Home

Edimax Technology BR-6218Mg User's Manual

1. User can choose to log or not to log packets which match any configured ACL Ingress means packets from LAN to Gateway and Egress means packets from Gateway to WAN Pay special attention to the Egress source IP port direction Direction IP group The source IP address of an LAN to WAN packet will be already changed to gateway s public IP address That means if you created a system wise egress rule please specifying the Gateway WAN IP address as the source IP Tune Specify the traffic type here You can pick TCP for TCP traffic UDP for UDP yP traffic or IP for all kind of IP traffic Specify the TCP UDP port number for filtered traffic l You can select a range of day and time that the specified PCs will not able to Day Time l i access the Internet on these time period You can Enable Disable some policies by check their enable checkbox You can now configure other advance sections or start using the router with the advance settings in place 46 Example Access Control In the example below LAN client A can only access websites that use Port 80 However LAN client B is able to access websites and any other service that uses ports between 80 and 999 d Power Reset ADSL or Cable Modem 3 192 168 2 2 192 168 2 3 p Website Server Configuration Configuration IP 192 168 2 2 IP 192 168 2 3 Port 80 80 Port 80 999 47 2 7 2 URL Filter You can block access to some We
2. WAN Wide Area Network A network that connects computers located in geographically separate areas e g different buildings cities countries The Internet is a wide area network Web based management Graphical User Interface GUI Many devices support a graphical user interface that is based on the web browser This means the user can use the familiar Netscape or Microsoft Internet Explorer to Control configure or monitor the device being managed 57
3. EDIMAX NETWORKING PEOPLE TOGETHER BR 6218Mg MIMO Wireless Broadband Router User s Manual io o 3 gs zc RR ERECTUS 3 MINIMA REQUIEM EN Sisa ias 3 Package COmMent cada 3 No te ed 3 Get to know the Broadband Router ccccoccncccccncccccncccncncconcnononononononconnncnoncncnonenoss 4 zia Eu 4 melt siis X 4 PPP D 0 E 05 07 E 5 ale A 6 Eeoae aec T M Om 12 Quick SelllD ccu tee tn eter tr ores os een OPE MS LI PIS D MIL M E I MU 12 i o Time ZOO 12 A uii eciam 13 A TER 14 e o O EEE EEA EAT 15 RUE E gee EEE E E E E ori E E E E UE CM 15 A mw 16 O E E N AAT 18 921 2 Z dd 19 General Std Susana il 19 Fd 1 Cis inp ne Re A ne ny a 20 Zlatan E 20 22 PassWord SCORE NNA 21 2 1 9 Remote Manada A a 22 A 23 A Um E 23 222 Dh ies c cL es a es a OS LO 23 2 23 PPPOEXPIPT over Eme lisas ss 23 poA dl Fenn REN LN ee uui 24 22 5192 eccesso ee ee ene a eee nee Du moet 24 220 DDNS 24 A 25 ZENE ICO ooo EIL eins 26 24 Basi SC MOS aan 26 242 Advanced Sel eee eee eee eee ee ee eee ou bdis tandiu idt 28 2 4 3 DOCU asar vm deud ovs upuuos ed tud epe dede debuerit 30 2 4 8 1 WEP A ins 30 Ae ODA CONV bad 30 21 3 9 902 X WEP UAL KO V erase E p bin E pn one etie 31 2 4 3 4 WPA WPA 2 Pre shared key
4. General Setup tatus Info N stem Tools 9 System WAN Settings V WAN The Broadband router can be connected to your Service Provider through the following methods Obtains an IP Address automatically from your Service Provider 9 Dynamic IP Uses a Static IP Address Your Service Provider gives a O Static IP Address Static IP Address to access Internet services eLAN PPP over Ethernet is a common connection method used Wireless O PPPoE in xDSL connections QoS O PPTP Point to Point Tunneling Protocol is a common connection NAT method used in xDSL connections Layer Two Tunneling Protocol is a common connection Firewall O L2TP method used in xDSL connections More Configuration Dynamic IP Your ISP will automatically give you an IP address Static IP Address Your ISP has given you an IP address already PPPoE Your ISP requires you to use a Point to Point Protocol over Ethernet PPPoE connection PPTP Your ISP requires you to use a Point to Point Tunneling Protocol PPTP connection LOTP Your ISP requires you to use a Layer Two Tunneling Protocol L2TP connection Click on one of the WAN type and then proceed to the manual s relevant sub section 1 1 1 2 1 3 1 4 1 5 or 1 6 Click on Back to return to the previous screen 13 1 1 Dynamic IP Choose Dynamic IP if your ISP will automatically give you an IP address Some ISP s may also require that you fill in additional information such as MAC a
5. 2 7 4 DMZ If you have a local client PC that cannot run an Internet application e g Games properly from behind the NAT firewall then you can open the client up to unrestricted two way Internet access by defining a DMZ Host The DMZ function allows you to re direct all packets going to your WAN port IP address to a particular IP address in your LAN The difference between the virtual server and the DMZ function is that the virtual server re directs a particular service Internet application e g FTP websites to a particular LAN client server whereas DMZ re directs all packets regardless of services going to your WAN IP address to a particular LAN client server ee A Y 85 Setup General Setup atus Info Tools System DMZ Configuration WAN If you have a local client PC that cannot run an Internet application properly behind the SE WM NAT firewall you could open the client up to unrestricted two way Internet access by m defining a Virtual DMZ Host Wireless QoS NAT DMZ Host C Enable 4 Firewall General L4 protocol forward Enable ICMP forward Cl Enable Enable disable DMZ Note If there is a conflict between the Virtual Server and the DMZ setting then Virtual Server function will have priority over the DMZ function Enable DMZ DMZ Host Input the IP address of a particular host in your LAN that will receive all the packets originally going to the WAN port Public IP address above Note You
6. QoS Channel 11 Mm NAT MAC Address 1 00 Firewall MAC Address 2 00 MAC Address 3 100 MAC Address 4 100 Operation Mode It allows you to set the AP to AP Bridge or WDS mode It allows you to set the AP fix at 802 11b or 802 11g mode You also can select RF Band B G mode to allow the AP select 802 11b and 802 11g connection automatically SSID This is the name of the wireless LAN All the devices in the same wireless LAN should have the same ESSID Chane Number The channel used by the wireless LAN All devices in the same wireless LAN should use the same channel If you want to bridge more than one networks together with wireless LAN you have to set this access point to AP Bridge Point to Point mode AP Bridge Point to Multi Point mode or AP Bridge WDS mode You have to enter the MAC addresses of other access points that join the bridging work MAC address Click the Set Security button then a WDS Security Settings will pop up You can set the security parameters used to bridge access points together here when your AP is in AP Bridge modes You can refer to section 4 3 Security Settings for how to set the parameters Set Security Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 4 2 Advanced Settings You can set
7. esses 32 2 43 90 WENWPAZ FadiliS ier tustiev oreet iepedvtu d etodexe Deved lata 33 odd ACCESS OODIFOLa o pendet tae da dioe ne deae ao doa Hao iio dao dud Fono dad dede dodi D doe 34 ZR QOS DM 35 20021 Pon Dased Osma cunda 36 2002 Male OlCING COS o tii 37 2 5 3 Guaranteed Spare Class QS xii Ep aaa 38 2O NA E 39 IS ENE E a EDT 40 2 6 2 opeclal APPICAMON SS 41 2O S AEE UMN AMA e E oO A 43 20d URE 0 ea a E a A N 43 ZO O AUC ROUNO sesonon onner RO EN 44 ARTE E E e E E E E E E E 45 ACES a oS 46 AE E POT a 48 2 7 3 Anti DoS Denial Of ServicCe ocoooccccocnccocnccocncconncconnconnnonnnnnonnncnnnnnnnnnnonons 49 2 kA DMZ 50 Suzie E MR T M 51 UALS RTT TTE 51 g Status ana IMTOMMANOM EE om 52 CEOs o m 52 Se OY SIS OO 52 SUN EN A A 53 92 9 Dn MI tot A 53 92 470 OU messi ds 53 9 2 9 New Connection LOG aetati Erde ais 53 A EIER 54 A e II N TT 94 APPEAR 55 GOSSA Dee eee a A EP 56 Introduction Congratulations on purchasing this Wireless Broadband Router This Wireless Broadband Router is a cost effective IP Sharing Router that enables multiple users to share the Internet through an ADSL or cable modem Simply configure your Internet connection settings in the Wireless Broadband Router and plug your PC to the LAN port and you re ready to share files and access the Internet As your network grows you can connect anot
8. you should see the screen below Step 1 Time Zone The Time Zone allows your router to base its time on the settings configured here this will affect functions such as Log entries and Firewall settings t d 2 EDIMAX e r1 e NETWORKING PEOPLE TOGETHER uick Setup s General Setup E tatus Info N stem Tools Time Zone Management Set the time zone of the Broadband router This information is used for log entries and firewall settings Time Zone Asia Taipei he SLAN Wireless QoS A NAT NTP Server 3 time nist gov NTP Server 1 clock stdtime gov tw NTP Server 2 time b nist gov Firewall Time Sat Jan 1 08 23 42 2000 GMT 08 00 Save Time Sync Refresh Time Time Here shows the time of current router setting Select the time zone of the country you are currently in The router will set its Time Zone l time based on your selection NTP Server You can manually assign three time server addresses here Click on NEXT to proceed to the next page step 2 WAN Settings 12 Step 2 WAN Settings In this section you have to select one of four types of connections that you will be using to connect your broadband router s WAN port to your ISP see screen below Note Different ISP s require different methods of connecting to the Internet please check with your ISP as to the type of connection it requires EDIMAX m r1 e NETWORKING PEOPLE TOGETHER t uick Setup s
9. All button Click Reset will clear your current selections Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 34 2 5 QoS This router supports various types of QoS Port based QoS Rate Policing QoS and Guaranteed Spare Class QoS For Port based QoS user can specify the High Low queue priority for each Ethernet port and can apply total rate limit to any port from 128Kbps to 32Mbps or at Full rate 100Mbps Flow control can also be enabled disabled on per port basis For Application based QoS user can specify a destination port number and associate it with a egress priority High or Low For example in Fig 35 if user config port 7297 with high priority then user would experience better service quality for such flows r TN EDIMAX Lame al e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup s tatus Info 1 stem Tools 9 System QoS Settings WAN SLAN Quality of Service QoS refers to the capability of a network to provide better service to selected network traffic The primary goal of QoS is to provide priority including Wireless dedicated bandwidth controlled jitter and latency required by some real time and interactive traffic and improved loss characteristics Also important is making sure QoS that providing priority for one or more flows does not make other flows fa
10. For the WEP settings please refer to section 2 4 3 1 WEP only For the 802 1x settings please refer to section 2 4 3 2 802 1x only 31 2 4 3 4 WPA WPA2 Pre shared key Wi Fi Protected Access WPA is an advanced security standard You can use a pre shared key to authenticate wireless stations and encrypt data during communication lt uses TKIP or CCMP AES to change the encryption key frequently So the encryption key is not easy to be broken by hackers This can improve security very much t PS EDIMAX e CR NETWORKING PEOPLE TOGETHER i uick Setup s General Setup s tatus Info 1 stem Tools 9 System Wireless Security Setup 9 WAN This page allows you to setup the wireless security Turning on WEP or WPA by using SLAN Encryption Keys could prevent any unauthorized access to your wireless network x Wireless Data Encryption WPA Method TKIP Authentication pre shared key v QoS Key Setting 9 NAT Firewall WPA TKIP TKIP can change the encryption key frequently to enhance the wireless LAN security This use CCMP protocol to change encryption key frequently AES can provide WPA2 AES l l l high level encryption to enhance the wireless LAN security The Pre shared key is used to authenticate and encrypt data transmitted in the Key Setting wireless network Fill the text box by following the rules below At least 8 characters pass phrase as the pre shared keys Click lt Apply gt at the
