bandwidth WANT 192 0 Kbps 2 192 0 Kbps Bandwidth Allocation By Ratio Ratio Utilize Bandwidth More Than Guaranteed DSCP Disabled Remark DSCP Disabled Cancel Changes Configure Add SBM Sett
32. aranteed 49 Chapter 6 Application Settings 6 1 Application Settings The Status screen allows you to monitor the current status of your router You can use the Status page to monitor the connection status of Applications Settings By activating the port range forwarding function remote users can access the local network via the public IP address Users can assign a specific external port range to a local server Furthermore users can specify an internal port range associated in a port range forwarding rule When VRT 420N receives an external request to access any one of the configured external ports it will redirect the request to the corresponding internal server and change its destination port to one of the internal ports specified Therefore if users do not wish for destination port to be changed for a request the internal port range should be left empty By enabling DMZ Host Function you can set up a DMZ host at a particular computer exposed to the Internet In this way some applications especially online games if the traffic port numbers of the applications are always changing can be easily accessed 50 Applications Port Range Forward DMZ WAN 1 DMZ O Enable 9 Disable DMZ Address DMZ WAN 2 DMZ Enable Disable DMZ IP Address Port Range Forwarding Port Forwarding Enable Disable Port Range Forwarding Rule monn x TCP HTTP WANT 80 192 168 1 20 Fro
33. cal Internal IP Address 192 168 3 1 Local Netmask 255 255 255 0 v Remote Gateway Remote Subnet IP Remote Netmask 255 255 2550 Connection Initiation IKE Key Mode PSK Preshared Key DPD Enable DPD Interval Seconds 10 1200 DPD Timeout Seconds 30 3600 Advanced Options Cancel Changes After enable the Advance option you will see the following settings 43 Sequence Number 2 i Connection Name Rule Enable ZB VPN Mode Netto Net Local External Interface WANI Local Internal IP Address 192 168 3 1 Local Netmask 255 255 255 0 Remote Gateway Remote Subnet IP Remote Netmask 255 255 255 0 Connection Initiation IKE Key Mode PSK Preshared Key DPD Enable DPD Interval Seconds 10 1200 DPD Timeout Seconds 30 3600 Advanced Options Phase 1 Mode Main v Phase 1 ID Phase 1 Lifetime 3600 Seconds 3600 28800 Phase 2 Lifetime 28800 Seconds 3600 28800 Phase 1 Authentication MD5 Phase 1 Encryption 3DES Phase 1 Group Key Management DH2 Phase 2 Authentication MD5 Phase 2 Encryption 3DES Phase 2 Group Key Management PFS DH2 Cancel Changes Click on Security VPN IPsec tab You will see the following screen Configure IPsec Settings following the instructions below Select Enable Disable to enable disable IPsec
34. cluded user s manual x 1 Quick Installation Guide x 1 Note f any of the above items are missing please contact your supplier for support 1 2 Features Router NAT Features Access Private LAN Servers from the Public Network Equipped with three LAN ports 10 100Mbps and two WAN port 10 100Mbps Auto MDI MDI X supported Supports DHCP Server System status monitoring includes Active DHCP Client Security Log and Device Connection Status Web based GUI for and Wizard setup for easily configuration Remote Management allows configuration and upgrades from a remote site Supported Internet types Dynamic Static IP PPPoE PPTP L2TP Supports UPnP function Firewall Security Features MAC IP filter access control URL blocking SPI firewall DoS prevention protection Built in NAT firewall Predefined User defined service database Enable disable VPN pass through VPN Features Site to site Client to VPN gateway connection capability IKE Keying Methods Auto Pre shared Key Manual Keying Authentication MD5 SHA 1 Encryption DES 3DES AES Adjustable IKE SA Life time PPTP VPN tunnels 10 IPsec VPN tunnels 25 Load balance Multi WAN bandwidth aggregation Round Robin Weighted Round Robin Multi WAN failover WAN failure detection ireless Features IEEE 802 11n wireless technology compliant with 802 11b g standard Supports Wi Fi Protected Setup WPS
