WGR-6012 - LevelOne
Contents
1. gt Lease Time 0 Minutes e Change Password gt IP Pool Starting Address a0 gt IP Pool Ending Address 200 gt Domain Name Save Undo Clients List l Fixed Mapping Press More gt gt 1 DHCP Server Choose Disable or Enable 2 Lease time This is the length of time that the client may use the IP address it has been Assigned by DHCP server 3 IP pool starting Address IP pool starting Address Whenever there is a request the DHCP server will automatically allocate an unused IP address from the IP address pool to the requesting computer You must specify the starting and ending address of the IP address pool 4 Domain Name Optional this information will be passed to the client 5 Primary DNS Secondary DNS This feature allows you to assign DNS Servers 6 Primary WINS Secondary WINS This feature allows you to assign WINS Servers 7 Gateway The Gateway Address would be the IP address of an alternate Gateway This function enables you to assign another gateway to your PC when DHCP server offers an IP to your PC 8 DHCP Client List r8 BASIC SETTING CA FORWARDING RULES SECURITY SETTING SM ADVANCED SETTING TOOLBOX DHCP Clients List Primary Setup IP Address Host Name MAC Address DHCP Server Wireless Change Password Wake up Delete Back Refresh 29 3 3 1 3 Wireless J Wir2. n oa pm m I e Staus 3 Outbound Packet Filter Packet Filters 6 Pees Se t Outbound Filter Enable URL Blocki Allow all to pass except those match the following rules Deny all to pass except those match the following rules MAC Control Schedule rule O0 Always Copyto D Miscellaneous 192 168 1 100 and 192 168 1 119 Located Hosts can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the save button 44 3 3 3 2 Domain filters a i W BASIC SETTING lt 4 FORWARDING RULES SECURITY SETTING Qf ADVANCED SETTING fo TOOLBOX i i bd gt Ta nanii oil a l l PE APEM Domain Filter p in Fi v b Dotis Falters Domain Filter Enable gt URL Blocking Log DNS Query F Enable MAC Control s miscetaneous 0 Domain sumx Action Enable el oo O O ow eee oel o oO o B sl o ae B 5 El Drop El Log El Drop El Log e O B O p Oo ee D ro uo f oe ee OB El Drop El Log El Drop El Log Domain Filter Let you prevent users under this device from accessing specific URLs Domain Filter Enable Check if you want to enable Domain Filter Log DNS Query Check if you want to log the action when someone accesses the specific URLs Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access network without
3. 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 2 Fill in the key Ex 12345678 34 l J Wireless Setting Help Primary Setup Item Setting DHCP Server gt Wireless Enable Disable Wireless Network SSO Change Password gt Wireless Mode Mixed mode 11g only 11b only gt SSID Broadcast Enable Disable gt VVMM 2 Enable Disable gt WDS gt WPS gt Security WPA PSK VVPA2 PSK gt Encryption TKIP AES gt Preshare Key Mode ASCII v WPA WPA2 Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server The router will detect automatically which Security tyoe WPA PSK version 1 or 2 the client uses to encrypt IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server Wireless Client List o Wireless Client List Primary Setup Connected Time MAC Address DHCP Server Tue Jan 26 09 39 58 2010 00 1 C BF O0 CH 37 Back Refresh Change Password Wireless 35 3 3 1 4 Change Password pasicseTinc lt 4 FORWARDING RULES gt
4. 49 Control table MAC Address IP Address 192 168 1 192 168 1 192 168 1 192 168 1 Control table is the table at the bottom of the MAC Address Control page Each row of this table indicates the MAC address and the expected IP address mapping of aclient There are four columns in this table MAC Address MAC address indicates a specific client IP Address Expected IP address of the corresponding client Keep it empty if you don t care its IP address C When Connection control is checked check C will allow the corresponding client to connect to this device When Association control is checked check A will allow the corresponding client to associate to the wireless LAN In this page we provide the following Combobox and button to help you to input the MAC address DHCP chents E select ane Copy to I E You can select a specific client in the DHCP clients Combobox and then click on the Copy to button to copy the MAC address of the client you select to the ID selected in the ID Combobox Previous page and Next Page To make this setup page simple and clear we have divided the Control table into several pages You can use these buttons to navigate to different pages Example 50 ig BASIC SETTING Status Packet Filters Domain Filters URL Blocking MAC Control Miscellaneous In this scenario there
5. O0 Always Copy to 60 3 3 5 Toolbox View Log View the system logs Firmware Upgrade Prompt the administrator for a file and upgrade it to this device Backup Setting Save the settings of this device to a file Reset to Default Reset the settings of this device to the default values Reboot Reboot this device Miscellaneous MAC Address for Wake on LAN Let you to power up another network device remotely Domain Name or IF address for Ping Test Allow you to configure an IP and ping the device You can ping a secific IF to test whether it is alive 3 3 5 1 View Log 20087511718 EF 01 13 26 Blocked access attempt from WLAN 00 1F D4 00 56 51 2008F11A18 EF 01 13 26 Blocked access attempt from WLAN 00 1F D4 00 5B8 51 20083F 1718 EF 01 13 26 Blocked access attempt from WLAN 00 1F D4 00 5B8 51 20085611718 EF 07 13 26 Blocked access attempt from WLAN 06 1F D4 00 5B8 51 You can View system log by clicking the View Log button 61 3 3 5 2 Firmware Upgrade ADMINISTRATOR S MAIN MENU il Status YZ Wizard TH Advanced r BASIC SETTING FORWARDING RULES ia TOOLBOX a l eet View Log Firmware Upgrade Browse Current firmware version is RO 29h0 The upgrade procedure takes about 20 seconds Backup Setting Reset to Default Reboot Note Do not power off the unit when itis being upgraded Miscellaneous When the upgrade is done successfully
6. Old Password gt New Password gt Reconfirm You can change Password here We strongly recommend you to change the system password for security reason 3 3 2 Forwarding Rules 3J Forwarding Rules Virtual Server Allows others to access WAW FTP and other services on your LAN Special Application This configuration allows some applications to connect and work with the NAT router Miscellaneous IP Address of DMZ Host Allows a computer to be exposed to unrestricted 2 way communication Note that this feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP server whose port number is not 21 when Client uses active mode UPnP Setting If you enable UPnP function the router will work with UPnP devices softwares 36 3 3 2 1 Virtual Server ig Basic setTING FORWARDING RULES SECURITY SETTING ff ADVANCED SETTING 6 TOOLBOX 3 Virtual Server Help Virtual Server i Well known services POP3 110 Schedule rule OO0 Always Copyto D 7 2 192 168 1 7 z Special AP Miscellaneous Schedule Rule This product s NAT firewall filters out unrecognized packets to protect your Intranet so all hosts behind this product are invisible to the outside world If you wish you can make some of them accessible by enabling the Virtual Server Mapping A virtual server
7. Control table 192 168 1 101 it will be denied to connect to this device 5 Clients 2 and 3 and other wired clients with a MAC address unspecified in the Control table are all allowed to connect to this device But client 1 is denied to connect to this device 6 Clients 1 and 2 are allowed to associate to the wireless LAN but a wireless client with a MAC address not specified in the Control table is denied to associate to the wireless LAN Client 3 is a wired client and so is 51 not affected by Association control Internet Cable DSL Modem P OD lt Y Wireless USB Adapter Gigabit Switch WGR 6012 3 3 3 5 Miscellaneous Items ADMINISTRATOR S MAIN MENU il Status We Wizard Call Advanced lr BASIC SETTING lt lt FORWARDING RULES ete Status Packet Filters sD in Filters t Remote Administrator Host Port URL Blocking Administrator Time out MAC Control t Discard PING from WAN side Miscellaneous t SPI mode t DoS Attack Detection Remote Administrator Host Port In general only Intranet user can browse the built in web pages to perform administration task This feature enables you to perform administration task from remote host If this feature is enabled only the specified IP address can perform remote administration If the specified IP address is 0 0 0 0 any host can connect to this product to perform administration task You can use subnet mask bits nn no
8. Log Dynamic DNS Enable SNMP Local C Remote Schedule Rule CE es ee e es ee ee ees t SNMP Version H vi vac In brief SNMP the Simple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events Enable SNMP You must check Local Remote or both to enable SNMP function If Local is checked this device will response request from LAN If Remote is checked this device will response request from WAN Get Community Setting the community of GetRequest your device will response Set Community Setting the community of SetRequest your device will accept IP 1 IP 2 IP 3 IP 4 Input your SNMP Management PC s IP here User has to configure to where this device should send SNMP Trap message SNMP Version Please select proper SNMP Version that your SNMP Management software supports 57 3 3 4 5 Routing ADMINISTRATOR s MAIN MENU fl Status Wf Wizard al Advanced W BASIC SETTING lt FORWARDING RULES SECURITY SETTING f ADVANCED SETTING E TOOLBOX ing System Time Routing Table System Log Disable RIP RIPv Dynamic DNS Disable O RIPWI RIPv2 SNMP Disable Enable Routing Schedule Rule Routing Tables allow you to determine which physical interface address to use for outgoing IP data grams If you have more than one