11. Port based QoS port Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 36 2 5 2 Rate Policing QoS This router supports Rate Policing QoS User can specify a L3 4 criterion and associate it with a maximum token packet rate or data rate based lf a packet arrives and it matches to a rate policing entry router decreases entry s allocated token by one if pps based or by packet length in bytes if bps based If unfortunately the packet just run out of allocated tokens then it would be dropped directly or logged to software depends on the setting of Drop Log field Rate Policing QoS Enable Hardware Rate Policing QoS Kbps Kbps Kbp MNNENNEN M T If you want to monitor the source IP of the packets please select src IP orc dst Otherwise please select dst IP IP Address Specify the IP Address that you want to limit the transmit receive rate IP Mask If you want to limit a subnet you can specify the subnet mask here Specify the protocol you want to monitor it can be TCP UDP or IP only opecify the port ranges that you want to monitor To classify all TCP or UDP Start End Port packets within same IP address mask regardless of port number as same rate policy set O to both Start Port and End Port Rate Unit Specify the rate unit and the type of the limita
12. allows to Enable or Disable UPnP feature here After you enable the UPnP feature all client systems that support UPnP like Windows XP can discover this router automatically and access the Internet through this router without any configuration The NAT Traversal function provided by UPnP can let applications that support UPnP smoothly connect to Internet sites without any incompatibility problem due to the NAPT port translation Static Routing You can disable NAT function and setup the routing rules manually Click on one of the five NAT selections and proceed to the manual s relevant sub section UPnP Setting 39 2 6 1 Virtual Server Use the Virtual Server function when you want different servers clients in your LAN to handle different service Internet application type e g Email FTP Web server etc from the Internet Computers use numbers called port numbers to recognize a particular service Internet application type The Virtual Server allows you to re direct a particular service port number from the Internet WAN Port to a particular LAN private IP address and its service port number See Glossary for an explanation on Port number t TEN y EDIMAX Kies A e NETWORKING PEOPLE TOGETHER uick Setup s General Setup tatus Info A stem Tools 9 System Virtual Server WAN You can configure the Broadband router as a Virtual Server so that remote users accessing services LAN such as the Web or FTP at your local site via Public
13. is if you to not wish to set a maximum packet size If checked gateway won t dial this session until received a packet that Dial On Demand requested Internet access If unchecked gateway dials this session immediately after system powered up perd ions If specified a non zero value gateway disconnects this session after specified idle time RumBscomBd E munem gateway redials this session if session previously terminated by Auth Type Select PAP or CHAP for the authentication type requested by your ISP Click lt OK gt when you have finished the configuration above Congratulations You have completed the configuration for the PPPoE connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 1 4 PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet Your ISP should provide all the information required in this section 16 1 e a o Me Setup amp 4G neral Setup Status Info stem Tools PPTP Point to Point Tunneling Protocol is a common connection method used in xDSL connections e WAN Interface Settings Obtain an IP address automatically Use the following IP address IP Address 192 Subnet Mask 255 Wireless QoS 9 NAT e PPTP Settings Firewall PPTP Server 192 Default Gateway 0 Login ID Password MTU 1460 Connection Type Keep Connecti
14. need to give your LAN PC clients a fixed static IP address for DMZ to work properly General L4 protocol Check this to enable the general layer 4 protocol forwarding function forward ICMP forward Check this to allow the ICMP packets forward to the DMZ host You can now configure other advance sections or start using the router with the advance settings in place 50 Chapter 3 Status The Status section allows you to monitor the current status of your router You can use the Status page to monitor the connection status of the Broadband router s WAN LAN interfaces the current firmware and hardware version numbers any illegal attempts to access your network and information on all DHCP client PCs currently connected to your network r G gt EDIMAX Cm A A NETWORKING PEOPLE TOGETHER E uick Setup Sy General Setup tatus Info N stem Tools xf Status Parameter Firmware Version Firmware Date Loader Version NAT L4 Switching IP Address Subnet Mask MAC Address DHCP Server LAN 1 LAN 2 LAN 3 LAN 4 Received Transmitted Dropped Connection Method IP Address Subnet Mask Default Gateway DNS IP Address MAC Address WAN Port Received Transmitted Dropped System 1 25 2006 09 18 13 56 04 0 0 20 Enable Enable LAN 192 168 2 1 255 255 255 0 00 0E 2E 92 B2 4B Enable Link is Up 100Mbps full duplex Link is down No cable detected Link is down No cable de
15. or Netscape Navigator 4 7 or higher Package Content e One MIMO Broadband router unit e One Quick Installation Guide e One User Manual CD e One Power Adapter e Accessories Note The WAN idle timeout auto disconnect function may not work due to abnormal activities of some network application software computer virus or hacker attacks from the Internet For example some software sends network packets to the Internet in the background even when you are not using the Internet So please turn off your computer when you are not using it This function also may not work with some ISP So please make sure this function can work properly when you use this function in the first time especially your ISP charge you by time used Get to know the Broadband Router Back Panel The diagram fig1 0 below shows the broadband router s back panel The router s back panel is divided into three sections LAN WAN and Reset Power Reset USB 2 USB 1 Figure 1 0 1 Local Area Network LAN The Broadband router s 4 LAN ports are where you connect your LAN s PCs printer servers hubs and switches etc 2 Wide Area Network WAN The WAN port is the segment connected to your xDSL or Cable modem and is linked to the Internet 3 Reset The Reset button allows you to do one of two things 1 If problems occur with your router press the router s reset button with a pencil tip for less than 5 seconds and the router will re boot itself keeping yo
16. select Disabled to disable DDNS function The account that your DDNS service provider assigned to you Password The password you set for the DDNS service account above Host Name Your static domain name that use DDNS Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 24 2 3 LAN The LAN Port screen below allows you to specify a private IP address for your router s LAN ports as well as a subnet mask for your LAN segment Lm 1 r J ki pL e Buin Setup w General Setup atus Info System Tools LAN Settings fou can enable the Broadband router s DHCP dynamically allocate IP Addresses to your LAN ou Speer to dm chen PCs The broadband rouber rust have an IF Address lor the Local Area Hebwork IP Address uz 16 2 1 Subnet Mask zbh 255 255 DHCP Server Status Stan IP L L 100 End ii L i 1199 1st WINS Server A L iu L a znd WINS Server D L D Bi JO Prod Rial DAS Sener Domain From Upper DHCP Static DHCP leases Wo Hardware Address Assigned IP Address gt 00 00 00 Un 05 uno upa uuo uuo 000 000 000 000 Dinamic DHCP Client List Hardware Address Assigned IP Q0 1304 BF AC 53 192 168 2 100 This is the router s LAN port IP address Your LAN clients default gateway IP IP address address IP Subnet Mask Sp
17. the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 33 2 4 4 Access Control This wireless router provides MAC Address Control which prevents the unauthorized MAC Addresses from accessing your wireless network t TN EDIMAX Keg de CR NETWORKING PEOPLE TOGETHER uick Setup s General Setup tatus Info N stem Tools System Wireless Access Control 9 WAN For security reason the Access Point features MAC Address Filtering that only allows SLAN authorized MAC Addresses associating to the Access Point Z Wireless MAC Address Filtering Table Enable Wireless Access Control LECT TN E client list is empty now Firewall New Enable wireless access Enable wireless access control control Fill in the MAC Address and Comment of the wireless station to be added Add MAC address into and then click Apply Then this wireless station will be added into the Access Control List If you find any issues before adding it and want to retype again Just click Reset and both MAC Address and Comment fields will be cleared the list If you want to remove some MAC address from the Access Control List select Remove MAC address the MAC addresses you want to remove in the list and then click Delete from list Selected If you want remove all MAC addresses from the table just click Delete
18. will not work if static routing is enabled TEL e OE Setup amp 4G neral Setup Status Info stem Tools amp System Hardware Static Route 9 WAN You can enable Static Routing to turn off NAT function of this router and let this router LAN forward packets by your routing policy Wireless Qos Route 0 0 0 0 255 255 255 255 0 0 0 0 0 0 0 0 255 255 255 255 0 0 0 0 0 0 0 0 255 255 255 255 0 0 0 0 0 0 0 0 255 255 255 255 0 0 0 0 0 0 0 0 255 255 255 255 0 0 0 0 Firewall The network address of destination LAN Route Mask The subnet mask of destination LAN The next stop gateway of the path toward the destination LAN This is the IP of Next Hop IP the neighbor router that this router should communicate with on the path to the destination LAN The interface that go to the next hop router Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 44 2 Firewall The Broadband router provides extensive firewall protection by restricting connection parameters thus limiting the risk of hacker attack and defending against a wide array of common Internet attacks However for applications that require unrestricted access to the Internet you can configure a specific client server as a Demilitarized Zone DMZ Note To enable the Firewall settings select Enable an