35. e SSID Two SSID and hidden SSID broadcasting Site to site Client to VPN gateway connection capability IKE Keying Methods Auto Pre shared Key Manual Keying Authentication MD5 SHA 1 Encryption DES 3DES AES Adjustable IKE SA Life time PPTP VPN tunnels 10 IPsec VPN tunnels 25 Wireless Feature Port forwarding rule Built in NAT Firewall MAC IP Port Filtering Security Content Filtering SPI Firewall support Password protection for system management Web based configuration System status monitoring includes Active DHCP Client Security Log and Managemen Device Connection Status Web based GUI for and Wizard setup for easily configuration Remote Management allows configuration and upgrades from a remote site N Data Rate Table 1 HT20 HT40 Mes Index Data rate Mbps 400ns 0 7 2 15 0 1 14 4 30 0 2 21 7 45 0 3 28 9 60 0 4 43 3 90 0 5 57 8 120 0 6 65 0 135 0 7 72 2 150 0 Chapter 2 Hardware Installation Network Setup Please follow the below instruction to build the wireless network connection between VRT 420N and your computers 2 4 Outlook Front Panel J PLANET 802 11 Dual Networking amp Commoniation 2 Y g 1 1 2 3 VRT 420N WLAN on off wan LAN WPS Reset WLAN on off WPS WLAN ON OFF amp WPS Button WLAN On Off Press for less than 3 seconds for disable w
36. ect Protection Uncheck to disable ICMP Redirect Protection An ICMP redirect message is a way to change the existing routing path Generally ICMP redirect packets should not be sent and so when there is the occurrence that ICMP redirect packets are sent it is important to note that it is very likely to be used as a means for a network attack Check to enable Broadcast Storming Protection Uncheck to disable Broadcast Storming Protection A state in which a message that has been Broadcast across a network results in even more responses and each response results in still more responses in a snowball effect A severe broadcast storm can block all other network traffic resulting in a network meltdown Broadcast storms can usually be prevented by carefully configuring a network to block illegal broadcast messages This section shows how to setup the Broadband router s system Time Zone Password and Remote Management Administrator PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 202 1 1n VPN Router Security Access Contro Access Control List ACL Access Control Default Access Control Action Access Control List ACL Rule a From MSN Messenger MSN Messenger x Yahoo Messenger Add Delete Modify LU Enable Obisable DENY To From DENY To From DENY To Save Settings Cancel Changes Click
37. eded by QoS is to specify accurately the bandwidth you have QoS would then dispatch bandwidth according to this information Please Note Improper bandwidth assignment may cause QoS to work ineffectively Click on BWM QoS tab You will see the following screen Bandwidth Management 908 Enable Disable Bandwidth WAN 1 Bandwidth Type Upload ADSL 2M 256K bps v Upload Bandwidth 256 Kbps Reserved Buffering Bandwidth 25 Too less reserved buffering bandwidth might cause congestion in a unstable network Available Bandwidth 192 0 Kbps Bandwidth WAN 2 Bandwidth Type Upload ADSL 2M 256K bps v Upload Bandwidth 256 Kbps Reserved Buffering Bandwidth 25 96 Too less reserved buffering bandwidth might cause congestion in a unstable network Available Bandwidth 192 0 Kbps Bandwidth Management Group Add Modify Delete Static Bandwidth Management SBM IP Address Application External Interface Bandwidth SBM x 20 192 168 1 20 Add Delete Modify Up Down 46 Bandwidth Settings Please adjust your bandwidth type according to your bandwidth download upload subscribed from your ISP Due to the unstable nature of network bandwidth supported by ISP users are recommended to reserve a portion of bandwidth for buffering usage and QoS would then arrange the reserved bandwidth under heavy traffic Select the correct b