9. MENU fl Status VY Wizard ET Advanced gt Logout N P t C 5 i W BASIC SETTING lt FORWARDING RULES 2 SECURITY SETTING QT ADVANCED SETTING key TOOLBOX Security Setting Status Packet Filters Packet Filters Domain Filters Allows you to control access to a network by analyzing the incoming and outgoing URL Blocking packets and letting them pass or halting them based on the IP address of the source and destination MAC Control Domain Filters Miscellaneous Let you prevent users under this device from accessing specific URLs URL Blocking URL Blocking will block LAN computers to connect to pre defined websites MAC Address Control MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address Miscellaneous 39 3 3 3 1 Packet Filters ADMINISTRATOR S MAIN MENU ll Status W Wizard Cal Advanced re BASIC SETTING a FORWARDING RULES KS SECURITY SETTING qi ADVANCED SETTING g TOOLBOX ef eines Outbound Packet Filter Help Packet Filters Outbound Fil Domain Filters Outbound Filter E Al allto pass except those match the following rules URL Blocking j Allow all to pass except those match the following rules U Deny all to pass except those match the following rules MAC Control Schedule rule 00jAways Copyto D Miscellaneous
10. Others are all allowed After Inbound Packet Filter setting is configured click the save button Outbound Filter 42 To enable Outbound Packet Filter click the check box next to Enable in the Outbound Packet Filter field Example 1 Router LAN IP is 192 168 1 1 D ADMINISTRATOR s MAIN MENU ll Status W Wizard Sl Advanced Logout rT BASIC SETTING X FORWARDING RULES SECURITY SETTING Qf ADVANCED SETTING is TOOLBOX lj s ee Outbound Packet Filter Help Packet Filters t Outbound Fil Fl Enable k TA Outbound Filter Enable A Allow all to pass except those match the following rules URL Blocking 7 Allow all to pass except those match the following rules Deny all to pass except those match the following rules MAC Control Schedule rule O0 Always Copyto D D Source IP Ports Destination IP Ports Schedule Rule Miscellaneous 192 168 1 100 192 168 1 149 Located hosts are only allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 192 168 1 10 192 168 1 20 Located hosts can do everything block nothing Others are all blocked 43 Example 2 Router LAN IP is 192 168 1 1 J ADMINISTRATOR S MAIN MENU lM Status We Wizard Cal Advanced Mf BASIC SETTING a FORWARDING RULES SECURITY SETTING Wij ADVANCED SETTING g 7 TOOLBOX E E J E es
11. Packet Filter enables you to control what packets are allowed to pass the router Outbound filter applies on all outbound packets However inbound filter applies on packets that destined to Virtual Servers or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can specify 8 rules for each direction inbound or outbound For each rule you can define the following e Source IP address e Source port address e Destination IP address e Destination port address e Protocol TCP or UDP or both e Use Rule For source or destination IP address you can define a single IP address 4 3 2 1 or a range of IP addresses 4 3 2 1 4 3 2 254 An empty implies all IP addresses For source or destination port you can define a single port 80 or a range of ports 1000 1999 Add prefix T or U to specify TCP or UDP protocol For example T80 U53 U2000 2999 No prefix indicates both TCP 40 and UDP are defined An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule Each rule can be enabled or disabled individually Inbound Filter To enable Inbound Packet Filter click the check box next to Enable in the Inbound Packet Filter field Suppose you have SMTP Server 25 POP Server 11
12. as Mozilla Firefox or Internet Explorer This approach can be adopted in any MS Windows Macintosh or UNIX based platforms gt A Desktop PC PCI Adapter Notebook Card Bus PCMCIA Notebook Card Bus PCMCIA 7 Wireless Router T Fast Ethernet N y RE aed _ mA S SS Windows I Mac Unix like 16 3 1 Login to Configure from Wizard Type in the IP Address Pyehtty 192 168 115 http 192 168 1 1 Type password the default is admin and click login button A Hats stem Password admin Press Wizard for basic settings with simple way W Please Select the Operations Wizard Advanced Setup This screen reminds you to configure until the Wizard is finished Press Next to start wizard 5 Setup Wizard Setup Wizard will guide you through a basic configuration procedure step by step Step 1 Setup Login Password Step 2 WAN Setup Step 3 Wireless Setup gt Step 4 Summary gt Step 5 Finish Start gt Password gt WAN gt Wireless gt Summary gt Finish 17 St ep Setup Wizard Setup Login Password EXIT Set up your system password gt Old Password gt New Password gt Reconfirm Start gt Password gt WAN gt Wireless gt Summary gt Finish Step 2 Select Wan Type Auto Detecting or Auto Detecting WAN Type Setup Manuall
13. can connect to this device and allow unspecified MAC addresses to connect Wireless clients with A checked can associate to the wireless LAN and Association control deny unspecified MAC addresses to associate Note Association control has no effect on wired clients DHCP clients Select one Copyto D Ce CS ep CICI MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address MAC Address Control Check Enable to enable the MAC Address Control All of the settings in Connection control this page will take effect only when Enable is checked Check Connection control to enable the controlling of which wired and wireless clients can connect to this device If a client is denied to connect to this device it means the client can t access to the Internet either Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table please see below to connect to this device Association control Check Association control to enable the controlling of which wireless client can associate to the wireless LAN If a client is denied to associate to the wireless LAN it means the client can t send or receive any data via this device Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table to associate to the wireless LAN
14. is defined as a Service Port and all requests to this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule 3 3 2 2 Special AP a y z a Felene rE BASIC SETTING A FORWARDING RULES 2 SECURITY SETTING qfi ADVANCED SETTING ie TOOLBOX Special Applications HELP e Virtual Server Special AP Popular applications MSM Gaming Zone Copyto ID 2 Miscellaneous op Trigger Incoming Ports Enable Ee 7175 51200 51201 51210 wm 47624 2300 2400 28800 29000 wm Some applications require multiple connections like Internet games Video conferencing Internet telephony etc Because of the firewall function these applications cannot work with a pure NAT router The Special Applications feature allows some of these applications to work with this product If the mechanism of Special 37 Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger packet is detected the inbound packets sent to the specified port numbers are allowed to pass through the firewall This product provides some predefined settings Select your application and click Copy to to add the predefined setting to your list Note At any g
15. n gt bytes 32 FPR Auto Scan Lists f 2 bytes 32 chAnection information bytes 32 Trusted Servers tatus open and authenticated bytes 32 Elapsed time A 03 59 bytes 32 Adapters Network SSID 123k Soe teeeee Bytes z z bytes 32 Access point 00 50 18 00 0F F8 gt bytes 32 Packets in out 12679 13605 z z bytes 32 bytes 32 Reconnect Reauthenticate a gt bytes 32 _Beconnect _ ail amp bytes 32 Method 2 1 The UserA or UserB have to get certificate from Radius first http 192 168 122 1 certsrv account fae1 passwd fae1 76 Connect to 192 168 122 1 Connecting to 192 168 122 1 User name Es J i Remember my password 2 Then Install this certificate and finish 3 Setting on the router and client Router Network ID SsID _ hh Dj Channel Security WPA 802 1X Settings RADIUS Server P 192 168 122 1 RADIUS port 1812 I RADIUS Shared Key costra TI Client Go to Network Connection and select wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Select WirelessCA and Enable in Trusted root certificate authority _ Wireless Network Connection 4 Properties 2 x General Authentication Advanced Smart Card or other Certificate Properties fx Select this option to provide authenticated network access for When connecting wired and