19. 4 18 Chapter 2 General Settings Once you click on the General Setup button at the Home Page you should see the screen below If you have already configured the Quick Setup Wizard you do NOT need to configure anything thing in the General Setup screen for you to start using the Internet The General Setup contains advanced features that allow you to configure the router to meet your network s needs such as Wireless Address Mapping Virtual Server Access Control Hacker Attack Prevention Special Applications DMZ and other functions fe EDIMAX e E fi NETWORKING PEOPLE TOGETHER tatus Info b stem Tools System SWAN SAN The Broadband router supports advanced functions like Virtual Server Access Control Hacker Attack Detection and DMZ General Setup Wireless QoS NAT Firewall We highly recommend you keep the default settings Below is a general description of what advance functions are available for this broadband router Susiom This section allows you to set the Broadband router s system Time Zone y Password and Remote Management Administrator This section allows you to select the connection method in order to establish a connection with your ISP same as the Quick Setup Wizard section You can specify the LAN segment s IP address subnet Mask enable disable DHCP and select an IP range for your LAN You can setup the wireless LAN s SSID WEP key MAC filtering You can setup the
20. C to obtain an IP address automatically By default the broadband router s DHCP is on this means that you can obtain an IP address automatically once you ve configured your PC to obtain an IP address automatically This section will show you how to configure your PC s so that it can obtain an IP address automatically for either Windows 95 98 Me 2000 or NT operating systems For other operating systems Macintosh Sun etc follow the manufacturer s instructions The following is a step by step illustration on how to configure your PC to obtain an IP address automatically for 2a Windows 95 98 Me 2b Windows XP 2c Windows 2000 and 2d Windows NT 2a Windows 95 98 Me 1 Click the Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network icon The Network window will appear 3 Check your list of Network Components If TCP IP is not installed click the Add button to install it now If TCP IP is installed go to step 6 4 In the Network Component Type dialog box select Protocol and click Add button 5 In the Select Network Protocol dialog box select Microsoft and TCP IP and then click the OK button to start installing the TCP IP protocol You may need your Windows CD to complete the installation 6 After installing TCP IP go back to the Network dialog box Select TCP IP from the list of Network Components and then click the Properties button 7 Check each of the ta
21. ER E uick Setup General Setup tatus Info b stem Tools Y System User Management You can change the password required to login the broadband routers system web based management By default the password is 1234 So please assign a password to the Administrator as soon as possible and store it in a safe place Passwords can contain 0 to 16 alphanumeric characters and are case sensitive Account admin Wireless QoS e NAT Retype your Password Password e Firewall Enter your account name to login to your Broadband router Enter your password again for verification purposes Confirmed Password Note If you forget your password you ll have to reset the router to the factory default password is 1234 with the reset button see router s back panel Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 21 2 1 3 Remote Management The remote management function allows you to designate a host in the Internet the ability to configure the Broadband router from a remote site Enter the designated host IP Address in the Host IP Address field t AS EDIMAX Ke T 3 NETWORKING PEOPLE TOGETHER t uick Setup s General Setup tatus Info stem Tools v System Remote Management The remote management function allows you to designate a host in the Internet to have management c
22. IP Addresses can be automatically redirected to local servers configured with Private IP Addresses In other words depending on the requested Wireless service TCP UDP port number the Broadband router redirects the external service request to the appropriate internal server located at one of your LAN s Pirvate IP Address Server Port wanrentane sonene asson o pre Jo 10 TCP Y TCP y TCP y TCP TCP v E gt gt E Firewall E gt 0 0 0 0 0 gt 0 0 0 E TCP v TCP iM gt Ssiicoliicoiicoliicoiioliio iio elleilelleilleileillelim e eilluweilleillelilei um eiie Fw Ww rw rw rw rw rw Ss gt TCP amp Enter the service service Internet application port number from the Internet that will be re directed to the above Private IP address host in your LAN WAN FOER ANGE Note Virtual Server function will have priority over the DMZ function if there is a conflict between the Virtual Server and the DMZ settings This is the LAN client host IP address that the Public Port number packet will be sent to Note You need to give your LAN PC clients a fixed static IP address for Virtual Server to work properly Server IP Address This is the port number of the above Private IP host that the below Public Port Server Port Range number will be changed to when t
23. QoS bandwidth control policy You can configure the Address Mapping Virtual Server and Special NAT Applications functions in this section This allows you to specify what user packet can pass your router s NAT The Firewall section allows you to configure Access Control Hacker Prevention Firewall and DMZ Select one of the above General Setup selections and proceed to the manual s relevant sub section 19 2 1 System The system screen allows you to specify a time zone to change the system password and to specify a remote management user for the broadband router X EDIMAX so SN r1 e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup tatus Info N stem Tools System System Settings This page includes the basic configuration tools for the Broadband router s remote management access function WAN eLAN Wireless OJOS NAT Firewall System Settings Select the time zone of the country you are currently in The router will set its Time Zone i time based on your selection Allows you to select a password in order to access the web based Password Settings management website You can specify a Host IP address that can perform remote management Remote Management l functions Select one of the above three system settings selections and proceed to the manual s relevant sub section 2 1 1 Time Zone The Time Zone allows your router to reference or base its time on the settin
24. SP is a business that provides connectivity to the Internet for individuals and other businesses or organizations LAN Local Area Network A LAN is a group of computers and devices connected together in a relatively small area such as a house or an office Your home network is considered a LAN MAC Address MAC stands for Media Access Control A MAC address is the hardware address of a device connected to a network The MAC address is a unique identifier for a device with an Ethernet interface It is 96 comprised of two parts 3 bytes of data that corresponds to the Manufacturer ID unique for each manufacturer plus 3 bytes that are often used as the product s serial number NAT Network Address Translation This process allows all of the computers on your home network to use one IP address Using the broadband router s NAT capability you can access the Internet from any computer on your home network without having to purchase more IP addresses from your ISP Port Network Clients LAN PC uses port numbers to distinguish one network application protocol over another Below is a list of common applications and protocol port numbers Application Protocol Port Number Telnet TCP 23 FTP TCP 21 SMTP TCP 25 POP3 TCP H 323 TCP SNMP UCP SNMP Trap UDP HTTP TCP PPTP TCP PC Anywhere TCP PC Anywhere UDP PPPoE Point to Point Protocol over Ethernet Point to Point Protocol is a secure data transmission method originally created for d
25. SRAEL Select this item if you are using the service provided by BEZEQ in Israel Auth Type Select PAP or CHAP for the authentication type requested by your ISP Click lt OK gt when you have finished the configuration above Congratulations You have completed the configuration for the PPTP connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 17 1 5 L2TP Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet Your ISP should provide all the information required in this section XDIMAX Kes r 3 NETWORKING PEOPLE TOGETHER 85 Setup e General Setup atus Info b stem Tools e System L2TP Layer Two Tunneling Protocol is a common connection method used in xDSL connections WAN Interface Settings Obtain an IP address automatically Use the following IP address IP Address 1922 168 o 1o00 Subnet Mask 255 255 255 o Wireless QoS 9 NAT L2TP Settings Firewall L2TP Server Default Gateway 0 0 0 0 Login ID Password MTU 1452 Connection Type Keep Connection Idle Time 1 1000 minutes CibiaimanmdPraddrass The ISP requires you to obtain an IP address by DHCP automatically before connecting to the L2TP server Use the following IP The ISP gives you a static IP to be used to connect to the L2TP server address P Address This
26. WAN DHCP Client 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0E 2E 92 B2 4C Link is down 0 packets 0 bytes 0 packets 0 bytes 2 packets Wireless Default 00 0E 2E 92 B2 4B a Info Tools You can see the router s system information such as the router s System Information Information LAN Information WAN Information and Wireless Information 3 2 Logs This router supports five types of Log messages System Log ACL Log URL filter DoS Log and New connection Log You can Enable or Disable each of these Logs 3 2 1 System Log 85 Setup amp 4G neral Setup Status Info A System Tools System Log Configuration NETWORKING PEOPLE TOGETHER Z Status System Log M Enable 92 3 2 2 ACL Log e AY EDIMAX A E 3 NETWORKING PEOPLE TOGETHER uick Setup General Setup E tatus Info N stem Tools x Status ACL Log Configuration ACL Log Enable ACL Log 3 2 3 URL Filter Log 14 sjan f EDIMAX K r1 E NETWORKING PEOPLE TOGETHER 85 Setup General Setup Status Info stem Tools Z Status URL Filter Log Configuration URL Filter Log Enable URL Filter Log 3 2 4 DoS Log t Y 0 EDIMAX NM x A NETWORKING PEOPLE TOGETHER i uick Setup o General Setup tatus Info N stem Tools x Status DoS Log Configuration DoS Log Enable DoS Log 3 2 5 New Connection Log t ME EDIMAX co como GN cine NETWORKING PEOPLE TOGETHER x uick Setup s General Setup tatu
27. ZZZJEC Hetero LAY ASA al gei Parameter Description Queue ID The Queue Group ID groups all the connections with the same Queue ID into one rule and these connections share the same bandwidth in this rule If you want to monitor the source IP of the packets please select src IP orc Dst l Otherwise please select dst IP IP Address Specify the IP Address that you want to limit the transmit receive rate IP Mask If you want to limit a subnet you can specify the subnet mask here Specify the protocol you want to monitor it can be TCP UDP or IP only Specify the port ranges that you want to monitor To classify all TCP or UDP Start End Port packets within same IP address mask regardless of port number as same rate policy set O to both Start Port and End Port Bandwidth allocation Guaranteed or Spare policy Input the percentage of total bandwidth that this queue have Differentiated Services Code Point is a model in which traffic is treated by DSCP Marking intermediate systems with relative priorities based on the type of services If you want to mark this Queue to specified DSCP type enable this option and filled a value in the DSCP value field Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 38 2 6 NAT Network Address Translation NAT allows multiple users at yo