38. ess Security App Static IP 210 66 155 90 255 255 255 224 210 66 155 94 68 95 11 180 Enable Disable Gnable Cbisable Byes O Enable Disable New South Vales 518919213 Y O Enable Disable Save Settings Cancel Changes 15 BAM Admin Logout 4 This section describes the basic configuration of the VRT 420N and allows you to connect to Internet easily 41 Setup 4 1 1WAN The WAN Settings screen allows you to specify the type of Internet connection The WAN settings offer the following selections for the router s WAN port Dynamic IP Static IP PPPoE VPN client and WISP Please select one of the connection types and click More Configuration button or select the option on the left window for configuration If Dynamic IP is selected your ISP will automatically give you an IP address Some ISP s may also require that you fill in additional information such as Host Name Domain Name and MAC address If Static IP is selected your ISP should provide all the information required in this screen If you re ISP requires PPPoE protocol to connect to the Internet Your ISP should provide all the information required in this section 16 J PLANET Status Setup Wireless Security App Admin Logout Networking amp Communication 802 7 1n VPN Router Setup WAN WAN 1 WAN Enable ODisahle Connection Type DHCP
39. evanta best mmelser som framg r av direktiv 1999 5 EG PLANET TECHNOLOGY CORPORATION e mail sales planet com tw http www planet com tw 10F No 96 Minquan Rd Xindian Dist New Taipei City 231 Taiwan R O C Tel 886 2 2219 9518 Fax 886 2 2219 9528
40. f 64 digits 4 2 4Wireless security mode WPA Radius WPA2 Radius You can use a RADIUS server to authenticate wireless stations and provide the session key to encrypt data during communication It uses TKIP or CCMP AES to change the encryption key frequently WLAN 1 SSID 1 Wireless SSID 9 Enable Disable Wireless SSID Name default Wireless SSID Broadcasting Enable O Disable Wi Fi Multimedia MM Enable Disable Wireless Isolation Enable Disable Security Mode WPA2 Radius Radius Server IP Address Radius Server Port Radius Key Encryption Method AES Rekey Method Disable v Rekey Time Interval Rekey Packet Interval Pre authentication Enable Disable Key is an ASCII string of 8 63 digits string of 64 digits 28 4 2 5Advance Wireless Advanced Region Setting Region Europe Japan Australia and Hong Kong channel 1 13 WLAN 1 Fragmentation 2346 Bytes 256 2346 RTS 2347 seconds 1 2347 DTim 1 1 255 Beacon Interval 100 Milliseconds 20 1024 Header Preamble Long TxMode None MPDU 4 Microseconds MSDU Aggregate O Enable 9 Disable Tx Burst 9 Enable O Disable Packet Aggregate O Enable 9 Disable HT Control Field O Enable 9 Disable Reverse Direction Grant O Enable 9 Disable Link Adapt O Enable 9 Disable Short
41. he following screen 21 e 1 5131 Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Setup Routing r Routing Routing Enable Obisable r Routing Rule To Add Delete Modify Up Rule Internal IP External IP Service Port External Routing Name Range Range Protocol PRange Interface Type Gateway SMTP From From WANT TCP From 25 default To 25 Down Cancel Configure Security Settings following the instructions below Routing Choose Enable Disable to enable disable routing policy Add Routing Rule Click on Add tab You will see the following screen Sequence Number Rule Name Enable Internal IP Range External IP Range Protocol Service Port Range External Interface Routing Gateway Gateway IP Address 2 From From To WANT v Default Gateway Cancel Changes Configure the Routing rule following the instructions below Parameters Description Sequence Number This defines the sequence of the Routing rules If a packet fits the conditions set by the Routing rules the packet will then be sorted according to the first Routing rule from the top of the list Rule Name Name of the Routing rule Enable Enable Disable this Routing rule 22 Internal Range Set up the interna
42. ings following the instructions below Sequence Number This defines the sequence of the SBM rules If a packet fits the conditions set by the SBM rules the packet will then be sorted according to the first SBM rule from the top of the list Rule Name Name of the SBM rule Rule Enable Enable Disable this SBM rule Internal IP Set up the internal IP for this SBM rule Protocol Set up the protocol TCP or UDP for the ACL to be enabled Service Port Range Set up the Service Port Range e g HTTP is TCP 80 for the SBM to be enabled External Interface Choice the interface for this SBM rule WAN 1 WAN2 Bandwidth Allocation By Ratio by Bandwidth or by pre defined Group rules Ratio The ratios of the whole upload bandwidth according to the External Interface Utilize Bandwidth More Check this box if you wish to allow the traffic confirming this SBM rule to be than Guaranteed able to utilize the whole bandwidth when the bandwidth is idle 48 Advanced Setting Example1 If a user needs to reverse some bandwidth for a specified application such as VoIP one can have the following configuration to reserve a 25Kbps 25Kbps bandwidth for VoIP application Service Port Range Left blank will applied to all service port Bandwidth Allocation Allocating the bandwidth by fixed value assignment Upload Enter the upload rate to 500 Kbps Utilize Bandwidth More Than m Uncheck this box to reserve a fixed rate for this application Gu