16. network adapter is This will provide you with a basic workable setting for your wireless connected to the LAN port of the router You can also select to do it later 3 Make sure your network adapter has an IP address Click Next for continues Do not set at this time 2 5 Wireless Setting EE WGR 6012 Easy Setup V1 0 2 5 Key in the SSID Channel and Security This step will setup your basic wireless network settings options and then click Next for continues Please assign the parameters to your wireless networking If you need more settings please login to the Router s configuration page SSID LevelOne Channel 11 Security Disable Y Do not set at this time lt Back Newt gt Cancel 12 2 6 Auto Detect WAN Service Click Next for continue Click the button Let me select WAN service by myself to disable this function Note The Item supports to detect the Dynamic and PPPoE WAN Services only Example the Dynamic WAN type is tected 2 Manual select WAN Service In the manual mode Click the any icons for continues 2 8 Summary of the settings and Next to Reboot Click Next for continue WGR 6012 Easy Setup Y 1 0 2 5 Auto Detect WAN Service This step will automatically detect one suitable WAN service for Router Please make sure the WAN cable connection is working between your Router and broadband modem You can ig
17. or to separate these email addresses 55 3 3 4 3 DDNS Service 2 ADMINISTRATOR S MAIN MENU A Status y Wizard TH Advanced W BASIC SETTING 4 FORWARDING RULES SECURITY SETTING Mf ADVANCED SETTING is TOOLBOX System Time E Dumami DiS Help System Log t DONS Disable 0 Enable Dynamic DHS DONS Disable O Enable SNMP t Provider Routing Host Name Schedule Rule t Username E mail t Password Key To host your server on a changing IP address you have to use dynamic domain name service DDNS So that anyone wishing to reach your host only needs to know the name of it Dynamic DNS will map the name of your host to your current IP address which changes each time you connect your Internet service provider Before you enable Dynamic DNS you need to register an account on one of these Dynamic DNS servers that we list in provider field To enable Dynamic DNS click the check box next to Enable in the DDNS field Next you can enter the appropriate information about your Dynamic DNS Server You have to define Provider Host Name Username E mail Password Key You will get this information when you register an account on a Dynamic DNS server 56 3 3 4 4 SNMP 2 ADMINISTRATOR S MAIN MENU i Status W Wizard TH Advanced YT BASIC SETTING a FORWARDING RULES 5 SECURITY SETTING TH ADVANCED SETTING 3 J TOOLBOX System Time w SNMP Setting Help System
18. routers and subnets you will need to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other Routing Table settings are settings used to setup the functions of static Dynamic Routing Routing Information Protocol RIP will exchange information about destinations for computing routes throughout the network Please select RIPv2 only if you have different subnet in your network Otherwise please select RIPv1 if you need this protocol Static Routing For static routing you can specify up to 8 routing rules You can enter the destination IP address subnet mask gateway hop for each routing rule and then enable or disable the rule by checking or un checking the Enable checkbox 58 3 3 4 6 Schedule Rule ADMINISTRATOR S MAIN MENU Status We Wizard Tal Advanced Logout YT BASIC SETTING lt FORWARDING RULES amp SECURITY SETTING ga TOOLBOX 7 l m System Time Schedule Rule ee ee ee System Log t Sche ma Pe Schedule Enable SNMP Routing Add New Rule Schedule Rule You can set the schedule time to decide which service will be turned on or off Select the enable item Press Add New Rule You can write a rule name and set which day and what time to schedule from Start Time to End Time The following example configure ftp time as everyday 14 10 to 16 20 gt ADMINISTRAT
19. the ports of Router and the led is also light A First make sure that which port is plugged If the cable is in the Wan port please change to plug in LAN port 1 or LAN port 4 4 3 2 E WAN Then please check if the Pc gets IP address from Router Use command mode as below ipconfig findows IP Configuration Ethernet adapter Local Area Connection Connection specific DHS Suffix IADS LIS IP Address Subnet Mask Default Gateway 255 255 255 0 192 168 1 1 If yes please execute Browser like Mozilla and key 192 168 1 1 in address If not please ipconfig release then ipconfig renew lt wripconfig release findows IP Configuration thernet adapter Local Area Connection Connection specific DNS Suffix IP Address 2 2 ow ow Subnet Mask 1 1 ww ee Default Gateway an n gt ripconfig renew findows IP Configuration thernet adapter Local Area Connection 192 168 1 115 Connection specific DHS Suffix IP Address 2 ee 255 255 255 0 Subnet Mask Default Gateway 192 168 1 1 Whatever setup the pc can not get ip Please check Status Led and refer to the Q2 2 Why can I not connect the router even if the cable is plugged in LAN port and the led is 79 light A First please check Status Led If the device is normal the led will blink per second If not please check How blinking Status led shows There are many abnormal symp
20. the unit will be restarted automatically You can upgrade firmware by clicking Firmware Upgrade button 3 3 5 3 Backup Setting File Download i You are downloading the file o config bin from 192 168 123 254 Would you like to open the file or save it to your computer v Always ask before opening this type of file You can backup your settings by clicking the Backup Setting button and save it as a bin file Once you want to restore these settings please click Firmware Upgrade button and use the bin file you saved 3 3 5 4 Reset to default Microsoft Internet Explorer Px 2 Reset al setting to default You can also reset this product to factory default by clicking the Reset to default button 62 3 3 5 5 Reboot Microsoft Internet Explorer You can also reboot this product by clicking the Reboot button 3 3 5 6 Miscellaneous Items 2 ADMINISTRATOR S MAIN MENU i Status W Wizard TH Advanced W BASIC SETTING lt lt FORWARDING RULES SECURITY SETTING Qf ADVANCED SETTING ge TOOLBOX m J Miscellaneous Items View Log i Firmware Upgrade mA ne Ene Wakar Wake u Pana sein e MAC Address for Wake on LAN Reset to Default Domain Name or IF address for Ping Test Reboot Miscellaneous MAC Address for Wake on LAN Wake on LAN is a technology that enables you to power up a networked device remotely In order to enjoy this feature the target devi
21. 0 Web Server 80 FTP Server 21 and News Server 119 defined in Virtual Server or DMZ Host Example 1 ADMINISTRATOR s MAIN MENU rg BASIC SETTING Q FORWARDING RULES SECURITY SETTING QI ADVANCED SETTING T TOOLBOX o Status Outbound Packet Filter Help b j F Domai titora Outbound Filter Enable Allow all to pass except those match the following rules Deny all to pass except those match the following rules Schedule rule O0 Always Copyto ip v Source IP Ports Destination IP Ports Schedule Rule 1 2 3 100 1 2 3 149 25 100 4 23 10 1 23 20 e URL Blocking MAC Control Miscellaneous S S B ES CF EN E C H M u jej El 1 2 3 100 1 2 3 149 Remote hosts are allow to send mail port 25 and browse the Internet port 80 1 2 3 10 1 2 3 20 Remote hosts can do everything block nothing Others are all blocked Example 2 41 ViZalu SECURITY SET TING Allow all to pass except those match the following rules Deny all to pass except those match the following rules Schedule rule O0 Always Copyto ip Source IP Ports 1 2 3 100 1 2 3 199 ah 1 2 3 100 1 2 3 199 s es OOO S a m O E a sO M JO k lm E H M ke e sE E E se H J k e rE H J k e aC W JC 1 2 3 100 1 2 3 119 Remote hosts can do everything except read net news port 119 and transfer files via FTP port 21 behind Router Server
22. ING 2 FORWARDING RULES SECURITY SETTING QM ADVANCED SETTING BS TOOLBOX lt Primary Setu Hel Primary Setup z p Help Item Setting DHCP Server gt LAN IP Address 192 168 1 1 Wireless gt WV n Static IP Add Change Change Password WAN Type J atic ress WAN IP Address 0 0 0 0 OWAN Subnet Mask 755 255 2755 0 WAN Gateway 0 0 0 0 gt Primary DNS 0 0 0 0 gt Secondary DNS 0 0 0 0 4 gt IGMP Enabled Disabled Save Undo Virtual Computers Reboot Saved The change doesn t take effect until router is rebooted Dynamic IP Address Obtain an IP address from ISP automatically Host Name optional Required by some ISPs for example Home Renew IP Forever this feature enables this product to renew your IP address automatically when the lease time is expiring even when the system is idle 24 SF g BASIC SETTING G FORWARDING RULES SECURITY SETTING QF ADVANCED SETTING 6 TOOLE a Md J Primary Setup Help Primary Setup i Item Setting DHCP Server LAN IP Address 192 168 1 1 Wireless R gt VV D ic IP Add Change Change Password WEAN Type ynamic ress gt Host Name WGOR 6012 optional gt WAN s MAC Address 00 50 18 21 D4 34 Clone MAC l gt Renew IP Forever C Enable Auto reconnect gt IGMP D Enabled Disabled Save Undo Virtual Computers Reboot Saved The change doesn t take effect until rou
23. OR s MAIN MENU i Status WY wizard al Advanced r BASIC SETTING a FORWARDING RULES SECURITY SETTING al Peis 3 Schedule Rule Setting e System Log Ts Start Time hmm Ena Time h mm Tene eam O T O O ew O O oew O CO ww O CO w o a ewer Schedule Enable Selected if you want to Enable the Scheduler Edit To edit the schedule rule 59 Delete To delete the schedule rule and the rule of the rules behind the deleted one will decrease one automatically Schedule Rule can be apply to Virtual server and Packet Filter for example Exanple1 Virtual Server Apply Rule 1 ftp time everyday 14 20 to 16 30 2 ADMINISTRATOR S MAIN MENU ll Status 4 Wizard T Advanced SECURITY SETTING Yf ADVANCED SETTING ge TOOLBOX m Well known services select one Schedule rule 0O Always D 192 168 1 Cc J J KAK T Te Exanple2 Packet Filter Apply Rule 1 ftp time everyday 14 20 to 16 30 ADMINISTRATOR S MAIN MENU A_Status Yz Wizard TH Advanced Logout W Basic seTTING Status Packet Filters Domain Filters URL Blocking e MAC Control Miscellaneous a FORWARDING RULES lt SECURITY SETTING ADVANCED SETTING eee F Outbound Packet Filter ee t Outbound Filter W Enable Allow all to pass except those match the following rules Deny all to pass except those match the following rules Schedule rule