28. advanced wireless LAN parameters of this router The parameters include Authentication Type Fragment Threshold RTS Threshold Beacon Interval Preamble Type You should not change these parameters unless you know what effect the changes will have on this router 28 B So COEM UL 5 Setup General Setup Status Info stem Tools System Wireless Advance Settings 9 WAN These settings are only for more technically advanced users who have a sufficient eLAN knowledge about wireless LAN These settings should not be changed unless you know what effect the changes will have on your Broadband router Y Wireless Fragment Threshold 2346 256 2346 RTS Threshold 2347 0 2347 Beacon Interval 100 20 1024 ms DTIM Period 3 1 10 Max Data Rate Auto Firewall Preamble Type O Long Preamble 9 Short Preamble Broadcast SSID Enable CTS Protect OAuto COAlways none TX Power 10096 v Turbo Mode Enable WMM Enable Fragment Threshold specifies the maximum size of packet during the Fragment Threshold fragmentation of data to be transmitted If you set this value too low it will result in bad performance When the packet size is smaller the RTS threshold the wireless router will not ple tenor use the RTS CTS mechanism to send this packet The interval of time that this wireless router broadcast a beacon Beacon is Beacon Interval E used to synchronize the wireless netw
29. automatically and Obtain DNS server address automatically as shown on the following screen Internet Protocol TCP IP Properties General Alternate Configuration ou can get IP settings assigned automatically if your network supports this capability Otherwise pou need ta ask your network administrator hor the appropriate IF settings 2 Obtain an IP address automatically C Use the following IP address C Use the following ONS server addresses oe mg 5 Click OK to confirm the setting Your PC will now obtain an IP address automatically from your Broadband Router s DHCP server Note Please make sure that the Broadband router s DHCP server is the only DHCP server available on your LAN Once you ve configured your PC to obtain an IP address automatically please proceed to Step 3 2c Windows 2000 1 Click the Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network and Dial up Connections icon In the Network and Dial up Connection window double click Local Area Connection icon The Local Area Connection window will appear 3 In the Local Area Connection window click the Properties button 4 Check your list of Network Components You should see Internet Protocol TCP IP on your list Select it and click the Properties button 5 In the Internet Protocol TCP IP Properties window select Obtain an IP address automatically and Obtain DNS serv
30. b sites from particular PCs by entering a full URL address or just keyword of the Web site t EDIMAX ee T 8 NETWORKING PEOPLE TOGETHER E uick Setup General Setup tatus Info NN stem Tools System URL Filter Configuration SWAN You can block access to certain Web sites from a particular PC by entering either a full SLAN URL address or just a keyword of the Web site Any web access traffic ie destined to any E TCP port is inspected by hardware at wirespeed Wireless QoS NAT URL string pattern to be blocked Source IP range Enable 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4 Firewall um ms o DI CE CS URL String Pattern Mun enter the full URL address or the keyword of the web site you want to Source IP Range You can specify a range of LAN PCs that apply to the URL filter feature Enable URL Blocking Check the check box to Enable URL Blocking You can now configure other advance sections or start using the router with the advance settings in place 48 2 7 3 Anti DoS Denial of Service The Broadband router s firewall can block common hacker attacks including Denial of Service Ping of Death Port Scan and Sync Flood If Internet attacks occur the router can log the events EE m 9 Mick Setup 4G neral Setup Status Info stem Tools Syste
31. bled so that you can obtain an IP address automatically To see if you have obtained an IP address see Appendix A Note Please make sure that the Broadband router s DHCP server is the only DHCP server available on your LAN If there is another DHCP on your network then you ll need to switch one of the DHCP servers off To disable the Broadband router s DHCP server see chapter 2 LAN Port Once your PC has obtained an IP address from your router enter the default IP address 192 168 2 1 broadband router s IP address into your PC s web browser and press lt enter gt MSN com Microsoft Internet Explorer Ele Edit View Favorites Tools Help x E A ya search gr Favorites http 192 168 2 1 dl Address The login screen below will appear Enter the User Name and Password and then click lt OK gt to login Note By default the user name is admin and the password is 1234 For security reasons it is recommended that you change the password as soon as possible in General setup system password see chapter 2 Connect to 192 168 2 1 Default admin 1234 User name 5 admin Fassword Remember my password Cop ene The HOME page screen below will appear The Home Page is divided into four sections Quick Setup Wizard General Setup Status Information and Tools t P N f X DIMAX e Y NETWORKING PEOPLE TOGETHER k uick Setup s General Setup tatus Info A stem Tools Svs Syste
32. bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 32 2 4 3 5 WPA WPA2 Radius Wi Fi Protected Access WPA is an advanced security standard You can use an external RADIUS server to authenticate wireless stations and provide the session key to encrypt data during communication lt uses TKIP or CCMP AES to change the encryption key frequently This can improve security very much PN EDIMAX pc S NETWORKING PEOPLE TOGETHER b uick Setup General Setup System Wireless Security Setup 9 WAN This page allows you to setup the wireless security Turning on WEP or WPA by using S LAN Encryption Keys could prevent any unauthorized access to your wireless network s Wireless Data Encryption WPA Method TKIP Authentication By RADIUS server v QoS Port 1812 NAT l p RADIUS Setting IP Address 0 0 0 0 Firewall WPA TKIP TKIP can change the encryption key frequently to enhance the wireless LAN security This use CCMP protocol to change encryption key frequently AES can provide WPA2 AES l l high level encryption to enhance the wireless LAN security RADIUS Server IP The IP address of external RADIUS server address RADIUS Server Port The service port of the external RADIUS server RADIUS Server The password used by external RADIUS server Password Click lt Apply gt at
33. bs and verify the following settings e Bindings Check Client for Microsoft Networks and File and printer sharing for Microsoft Networks Gateway All fields are blank DNS Configuration Select Disable DNS WINS Configuration Select Disable WINS Resolution IP Address Select Obtain IP address automatically TCPAIP Properties Bindings Advanced NetBlos ONS Configuration Gateway WINS Configuration F Address An IP address can be automatically assigned to this computer IF vour network does not automatically assign IF addresses ask your network administrator for an address and then type it in the space below Specify an IP address pee CTTT 8 Reboot the PC Your PC will now obtain an IP address automatically from your Broadband Router s DHCP server Note Please make sure that the Broadband router s DHCP server is the only DHCP server available on your LAN Once you ve configured your PC to obtain an IP address automatically please proceed to Step 3 2b Windows XP 1 Click the Start button and select Settings then click Network Connections The Network Connections window will appear 2 Double click Local Area Connection icon The Local Area Connection window will appear 3 Check your list of Network Components You should see Internet Protocol TCP IP on your list Select it and click the Properties button 4 In the Internet Protocol TCP IP Properties window select Obtain an IP address
34. d You can select the WEP key length for encryption 64 bit or 128 bit Larger WEP key length will provide higher level of security but the throughput will be lower Authentication When using shared key user must input 10 hexadecimal digits for WEP64 and 26 digits for WEP128 All the four WEP keys are set identical The WEP keys are used to encrypt data transmitted in the wireless network Fill the text box by following the rules 64 bit WEP input 10 digit Hex values in the A F a f and 0 9 range as the encryption keys 128 bit WEP input 26 digit Hex values in the A F a f and 0 9 range as the encryption keys Key Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 4 3 2 802 1x only IEEE 802 1x is an authentication protocol Every user must use a valid account to login to this Access Point before accessing the wireless LAN The authentication is processed by a RADIUS server This mode only authenticates user by IEEE 802 1x but it does not encryption the data during communication 30 r o EDIMAX E e r1 e NETWORKING PEOPLE TOGETHER uick Setup lt General Setup E tatus Info N stem Tools System Wireless Security Setup 9 WAN This page allows you to setup the wireless security Turning on WEP or WPA by using SLAN Encryption Keys could prevent any unauthorized access to your w
35. d click Apply r KRY r EDIMAX ha r1 E NETWORKING PEOPLE TOGETHER E uick Setup General Setup tatus Info stem Tools System e WAN LAN The Broadband router provides extensive firewall protection by restricting connection parameters thus limiting the risk of hacker attack and defending against a wide array Wireless of common attacks However for applications that require unrestricted access to the e QoS Internet you can configure a specific client server as a Demilitarized Zone DMZ o 9 NAT Y Firewall Security Settings Firewall Access Control List allows you to specify which hosts users can or cannot have Access Control List aoe access to certain Internet applications The Broadband router s firewall can block common hacker attacks and can log Anti DoS the attack activities The DMZ Host function allows you to re direct all packets going to your WAN EIN nO port IP address to a particular IP address in your LAN URL Filter URL Filter allows you to specify which URLs can t be accessed by users Click on one of the firewall selections and proceed to the manual s relevant sub section 45 2 7 1 Access Control List If you want to restrict users from accessing certain Internet applications services e g Internet websites email FTP etc then this is the place to set that configuration Access Control allows users to define the traffic type permitted in your LAN You can control which PC c
36. d the configuration for the Cable Modem connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 14 1 2 Static IP Address Select Static IP Address if your ISP has given you a specific IP address for you to use Your ISP should provide all the information required in this section LJ M EDIMAX m r1 e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup E tatus Info 1 stem Tools e System Static IP Address Aw If your Service Provider has assigned a Fixed IP address enter the assigned IP Address Subnet Mask and the Gateway IP Address provided IP Address H2 j Jf 254 Subnet Mask 255 255 255 0 Default Gateway 172 20 f 250 LAN Wireless e QoS NAT Firewall DNS Hes 5 Jh IH IP Address This is the IP address that your ISP has given you Enter the Subnet Mask provided by your ISP SUMELA e g 255 255 255 0 Default Gateway This is the ISP s IP address gateway DNS This is the ISP s DNS server IP address Click lt OK gt when you have finished the configuration above Congratulations You have completed the configuration for the Fixed IP x DSL connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 1 3 PPPoE Select PPPOE if your ISP requires the PPPoE protocol to connect you