43. ireless configuration Press for less than 3 seconds for WPS configuration Press the WPS and WLAN buttons for longer than 3 seconds to the factory Reset Default default setting Antenna 1 3 WAN1 WAN2 Power Description Attached 3dBi dipole antenna Local Area Network LAN ports 1 to 3 Wide Area Network WAN Internet port Power connector connects to power adapter 2 2 Hardware Installation 1 Locate an optimum location for the VRT 420N The best place for your VRT 420N is usually at the center of your wireless network with line of sight to all of your mobile stations 2 Adjust the antennas of VRT 420N Try to adjust them to a position that can best cover your wireless network The antenna s position will enhance the receiving sensitivity 10 3 Connect all of your network devices to LAN port of VRT 420N Connect all your computers network devices network enabled consumer devices other than computers like game console or switch hub Connect one of the LAN ports on VRT 420N to your LAN switch hub or a computer with a RJ 45 cable 4 Plug in power adapter and connect to power source After power on VRT 420N will start to operate 5 Please check all LEDs on the front panel Status LED should be steadily on WAN and LAN LEDs should be on if the computer network device connected to the respective port of the router is powered on and correctly connected
44. ity R amp TTE The R amp TTE Directive repeals and replaces in the directive 98 13 EEC Telecommunications Terminal Equipment and Satellite Earth Station Equipment As of April 8 2000 Safety This equipment is designed with the utmost care for the safety of those who install and use it However special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment WEEE regulation To avoid the potential effects on the environment and human health as a result of the presence of hazardous substances in electrical and electronic equipment end users of electrical and electronic equipment should understand the meaning of the crossed out wheeled bin symbol Do not dispose of WEEE as unsorted municipal waste and have to collect such WEEE separately Wireless National restrictions This device is intended for home and office use in all EU countries and other countries following the EU directive 1999 5 EC without any limitation except for the countries mentioned below Country Restriction Reason remark General authorization required for outdoor use and Bulgaria None public service Outdoor use limited Military Radiolocation use Refarming of the 2 4 GHz to 10 mW 1 band has been ongoing in recent years t
45. l IP range for this ACL rule External IP Range Set up the external IP range for this ACL rule Protocol Set up the protocol TCP or UDP for the ACL to be enabled Service Port Range Set up the Service Port Range e g HTTP is TCP 80 for the ACL to be enabled External Interface Please select which External Interface WAN1 WAN2 you want for a packet to be routed IF the packet fits the condition of this Routing rule Routing Gateway Set up routing gateway default static if static gateway been selected please assign the gateway IP address in blow Gateway IP address For static routing gateway For example Rule Name SMTP outgoing routing Enable Enable Internal IP Range Blank applied to all External IP Range Blank applied to all Protocol TCP Service Port Range 25 25 SMTP Port 25 External Interface WAN1 Rule Name HTTP outgoing routing Enable Enable Internal IP Range Blank applied to all External IP Range Blank applied to all Protocol TCP Service Port Range 80 80 HTTP Port 80 External Interface WAN 2 23 4 1 5DHCP Server Parameters Description DHCP Server Enable or disable the DHCP Server DHCP Start IP Address The DHCP starting IP addresses offered by the DHCP Server Max DHCP Clients The mPLANETum number