24. PPoE to connect to their services some SPs require the use of PPTP to connect to their services some lSPs require the use of L2TP to connect to their services 80 5 When use Static IP Address to roam Internet can access or ping global IP 202 93 91 218 But can not access the site that inputs domain name for example HHUhttp espn comUHH A Please check the DNS configuration of Static IP Address Please refer to the information of ISP and assign one or two in DNS item How do I connect router by using wireless 1 How to start to use wireless A First make sure that you already installed wireless client device in your computer Then check the Configuration of wireless router The default is as below Wireless Setting Help t Wireless Enable Disable t Network ID SSID LevelOne t Wireless Mode Mixed mode 11g only 11b only H SSID Broadcast Enable Disable t Channel Security About wireless client you will see wireless icon Ti Then click and will see the AP list that wireless client can be accessed oes default Signal Strength pail Related Tasks Y Mon secure wireless network Change preferred eas BombTest Signal Strength anail wireless network Y Security enabled wireless network Learn about wireless 81 If the client can not access your wireless router please refresh network list again However still can not fine the device which SSID is defau
25. RL Blocking require user to input a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Checked if you want to enable URL Blocking URL If any part of the Website s URL matches the pre defined word the connection will be blocked For example you can use pre defined word sex to block all websites if their URLs contain pre defined word sex Enable Checked to enable each rule 47 D Te COo ee In this example 1 URL include msn will be blocked and the action will be record in log file 2 URL include sina will be blocked but the action will be record in log file 48 3 3 3 4 Internet Access Control The device provides Administrator MAC Control for specific MAC to access the device or Internet without restriction It also provides 3 features to access Internet MAC Control by host Group MAC Control and Interface Access Control depend as user defined time Schedule 1 MAC control ADMINISTRATOR s MAIN MENU Status W Wizard Cal Advanced A BASIC at r BASIC SETTING FORWARDING RULES qii ADVANCED SETTING fer TOOLBOX 3 MAC Address Control e Status Packet Filters F Domain Filters URL Blocking MAC Control Miscellaneous Connection control MAC Address Control Enable Wireless and wired clients with C checked
26. Session Management e g Telstra BigPond PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services PPTP Some ISPs require the use of PPTP to connect to their services L2TP Some ISPs require the use of L2TP to connect to their services This option is primary to enable this product to work properly The setting items and the web appearance depend on the WAN type Choose correct WAN type before you start 1 LAN IP Address the local IP address of this device The computers on your network must use the LAN IP address of your product as their Default Gateway You can change it if necessary Primary Setu Hel Primary Setup ry Da I p DHCP Server LAN IP Address 192 168 1 1 Wireless 2 WAN Type WAN connection type of your ISP You can click Change button to choose a correct one from the following four options 23 Static IP Address ISP assigns you a static IP address Dynamic IP Address Obtain an IP address from ISP automatically PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services PPTP Some ISPs require the use of PPTP to connect to their services mo 0 MD gt L2TP Some ISPs require the use of L2TP to connect to their services Static IP Address ISP assigns you a static IP address WAN IP Address Subnet Mask Gateway Primary and Secondary DNS enter the proper setting provided by your ISP W gt BASIC SETT
27. Wireless Router to configure like below 71 Network ID SSID h2 Skk Channel Security WPA w 802 1X Settings RADIUS Server IP 19246842214 RADIUS port RADIUS Shared Key Add Profile Profile name User Info Authentication ITLS Settings PEAP Settings Login name fae Password V Permit login using password use Windows password C prompt for password use the following password fae MV Unmask Certificate V Permit login using my certificate m a View Browse Cancel Login name and password are fae1 and fae1 Remember that you get certificate from Radius in Step1 Iz 5 Then Choose certificate like above Select Certificate 73 6 Then go to Authentication and first Remove EAP TLS and Add EAP TLS again Edit Profile Properties 74 7 Go Network and Select 1 and ok Hetwork Properties Network Network name 551D P23k Connect to any available network Scan Description optional a Hetwork type Access point infrastructure made Channel Association mode Encryption method data privacy Patsphrase F Unmask Cancel 75 8 Back to Connection and Select 123kk If successfully the wireless client has to authenticate with Radius Server like below Piwork Properties Odyssey Client Network Network name SSID fi 23kk You are about to authenticate to an untrusted se
28. are three clients listed in the Control Table Clients 1 and 2 are wireless and client 3 is wired a me p l ah FORWARDING RULES h SECURITY SETTING wm ADVANCED SETTING ea TOOLBOX 3 MAC Address Control Help MAC Address Control E Enable B Wireless and wired clients with C checked can connect to this device and SEENEN allow unspecified MAC addresses to connect Wireless clients with A checked can associate to the wireless LAN and Association control deny unspecified MAC addresses to associate Note Association control has no effect on wired clients DHCP clients Selectone D o mos O Oooo ee e a E CI 1 The MAC Address Control function is enabled 2 Connection control is enabled and all of the wired and wireless clients not listed in the Control table are allowed to connect to this device 3 Association control is enabled and all of the wireless clients not listed in the Control table are denied to associate to the wireless LAN 4 Clients 1 and 3 have fixed IP addresses either from the DHCP server of this device or manually assigned ID 1 00 12 34 56 78 90 gt 192 168 1 100 ID 3 00 09 76 54 32 10 gt 192 168 1 101 Client 2 will obtain its IP address from the IP Address pool specified in the DHCP Server page or can use a manually assigned static IP address If for example client 3 tries to use an IP address different from the address listed in the
29. as EAP_ITLS PEAP_ CHAPv2 Windows XP with SP1 only and PEAP_TLS Windows XP with SP1 only using the Smart Card or other Certificate of the Windows XP Professional 3 DUT and Windows 2000 Radius Server Setup 3 1 1 Setup Windows 2000 RADIUS Server We have to change authentication method to MD5_Challenge or using smart card or other certificate on RADIUS server according to the test condition 3 1 2 Setup DUT 1 Enable the 802 1X check the Enable checkbox 2 Enter the RADIUS server IP 3 Enter the shared key The key shared by the RADIUS server and DUT 4 We will change 802 1X encryption key length to fit the variable test condition 3 1 3 Setup Network adapter on PC 1 Choose the IEEE802 1X as the authentication method Fig 2 Note Figure 2 is a setting picture of Windows XP without service pack 1 If users upgrade to service pack 1 then they can t see MD5 Challenge from EAP type list any more but they will get a new Protected EAP PEAP option 2 Choose MD5 Challenge or Smart Card or other Certificate as the EAP type 3 If choosing use smart card or the certificate as the EAP type we select to 65 use a certificate on this computer Fig 3 4 We will change EAP type to fit the variable test condition EJ Wireless Network Connection Properties 2 General Wireless Networks Authentication Advanced Select this option to provide authenticated network access for wired and wireless Ethernet ne
30. c IP there may appear a Renew or Release button on the Side note column You can click this button to renew or release IP manually Statistics of WAN enables you to monitor inbound and outbound packets 3 3 Advanced 3 3 1 Basic Setting Please Select Advanced Setup to Setup 21 English v D Basic Setting Primary Setup Configure LAN IP and select WAN type DHCP Server The settings include Host IP Subnet Mask Gateway DNS and WINS configurations Wireless Wireless settings allow you to configure the wireless configuration items Change Password Allow you to change system password 22 3 3 1 1 Primary Setup WAN Type Virtual Computers wi Primary Setu Hel Primary Setup fl P Help DHCP Server 5 LAN IP Address 192 168 1 1 Wireless gt D ic IP Add Change gt Host Name VWWGR 6012 optional gt WAN s MAC Address 00 50 18 21 D4 34 Clone MAC gt Renew IP Forever O Enable Aufo reconnect gt IGMP Enabled Disabled Press Change ADMINISTRATOR s MAIN MENU E V4 Wizard CH Advanced A J BASIC SETTING EA FORWARDING RULES 23 SECURITY SETTING fj ADVANCED SETTING gS TOOLBOX 3 Choose WAN Type Primary Setup DHCP Server Static IP Address ISP assigns you a static IP address Wireless i Dynamic IP Address Obtain an IP address from ISP automatically Change Password aan Dynamic IP Address with Road Runner