37. ddress see screen below Note The MAC address section is optional and you can skip this section if your ISP does not require these settings for you to connect to the Internet r AN EDIMAX HIM A e NETWORKING PEOPLE TOGETHER 7 uick Setup Su General Setup tatus Info b stem Tools amp System Dynamic IP Address The Host Name is optional but may be required by some Service Providers The default MAC Address is set to the WAN physical interface on the Broadband router If required by your Service Provider you can use the Clone MAC Address button to copy the MAC Address of the Network Interface Card installed in your PC and replace the WAN MAC Address with this MAC Address Hostname uselo0 too loo oo oo Clone MAC Elusejo o jo jo fo fo Wireless Clone MAC QoS eNAT Firewall Your ISP may require a particular MAC address in order for you to connect to the Internet This MAC address is the PC s MAC address that your ISP had originally connected your Internet connection to Type in this MAC address in Clone MAC this section or use the Clone MAC Address button to replace the WAN MAC address with the MAC address of that PC you have to be using that PC for the Clone MAC Address button to work To find out the PC s MAC address see Appendix A see Glossary for an explanation on MAC address Click lt OK gt when you have finished the configuration above Congratulations You have complete
38. e detail 2 2 3 PPPOE PPP over Ethernet Select PPPoE if your ISP requires the PPPoE protocol to connect you to the Internet Your ISP should provide all the information required in this section See chapter 1 PPPoE for more detail 23 2 2 4 PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet Your ISP should provide all the information required in this section See chapter 1 PPTP for more detail 2 2 5 L2TP Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet Your ISP should provide all the information required in this section See chapter 1 L2TP for more detail 2 2 6 DDNS DDNS allows you to map the static domain name to a dynamic IP address You must get an account password and your static domain name from the DDNS service providers This router supports DynDNS TZO and other common DDNS service providers t re EDIMAX gt T e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup tatus Info stem Tools e System DDNS DDNS allows users to map the static domain name to a dynamic IP address You must get a account password and your static domain name from the DDNS service providers Our products have DDNS support for www dyndns org and www tzo com now Service Type Disable Y Username Password Wireless QoS NAT Firewall Hostname Service Type Select a DDNS service provider or
39. ecify a Subnet Mask for your LAN segment You can enable or disable the DHCP server By enabling the DHCP server the router will automatically give your LAN clients an IP address If the DHCP is not DHCP Server Status enabled then you ll have to manually set your LAN client s IP addresses make sure the LAN Client is in the same subnet as this broadband router if you want the router to be your LAN client s default gateway IP Address Pool You can select a particular IP address range for your DHCP server to issue IP addresses to your LAN Clients WINS Server You can specify the WINS server to assign to DHCP clients Provide Real DNS When check this box DHCP server will provide WAN DNS server to DHCP Server clients Otherwise DHCP server will provide itself as the DNS server Domain from upper Enable this to assign the domain name from WAN connection DHCP Static DHCP leases Static DHCP leases is for user to statically associate an IP address to a specific MAC address Dynamic DHCP Client Dynamic DHCP Client List shows all IP addresses already assigned and the List corresponding LAN PC hostname and their MAC addresses Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 25 2 4 Wireless Wireless Access Point builds a wireless LAN and can let all PCs equipped with IEEE 802 11b or 801 11g wireless
40. el It is designed to support zero configuration invisible networking and automatic discovery for a breadth of device categories from a wide range of vendors With UPnP a device can dynamically join a network obtain an IP address convey its capabilities and learn about the presence and capabilities of other devices all automatically truly enabling zero configuration networks Devices can subsequently communicate with each other directly thereby further enabling peer to peer networking UPnP Senice Cl Enable Firewall 43 You can Enable or Disable UPnP feature here After you enable the UPnP feature all client systems that support UPnP like Windows XP can discover UPnP Feature this router automatically and access the Internet through this router without any configuration The NAT Traversal function provided by UPnP can let applications that support UPnP smoothly connect to Internet sites without any incompatibility problem due to the NAPT port translation Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 6 5 Static Routing This router provides Static Routing function when NAT is disabled With Static Routing the router can forward packets according to your routing rules The IP sharing function will not work any more in Static Routing mode Note The DMZ function of firewall
41. el for the wireless connection These SLAN parameters are used for the wireless stations to connect to the Access Point x Wireless Operation Mode n Bridge Point to Point j 4 RF Band 24 GHz B G Channel 11 w QoS MAC Address 1 oo oo oo oo Joo E Set Soc Firewall AP Bridge Point to Multi Point mode setting page e pe f xa 7 9 3 cam Y NETWORKING PEOPLE TOGETHER uick Setup s General Setup E tatus Info h stem Tools System Wireless Basic Settings ew 3 WAN This page allows you to define ESSID and Channel for the wireless connection These SLAN parameters are used for the wireless stations to connect to the Access Point Z Wireless Operation Mode AP Bridge Point to Multi Point V RF Band 12 4 GHz B G v Channel 11 5 L QoS MAC Address 1 00 00 NAT MAC Address 2 00 o0 Firewall MAC Address 3 00 00 MAC Address 4 00 lo0 Set Security 2 AP Bridge WDS mode setting page LI Y o EDIMAX ae x a NETWORKING PEOPLE TOGETHER uick Setup s General Setup a tatus Info stem Tools System Wireless Basic Settings SW WAN This page allows you to define ESSID and Channel for the wireless connection These SLAN parameters are used for the wireless stations to connect to the Access Point Operation Mode AP Bridge WDS M RF Band 24 GHz B G a Wireless SSID Default amp
42. en send it out towards the destination DHCP Dynamic Host Configuration Protocol This protocol automatically gives every computer on your home network an IP address DNS Server IP Address DNS stands for Domain Name System which allows Internet servers to have a domain name such as www Broadbandrouter com and one or more IP addresses such as 192 34 45 8 A DNS server keeps a database of Internet servers and their respective domain names and IP addresses so that when a domain name is requested as in typing Broadbandrouter com into your Internet browser the user is sent to the proper IP address The DNS server IP address used by the computers on your home network is the location of the DNS server your ISP has assigned to you DSL Modem DSL stands for Digital Subscriber Line A DSL modem uses your existing phone lines to transmit data at high speeds Ethernet A standard for computer networks Ethernet networks are connected by special cables and hubs and move data around at up to 10 100 million bits per second Mbps Idle Timeout Idle Timeout is designed so that after there is no traffic to the Internet for a pre configured amount of time the connection will automatically be disconnected IP Address and Network Subnet Mask IP stands for Internet Protocol An IP address consists of a series of four numbers separated by periods that identifies a single unique Internet computer host in an IP network Example 192 168 2 1 It cons
43. er address automatically as shown on the following screen Internet Protocol TCP IP Properties E xl General ou can get IP settings assigned automatically if your network supports thie capability Othenvise you need to ask your network administrator hor the appropriate IP settings Obtain an IP address automatically C Use the following IP address IP address Subnet mask Default gateway Obtain ONS server address automatically C Use the following DMS server addresses Preferred DHS server Alternate DNS server 6 Click OK to confirm the setting Your PC will now obtain an IP address automatically from your Broadband Router s DHCP server Note Please make sure that the Broadband router s DHCP server is the only DHCP server available on your LAN Once you ve configured your PC to obtain an IP address automatically please proceed to Step 3 2d Windows NT 1 Click the Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network icon The Network window will appear Select the Protocol tab from the Network window 3 Check if the TCP IP Protocol is on your list of Network Protocols If TCP IP is not installed click the Aad button to install it now If TCP IP is installed go to step 5 4 In the Select Network Protocol window select the TCP IP Protocol and click the Ok button to start installing the TCP IP protocol Yo
44. f the above three Tools Settings selection and proceed to the manual s relevant sub section 54 Appendix A How to Manually find your PC s IP and MAC address 1 In Window s open the Command Prompt program e Command Prompt Microsoft Windows 2000 Version 5 00 2195 lt C gt Copyright 1985 1999 Microsoft Corp HA 2 Type Ipconfig all and lt enter gt 5 Command Prompt Microsoft Windows 2000 Version 5 00 2195 lt C gt Copyright 1985 1999 Microsoft Corp C gt ipconfig all Windows 2666 IP Configuration Host Name Primary DNS Suffix Node Type IP Routing Enabled WINS Proxy Enabled Ethernet adapter Local Area Connection Connection specific DNS Suffix Description Ethernet fidapter P Addr 168 255 Default Gateway 168 1 DHCP Server 168 1 DNS Servers 168 1 125 55 Lease Obtained Sunday December 09 2661 9 18 45 PM Lease Expires Friday December 14 2661 9 18 45 PM e Your PC s IP address is the one entitled IP address 192 168 1 77 e The router s IP address is the one entitled Default Gateway 192 168 1 254 e Your PC s MAC Address is the one entitled Physical Address 00 50 FC FE 02 DB 55 Glossary Default Gateway Router Every non router IP device needs to configure a default gateway s IP address When the device sends out an IP packet if the destination is not on the same network the device has to send the packet to its default gateway which will th
45. gs configured here which will affect functions such as Log entries and Firewall settings n KRY f EDIMAX K r1 E NETWORKING PEOPLE TOGETHER 5 Setup e General Setup ho tatus Info N stem Tools System Time Zone Management Set the time zone of the Broadband router This information is used for log entries and firewall settings Time Zone Asia Taipei SLAN Wireless QoS 9 NAT Firewall Time NTP Server 1 clock stdtime gov tw NTP Server 2 itime b nist gov NTP Server 3 Itime nist gov Sat Jan 1 08 35 14 2000 GMT 08 00 Save Time Sync Refresh Time 20 Ti Select the time zone of the country you are currently in The router will set its ime Zone time based on your selection Time Here shows the time of current router setting NTP Server You can manually assign three time server addresses here Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 1 2 Password Settings You can change the password required to log into the broadband router s system web based management By default there is no password So please assign a password to the Administrator as soon as possible and store it in a safe place Passwords can contain 0 to 12 alphanumeric characters and are case sensitive E PIS EDIMAX E Lame r1 e NETWORKING PEOPLE TOGETH