46. lick Export to save your current configuration settings in a file Default Configuration Click Restore to recover the default system settings Restore Configuration Import Click Browse and Import to load previous configuration settings Configure Firmware Settings based on the instructions listed below Firmware Upgrade Click Browse and Upgrade to upgrade the firmware 7 2 System Utility Click on Admin System Ultilities tab You will see the following screen 57 Admin System Utilities Ping Interface Target Host Number of Packets Ping ARPing Within the same broadcasting domain Interface Target Host Number of Packets ARPing Trace Route Interface Target Host Hop Count Trace route Packets 1 10 Packets 1 10 Counts 1 15 58 Using the ping tool based on the instructions listed below Interface Select the interface that use to ping to ie WAN1 WAN2 LAN Target Host Enter the IP address to ping to Number of Packets Specify the number of the ICMP packets to send out Ping Press the tab to start the ping actions Using the ARPing tool based on the instructions listed below Interface Select the interface that use to ARPing to ie WAN1 WAN2 LAN Target Host Enter the MAC address to ARPing to Number of Packets Specify the number of the ARP request packets to send out ARPing Press the tab to start
47. m 80 HTTPS 1 From 443 192 168 1 20 From 443 WAN4 From 110 192 168 1 20 From To 110 To POP3S WANT TCP From 995 192 168 1 20 From To 995 To SMTP WANT TCP From 25 192 168 1 20 From To 25 To SMTPS WANA TCP From 465 192 168 1 20 From To 465 To SSH WAN4 TCP From 22 192 168 1 21 From Click on App Port Range Forward tab You will see the following screen Configure DMZ Settings following the instructions below DS Select Enable to enable DMZ function Select Disable to disable DMZ function Enter the IP address of a particular host in your LAN which will receive all the DMZ IP Address packets originally going to the WAN port Public IP address above Configure Port Range Forwarding Settings following the instructions below Port Forwarding Select Enable Disable to enable disable Port Forwarding 51 Add Port Range Forwarding Rule Click on Add tab You will see the following screen Sequence Number Rule Name Rule Enable External Interface WANT Protocol TCP N External Port Range From Internal IP Internal Port Range Cancel Changes Configure Add Port Range Forwarding Rule Settings following the instructions below This defines the sequences priorities of the port forwarding rules If a packet fits Sequence Number the conditions setup by the port forwarding rules the packet will then be forwarded according to the
48. n Cancel Changes 1 Click on Security Access Control tab You will see the following screen 2 Configure ACL Settings following the instructions below 3 Click on Add tab You will see the following screen Sequence Number Rule Name MAC Action ACL Enable Static ARP Enable Static DHCP Enable IP Cancel Changes 36 Sequence Number This defines the sequence priority of all the MAC ACL actions Static DHCP Enable Enable Disable this Static DHCP rule The IP address corresponds to static ARP or static DHCP MAC Access Control Choose Enable Disable to enable disable MAC access Control Default MAC Access The default ACL action of the ACL rules When you add the individual rules it can Control Action be viewed as exceptions and take effects relating to the default action If the action of the adding rule is the same as the default action then this rule will not work 4 Example Bind IP to a MAC If users need to bind an IP to a specified MAC network device one can follow the settings as below 5 4 OpenDNS 37 J PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Security OpenDNS OpenDIS 1 OpenDNS Service Enable Disable OpenDNS Username OpenDNS Password DNS Query Redirection to OpenDNS DNS Servers Enable Disable OpenDNS Label OpenDIIS WAH 2