31. cable is plugged RJ 45 cable is plugged LAN LED Green in flash Data access Green in fast flash Device is in WPS PBC mode Wi Fi Radio is disabled 1 5 Procedure for Hardware Installation IP Device an PC On Off Button ADSL Cable Modem a Internet Internet Cable DSL Modem iH m E F Wireless USB Adapter WGR 6012 Step 1 Attach the antenna 1 1 Remove the antenna from its plastic wrapper 1 2 Screw the antenna in a clockwise direction to the back panel of the unit 1 3 Once secured position the antenna upward at its connecting joint This will ensure optimal reception 1 Turn off the Power Switch first Step 2 Insert the Ethernet cable into LAN Port Insert the Ethernet patch cable into LAN port on the back panel of Router and an available Ethernet port on the network adapter in the computer you will use to configure the unit Step 3 Insert the Ethernet patch cable into Wired WAN port Insert the Ethernet patch cable form DSL Modem into Wired WAN port on the back panel of Router ADSL Cable Modeme Step 4 Power on Router 4 1 Connect the power adapter to the receptor on the back panel of your Router and Push Power switch Step 5 Complete the setup 5 1 When complete the Status LED will flash Chapter 2 Getting Start Insert the CD into CD reader on your PC The program AutoRun will be executed automatically And then you can click the Ea
32. ce must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 22 33 44 55 Clicking Wake up button will make the router to send the wake up frame to the target device immediately Domain Name or IP Address for Test Allow you to configure an IP and ping the device You can ping a specific IP to test whether it is alive 63 802 1x Setting 1 Equipment Details PC l USER A PC USER 8 192 168 1 1 Authentication Server Windows 2000 Radius server 192 168 1 33 Figure 1 Testing Environment Use Windows 2000 Radius Server PC1 Microsoft Windows XP Professional without Service Pack 1 Wireless Cardbus 3 0 3 0 Driver version PC2 Microsoft Windows XP Professional with Service Pack 1a or latter Wireless Cardbus 1 0 1 0 Driver version 1 7 29 0 Driver date 10 20 2001 Authentication Server Windows 2000 RADIUS server with Service Pack 3 and HotFix Q313664 Note Windows 2000 RADIUS server only supports PEAP after upgrade to service pack 3 and HotFix Q313664 You can get more information from htto support microsoft com default aspx scid kb en us 313664 64 2 DUT Configuration 1 Enable DHCP server 2 WAN setting static IP address 3 LAN IP address 192 168 1 1 24 4 Set RADIUS server IP 5 Set RADIUS server shared key 6 Configure WEP key and 802 1X setting The following test will use the inbuilt 802 1X authentication method such
33. e gt Network ID SSID LevelOne gt Channel 11 X lt Back Start gt Password gt WAN gt Wireless gt Summary gt Finish 19 Set up your Authentication and 3 Setup Wizard Wireless Security EXIT Encryption _ yp gt Security WEP gt WEP 64 bits 128 bits gt Key 1 1234567890 Key 2 s gt Key3 gt Key 4 Start gt Password gt WAN gt Wireless gt Summary gt Finish Step 6 Setup Wizard Summary EXIT Then click Apply Setting Please confirm the information below And then the device will reboot WAN Setting WAN Type PPPoE Account 123 Password 1234 Service Name z Assigned IP Address 0 0 0 0 Wireless Setting Wireless Enable SSID LevelOne Channel 11 Security 64 bit WEP Enabled Do you want to proceed the network testing lt Back Start gt Password gt WAN gt Wireless gt Summary gt Finish Apply Settings Step 7 Setup Wizard EXIT Click Finish to complete it Configuration is Completed Please click Finish to back to Status page Or you can click Configure Again to setup the wizard again Configure Again Start gt Password gt WAN gt Wireless gt Summary gt Finish 20 3 2 System Status English hg lt System Status Help e This option provides the function for observing this product s working status WAN Port Status If the WAN port is assigned a dynami
34. e WPA When the WPA function is enabled the Wireless user 33 must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select Encryption and RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server WPA2 PSK AES 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 2 Fill in the key Ex 12345678 WPA2 AES Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server WPA PSK WPA2 PSK The router will detect automatically which Security type the client uses to encrypt 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1
35. e device will not make the link until someone clicks the connect button in the Status page 21 3 Primary Setup Help Primary Setup Item Setting DHCP Server LAN IP Address 192 168 1 1 WAN Type Lave Change gt IP Mode Static IP Address X Wireless Change Password gt IP Address 0 0 0 0 bSubnethMask 255 255 255 0 gt WAN Gateway IP 0 0 0 0 Server IP Address Name ha QJ gt L2TP Account gt L2TP Password gt Maximum Idle Time 300 seconds gt Connection Control Connect on demand M gt MTU 1460 Virtual Computers Only for Static and dynamic IP address WAN type Sa CA AE E BASIC SETTING CA FORWARDING RULES X SECURITY SETTING M ADYANCED SETTING ioi TOOLBOX Virtual Computers Help Primary Setup DHCP Server DHCP clients Select one Copyto ip Wireless ID Global IP Local IP Enable Virtual Computer enables you to use the original NAT feature and allows you to setup the one to one mapping of multiple global IP address and local IP address e Global IP Enter the global IP address assigned by your ISP e Local IP Enter the local IP address of your LAN PC corresponding to the global IP address e Enable Check this item to enable the Virtual Computer feature 28 3 3 1 2 DHCP Server J DHCP Server Help Primary Setup Item DHCP Server l gt DHCP Server Disable Enable Wireless
36. e manually Selected if you want to Set Date and Time manually Set Date and Time manually Selected if you want to Set Date and Time manually Function of Buttons Sync Now Synchronize system time with network time server Daylight Saving Set up where the location is 54 3 3 4 2 System Log ADMINISTRATOR s MAIN MENU ll Status Y Wizard Call Advanced W BASIC SETTING a FORWARDING RULES SECURITY SETTING Qf ADVANCED SETTING io TOOLBOX System Time B System Log Help System Log Dynamic DNS t IP Address for Syslog SNMP H IP Address of Outgoing Mail Server a Routing SMTP Server IP Port Schedule Rule E mail address Username Password Log Type System Activity Debug Information Attacks Dropped Packets Notice This page support two methods to export system logs to specific destination by means of syslog UDP and SMTP TCP The items you have to setup including IP Address for Syslog Host IP of destination where syslogs will be sent to Check Enable to enable this function E mail Alert Enable Check if you want to enable Email alert send syslog via email SMTP Server IP and Port Input the SMTP server IP and port which are concerted with If you do not specify port number the default value is 25 For example mail your_url com or 192 168 1 100 26 Send E mail alert to The recipients who will receive these logs You can assign more than 1 recipient using
37. ebaiork ir j Disabled athempting to authenticate Create 4 new a gt i p D Link DFE S307T PCI Fast Ek E T Mini LSE w Pa a Network Tasks connection Set up a home or small office network Figure 5 Authenticating 68 Network Connections File Edit View Favorites Tools Advanced Help 1 t l a aoe ll pi r Search Wey Folders j555 ddress ee Network Connections y ea LAN or High Speed Internet Network Tasks A ame eh Local 4rea Connection a Create a new a Disabled connection _ k D Link DFE 5307T PCI Fast Et e Set up a home or small office network Figure 6 Authentication success 4 2DUT authenticate PC2 using PEAP TLS 1 PC2 choose the SSID of DUT as the Access Point 2 Set authentication type of wireless client and RADIUS server both to PEAP_TLS 3 Disable the wireless connection and enable again 4 The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PC2 5 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure 6 Terminate the test steps when PC2 get dynamic IP and PING remote host successfully Support Type The router supports the types of 802 1x Authentication PEAP CHAPv2 and PEAP TLS Note 1 PC1 is on Windows XP platform without Service Pack 1 2 PC2 is on Windows XP platform with Service Pack 1a 3 PEAP is supported on Windows XP with Se
38. eless Setting Help Primary Setup Item Setting DHCP Server i gt Wireless Enable Disable Wireless gt Network ID SSID LevelOne Change Password gt Wireless Mode Mixed mode 11g only 11b only _ gt SSID Broadcast Enable O Disable gt VVMM Enable Disable gt Channel W y gt WDS Enter H WPS Enter gt Security WEP X gt WEP 64 bits 128 bits gt Key 1 1234567890 gt Key 2 Wireless settings allow you to set the wireless configuration items Wireless The user can enable or disable wireless function Network ID SSID Network ID is used for identifying the Wireless LAN WLAN Client stations can roam freely over this product and other Access Points that have the same Network ID The factory setting is default SSID Broadcast The router will Broadcast beacons that have some information including ssid so that The wireless clients can know how many AP devices by scanning function in the network Therefore This function is disabled the wireless clients can not find the device from beacons Channel The radio channel number The permissible channels depend on the Regulatory Domain WPS Wi Fi Protection Setup WPS is Wi Fi Protection Setup which is similar to WCN NET and offers safe and easy way in Wireless Connection 30 SA BASIC SETTING CA FORWARDING RULES SECURITY SETTING M ADVANCED SETTING so TOOLBOX m te