46. he packet enters your LAN to the LAN Server Client IP Select the port number protocol type TCP UDP Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place Example Virtual Server The diagram below demonstrates one of the ways you can use the Virtual Server function Use the Virtual Server when you want the web server located in your private LAN to be accessible to Internet users The configuration below means that any request coming form the Internet to access your web server will be translated to your LAN s web server 192 168 2 2 Note For the virtual server to work properly Internet remote users must know your global IP address For websites you will need to have a fixed static global public IP address 40 Power Reset A 4 585 5 14 WAN r Reset 2 6 2 Special Applications GE allo Server 192 168 2 2 Configuration Private IP 192 168 2 2 Private Port 80 Type TCP Public Port 80 ADSL or Cable Mode E EM Request Some applications require multiple connections such as Internet games video conferencing Internet telephony and others In this section you can configure the router to support multiple connections for these types of applications 2 DI NETWORKING PEOPLE TOGETHER amp System 9 WAN eLAN Wireless Firewall ASN
47. her hub or switch to the router s LAN ports allowing you to easily expand your network The Wireless Broadband Router is embedded with a IEEE 802 11g b MIMO access point that allows you to build up a wireless LAN The Wireless Broadband Router provides a total solution for the Small and Medium sized Business SMB and the Small Office Home Office SOHO markets giving you an instant network today and the flexibility to handle tomorrow s expansion and speed Features High Internet Access throughput up to 100M Allow multiple users to share a single Internet line Supports up to 253 users Internet Access via Cable or xDSL modem Access Private LAN Servers from the Public Network Equipped with four LAN ports 10 100M and one WAN port 10 100M Provides IEEE 802 11g b MIMO wireless LAN access point Support DHCP Server Client for easy setup Support advance features such as Special Applications DMZ Virtual Servers Access Control Firewall e Allow you to monitor the router s status such as DHCP Client Log System Log Security Log and Device Connection Status e Easy to use Web based GUI for configuration and management purposes e Remote Management allows configuration and upgrades from a remote site over the Internet Minimum Requirements e One External xDSL ADSL or Cable modem with an Ethernet port RJ 45 e Network Interface Card NIC for each Personal Computer PC e PCs with a Web Browser Internet Explorer 4 0 or higher
48. ial up connections PPPoE is for Ethernet connections PPPoE relies on two widely accepted standards Ethernet and the Point to Point Protocol It is a communications protocol for transmitting information over Ethernet between different manufacturers Protocol A protocol is a set of rules for interaction agreed upon between multiple parties so that when they interface with each other based on such a protocol the interpretation of their behavior is well defined and can be made objectively without confusion or misunderstanding Router A router is an intelligent network device that forwards packets between different networks based on network layer address information such as IP addresses Subnet Mask A subnet mask which may be a part of the TCP IP information provided by your ISP is a set of four numbers e g 255 255 255 0 configured like an IP address It is used to create IP address numbers used only within a particular network as opposed to valid IP address numbers recognized by the Internet which must be assigned by InterNIC TCP IP UDP Transmission Control Protocol Internet Protocol TCP IP and Unreliable Datagram Protocol UDP TCP IP is the standard protocol for data transmission over the Internet Both TCP and UDP are transport layer protocol TCP performs proper error detection and error recovery and thus is reliable UDP on the other hand is not reliable They both run on top of the IP Internet Protocol a network layer protocol
49. il 9 NAT Firewall Port based QoS User can differentiate packet priority by L4 port number or by physical Ethernet port number is User can specify a L3 4 criterion and associate it with a maximum token RAIE Peleg TIOS packet rate or data rate based Guaranteed Spare Your ISP requires PPPoE connection Class QoS 35 2 5 1 Port based QoS For Application based QoS user can specify a destination port number and associate it with a egress priority High or Low For example if user config port 7297 with high priority then user would experience better service quality for such flows For Port based QoS user can specify the High Low queue priority for each Ethernet port and can apply total rate limit to any port from 128Kbps to 32Mbps or at Full rate 100Mbps Flow control can also be enabled disabled on per port basis t So EDIMAX Lame r1 e NETWORKING PEOPLE TOGETHER uick Setup lt General Setup t tatus Info WA stem Tools System Port based QoS WAN Enable Hardware QoS by Application SLAN High Priory Low Priory Wireless TELNET HTTP POP3 SMTP EZ O Firewall C Enable Hardware QoS by device port number Port Flow Incoming Rate Outgoing Rate Port Based Control Limit Limit Priority Enable QoS by Enable application based QoS Application Protocol Specific Port the priority of the specified protocol name or port number to higher or ower priority Enable QoS by device Enable
50. ireless network x Wireless Data Encryption No encryption Y Authentication By RADIUS server vi Port 11812 QoS NAT Firewall RADIUS Setting IP Address 0 0 0 0 Password RADIUS Server Port The service port of the external RADIUS server RADIUS Server IP The IP address of external RADIUS server address RADIUS Server Password The password used by external RADIUS server Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 4 3 3 802 1x WEP Static key IEEE 802 1x is an authentication protocol Every user must use a valid account to login to this Access Point before accessing the wireless LAN The authentication is processed by a RADIUS server This mode also uses WEP to encrypt the data during communication t M EDIMAX Ed e NETWORKING PEOPLE TOGETHER E uick Setup General Setup E tatus Info h stem Tools 9 System Wireless Security Setup 9 WAN This page allows you to setup the wireless security Turning on WEP or WPA by using LAN Encryption Keys could prevent any unauthorized access to your wireless network x Wireless Data Encryption WEP Method 64 bits v Authentication ByRADIUS sever v 9 QoS Key Setting 9 NAT Firewall Port 11812 RADIUS Setting IP Address 0 0 0 0 Password
51. is the IP address that your ISP has given you to establish a L2TP connection Subnet Mask Enter the Subnet Mask provided by your ISP e g 255 255 255 0 Enter the IP address of the ISP Gateway LTP Server If your LAN has a L2TP Server then enter that L2TP Server IP address here If you do not have a L2TP Server then enter the ISP s Gateway IP address above l Enter the User Name provided by your ISP for the PPTP connection Login ID i Sometimes called a Connection ID Enter the Password provided by your ISP for the PPTP connection This is optional You can specify the maximum size of your transmission packet MTU Adae to the Internet Leave it as it is if you to not wish to set a maximum packet size Silent Timeout If specified a non zero value gateway disconnects this session after specified idle time If checked gateway won t dial this session until received a packet that Dial On Demand requested Internet access If unchecked gateway dials this session immediately after system powered up Auto Reconnect If checked gateway redials this session if session previously terminated by ISP Auth Type Select PAP or CHAP for the authentication type requested by your ISP Click lt OK gt when you have finished the configuration above Congratulations You have completed the configuration for the L2TP connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3
52. ists of 2 portions the IP network address and the host identifier The IP address is a 32 bit binary pattern which can be represented as four cascaded decimal numbers separated by aaa aaa aaa aaa where each aaa can be anything from 000 to 255 or as four cascaded binary numbers separated by bbbbbbbb bbbbbbbb bbbbbbbb bbbbbbbb where each b can either be O or 1 A network mask is also a 32 bit binary pattern and consists of consecutive leading 1 s followed by consecutive trailing O s such as 11111111 11111111 11111111 00000000 Therefore sometimes a network mask can also be described simply as x number of leading 1 s When both are represented side by side in their binary forms all bits in the IP address that correspond to 1 s in the network mask become part of the IP network address and the remaining bits correspond to the host ID For example if the IP address for a device is in its binary form 11011001 10110000 10010000 00000111 and if its network mask is 11111111 11111111 11110000 00000000 It means the device s network address is 11011001 10110000 10010000 00000000 and its host ID is 00000000 00000000 00000000 000001 11 This is a convenient and efficient method for routers to route IP packets to their destination ISP Gateway Address see ISP for definition The ISP Gateway Address is an IP address for the Internet router located at the ISP s office ISP Internet Service Provider An I
53. lient can have access to these services ME EDIMAX I ak A NETWORKING PEOPLE TOGETHER uick Setup s General Setup tatus Info AN stem Tools System Hardware Access Control List SWAN SLAN Wireless A n QoS Dest IP Port ip 192 168 2 0 255 255 255 0 NAT Fi 1 Egress Dest IP Port v v Sun v Mon v Tue From 0 Y Firewa _ jJ 0 0 l l Y Wed v Thu v Fri v Sat To 23 v Egress Dest IP Y Sun v Mon v Tue From 0 0 0 l l Y Wed v Thu v Fri v Sat To 23 15 Egress Dest IP P i E 0 v Sun v Mon v Tue From 0 0 0 l v Wed v Thu v Fri v Sat To 23 v5 Egress Dest IP v Sun v Mon v Tue From 0 vo vw 0 0 l l v Wed v Thu v Fri Y Sat To 23 59 Egress Dest IP v Sun v Mon v Tue From 0 10 0 0 l v Wed v Thu v Fri v Sat To 23 3 159 v Egress Dest IP Port_ l Msun 4 Mon V Tue From 0 vw 0 vw lo x v 0 0 l v Wed v Thu v Fri v Sat To 23 w 59 23 M 59 v Egress Dest IP 0 4 Sun v Mon v Tue From 0 0 0 0 y v Wed v Thu v Fri Y Sat To 23 59 Egress Dest IP B v Sun v Mon v Tue From 0 vllo 0 0 E 7 Wed v Thu v Fri V Sat To 23 Y 59 59 v hei Policy Allow all except ACL without log v
54. m DoS Configuration SWAN The Broadband router s firewall can block common hacker attacks including DoS Discard SLAN Ping from WAN and Port Scan e Wireless TTE QoS C DoS Prevention Enable T A PE Ignore LAN Side Check xf Firewall Packets Second Packets Second Whole System Flood Packets Second o E Ez 2 2 z z Packets Second nm H Packets Second B Packets Second pa 2 Per Source IP Flood Whole System FlowCnt Control Per Source IP FlowCnt Control Packets Second o Rz Packets Second Flows Flows Flows Flows Flows Flows E 8 2 d EHE l i ES pan TS i 20 E E ES Sensitivity SYN FIN UDP ICMP flooding threshold per host Offending host would be blocked for 120 seconds default if Source IP Blocking is enabled Whole system FlowCnt System wide Flow Count Control for TCP UDP or both protocols Control Per source IP FlowCnt SYN FIN UDP ICMP Flow Count Control per host Offending host would be Control blocked for 120 seconds default if Source IP Blocking is enabled TcpUdpPortScan Port scan detection Sensitivity could be Low or High All DoS items System wide Dos detection Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place Per source IP flood 49