49. n Daylight Saving Support Select Enable Disable to enable disable Daylight Saving Support Select from Every Hour Every 6 Hours Every 12 Hours Every Day and Synchronization interval Every Week Automatic Reboot Select Enable Disable to enable disable Automatic Reboot Reboot Interval Selected the reboot interval Every week Every day Every hour 60 id 61 Chapter 8 Status 8 1 Router Click on Status Router tab You will see the following screen p N T Status Setup Wir Security App Buh Admin Logout amp Cement 802 7 1 VPN Router Status Router Router Information Model Name VRT 420N Firmware Version M 1 2b1 License Authorized Current Time Tue 21 Jun 2011 03 54 09 Running Time 3 hours 44 mins WAN 1 MAC Address 00 50 18 60 91 5 Connection Type static IP Address 210 66 155 90 Subnet Mask 27 Gateway 210 66 155 94 WAN 2 MAC Address 00 50 18 60 91 A5 Connection Type dhep IP Address Subnet Mask Gateway 62 LAN 1 MAC Address 00 50 18 60 91 88 Address 192 168 3 1 Subnet Mask 24 DHCP Service Enabled Start IP Address 192 168 3 20 DHCP End IP Address 192 168 3 35 Max DHCP Clients Wireless Network 1 Wireless Channel Wireless SSID 1 Dv1234 MAC Address 00 50 18 60 91 88 Wireless SSID 2 PLANET1 MAC Address 00 50 18 60 91 89 Wireless SSID 3 PLANET2 MAC Address 00 50 18 60 91 8A Wireless SSID 4 PLANET3 MAC Address 00 50
50. ng wrong or see the smoke coming out from router or A C power adapter please disconnect the router and A C power adapter from utility power make sure it s safe before you re doing this and call your dealer of purchase for help The date and time of all event logs are wrong 1 Adjust the internal clock of router 69 PLANET Networking amp Communication EC Declaration of Confomi For the following equipment Type of Product Multi Homing Broadband Router Model Number VRT 420N Produced by Manufacturer s Name Planet Technology Corp Manufacturer s Address 10F No 96 Minquan Rd Xindian Dist New Taipei City 231 Taiwan R O C is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to 99 5 R amp TTE For the evaluation regarding the R amp TTE the following standards were applied EN 300 328 V1 7 1 2006 EN 301 489 01V1 8 1 2008 EN 301 489 17V1 3 2 2008 EN 55022 2006 Class B EN 61000 3 3 1995 A 1 2001 A2 2005 IEC 61000 4 2 1995 1 1998 2 2001 61000 4 3 2006 61000 4 4 2004 61000 4 5 2006 61000 4 6 2007 61000 4 11 2004 EN 60950 2006 11 2009 60950 1 2005 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established
51. o allow current within the band relaxed regulation Full implementation planned 2012 2454 2483 5 MHz If used outside of own premises general authorization is Italy None required 9 Luxembourg None General authorization required for network and service supply not for spectrum This subsection does not apply for the geographical area Nanay Implemented within a radius of 20 km from the centre of Ny Alesund Russian None Only for indoor applications Federation Revision User s Manual for PLANET 802 11n VPN Broadband Router Model VRT 420N Rev 1 0 June 2011 TABLE 5 CHAPTER 11 6 1 1 PACKAGE GONTENIS med dev n a ee dea 6 1 2 EEATUBES 2t E AE E fenore de te Rx er teva LA ten aie 6 1 3 SPEEGIEIGATIONI2 7 CHAPTER 2 HARDWARE INSTALLATION NETWORK 9 2 1 SIDERED EE 9 2 2 HARDWARE INSTALLATION Ede e ded e e 10 2 3 NETWORK SETUP a Pr bcc d Eb Rea dd er bu b P HET E C Ed deret i aequ 12 CHAPTER 3 WEB EOGI OUR dU 14 GHAPTER 4 SETUP 16 4 1 16 AAT WAN 16 4 1 2
52. o comply with the limits for a Class B digital device pursuant to Part 15 of FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio technician for help FCC Caution To assure Confirmed compliance example use only shielded interface cables when connecting to computer or peripheral devices any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This device complies with Part 15 of the FCC Rules Operation is subject to the Following two conditions 1 This device may not cause harmful interference