39. ferred from one station to another There are several security types to use WEP When you enable the 128 or 64 bit WEP key security please select one WEP key to be used and input 26 or 10 hexadecimal 0 1 2 8 9 A B F digits 802 1X Check Box was used to switch the function of the 802 1X When the 802 1X function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name RADIUS Shared Key Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server 32 gt Wireless Enable Disable gt Network ID SSID LevelOne Wireless Mode Mixed mode 11g only 11b only gt SSID Broadcast Enable Disable gt WMM Enable Disable Channel 5n a gt WDS WPS Security WEP 64 bits 128 bits Key 1 1234567890 gt Key 2 WPA PSK 1 Select Encryption and Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of pre share key is from 8 to 63 2 Fill in the key Ex 12345678 Wireless Setting Item oA ening gt WDS gt WPS gt Security eme OARS gt Encryption gt Preshare Key Made ASCII v WPA Check Box was used to switch the function of th
40. he functions of this product 1 1 Packing List WGR 6012 x1 RdJ 45 Ethernet LAN Cable x1 Antenna x 2 Power Adapter x1 Quick Installation Guide x1 CD Manual x1 1 2 Spec Summary Table Device Interface i Wireless To enable or disable Wireless Radio Enable disable LED Indication Power Status WAN LAN1 LAN4 Wi Fi eo eea Power Jack ae 1 switching power adapter Wireless LAN Wi Fi SSID SSID broadcast or in steathmode e Channel Auto selection manually WPS Wi Fi Protected Setup fe fo WMM Wi Fi Multimedia Functionality Ethernet WAN PPPoE DHCP client Static IP PPTP L2TP WAN Connection Auto reconnect dial on demand manually Virtual server special application DMZ Super DMZ One to Many NAT Eee epee P IP Passthrough NAT Session DoS Protection DoS Deny of Service detection and protection Management Performance Environment amp Certification Package weight g9 Temp 0 400C Humidity 10 90 non condensing Temp 10 700C Humidity 0 95 non condensing EMI Certification RoHS RoHS compliance o e Package Information Operation Temp Storage Temp 1 3 Hardware 1 Wi Fi Protected Setup WPS Button 2 LED Indicators 3 Wireless On Off Button 4 LAN Port 5 WAN Port 6 Power Port Les 7 Power On Off Button 8 Detachable Antenna L23 4 5 6 78 9 9 9 Wall Mountable 1 4 LED Indicators Green in flash Device status is working WAN LED RJ 45
41. hedule Rule domain name service DDNS SNMP Gives a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events Routing Ifyou have more than one routers and subnets you may want to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other Schedule Rule Apply schedule rules to Packet Filters and Virtual Server 53 3 3 4 1 System Time W BASIC SETTING a FORWARDING RULES SECURITY SETTING 7 ADVANCED SETTING hon TOOLBOX o System Time HELP System Time Item Setting System Log t System Time 2010321 A268 FF 01 31 56 Dynamic DNS Get Date and Time by NTF Protocol e SNMP e Routing SMT 03 00 Beijing Hong Kong Singapore Taipei we Schedule Rule ee Set Date and Time using PC s Date and Time FC Date and Time 20104E15 268 FF 01 31 55 Set Date and Time manually Date Year 2009 Month Jun 3 Hour 0 0 23 Minute 0 0 89 Second 0 0 89 ee ed t Daylight Saving O Enable Disable Month Jan Day 01 Hour OO Month Day 01 Get Date and Time by NTP Protocol Selected if you want to Get Date and Time by NTP Protocol Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates Set Date and Tim
42. im 43 Wi Fi Protected Setup Primary Setup Item DHCP Server gt WPS Enable Disable Wireless Current AP PIN Change Password gt Setup Configure Wireless Station gt WPS status Configured WDS Wireless Distribution System WDS operation as defined by the IEEE802 11 standard has been made available Using WDS it is possible to wirelessly connect Access Points and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement gt A TE BASIC SETTING CA FORWARDING RULES SECURITY SETTING M ADVANCED SETTING TOOLBOX j j we z l 3 WDS Setting Help Primary Setup aa annie Item DHCP Server i gt AP Mode AP Only Wireless MAC 1 Change Password ETERA ete Scaned AP s MAC Select one Copy to Remote AP MAC 7 Hybrid Mode It means the device can support WDS and AP Mode simultaneously 31 TG Basic SELING CA FORWARDING RULES SECURITY SETTING M ADVANCED SETTING Lisi TOOLBOX Wi Fi Protected Setup Primary Setup Item Setting DHCP Server gt WPS Enable Disable Wireless l Current AP PIN Change Password gt Setup l l Configure Wireless Station gt WPS state Idle gt WPS status Configured Security Select the data privacy algorithm you want Enabling the security can protect your data while it is trans
43. ional Assigned IP Address 0 0 0 0 optional gt MTU 149 PPTP Some ISPs require the use of PPTP to connect to their services First please check your ISP assigned and Select Static IP Address or Dynamic IP Address 1 My IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you 2 Server IP Address the IP address of the PPTP server 3 PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty 3 Connection ID optional Input the connection ID if your ISP requires it 4 Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Status page 26 J Primary Setup Help Primary Setup Item DHCP Server gt LAN IP Address Wireless Setting 192 168 1 1 PWAN Type Change Password YPE PPTP Change gt IP Mode Static IP Addres
44. iven time only one PC can use each Special Application tunnel 3 3 2 3 Miscellaneous Items J ADMINISTRATOR s MAIN MENU Status WY Wizard TH Advanced Yr BASIC SETTING a FORWARDING RULES S SECURITY SETTING qf ADVANCED SETTING rer TOOLBOX 3 Miscellaneous Item elp a r Miscellaneous Items Help Special AP eae ee H IP Address of DMZ Host t Non standard FTF port t UPnP setting t Xbox Support IP Address of DMZ Host DMZ DeMilitarized Zone Host is a host without the protection of firewall It allows a computer to be exposed to unrestricted 2 way communication for Internet games Video conferencing Internet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP server whose port number is not 21 This setting will be lost after rebooting 38 Xbox Support The Xbox is a video game console produced by Microsoft Corporation Please enable this function when you play games UPnP Setting The device also supports this function If the OS supports this function enable it like Windows XP When the user get IP from Device and will see icon as below x 4 new device is now available on your network For more information click here EA Crazy Browser Untitled Et i Internet Gateway Device UPnP 3 3 3 Security Settings ADMINISTRATOR s MAIN
45. level Pita E EE E EM amp one LevelOne WGR 6012 300Mbps N_Max Wireless Gigabit Router User Manual Copyright The contents of this publication may not be reproduced in any part or as a whole stored transcribed in an information retrieval system translated into any language or transmitted in any form or by any means mechanical magnetic electronic optical photocopying manual or otherwise without the prior written permission Trademarks All products company brand names are trademarks or registered trademarks of their respective companies They are used for identification purpose only Specifications are subject to be changed without prior notice FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against radio interference in a commercial environment This equipment can generate use and radiate radio frequency energy and if not installed and used in accordance with the instructions in this manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause interference in which case the user at his own expense will be required to take whatever measures are necessary to correct the interference CE Declaration of Conformity This equipment complies with the requireme
46. lt please refer to Q3 Network Tasks Choose a wireless network Refresh Click an item in the list below bo connect bo a wireless network in range or bo get more 2 network list inform a gt default Signal Strength all O Nonesecure wireless network Connected Pee Choose the one that you will want to connect and Connect default Signal Strength i Related Tasks f Non secure Wireless network 7 TEE network kA a a o Learn about wirele networking default does nok require a network key Information sent over this network is not encrypted and may be visible to others Ey Change settings ol d connection IF you are sure you want bo connect bo this network click Connect Otherwise click Cancel Connect Cancel r If successfully the computer will show ij Wireless Network Connection 5 is now connected A Speed 54 0 Mbps nmand Prompt W untitled Paint a and get IP from router thernet adapter Wireless Network Connection Connection specific DHS Suffix 9004681448 IP Address 2 ww we Subnet Mask 2 ww ee Default Gateway ww 255 255 255 0 192 168 1 1 2 When I use AES encryption of WPA PSK to connect even if input the correct pre share key A First you must check if the driver of wireless client supports AES encryption Please refer to the below 82 Related Tasks T Non secure Wireless network F Change preferred rN 217 Signal St
47. nore the WAN cable connection but the WAN service will not be checked later You can set it manually if you know your WAN service type Let me select WAN service by myself Newt gt Cancel EE WGR 6012 Easy Setup V1 0 2 5 Select WAN Service This step lets you select WAN service by yourself Please select the WAN service for setup Static IP 2 Cancel 13 2 9 Apply the Settings or Modify EE WGR 6012 Easy Setup V1 0 2 5 Click Next for continue Save Settings The settings will be saved to the Router and reboot at the next step Wireless Setting SSID LevelOne Channel 11 Security Disable WAN Setting Dynamic IP Service 2 10 Test the Internet connection EF WGR 6012 Easy setup v1 0 2 Test WAN Networking service Click Next WAN Service Test for continue You can ig nore the by select the Ig nore This step will test the internet connection to make sure you can surf the internet Test Ignore Test 14 2 11 Setup Completed The EzSetup is finish you can open the Setup Completed default web browser to configure advanced The Router is configured and the WAN service functionality is working settings of the Router Click Finish to complete the installation Z Open the default web browser to access the advanced configurations 15 This product provides Web based configuration scheme that is configuring by your Web browser such
48. nts relating to electromagnetic compatibility EN 55022 A1 Class B The specification is subject to change without notice Table of Contents Chapter 1 IMTOGUGHON wires ime tactician ei bed tinea ene 4 ST RaCKNO LAST sccanesishe Lease tertebs teh tous e A habews 4 1 2 Spec SummMary Table cc cccecccssssecssssseessseecessseeeessseeeeess 4 JESA mee AUC arated tet ten st A EAE AE E E omens E A aad soe 5 TATED INACIO S aa a a rit cone ne eer marae 5 1 5 Procedure for Hardware Installation cccccescceeesseeeeees 6 GNapler 2 Getting olari xcisnteccavndicsnusesesteseinstytue tutes NORE 10 2 1 Select LANQUAGG cccccssssccsssenccssseccssseecssseeeessseseessseneeess 10 22 SCI IO IMOUE nri E meus aoats 11 2 3 Advanced MOE SEUD a a 11 2 4 Quick Wizard Install mode Setup cee cceeceeeeenees 12 2 0 WWITCICSS Setin sorar renn OOR 12 2 6 Auto Detect WAN Service ccccccccccsssccesseceesseceesseeeeeeens 13 2 7 Manual select WAN Service ccccccccceeseceesseeeesseeeeteeens 13 2 8 Summary of the settings and Next to Reboot 13 2 9 Apply the Settings or Modify 00 0 0 ce ccceseceessseeeeeteeeees 14 2 10 Test the Internet CONNECTION 20 0 0 ee cceccecccesestneeeeeeees 14 2 11 Setup Completed asna lool 15 Chapter 3 Making Configuration 00 0 0 cccccccscccecssecceesseeeeesseeeeeeas 16 3 1 Login to Configure from WiIZard ccc ccccccesseceetseeeeteeees 17 S22 OV SICI lal S
49. rength glll wireless network Y Security enabled wireless network i Learn about wireless networking ee Signal Strength opgilll j Mon secure wireless network 4 p Change settings of this g connection e gt Haron Signal Strength nl If SSID is default and click Properties to check if the driver of wireless client supports AES encryption default properties Association Authentication Connection Network name SSID Wireless network key This network requires a key for the following Network Authentication WPA PSK Data encryption Network key Confirm network kep Cancel 3 When I use wireless to connect the router but find the signal is very low even if am close to the router A Please check if the wireless client is normal first If yes please send the unit to the seller and verify what the problem is 83
50. restriction Domain Suffix A suffix of URL to be restricted For example com xxx com Action When someone is accessing the URL met the domain suffix what kind of action you want Check drop to block the access Check log to log these access Enable Check to enable each rule 45 Example lt gt FORWARDING RL Domain Filter gt Privilege IP Addresses Range From 100 To 199 a Domainsufixs Acton Enable cif ammam ie a mon O ooa gt ae S ee ee se ee ee Pepe tg feof de tg Eppe In this example 1 URL include www msn com will be blocked and the action will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www baidu com will be blocked but the action will not be record in log file 4 IP address x x x 1 x x x 99 can access Internet without restriction 46 3 3 3 3 URL Blocking ADMINISTRATOR s MAIN MENU SI A KES A If Basic seTTiNG lt P FORWARDING RULES _ SECURITY SETTING ff ADVANCED SETTING g TOOLBOX Taa URL Blocking Help Domain Filters URL Blocking Enable URL Blocking MAC Control Miscellaneous URL Blocking will block LAN computers to connect to pre defined Websites The major difference between Domain filter and URL Blocking is Domain filter require user to input suffix like com or org etc while U
51. rver l Connect to any available network Scan To terminate communication press No TN To temporarily trust this server press Yes Description optional Description op To permanently trust this server check add this trusted server to Odyssey Client Manager pe a the database and press Yes Network type Connection 6 Connection Adapter TNET1130 WLAN Adapter v i Profiles Adapter type wireless ee Networks IV Connect to network p 123kk gt Scan AM Auto s can Lists Connection information F Trusted Servers Status authenticating Elapsed time Adapters Network SSID 123kk Access point 00 50 18 00 0F F8 Fackets in out Certificate chain WirelessCA winZ000ady intra com tw Association mode Encryption method Authentication V Authenticate using View V Keys will be general Permanent trust Pre shared key WPA Add this trusted server to the database Server name must end with Reconnect Reauthenticate all EF Proceed to authenticate with this server 9 Result rh yg tage PRIN bytes 32 Odyssey Client Manager a x bytes 32 S bytes 32 z i k bytes 32 Connection Connection z Z bytes 32 Adapter TNET1130 WLAN Adapter l i bytes 32 t Profiles Adapter type wireless z bytes 32 bytes 32 ee Naticuies V Connect to network 123kk gt l bytes 32 Scan
52. rvice Pack 1 only 4 Windows XP with Service Pack 1 allows 802 1x authentication only when data encryption function is enable 69 WPA Settings PC l USER A N A AN Wan ip 192 168 122 216 Sf K ee Wired LAN USER 6 DUT Authari ta LAN IP 192 168 1 1 Authentication Server Windows 2000 Radius server 192 168 122 1 Wireless Router LAN IP 192 168 1 1 WAN IP 192 168 122 216 Radius Server 192 168 122 1 UserA XP Wireless Card Ti 11g Tool Odyssey Client Manager Refer to www funk com Download htto www funk com News amp Events ody c wpa preview pn asp Or Another Configuration PC l USER A N Wireless PC 2 on Wed LAN USER 9 192 _ 1 1 Authentication Server Windows 2000 Radius server 192 168 1 33 70 For this function we need the server to authenticate This function is like 802 1x PC l USER A N AN Wan ip 192 168 122 216 PC 2 WreRSS mmm red LAN USER 6 lal Atencio LAN IP 192 168 1 1 Authentication Server Windows 2000 Radius server 197 168 1221 The above is our environment Method 1 1 The UserA or UserB have to get certificate from Radius first htip 192 168 122 1 certsrv account fae passwd fae Connect to 192 168 122 1 Connecting to 192 168 122 1 User name s v ia Remember my password 2 Then Install this certificate and finish 3 Go to the Web manager of
53. s v My IP Address 0 0 0 0 gt My Subnet Mask 255 255 255 0 Gateway IP 0 0 0 0 Server IP Address Name gt PPTP Account 123 PPTP Password gt Connection ID optional Maximum Idle Time 300 seconds gt Connection Control Connect on demand v L2TP Some ISPs require the use of L2TP to connect to their services First please check your ISP assigned and Select Static IP Address or Dynamic IP Address For example Use Static 1 My IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you 2 Server IP Address the IP address of the PPTP server 3 PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty 3 Connection ID optional Input the connection ID if your ISP requires it 4 Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link with ISP until the connection is established Manually Th
54. sy setup Icon for this utility Configure the settings by the following steps 2 1 Select Language then click Next EF WGR 6012 Easy Setup V1 0 2 5 i wel he Easy for WiFi for continues eine ibni oes etup for WiFi This wizard will quide you to simply and quickly configure the WiFi Broadband Router ef Select Language English 10 2 2 Setup mode EE WGR 6012 Easy Setup V1 0 2 5 You can select Wizard mode to run the setup Setup Mode This step will let you to choose one of the setup modes step by step or run advanced mode to diagnose the network settings of the router This step by step guide will let you easily and quickly connect to the Internet This will provide a diagnostic of your network and the settings used by the Router Advanced 2 3 Advanced mode Setup EE WGR 6012 Easy Setup V1 0 2 5 Check the PC Router or Internet icons for Prepare Setup This step will make sure connection can be established between your PC and Router the Status of PC Router or Internet Please make sure the following items 1 Make sure the Router is powered on 2 Make sure your network adapter is connected to the LAN port of the Router 3 Make sure your network adapter has an IP address ED 11 2 4 Quick Wizard Install mode 22 WGR 6012 Easy Setupvi025 Setup 1 Make sure the router is powered on This step will setup your basic wireless network settings 2 Make sure your
55. tation to specified a group of trusted IP addresses For example 10 1 2 0 24 NOTE When Remote Administration is enabled the web server port will be shifted to 88 You can change 52 web server port to other port too Administrator Time out The time of no activity to logout automatically Set it to zero to disable this feature Discard PING from WAN side When this feature is enabled any host on the WAN cannot ping this product SPI Mode When this feature is enabled the router will record the packet information pass through the router like IP address port address ACK SEQ number and so on And the router will check every incoming packet to detect if this packet is valid DoS Attack Detection When this feature is enabled the router will detect and log the DoS attack comes from the Internet Currently the router can detect the following DoS attack SYN Attack WinNuke Port Scan Ping of Death Land Attack etc 3 3 4 Advanced Settings ADMINISTRATOR S MAIN MENU Status Y Wizard TH Advanced W BASIC SETTING lt FORWARDING RULES 5 SECURITY SETTING 4 ADVANCED SETTING is TOOLBOX System Time Fiance oe System Log System Time Dynamic DNS Allow you to set device time manually or consult network time from NTP System L Routing d Send system log to a dedicated host or email to specific receipts Dynamic DNS To host your server on a changing IF address you have to use dynamic Sc
56. ter is rebooted PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services PPPoE Account and Password the account and password your ISP assigned to you For security this field appears blank If you don t want to change the password leave it empty PPPoE Service Name optional Input the service name if your ISP requires it Otherwise leave it blank Maximum Idle Time the amount of time of inactivity before disconnecting your PPPoE session Set it to zero or enable Auto reconnect to disable this feature Maximum Transmission Unit MTU Most ISP offers MTU value to users The most common MTU value is 1492 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Staus page 25 i J Primary Setup Help Primary Setup Item Setting DHCP Server gt LAN IP Address 192 168 1 1 Wireless gt WAN Type PPP over Ethernet Change Change Password gt PPPoE Account gt PPPoE Password gt Primary DNS 0 0 0 0 gt Secondary DNS 0 0 0 0 gt Maximum Idle Time 300 seconds gt Authentication method Auto v Connection Control Connect on demand v gt PPPoE Service Name opt
57. toms as below Status Led is bright or dark in work The system hanged up Suggest powering off and on the router But this symptom often occurs please reset to default or upgrade latest FW to try again Status led flashes irregularly Maybe the root cause is Flash ROM and please press reset Button to reset to default or try to use Recovery mode Refer to Q3 and Q4 Status flashes very fast while powering on Maybe the router is the recovery mode and please refer to Q4 3 How to reset to factory default A Press Wireless on off and WPS button simultaneously about 5 sec Status will start flashing about 5 times remove the finger The RESTORE process is completed 4 Why can I not connect Internet even though the cables are plugged in Wan port and LAN port and the LEDs are blink In addition Status led is also normal and can configure web management A Make sure that the network cable from DSL or Cable modem is plugged in WAN port of Router and that the network cable from LAN port of router is plugged in Ethernet adapter Then please check which wan type you use If you are not sure please call the ISP Then please go to this page to input the information ISP is assigned 3 Choose WAN Type Static IP Address ISP assigns you a static IF address Dynamic IF Address Obtain an IP address from SP automatically Dynamic IF Address with Road Runner Session Management e g Telstra BigPond PPP over Ethernet some lSPs require the use of P
58. tworks Enable network access control using IEEE 802 1 EAP type mart Lard or other Certificate ba MO5 Challenge Smart Card or other Certificate Authenticate as computer when computer information i available Authenticate as quest when user or computer information is Unavailable Figure 2 Enable IEEE 802 1X access control 66 Figure 3 Smart card or certificate properties 4 Windows 2000 RADIUS server Authentication testing 4 1DUT authenticate PC1 using certificate PC2 follows the same test procedures 1 Download and install the certificate on PC1 Fig 4 2 PC1 choose the SSID of DUT as the Access Point 3 Set authentication type of wireless client and RADIUS server both to EAP_TLS 4 Disable the wireless connection and enable again 5 The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PC1 Fig 5 6 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure Fig 6 7 Terminate the test steps when PC1 get dynamic IP and PING remote host successfully 67 Certificates Personal Other People Certificate intended purposes Figure 4 Certificate information on PC1 Network Connections File Edit View Favorites Tools Advanced Help Bi Search Wy Folders Eek address Network Connections a ag O ec EE c Local Area Connection c Wireless Rl
59. uncast cca ee ere 21 SO POV ANIGCG osie O nie neueattiatae 21 So Wel Ba ICO N emer Reem ne ee ee Pree ee nt er ee re 21 3 3 1 1 Primary Setup WAN Type Virtual Computers 0 0 0 ccceseeceeeteeees 23 3052 OF WANING RUES iezii a aR 36 3020 DECUIILY Oe NS eena a tn ne hondectiia eae tered 39 JALAVAN SENGS ssaa an a E A 53 Fie Yo TOODO a T ee ee ee ee ees 61 PDDSNIOCICES ANG NOG sariei ts atase ecu toneetna eta desatti ues 64 SOZ AX SEUNG enn Ss tebiec teers teal oo ieetseh aan ieeueetansay 64 le EgUPMENT Le UN an ts ti poeosatin aa a eae oda east oo ttle eee teed et 64 OW OMG UA vers ence ote teehee E O E T E O 65 3 DUT and Windows 2000 Radius Server Setup ccc ccccccesssccesssseeeesseeeeereees 65 4 Windows 2000 RADIUS server Authentication testing cc eececceesseeeeereees 67 WV TP UIE lS alsa onedeguseyaciedsonait quateedeendsenduenesnesionnseaateoiavediandcenseesaees 70 FAQ and Troubleshooting xcsiaicvenscsuatttatarestaetieataaemnnasineeoss 79 Chapter 1 Introduction Congratulations on your purchase of this outstanding Wireless Broadband Router This product is specifically designed for Small Office and Home Office needs It provides a complete SOHO solution for Internet surfing and is easy to configure and operate even for non technical users Instructions for installing and configuring this product can be found in this manual Before you install and use this product please read this manual carefully for fully exploiting t
60. wireless Ethernet networks O Use my smart card Use a certificate on this computer le network access control using IEEE 802 1 Smart Card or other Certificate a A O a Levers J V alidate server certificate C Connect only if server name ends with Eee Authenticate as computer when computer information is available Trusted root Use a different user name for the connection C Authenticate as guest when user or computer information is unavailable Wireless Network Connection Properties RE 123kk properties General Wireless Networks Advanced Association Authentication Use Windows to configure my wireless network settings Network name SSID Available networks Wireless network key To connect to an available network click Configure man amit0 ik JOYCE Bata encryption Preferred networks Network key Automatically connect to available networks in the order listed below Contirm network key 4 123kk Move up Move down K ey index advance edj 2 The key Is rovided tor me automatic ally Learn about setting up wireless network This is a computer to computer fad hoc network wireless configuration Then if the wireless client wants to associate it has to request to authenticate 78 FAQ and Troubleshooting What can do when have some trouble at the first time 1 Why can not configure the router even if the cable is plugged in
61. y Setup WAN Type Manually Password gt WAN gt Wireless gt Summary gt Finish Setup Wizard Select WAN Type EXIT ISP assigns you a static IP address Static IP Address Obtain an IP address from ISP automatically Dynamic IP Address Dynamic IP Address with Road Runner Session Management e g Telstra BigPond Some ISPs require the use of PPPoE to connect to their services PPP over Ethernet Some ISPs require the use of PPTP to connect to their services PPTP Same ISPs require the use of L2TP to connect to their services L2TP Start gt Password gt WAN gt Wireless gt Summary gt Finish 18 3 Setup Wizard WAN Settings Dynamic IP Address EXIT tep Setup the LAN IP and WAN Type gt LAN IP Address 192 168 1 1 Account Password Login Server optional lt Back Start gt Password gt WAN gt Wireless gt Summary gt Finish Example 3 Setup Wizard WAN Settings PPP over Ethernet EXIT Step 4 LAN IP Address 192 168 1 1 Please fill in PPPoE service gasas Password information which is provided by Poran HiS sts Secondary DNS 0 0 0 0 your ISP gt PPPoE Service Name i optional Assigned IP Address 0 0 0 0 optional lt Back Start gt Password gt WAN gt Wireless gt Summary gt Finish Step 5 J Setup Wizard Wireless settings EXIT Set up your Wireless Wireless function Enable Disabl
Download Pdf Manuals
Related Search