55. m Quick Setup Wizard WAN The Quick Setup Wizard provides only the necessary configurations to gt connect your Broadband router to your Internet Service Provider ISP LAN through an external cable or a DSL modem Wireless QoS General Setup The Broadband router supports advanced functions like Virtual Server 9 NAT Access Control Hacker Attack Detection and DMZ We highly recommend you keep the default settings Firewall Status Information The Broadband router s status information provides the following information about your Broadband router Hardware Firmware version and its current operating status Tools Broadband router Tools Tools include Configuration tools Firmware upgrade and Reset Configuration tools allow you to Backup Restore or Restore to Factory Default setting for your Broadband router The Firmware upgrade tool allows you to upgrade your Broadband router s firmware The RESET tool allows you to reset your Broadband router 10 Menu Description Quick Setup Wizard Select your Internet connection type and then input the configurations needed to Chapter 1 connect to your Internet Service Provider ISP This section contains configurations for the Broadband router s advance General Setup functions such as Address Mapping Virtual Server Access Control Hacker Chapter 2 Attack Prevention DMZ Special applications and other functions to meet your LAN requirements In this section y
56. network adaptor connect to your Intranet It supports WEP and WPA2 encryption to enhance the security of your wireless network e Y EDIMAX Lame r1 e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup E tatus Info N stem Tools amp System Wireless Settings WAN LAN The gateway can be quickly configured as a wireless access point for roaming clients by setting the access identifier and channel number It also supports data encryption Y Wireless and client filtering QoS NAT Firewall 2 4 1 Basic Settings You can set parameters that are used for the wireless stations to connect to this router The parameters include Mode ESSID Channel Number and Associated Client AP Mode setting Page e i EDIMAX Lame r1 e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup E tatus Info 1 stem Tools System Wireless Basic Settings 9 WAN This page allows you to define ESSID and Channel for the wireless connection These SLAN parameters are used for the wireless stations to connect to the Access Point x Wireless Operation Mode AP Pm RF Band 24 GHz B G Let Be Default Channel 1 Firewall 26 AP Bridge Point to Point mode setting page LS f EDIMAX Ki de NETWORKING PEOPLE TOGETHER Om Setup e General Setup tatus Info stem Tools System Wireless Basic Settings ew s WAN This page allows you to define ESSID and Chann
57. oS in Wi Fi networks This adds prioritized capabilities to Wi Fi WMM networks and optimizes their performance when multiple concurring applications each with different latency and throughput requirements compete for network resources Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router 29 2 4 3 Security This Router provides complete wireless LAN security functions include WEP IEEE 802 11x IEEE 802 11x with WEP WPA with pre shared key and WPA with RADIUS With these security functions you can prevent your wireless LAN from illegal access Please make sure your wireless stations use the same security function 2 4 3 1 WEP only When you select 64 bit or128 bit WEP key you have to enter WEP keys to encrypt data You can generate the key by yourself and enter it You can enter four WEP keys and select one of them as default key Then the router can receive any packets encrypted by one of the four keys Y DIMAX ie Y NETWORKING PEOPLE TOGETHER uick Setup s General Setup a tatus Info y stem Tools System Wireless Security Setup 9 WAN This page allows you to setup the wireless security Turning on WEP or WPA by using SLAN Encryption Keys could prevent any unauthorized access to your wireless network A Wireless Data Encryption No encryption v Authentication No authentication Y Firewall Metho
58. on Idle Time 1 1000 minutes BEZEQ SRAEL O Enable for BEZEQ network in ISRAEL use only Obtainan P address The ISP requires you to obtain an IP address by DHCP automatically before connecting to the PPTP server Use the following IP The ISP give you a static IP to be used to connect to the PPTP server address IP Address This is the IP address that your ISP has given you to establish a PPTP connection Subnet Mask Enter the Subnet Mask provided by your ISP e g 255 255 255 0 Enter the IP address of the ISP Gateway If your LAN has a PPTP gateway then enter that PPTP gateway IP address PPTP Server here If you do not have a PPTP gateway then enter the ISP s Gateway IP address above l Enter the User Name provided by your ISP for the PPTP connection Login ID l Sometimes called a Connection ID Enter the Password provided by your ISP for the PPTP connection This is optional You can specify the maximum size of your transmission packet MTU o l l to the Internet Leave it as it is if you to not wish to set a maximum packet size Silent Timeout If specified a non zero value gateway disconnects this session after specified idle time If checked gateway won t dial this session until received a packet that Dial On Demand requested Internet access If unchecked gateway dials this session immediately after system powered up Reis Becomes ye ES gateway redials this session if session previously terminated by BEZEQ I
59. onfiguration access to the Broadband router from a remote site Remote Management Low IP 0 0 0 0 Remote Management High IP 0 0 0 0 Wireless QoS NAT Ping from WAN side Enable Remote Management Port 8080 amp Firewall Parameter Description IP Address Please specify the IP range to the Remote Management IP fields All the Internet IPs that inside this range can manage this router from WAN side Port To avoid conflict of virtual server at port 80 user can specify a different port in Remote Management Port for WAN side access Ping from WAN side Ping from WAN side is turned on by default and could be turned off if the Enable checkbox is unchecked Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 22 2 2 WAN Use the WAN Settings screen if you have already configured the Quick Setup Wizard section and you would like to change your Internet connection type The WAN Settings screen allows to specify the type of WAN port connect you want to establish with your ISP The WAN settings offer the following selections for the router s WAN port Dynamic IP Static IP Address PPPoE PPTP L2TP and DDNS pic soup nera soup Mans iio 85 Setup S General Setup Status Info stem Tools System WAN Settings 4 WAN The Broadband router can be connected to your Service P
60. ork DTIM Period The DTIM period you specify here indicates how often the clients served by this access point should check for buffered data still on the AP awaiting pickup The Data Rate is the rate this access point uses to transmit data packets The Max Data Rate access point will use the highest possible selected transmission rate to transmit the data packets Preamble Tuve The Long Preamble can provide better wireless LAN compatibility while the yP Short Preamble can provide better wireless LAN performance If you enable Broadcast ESSID every wireless station located within the Broadcast ESSID coverage of this access point can discover this access point easily If you are building a public wireless network enabling this feature is recommended Disabling Broadcast ESSID can provide better security It is recommended to enable the protection mechanism This mechanism can CTS Protect decrease the rate of data collision between 802 11b and 802 11g wireless stations When the protection mode is enabled the throughput of the AP will be a little lower due to many of frame traffic should be transmitted You can adjust the wireless transmit power here By reduce the tx power can Tx Power l let the wireless signal only cover your working area Turbo Mode By enable the turbo mode can enhance the throughput up to 35Mbps WMM stands for Wi Fi Multimedia It is a standard created to define quality of service Q
61. ou can see the Broadband router s system information Internet Connection Device Status System Log Security Log and DHCP client information Status Information Chapter 3 This section contains the broadband router s Tools Tools include Configuration tools Firmware upgrade and Reset Configuration tools allow you to Backup Chapter 4 save Restore or Restore to Factory Default configuration for your Broadband router The Firmware upgrade tool allows you to upgrade your Broadband router s firmware The RESET tool allows you to reset your Broadband router Tools 7 Click on Quick Setup Wizard see chapter 1 to start configuring settings required by your ISP so that you can start accessing the Internet The other sections General Setup Status Information and Tools do not need to be configured unless you wish to implement monitor more advance features information Select the section Quick Setup Wizard General Setup Status Information and Tools you wish to configure and proceed to the corresponding chapter Use the selections on the web management s top right hand page see below to navigate around the web based management User Interface 11 Chapter 1 Quick Setup The Quick Setup section is designed to get you using the broadband router as quickly as possible In the Quick Setup you are required to fill in only the information necessary to access the Internet Once you click on the Quick Setup Wizard in the HOME page
62. rovider through the following methods O Dynamic IP an IP Address automatically from your Service rovider Uses a Static IP Address Your Service Provider gives a Static IP Address Static IP Address to access Internet services eLAN PPP over Ethernet is a common connection method used Wireless O PPPoE in xDSL connections QoS PPTP Point to Point Tunneling Protocol is a common connection NAT method used in xDSL connections Layer Two Tunneling Protocol is a common connection Firewall L2TP method used in xDSL connections More Configuration connection L2TP Your ISP requires L2TP connection DDNS You can specify a DDNS server that you wish to use and configure the user name and password provided by you DDNS service provider Once you have made a selection click lt More Configuration gt at the bottom of the screen and proceed to the manual s relevant sub section PPTP Your ISP requires you to use a Point to Point Tunneling Protocol PPTP 2 2 1 Static IP Select Static IP address if your ISP has given you a specific IP address for you to use Your ISP should provide all the information required in this section See chapter 1 Static IP Address for more detail 2 2 2 DHCP Choose the DHCP selection if your ISP will automatically give you an IP address Some ISP s may also require that you fill in additional information such as MAC address see chapter 1 Dynamic IP for mor
63. rs for this particular Range application Enable the specified Special Application function Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place Example Special Applications If you need to run applications that require multiple connections then specify the port outbound normally associated with that application in the Trigger Port field Then select the protocol type TCP or UDP and enter the public ports associated with the trigger port to open them up for inbound traffic Example Incoming Trigger Trigger Type Start Port Trigger Finish Port Enable MSN Game La 2300 2400 28800 28800 MSN Game Zone 47624 Zone Battle net UDP 6112 6112 6112 Battle net In the example above when a user trigger s port 28800 outbound for MSN Game Zone then the router will allow incoming packets for ports 2300 2400 and 47624 to be directed to that user Note Only one LAN client can use a particular special application at a time 42 2 6 3 ALG Settings You can select applications that need Application Layer Gateway to support NETWORKING PEOPLE TOGETHER e System WAN e LAN Wireless Firewall rt AS Sic Setup amp 4G neral Setup E Info Tools Application Layer Gateway Below are applications that need routers special support to make them work under