53. ogram Folder document or Internet resource and Windows will open it For you Open 12 3 ipconfig and press Enter It will display the IP address subnet mask and the default gateway of adapter C WINDOWS system32 cmd exe fe gt incont ia Windows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix 4 Ifthe address is 0 0 0 0 check your adapter installation security settings and the settings on your router Some firewall software programs may block a DHCP request on newly installed adapters Assign a static IP address If you are not using a DHCP capable gateway router or you need to assign a static IP address please follow the steps below 1 Windows Vista Click on Start gt Control Panel gt Network and Internet gt Network and Sharing Center gt Manage Network Connections Windows Click on Start gt Control Panel gt Network Connections Windows 2000 From the desktop right click My Network Places gt Properties 2 Right click on the Local Area Connection which represents your network adapter and selects Properties 3 Highlight Internet Protocol TCP IP and click Properties 4 Click Use following address and enter an IP address that is on the same subnet as your network or the LAN IP address on your router Example If LAN IP address of VRT 420N is 192 168 0 1 make your IP address 192 1
54. on Security ACL tab You will see the following screen 34 Please do not change the parameters unless you wish to customize it by yourself Sequence Number Rule Name Rule Enable External Interface WAN1 Internal IP Range From External IP Range From Protocol Service Port Range From Action ALLOW Cancel Changes Example Filter and block MSN usage For example a company does not wish to allow employees to use MSN The system administrator can set up an ACL action rejecting the traffic going out to External IP Range at 207 46 110 24 Rule Name MSN Blocking External Interface All complies Internal IP Range Keep it blank All complies External IP Range 207 46 110 1 207 46 110 1 254 IP address range for MSN server Protocol TCP Service Port Range Keep it blank All complies Action DENY 5 3 MAC Access Control The Time Zone allows VRT 420N to allocate its time on the settings configured here it will affect log display functions such as Security Log and Firewall settings 35 3 PLANET Status Setup Wireless Security App BAM Admin Logout Networking amp Communication 802 1 1n VPN Router Security MAC Access Control MAC Access Control MAC Access Control G Enable Default MAC Access Control Action Access Control Rule Rule Enable ACL Enable Static DHCP Enable im Add Delete Modity Up Dow
55. r and try again later 4 Reset the device provided by your Internet service provider too 5 Try to use IP address instead of hostname If you can use IP address to communicate with a remote server but can t use hostname please check DNS setting Why 1 can t locate my router by my wireless client 1 Broadcast ESSID set to off 2 All two antennas are properly secured 3 Are you too far from your router Try to get closer 4 Please remember that you have to input ESSID on your wireless client manually if ESSID broadcast is disabled File download is very slow or breaks frequently 1 Are you using QoS function Try to disable it and try again 2 Internet is slow sometimes being patient 3 Try to reset the router and see if it s better after that 68 4 Try to know what computers do on your local network If someone s transferring big files other people will think Internet is really slow 5 If this never happens before call you Internet service provider to know if there is something wrong with their network can t log onto web management interface password is wrong 1 Make sure you re connecting to the correct IP address of the router 2 Password is case sensitive Make sure the Caps Lock light is not illuminated 3 If you really forget the password do a hard reset Router become hot 1 This is not a malfunction if you can keep your hand on the router s case 2 If you smell somethi
56. the ARPing actions Using the Trace Route tool based on the instructions listed below Interface Select the interface that use to ARPing to ie WAN1 WAN2 Target Host Enter the destination IP address domain name to trace Hop Count Specify the Hop number you need to trace Trace route Press the tab to start the Trace Route actions 7T 3 Time Click on Setup Time tab You will see the following screen 59 Admin Time r Time Synchronization Time Synchronization Enable Disable Time Server Type Time Server Pool O manual Time Server Area North America Time Server IP Address Time Zone UTC 08 00 Pacific Time v Periodic Synchronization Enable O Disable Daylight Saving Support Enable Obisable Synchronization Interval Every Day v Action r Automatic Reboot Automatic Reboot O Enable Disable Reboot Interval Day Hour Minute 30 Configure Time Settings based on the instructions listed below Time Synchronization Select Enable Disable to enable disable Time Synchronization i Select Time Server according to your location You can choose from Time Server Automatic Asia Europe North America South America or Africa Select Time Zone according to your location Daylight Saving Time has Time Zone been calculated and included in the selection Periodic Synchronization Select Enable Disable to enable disable Periodic Synchronizatio
57. to increase the Operation Mode transmission rate when you using 802 11n wireless network only HT Band Width Using HT20MHz or HT20 40MHz Choose Enable Disable If your Wifi Card supported Block Ack mechanism it can Block Ack Setup Automatically improve the data transmission efficiency when enable this function Block Ack Window Size Specify a Block Ack window size Reject Block Ack Choose Enable to reject the request of BA from other Wireless device Select transmission connection speed 30 4 2 6WDS WDS Wireless Distributed System enables the wireless bridging amongst several wireless devices The bridged devices are identified by the WDS MAC addresses PIU ul Status Setup Wireles Security App Admin Logout Networking amp 802 1 1n VPN Router Wireless WDS r WLAM 1 WDS Mode Bridge Disabled iw Disabled Repeater Enabled Bridge Disabled r WDS 1 WDS MAC Address Security Mode Disable v WDS 2 WDS MAC Address Security Mode Disable WDS 3 WDS MAC Address Security Mode Disable WDS 4 WDS MAC Address Security Mode Disable Save Settings Cancel Changes Please make sure of the following settings in order to allow WDS to work effectively 1 WDS bridged devices must use the same radio channel 2 WDS bridged devices
58. tyr Product Wi Fi overholder jiddikjara li dan Product Wi Fi jikkonforma de v sentlige krav og vrige relevante krav i direktiv mal ti ijiet essenzjali u ma provvedimenti o rajn 1999 5 EF relevanti li hemm fid Dirrettiva 1999 5 EC Deutsch Hiermit erkl rt PLANET Technology Corporation Nederlands Hierbij verklaart PLANET Technology orporation dass sich dieses Ger t Product Wi Fi in dat Product Wi Fi in overeenstemming is met de bereinstimmung mit den grundlegenden essenti le eisen en de andere relevante bepalingen Anforderungen und den anderen relevanten van richtlijn 1999 5 EG Vorschriften der Richtlinie 1999 5 EG befindet BMWi Eesti keeles K esolevaga kinnitab PLANET Technology Polski Niniejszym firma PLANET Technology Corporation et see Product Wi Fi vastab Euroopa Corporation o wiadcza e Product Wi Fi spe nia N ukogu direktiivi 1999 5 EC p hin uetele ja wszystkie istotne wymogi i klauzule zawarte w muudele olulistele tingimustele dokumencie Directive 1999 5 EAAnvika ME THN PLANET Technology Portugu s PLANET Technology Corporation declara que Corporation OTI AYTO Product Wi Fi este Product Wi Fi est conforme com os requisitos gt TIX essenciais e outras disposi es da Directiva TIX 1999 5 AXETIKE2 gt gt 1999 5 EK Espafiol Por medio de l
59. u have to enter WEP keys to encrypt data You can generate the key by yourself You can enter four WEP keys and select one of them as default key Then the access point will just allow the clients that with the same encryption keys connected WLAN 1 SSID 1 Wireless SSID Enable Disable Wireless SSID Name PLANETO Wireless SSID Broadcasting Enable O Disable Wi Fi Multimedia GAMM Enable Disable Wireless Isolation 9 Enable O Disable Security Mode WEP Key Index 1 1 112345 Key 2 Key 3 4 WEP Keys are ASCII strings of 5 13 digits or HEX strings of 10 26 digits 27 4 2 3Wireless security mode WPA PSK WPA2 5 Wi Fi Protected Access WPA is an advanced security standard You can use a pre shared key to authenticate wireless stations and encrypt data during communication It uses TKIP or CCMP AES or Mixed mode TKIP AES to change the encryption key frequently So the encryption key is not easy to be broken by hackers This can improve security very much WLAN 1 SSID 2 Wireless SSID 9 Enable O Disable Wireless SSID Name PLANET1 Wireless SSID Broadcasting 9 Enable O Disable Wi Fi Multimedia MM Enable Disable Wireless Isolation Enable O Disable Security Mode PSK Pre Shared Key Key 11234567890 Encryption Method TKIP Key is an ASCII string of 8 53 digits or a HEX string o
Download Pdf Manuals
Related Search