64. s Info stem Tools x Status NAT Log Configuration New NAPT Log Enable New NAPT Log 53 Chapter 4 Tool This page includes the basic configuration tools such as Configuration Tools save or restore configuration settings Firmware Upgrade upgrade system firmware and Reset AS e General Setup Status Info NN stem Tools Status Firmware Management Firmware Version 1 25 Firmware Update Factory Default Parameter Description Firmware Version This shows your current firmware version This tool allows you to upgrade the Broadband router s system firmware To upgrade the firmware of your Broadband router you need to download the Firmware Upgrade firmware file to your local hard disk and enter that file name and path in the appropriate field on this page You can also use the Browse button to find the firmware file on your PC You can use the Factory Defaults tool to force the Broadband router to Factory Default y perform a power reset and restore the original factory settings In the event that the system stops responding correctly or in some way stops functioning you can perform a reset Your settings will not be changed To perform the reset click on the System Restart button You will be asked to confirm your decision The reset will be complete when the power light stops blinking Once the reset process is complete you may start using the router again System Restart Select one o
65. tected Link is down No cable detected 1626 packets 146084 bytes 565 packets 349137 bytes 0 packets WAN DHCP Client 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0E 2E 92 B2 4C Link is down 0 packets 0 bytes 0 packets 0 bytes 2 packets Wireless Default 00 0E 2bE 92 B2 4B otatus and Information Shows the router s system information TUM This router supports five types of Log messages System Log ACL Log URL 9 filter DoS Log and New connection Log Select one of the above five Status selections and proceed to the manual s relevant sub section 51 3 1 Status and Information The Status and Information section allows you to view the router s system information DI NETWORKING PEOPLE TOGETHER 4 Status LI m Buick Setup amp 4General Setup Firmware Version Firmware Date Loader Version NAT L4 Switching IP Address Subnet Mask MAC Address DHCP Server LAN 1 LAN 2 LAN 3 LAN 4 Received Transmitted Dropped Connection Method IP Address Subnet Mask Default Gateway DNS IP Address MAC Address WAN Port Received Transmitted Dropped System 1 25 2006 09 18 13 56 04 0 0 20 Enable Enable LAN 192 168 2 1 255 255 255 0 00 0E 2E 92 B2 4B Enable Link is Up 100Mbps full duplex Link is down No cable detected Link is down No cable detected Link is down No cable detected 2461 packets 212315 bytes 797 packets 518375 bytes 0 packets
66. the NAT You can select applications that you are using ALG PPTP Enable software solution IPSec L2TP FTP Net Meeting DirectX 7 SIP ICUII ICQ AOL Instant Messenger Yahoo Messenger mIRC VDOlive Quake Counter Strike Half Life Blizzard Battlenet StarCraft Diabloll RealAudio CUseeMe Client Server IP Client Server IP Client Client Server IP Client Server IP Client Server IP Client Server IP Client Server IP Client Server Client Server Client Server Client Client Client Client Server IP Client Client Enable 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Enable You can select to enable Application Layer Gateway then the router will let that application correctly pass though the NAT gateway Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 6 4 UPnP Settings With UPnP all PCs in you Intranet will discover this router automatically So you do not have to do any configuration for your PC and can access the Internet through this router easily r Y EDIMAX e ET m NETWORKING PEOPLE TOGETHER uick Setup General Setup n tatus Info h stem Tools System UPnP Configuration WAN LAN Wireless UPnP is more than just a simple extension of the Plug and Play peripheral mod
67. tion isByteCount Select the behavior when the flow is over limitation You can just drop the Drop Log packets or drop packet and log it Click lt Apply gt at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 3 2 5 3 Guaranteed Spare Class QoS User can first specify maximum WAN total bandwidth and then set bandwidth allocation rules according to two different classes Guaranteed or Spared Rules in Guaranteed class are guaranteed to have specified percentage of WAN Total bandwidth At any period of time if the aggregated bandwidth used by flows in guaranteed class doesn t exceed total bandwidth the spared bandwidth is then available for allocating to the flows in Spared class according to the percentage configured For example 192 168 1 1 is guaranteed to have 50Mbps bandwidth if it needs and 192 168 1 2 has 25Mbps guaranteed on demand If for a period of time the aggregated bandwidth used by both hosts is 40Mbps so only 40 WAN bandwidth is consumed by Guaranteed class flows then all other hosts in 192 168 1 0 can compete to use the spared 60Mbps WAN bandwidth If there exists another LAN on gateway say 192 168 2 0 24 then they can only use the rested bandwidth consumed by guaranteed and spared class Hardware Guaranteed Spare Class QoS Enable O25 Control WAM aida Total Bondad DXOGLTZINELLLLLLALZAALII
68. to the Internet Your ISP should provide all the information required in this section 15 t EDIMAX Ree r1 e NETWORKING PEOPLE TOGETHER E uick Setup s General Setup k tatus Info 1 stem Tools e System PPP over Ethernet Enter the PPPoE User Name and Password assigned by your Service Provider The Service Name is normally optional but may be required by some Service Providers Enter a Idle Time in minutes to define a maximum period of time for which the Internet connection is maintained during inactivity If the connection is inactive for longer than the Maximum Idle Time then the connection will be dropped You can enable the Connect on Demand option to automatically re establish the connection as soon as you attempt to access the Internet again Login ID Wireless amp OoS Qc Service Name 9 NAT er T MTU 1492 irewa Connection Type Keep Connection Password Idle Time 1 1000 minutes Login ID Enter the Login ID provided by your ISP for the PPPoE connection Enter the Password provided by your ISP for the PPPoE connection Servi This is optional Enter the Service name should your ISP requires it otherwise ervice Name leave it blank AC Name This is optional Enter the AC Name should your ISP requires it otherwise leave it blank vU m is optional You can specify the maximum size of your transmission packet wv T the Internet Leave it as it
69. u may need your Windows CD to complete the installation 5 After you install TCP IP go back to the Network window Select TCP IP from the list of Network Protocols and then click the Properties button 6 Check each of the tabs and verify the following settings e IP Address Select Obtain an IP address from a DHCP server DNS Let all fields are blank WINS Let all fields are blank e Routing Let all fields are blank Microsoft TCP IP Properties E ES IP Address DNS WINS Address Routing An F address can be automatically assigned to this network card by a DHCP server F your network does not have a DHCP server ask your network administrator for an address and then type it in the space below Adapter Obtain an IP address from a DHCP server C Specify an IP address Td dress Subnet Eres Detant Gateway l Advanced 7 Click OK to confirm the setting Your PC will now obtain an IP address automatically from your Broadband Router s DHCP server Note Please make sure that the Broadband router s DHCP server is the only DHCP server available on your LAN Once you ve configured your PC to obtain an IP address automatically please proceed to Step 3 3 4 5 6 Once you have configured your PCs to obtain an IP address automatically the routers DHCP server will automatically give your LAN clients an IP address By default the Broadband Router s DHCP server is ena
70. uick Setup General Setup Special Application Catus Info a Tools Some applications require multiple connections such as Internet gaming video conferencing Internet telephony and others These applications cannot work when Network Address Translation NAT is enabled If you need to run applications that require multiple connections specify the port normally associated with an application in the Trigger Port field select the protocol type as TCP or UDP then enter the public ports associated with the trigger port to open them for inbound traffic cel Bic rer Tigger Quick Time 4 6970 6999 TCP v MSN Gaming Zone TCP 28800 29000 TCP v 6667 TCP TCP v 0 TCP TCP v TCP TCP TCP TCP TCP TCP TCP TCP 41 The description of this setting Incoming Type Select the Inbound port protocol type TCP UDP or both Enter the In coming Inbound port or port range for this type of application e g 2300 2400 47624 Incoming Port Range Note Individual port numbers are separated by a comma e g 47624 5775 6541 etc To input a port range use a dash to separate the two port number range e g 2300 2400 Trigger Type Select whether the outbound port protocol is TCP UDP or both Trigger Start Finish This is the out going Outbound range of port numbe
71. ur local site to access the Internet through a single Public IP Address or multiple Public IP Addresses NAT provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as Websites and FTP So s EDIMAX o A e NETWORKING PEOPLE TOGETHER Y uick Setup General Setup tatus Info AN stem Tools oysicm NAT Settings WAN LAN Network Address Translation NAT allows multiple users at your local site to access me the Internet through a single Public IP Address or multiple Public IP Addresses NAT Wireless provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as the Web or 9 QoS FTP x NAT Firewall You can have different services e g email FTP Web etc going to different service servers clients in your LAN The Virtual Server allows you to re direct a particular service port number from the Internet WAN Port to a particular LAN IP address and its service port number Virtual Server Some applications require multiple connections such as Internet games Special Applications video conferencing Internet telephony and others In this section you can configure the router to support these types of applications ALG Settin You can select special applications that need Application Layer Gateway to g support here It
72. ur original configurations 2 If problems persist or you experience extreme problems or you forgot your password press the reset button for longer than 5 seconds and the router will reset itself to the factory default settings warning your original configurations will be replaced with the factory default settings Front Panel On the router s front panel there are LED lights that inform you of the router s current status Below is an explanation of each LED and its description i i ee oO o olio O O PWR WLAN USB WAN LED Light Status Description WAN port 100Mbps is connected or Warr this come ON WANs connected 00 Flashing WAN port is Activity ACT e LAN LNK ACT Wireless LAN is disabled Flashing Wireless LAN is Activity ACT WAN 10 100M Setup Diagram Figure 1 2 below shows a typical setup for a Local Area Network LAN ADSL or Cable Modem Figure 1 2 E e Power Switch Hub Getting started This is a step by step instruction on how to start using the router and get connected to the Internet 1 Setup your network as shown in the setup diagram above fig 1 2 2 You then need to set your LAN PC clients so that it can obtain an IP address automatically All LAN clients require an IP address Just like an address it allows LAN clients to find one another If you have already configured your PC to obtain an IP automatically then proceed to step 3 page 11 Configure your P

Edimax Technology BR-6218Mg User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents