EnGenius EVR100 Wi-Fi Ethernet LAN Black router
Contents
1. q VEN Connection 2 ge Y WAN Miniport L2TP NIN lus 124 12 Tools pu Time DONS Power Diagnosis Firmware Back up Reset This section allows you to configure some device system You can change the password that you use to access the router this is not your ISP account password settings 12 1 Admin This page allows you to change the system password and to configure remote ma nagement Remote management allows the router to be configured from the Internet by a web browser A username and password is still required to access the Web Management interface ogag x Apply Cancel Change Password Old Password Enter the current password New Password Enter your new password Repeat New Password Enter your new password again for verification Remote Management Host Address You can only perform remote management from the specified IP address Leave blank to allow any host to perform remote management Port Enter the port number you want to accept remote management connections Enable Tick to Enable the remote management feature nius 125 12 2 Time This page allows you to set the system time Time DDNS Power Diagnosis Firmware Back up Reset The Router reads the correct time from NTP servers on the Internet and sets its system clock accordingly The Daylight Savings option merely advances the system clock by one hour The time Zon2. Login Method select one Next Static IP Address If your ISP Provider has assigned you a fixed IP address enter the cima dae Addes assigned IP address Subnet mask Default Gateway IP address and Primary DNS and Secondary DNS if available of your ISP provider 22 Dynamic IP Address The IP Address is allocated automatically However some ISP s will also recognize the MAC address and will reject connections if the MAC address does not match If your ISP has recorded the MAC address of your computer s Ethernet LAN card please connect only the computer with the authorized MAC address and click the Clone MAC Address button This will replace the AP Router MAC address to the computer MAC address The correct MAC address is used to initiate the connection to the ISP Login Method Dynamic IP Address Clone MAC Address Dynamic IP Address Hostname This is optional Only required if specified by ISP The MAC Address that is used to connect to the ISP 23 PPP over Ethernet ISP requires an account username and password Login Method PPP over Ethernet Username 1492 512 lt MTU Value lt 1492 seme somera to you by IP MTU The maximum size of packets Do not change unless mentioned by the ISP 24 Point to Point Tunneling Protocol PPTP PPTP is used by some ISPs Login Method PPTP WAN Interface Settings Dynamic IP Address MAC address 000000000000
3. You must enter at least the default key For 64 Bit Encryption the key size is 10 chars in HEX 0 9 and A F e 128 Bit data is encrypted using the default key before being transmitted You must enter at least the default key For 128 Bit Encryption the key size is 26 chars in HEX 0 9 and A F Default Key Select the key you wish to be the default Transmitted data is ALWAYS encrypted using the Default Key the other Keys are for decryption only You must enter a Key Value for the Default Key Encryption Key Enter the key value or values you wish to use Only the Key selected as Default is required The others are optional 65 WPA Pre Shared Key Encryption gt WPA TKIP WPA2 AES WPA Mixed Passphrase Y 1234567890 WPA Pre Shared Key Encryption Authentication Type Please ensure that your wireless clients use the same authentication type WPA type Select the WPA encryption you would like Please ensure that your wireless clients use the same settings Pre shared Key Type Select whether you would like to enter the Key in HEX or Passphrase format Pre shared Key Wireless clients must use the same key to associate the device If using passphrase format the Key must be from 8 to 63 characters in length 66 WPA RADIUS Encryption WPA RADIUS hi WPA TKIP WPA2 AES WPA2 Mixed WPA RADIUS Encryption WPA type Select the WPA encryption you would like Please ensure that your wireless client
4. 150 NAT Bort map Port fw Port tri ALG Entries in this table allow you to automatically redirect common network services to a specific PC behind the NAT firewall These settings are only necessary if you wish to host some sort of server like a web server or mail server on the local network W Enable Port Mapping Both Ada Reset Current Port Mapping Table No Description i Mail Server Delete Selected Delete All Reset Port range Select Fl 192 168 0 150 Both 25 Apply Cancel Port Mapping Enable Port Mapping Tick this box to Enable the Port Mapping feature Description Enter a name or description to help you identify this entry Local IP The local IP address of the computer the server is hosted on Protocol Port range nius Select to apply the feature to either TCP UDP or Both types of packet transmissions The range of ports that this feature will be applied to 85 10 3 Port Forwarding Port Forwarding allows you to redirect a particular public port to a computer on your LAN network This helps you host servers behind the NAT and Firewall In the example below there is a WEB Server running on port 80 on the LAN For security reasons the Administrator would like to provide this server to Internet connection on port 1000 Therefore then there is a connection from the Internet on port 1000 it will be forwarded to the computer with the
5. 255 0 192 168 0 216 192 168 10 0 255 255 255 0 192 168 0 103 So if for example Client3 wants to send an IP data packet to 192 168 10 2 Client 2 it would use the above table to determine that it had to go via 192 168 0 103 Router 2 And if it sends Packets to 192 168 11 11 Client 1 will go via 192 168 0 216 Router 1 94 11 VPN A Virtual Private Network VPN provides a secure connection between two or more computers or protected networks over the public Internet It provides authentication to ensure that the information is going to and from the correct parties It provides security to protect the information from viewing or tampering en route EVR100 supports IPSec Site to Site Remote to Site and L2TP over IPSec methods to establish VPN connections and the maximum VPN session number is up to 5 11 1 Status This page displays the connect status of VPN connection You can select one of them to connect or disconnect the VPN connection Note If connection type is remote dial in Client to Site or L2TP over IPSec you can t disconnect this session manually 1 VPNOL IPsec 1192 162 7 90 a 0 00 00 18 F L2TP 2 EXTRA over 0 0 0 0 0 0 00 00 00 IPSec Disconnect 95 11 2 Profile Setting This page allows you to Enable Add Edit and Delete VPN profiles 1 v WPNO1 IPSec 192 168 0 0 24 192 168 9 0 24 ESP 3DES SHA1 192 168 7 90 F 2 El L2TP L2TP over IPSec 192 168 0 0 24 10 0 175 21 50 N A 10
6. Clone MAC PPTP Settings Optional 512 lt MTU Value lt 1492 20 PPTP WAN Interface Settings WAN Interface Type Select whether the ISP is set to Static IP or Dynamic IP address This is optional Only required if specified by ISP MAC address The MAC address that is used to connect to the ISP PPTP Settings login semam assigned toyouby eso O OOOO MTU The maximum size of packets Do not change unless mentioned by the ISP 26 Layer 2 Tunneling Protocol L2TP L2TP is used by some ISPs Login Method L2TP WAN Interface Settings WAN Interface Type Dynamic IP Address 000000000000 Clone MAL L3TP Settings Service IP address 512 lt MTU Value lt 1492 21 L2TP WAN Interface Settings WAN Interface Type Select whether the ISP is set to Static IP or Dynamic IP address This is optional Only required if specified by ISP MAC address The MAC address that is used to connect to the ISP L2TP Settings Login Username assigned to you by the ISP Password for this username Service IP Address The IP Address of the PPTP server MTU The maximum size of packets Do not change unless mentioned by the ISP 28 d Setup the level of wireless security to be used EnGenius recommends the Highest level of security to be used Note 802 11n wireless speeds may not be achievable if the security level is setting the Lowest or Low Please choose the securit
7. IP address 192 168 0 100 and changed to port 80 NAT Portmap Portfw Porttri ALG UPnP QoS Routing You can configure the router as a Virtual Server allowing remote users to access services such as Web or FTP at your local PC Depending on the requested service TCP UDP port number the router will redirect the external service request to the appropriate internal server located at one of your local PCs V Enable Port Forwarding Both Ada Reset Current Port Forwarding Table 1 WEB server 192 168 0 100 C Dese Selected Delete i Reset Apply Cancel Port Forwarding Enable Port Forwarding Tick this box to Enable the Port Forwarding feature Description Local IP Protocol Local Port Public Port local IP address nius When a connection from the Internet is on this port then it will be forwarded to the indicated 86 Port Tripoerma also called Spada Applicatiora allows you t ues Internat application which nomal de rez funco n whee aad bahia 2 firewall 10 4 Port Trigger If you use Internet applications which use non standard Enable Trigger Por PC to Phone Pto Phone a Ad 1 05 connections or port numbers you may find that they do not function correctly because they are blocked by the Agh T2120 12122 2a i i R i Auh Wireless Router s firewall Port Trigger will be required for these applications to work Add Rie mari Cont
8. The assigned IP range should be on the same IP network but not the in the same range as your DHCP IP range 105 11 3 Wizard You can use Wizard to create a VPN profile easily 1 Click Next button to begin the wizard Setup Wizard VPN Wizard will guide you through the setup process for building a simple VPN connection 2 Enter the VPN policy name then click Next button to next page E EET Please enter the policy name VPN policy name VPNO1 eg OfficeVPN Noet VPN Policy is a record which keeps VPN settings for a particular VPN connection You can give a meaningful name to It You can have up to 5 policies i Back Next Cancel nius 106 3 You can select IPSec or L2TP over IPSec in this page then click Next button to next page If you select IPSec then go to step 3 1 If you select L2TP over Please choose VPN connection type IPSec then go to step 3 2 IPSec Choose this if you are using other 3 party VPN client software or gateway Fi LOTP over IPSec Choose this if you are using Windows VPN i client for connection 3 1 IPSec You can select Client to Site or Site to Site in this page Step3 VPN IPSec Mode then click Next button to next page Please choose the IPSec Mode Note If you select Client to Site you will pass next step Client to Site Choose this if you are setting up for Telwork or home to office connection Site to Sit
9. ete ct E E eek cats eae et cece ced et seat cette eects sense nate 82 TENG E reo E e sae a ae ES ee one ete A o ene ee E eee eee eee ear ree 83 10 1 Network Address Translation NA DI ose space eee teed e ae eco 83 10 2 o e On III A 84 10 3 A A rere mre 85 10 4 ROM TVG OG ustedes indiano Coi 86 10 5 Application Layer Gateway Alanis ii ada 87 10 6 Vale eco en ree een renee Cen ee Oe eee ene ee Aone eee 88 10 7 Qualy ot Service OOS ii A A 89 10 8 ROUE O A et eae reece eae A A miae area eee ace 92 AY 1 A ee erent rea 94 11 1 O 94 TIA o o A O A eee een Chee ae ee 95 VO La APS ld e 96 10 12 L2IP overIPSEC ASA A E 102 11 3 A nn In 105 12 2 A O Orde Ory ere 125 12 3 PTA INOS asters ct sta cta ae crates sates te aia 126 12 4 POWO sca cca eg gsc ea cdots cat ea sal lsc E ocean aout cas age eal E cage atts etetea gael an Bema daga seen enoe 127 12 5 BE E AAE E E E N E E E A A en E A A A E E EA ETE E E E 128 12 6 E E E AEI A EA E 129 12 7 a 130 12 8 O o do 131 AppendixA FECIntererenee State mentada tarada idas 132 AppenalebB 1E Interterente Statement amnesia iii isa 134 dl Revision History Version Date Notes 2011 01 11 1 Introduction 1 1 Package Contents EnGenius WIRELESS GIGABIT VPN ROUTER AC Adapter RJ 45 Ethernet LAN Cable CD ROM with User Manual and Setup Wizard Quick Guide 1 2 System Requirements RJ 45 Ethernet Based Internet ADSL or Cable Modem Computer with Wireless Network fun
10. of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment nius 133 IMPORTANT NOTE FCC Radiation Exposure Statement This equ
11. set the maximum amount of bandwidtha 7 Download y certain protocol will use at one time Or you can a gt set a minimum amount of bandwidth that will be guaranteed to a certain protocol 65535 Current QoS Table mo tne tocata range protocol portrange ponev Max 1927 168 0 100 ownload a 1 Download 193 168 0101 FTP 21 3 iM fa Delete Selected Delete All Reset Port range Each protocol uses a specific port range Please specify the ports used by this protocol Policy Choose whether this rule is to set a limit on the Maximum amount of bandwidth allocated to this protocol or to set the guaranteed Minimum amount of bandwidth for this protocol nius 92 10 8 Routing If your WIRELESS ROUTER device is connected a NAT Portmap Portfw Porttri ALG UPnP QoS Routing network with different subnets then this feature will allow the different subnets to communicate with each ne Stane Riil other Current Static Routing Table No Destination LAN IP Subnet Mask Default Gateway Reset Apply Cancel ECO CET CODI ESCOTE CEC Select whether the routing applies to LAN or WAN interfaces 93 192 168 10 xxx e Router2 Ss 192 168 0 103 192162 102 192 168 0 xxx Subnet Clientl 192 168 0 216 192 168 11 11 EVR100 192 163 0 1 Client3 192 168 0 22 en a ay vow tree 192 168 11 0 255 255
12. the Internet Security Association and Key Management 28800 1080 86400 Secs Protocol _ ESP This page allows you to configure SA 3DES SHAI m Enable Disable Group 1 40000 1080 86400 Secs SA Security Association IKE Phase 1 Proposal Select Main Mode or Aggressive Mode for IKE Phase 1 negotiation e Main Mode Select this option to configure the standard negotiation parameters for IKE Phase 1 of the VPN Tunnel Recommended Setting e Aggressive Mode Select this option to configure IKE Phase 1 of the VPN Tunnel to carry out negotiation in a shorter amount of time Not Recommended Less Secure Select a DH Group from the drop down menu Group 1 Group2 Group5 and Group14 As the DH Group number increases the higher the level of encryption implemented for IKE Phase 1 O 9 Encryption EVR100 supports DES 3DES AES128 AES192 AES256 encryption methods for traffic through the VPN Authentication EVR100 supports SHA1 MD5 methods for authentication Life Time Enter the number of seconds for the IKE Lifetime The period of time to pass before establishing a new IKE security association SA with the remote endpoint The default value is 28800 IPSec Phase 2 Proposal Protocol Select ESP Encapsulating Security Payload or AH Authentication Header for traffic through the VPN e AH Authentication Header to provide connectionless integrity and data origin authentication fo
13. 0 175 254 Apply Cancel mame TC CO btentoatseomy CO ESTO NIN lus 96 10 1 1 IPSec IPSec Internet Protocol Security is a protocol suite for securing Internet Protocol IP communications by authenticating and encrypting each IP packet of a communication session IPSec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session IPSec is an end to end security scheme operating in the Internet Layer of the Internet Protocol Suite It can be used in protecting data flows between a pair of hosts host to host between a pair of security gateways network to network or between a security gateway and a host network to host General The page allows you to configure the general VPN settings VPNO1 IPSec ll pre shared key 1234567890 1234567690 IP Address 192 168 7 164 IP Address hd 192 168 7 52 97 CI COI ERAN CC ERE 98 SA Security Association A Security Association SA is the establishment of shared security attributes between two network entities to support secure communication An SA may include attributes such as Main Mode gt cryptographic algorithm and mode traffic encryption key and Group2 parameters for the network data to be passed over the 3DES connection Establishment of an SA is described in RFC 2408 SHA
14. 004 00 02 6F 52 33 00 100 O secs Refresh 74 8 7 Policy This page allows you to configure the access policies for each SSID wireless network Basic Advanced Security Filter WPS ClientList Policy SSID 1 Connection Control Policy WAN Connection Enable Communication between Wireless clients Enable Communication between Wireless clients and Wired clients Enable Apply Cancel Policy WAN Connection Allow wireless clients on this SSID to access the WAN port which typically is an Internet connection Communication between Wireless Whether each wireless client can communicate with each other in this SSID When clients Disabled the wireless clients will be isolated from each other Communication between Wireless Whether wireless clients on this SSID can communicate with computers attached to clients and Wired clients the wired LAN port nius 19 9 Firewall The Firewall section allows you to set the access control and Firewall settings 9 1 Enable This page allows you to Enable Disable the Firewall features If Enabled Firewall service the Denial of Service DoS and SPI Stateful Packet Inspection features will also be enabled Firewall automatically detects and blocks Dental of Service DoS attacks URL blocking packet filtering and SPI Stateful Packet Inspection are also supported The hackers attack will be recorded associated with timestamp in th
15. EnGenius Wireless Gigabit VPN Router EVR100 Wireless Gigabit VPN Router V1 0 3 4 5 6 o a Ee eee eae ne ee Oana tere 6 e PICKS C ONTA eee eR OT Ree RENT ne Rr er aR eer ace ee en eee ene eee nae ee en eee 6 IS SS es Y A tink rae Nt ce ee nn ere ne Eee SN eee A A EN 6 Eos MPAA ala 7 LA EDO ea tea 8 Al PA A A II ene ae tert 9 21 Considera tons Tor Wireless TAM sirosis io a Medea Pact Rehr alunet 9 2 2 Computer Settings Windows XP Windows Vista WINdOWS 7 uu cesesesssssessssssssssssesesesesesesesssssssessssssssessseseeeesesesesssesssesees 10 ZO ataWware Astalla O e tdt tin 14 Contouring vour RO EE 15 A A arate steeds naresscaotea ca teoece nasa ntancatansesee un sesedonsa E AAEE E E E 16 Vin Dira 60 eR cert A err et Cee eer err eee ee eee ere eee 30 Ig ikal sa cleeereeneeeer tert A E TN O NI TR REO EITEN 46 Dn ES E o sce O O O 46 Laza WONG IP FCO SS Suea e cece race E se sees n eacee nated 47 A A O A 49 74 PPP Over ENANA ae 50 Tas PONE TO POINE TURMEIING Protocol PPIP sr taste 52 7 6 Layer Z TUNNEN LOCO di O 54 WV VOSS casita daniela labiales loro E 56 A nn A A eae ieee 56 A o eet 59 AU A a a a 61 A o A A 67 0 WWER Protected setup WPS ana 69 G0 TM e e ne 73 8 ROY AA NA A A ence teagan ean 74 A A A 75 Silo TEA A A A AE IA 75 A A A o A A 76 1 Ms 77 OA Denialof senice DO ii a 78 10 11 95 MACFIE Quran err a a Orr at rate eran lo 79 A A N A 80 Fe URETERO psec
16. List Policy This page allows you setup the wireless security Turn on WEP or WPA by using Encryption Keys could prevent any unauthorized access to your wireless network EnGentus000004 Enable Enable Disable Enable 802 1x Authenti WPA pre shared key WPA RADIUS Cancel Security SSID Selection Select the SSID that the security settings will apply to Broadcast SSID If Disabled then the device will not be broadcasting the SSID Therefore it will be invisible to wireless clients Wi Fi Multi Media is a Quality of Service protocol which prioritizes traffic in the order according to voice video best effort and background Note that in certain situations WMM needs to be enabled to achieve 11n transfer speeds nius 62 Encryption The encryption method to be applied You can choose from WEP WPA pre shared key or WPA RADIUS Disabled no data encryption is used WEP data is encrypted using the WEP standard WPA PSK data is encrypted using the WPA PSK standard This is a later standard than WEP and provides much better security than WEP If all your Wireless stations support WPA PSK you should use WPA PSK rather than WEP WPA2 PSK This is a further development of WPA PSK and offers even greater security using the AES Advanced Encryption Standard method of encryption WPA RADIUS This version of WPA requires a Radius Server on your LAN to provide the client authentication acco
17. P Address for the Local Area Network IP address 192 168 0 1 IF Subnet Mask 255 255 259 0 802 1d Spanning Tree Disabled DHCP Server DHCP Server Enabled Lease time Forever Start IP 192 168 0 100 End IP 192 165 0200 Domain name EVR100 DNS Servers Assigned by DHCP Server First DNS Server UNS Relay Y Second DNS Server None Apply Cancel nius IP address 192 168 01 IP Subnet Mask 255 755 255 0 802 1d Spanning Tree Disabled LAN IP IP address The LAN IP Address of this device IP Subnet Mask The LAN Subnet Mask of this device 802 1d Spanning Tree When Enabled the Spanning Tree protocol will prevent network loops in your LAN network 3 DHCP Server Enabled Lease time Forever Start IP 192 168 0 100 End IP 192 165 0200 Domain name EVR100 38 DNS Servers Assigned by DHCP Server First DNS Server DNS Relay From ISP User Defined Second DNS Server Two DNS servers can be assigned for use by your LAN device There are four modes available FromISP The DNS server IP address is assigned from your ISP User Defined The DNS server IP address is assigned manually DNS Relay LAN clients are assigned the device s IP address as the DNS server DNS requests are relayed to the ISP s DNS server 39 6 3 DHCP This page shows the status of the DHCP server and also allows you to control how the IP addresses are allocate
18. The user will need to manually connect to the ISP by clicking the Connect button Idle Timeout When the connection type is Automatic Connection when Internet traffic is idle then the device will automatically disconnect from the ISP Please specify the Idle time in minutes 54 7 6 Layer 2 Tunneling Protocol L2TP L2TP is used by some ISPs Status DynamicIP StaticIp PPPoE PPTP You can select the type of the account you have with your ISP provider WAN Interface Settings WAN Interface Type Dynamic IP Address MAC address 000000000000 Clone MAC L2TP Settings mu 1450 512 lt MTU Value lt 1492 Keep Connection ll 1 1000 Minutes Apply Cancel nius 99 Layer 2 Tunneling Protocol L2TP Hostname This optional Onyrequredifspeced byISP OOOO Urerame Usemame assgnedtoyoubythelSP OOOO Do not change unless mentioned by the ISP You can choose the method that the router maintains connection with the ISP Keep Connection The device will maintain a constant connection with the ISP Automatic Connection The device will only initiate connection to the ISP when there is an Internet connection request made from a LAN device Manual Connection The user will need to manually connect to the ISP by clicking the Connect button Idle Timeout When the connection type is Automatic Connection when Internet traffic is idle then the device will automatically disconnec
19. This is optional Only required if specified by ISP MAC address The MAC Address that is used to connect to the ISP Two DNS servers can be assigned for use by your LAN devices There are two modes available FromISP OO LAN devices are assigned the DNS server IP address of your ISP User Defined Set the DNS server IP address manually 49 7 3 Static IP Address If your ISP Provider has assigned you a fixed IP address enter the assigned IP address Subnet mask Default Gateway IP address and Primary DNS and Secondary DNS if available of your ISP provider Status DynamicIP StaticIP PPPoE PPTP You can select the type of the account you have with your ISP provider Apply Cancel 90 7 4 PPP over Ethernet ISP requires an account username and password Status Dynamic IP StaticIP PPPok You can select the type of the account you have with your ISP provider username CALLA ISP 1492 512 lt MTU Value lt 1492 Auto Keep Connection ll 1 1000 Minutes nius Cancel 91 PPP over Ethernet PPPoE Username Username asigned toyoubythelS OOS Service os can asion a name fr aser pions Do not change unless mentioned by the ISP Authentication type Select whether the ISP uses PAP or CHAP methods for authentication Select Auto if unsure Type You can choose the method that the router maintains connection with the ISP Keep Connection The device w
20. VPN server Type the host name or Internet Protocol IF address of the computer to which you are connecting Host name orlP address for example microsoft com or 157 54 0 1 J 192 168 7 164 8 Select Do not use my smart card then click Next button Hew Connection Wizard Smart Cards ou can Use pour smart card with this connection You can configure this connection to use your smart card to log you into the remote network Select whether to use your smart card with this connection O Use my smart card nius 114 9 Click Finish button to complete the wizard New Connection Wizard Completing the New Connection Wizard ou have successtully completed the steps needed to create the following connection YPN Connection Share with all users of this computer The connection will be saved in the Network Connections folder To create the connection and close this wizard click Finish re ar 10 Click Properities button Connect VPN Connection F Username lest p Password Save this username and password for the following users NEE or Amone Who Used this computer y gt ius 115 11 In Security select Advanced custom settings then click Settings button 12 Check Unencrypted password PAP and Challenge Handshake Authentication Protocol CHAP then click OK button NIN lus VEN Connection Properties Gen
21. ame and password click the OK button to open the web base configuration page Windows Security The server 192 168 0 1 at Default admin admin requires a username and password Warning This server is requesting that your username and password be sent in an insecure manner basic authentication without a secure connection User mame er name sy Passmor OOO EW O _ Remember my credentials Cancel NIN lus 17 3 You will see the following webpage if login successfully Wireless VPN Router AP Router Mode a You can use the Status page to monitor the connection status for the WAN LAN interfaces firmware and hardware version numbers any illegal attempts to access your network and information on all DHCP client PCs currently connected to your network Wizard Model Wireless Gigabit VPN Router Mm Mode AP Router Internet Uptime 4min 14 sec Current Date Time 2009 01 01 00 04 17 Wireless Hardware version 1 0 0 Serial Number 10C383846 Firewall Application version 1 0 9 VPN Attain IP Protocol Dynamic IP Address Advanced IP address Subnet Mask Tools Default Gateway MAC address O0 02 6F 9C 43 2C Primary DNS Secondary DNS nius 18 4 Click Wizard to enter the Setup Wizard Then click Next to begin the wizard Wireless VPN Router AP Router Mode a EnGeniust EVRi100 Welcome to the router s web inte
22. ardware information for this device Serial Number Application version Firmware information for this device nius Attain IP Protocol Dynamic IP Address IP address Subnet Mask Default Gateway MAC address 00 02 6F 99 00 04 Primary DNS Secondary DNS Primary and Secondary Primary and Secondary DNS servers assigned to the WAN connection DNS 33 IP address 192 168 0 1 Subnet Mask 255 255 255 0 DHCP Server Enabled MAC address 00 02 6F 10 00 14 LAN Settings IP address The LAN IP Address of the device Subnet Mask The LAN Subnet Mask of the device DHCP Server Whether the DHCP server is Enabled or Disabled MAC address The MAC address of the device s LAN Interface Channel a ESSID EnGeniusi000i4 Security WPA pre shared key BSSID 00 02 6F 10 00 14 Associated Clients O ESSID EnGentuisi00014 2 Security Disable BSSID 00 02 6F 10 00 15 Associated Clients O The wireless channel in use The SSID Network Name of the wireless network up to 4 SSIDs are supported Wireless encryption is enabled for this SSID BSSID The MAC address of this SSID Associated Clients The number of wireless clients connected to this SSID nius 35 6 2 LAN This page allows you to modify the device s LAN settings You can enable the Broadband routers DHCP server to dynamically allocate IP Addresses to your LAN client PCs The broadband router must have an I
23. ation Version 1 0 4 i 00 00 01 SYSTEM Start Log Message Service day Save Clear Refresh Save the log to a file Clear the log S 45 6 6 Language This page allows you to change the Language of the User Interface Language Choose your language Choose your language English Traditional Chinese Simplified Chinese Sm mm mm mm mm 46 7 Internet The Internet section allows you to manually set the WAN type connection and its related settings 7 1 Status This page shows the current status of the device s WAN connection Attain IP Protocol Dynamic IP Address IP address 10 0 174 53 Subnet Mask 295 295 2594 0 Default Gateway 10 0 175 254 MAC address 00 02 6F 99 00 04 Primary DNS 10 0 200 101 Secondary DNS 10 0 200 102 nius 47 7 2 Dynamic IP Address The IP Address is allocated automatically However some ISP s will also recognize the MAC address and will reject connections if the MAC address does not match If your ISP has recorded the MAC address of your computer s Ethernet LAN card please connect only the computer with the authorized MAC address and click the Clone MAC button This will replace the AP Router MAC address to the computer MAC address The correct MAC address is used to initiate the connection to the ISP Status Dynamic IP StaticIP PPPoE 000000000000 Clone MAC FromiSP 48 Dynamic IP Address
24. ction Windows Mac OS or Linux based operating systems Internet Explorer or Firefox or Safari Web Browser Software 1 3 Introduction EVR100 is a 2T2R Wireless 11N Gigabit VPN Router that delivers up to 6x faster speeds and 3x extended coverage than 802 11g devices EVR100 supports home network with superior throughput and performance and unparalleled wireless range With easy to use on the WPS function it helps users to connect to wireless device with just one push button There s also a built in 4 port full duplex 10 100 1000 Fast Switch to connect your wired Ethernet devices together The Router function ties it all together and lets your whole network shares a high speed cable or DSL Internet connection 1 4 LED Overview LED Lights Icon Description Color Blue Wireless LAN op Lights when Wireless signal is activated Blinks when Wireless data transfer Color Blue Blinks when WPS handshake is initialized Color Blue Lights when wired network device is connected to RJ 45 port Blinks when data transfer occurs on RJ 45 port Color Orange Lights when device is powered ON Blinks device is Reset 2 Before you Begin This section will guide you through the installation process Placement of the EVR100 is very important to avoid poor signal reception and performance Avoid placing the device in enclosed spaces such as a closet cabinet or wardrobe 2 1 Considerations for Wireless Installation The operating
25. ction f VPN Connection ssa ats duel A SQA PC Network 11 A i Disconnected Change advanced sharing 5 a Intel R 82567LM Gigabit Network Es WAN Miniport IKEv2 8 Change Type of VPN to Layer 2 Tunneling Protocol with IPSec gl VAN Corea Papa Type of WPN Data encryption Require encryption disconnect if server declines Authentication M Use Extensible Authentication Protocol EAP Allow these protocols Challenge Handshake Rie icaton Protocol CHAP V Microsoft CHAP Version 2 MS CHAP v2 Automatically use my Windows logon name and password and domain if any 9K J Camel US ay o 122 VPN Connection Properties 9 Click the Advanced settings button and select Use preshared ee General Options Security Networking Sharing Type of VPN Layer Tunneling Protocol with IPsec L27P IP Sec key for authentication and enter the correct key Then click OK button Use preshared key for authentication Key 1234567890 5 Use certificate for authentication Verify the Name and Usage attributes of nius 123 10 Double click the VPN Connection then click the Connect button lw VPN Connection Disconnected a WAN Miniport L2TP amp Connect VPN Connection User name test Password one who uses this computer Cancel Properties Help 11 You can see the VPN Connection has been established VPN Connection
26. d This DHCP Client Table shows client IP address assigned by the DHCP Server MAC address 192 168 0 100 6 Cl 62 60 69 2F 02 Forever 192 168 0 101 00 1D D9 CF A4 A9 Forever Refresh You can assign an IP address to the specific MAC address E Enable Static DHCP IP Ada Reset Current Static DHCP Table TA Paddress OT MAC address ESE nius 40 The DHCP Client Table shows the LAN clients that have been allocated an IP address from the DHCP Server This DHCP Client Table shows client IP address assigned by the DHCP Server IP address MAC address Exp 192 162 0 100 60C 62 6D 69 2F D2 Forever 192 168 0 101 00 10 09 0CF 44 49 Forever _Refresh 41 W Enable Static DHCP IP 192 166 0 155 000004830344 ada Reset Current Static DHCP Table 1 192 168 0 150 00 02 6F 13 43 21 Delete Selected Delete All Reset You can also manually specify the IP address that will be allocated to a LAN client by associating the IP address with its MAC address Type the IP address you would like to manually assign to a specific MAC address and click Add to add the condition to the Static DHCP Table 42 6 4 Schedule This page allows you to setup the schedule times that the Firewall and Power Saving features will be activated deactivated Click Add to create a Schedule entry You can use the Schedule page to Start Stop the Services regularly The Schedule will
27. distance of all wireless devices cannot be pre determined due to a number of unknown obstacles in the environment that the device is deployed These could be the number thickness and location of walls ceilings or other objects that the wireless signals must pass through Here are some key guidelines to ensure that you have the optimal wireless range 1 Keep the number of walls and ceilings between the EnGenius access point and other network devices to a minimum Each wall or ceiling can reduce the signal strength the degradation depends on the building s material 2 Building materials makes a difference A solid metal door or aluminum stubs may have a significant negative effect on range Locate your wireless devices carefully so the signal can pass through a drywall or open doorways Materials such as glass steel metal concrete water fish tanks mirrors file cabinets and brick will also degrade your wireless signal 3 Interferences can also come from your other electrical devices or appliances that generate RF noise The most usual types are microwaves or cordless phones 10 2 2 Computer Settings Windows XP Windows Vista Windows 7 e Click Start button and open Control Panel 0 os AA et Administrator Internet Internet Explorer H E mail AN Microsoft Office Outlook Command Prompt MW Microsoft Office Word 2003 Notepad IxChariot Console T LA A Tera Term Pro E Microsoft Office Excel 2003 All Pr
28. e Choose this if you are setting up a VPN l connection between two dedicated VPN servers nius 107 Enter the Security Gateway and remote network Then click Next button to next page IP Address 114 44 76 6 eg 69 100 100 100 or www google com tw 192 166 4 0 eg 192 168 2 0 255 255 255 0 eg 255 255 255 0 Security Gateway the public WAN IP address of the target device Remote Address the private LAN IP domain of the target private network Remote Netmask the network mask of the Remote Address Next Cancel nius 108 3 2 L2T P over IPSec ia Sa STE Naa EEE PS PEER PEPE ERS I Enter the username password and VPN server IP iso WG His ecg EVIE setting Then click Next button to next page L2TP Setting Auto test eg quest eg nk9543 10 0 175 100 eg 10 0 174 45 10 0 175 21 50 eg 10 0 174 66 100 Remote IP range the private IP domain of the dial in user Server IP the gateway address of the private IP domain Back Cancel US ay o 109 4 Enter the shared key for the VPN connection ESP 3DE5 5HA1 1234567890 leg apple123 Note Shared key is the PASSWORD for VPN connection This password should be the same among all VPN members for this policy setting l Back Next Cancel 5 Setup successfully enable this policy immediately If you don t want enable th
29. e security logging area Firewall Enable O Disable Apply nius 76 9 2 Advanced You can choose whether to allow VPN Virtual Private Network packets to pass through the Firewall Enable Advanced VPN PPTP Pass er VPN IPSec Pass Through Ed Apply Cancel Tf 9 3 DMZ If enabled this feature allows the DMZ computer on your LAN to be exposed to all users on the Internet e This allows almost any application to be used on the server e The DMZ PC will receive all Unknown connections and data e Ifthe DMZ feature is enabled please enter the IP address of the PC to be used as the DMZ PC Note The DMZ PC is effectively outside the Firewall making it more vulnerable to attacks For this reason you should only enable the DMZ feature when required If you have a local chent PC that cannot run an Internet application properly from behind the NAT firewall you can open unrestricted two way Internet access for this chent by defining a Virtual DMZ Host Y Enable DMZ 192 168 0 100 Please select a PC Apply Cancel nius 78 9 4 Denial of Service DoS Denial of Service Denial of Service is a type of Internet attack that sends a high amount of data to you with the intent to overload your Internet connection Enable the DoS firewall feature to automatically detect and block these DoS attacks Enable Advanced DMZ Dos MAC Fil
30. e setting is used by the system clock when displaying the correct time in schedule and the log files synchronize with the NTP Server GMT Greenwich Mean Time Dublin Edinburgh Lisbon London time windows com Enable From January 1 To January ale Apply Cancel Time Setup Select the method you want to set the time Time Zone Select the time zone for your current location NTP Time Server Enter the address of the Network Time Protocol NTP Server to automatically synchronize with a server on the Internet Daylight Savings Check whether daylight savings applies to your area nius 126 12 3 Dynamic DNS DDNS This free service is very useful when combined admin IONS Power Diagnosis Firmware Back up Reset with the Virtual Server feature It allows Internet users to connect to your Virtual Servers using a DONS allows users to map a static domain name to a dynamic IP address You must get an account password and your static domain name from the DDNS service provider URL rather than an IP Address Enable Disable This also solves the problem of having a dynamic DynDNS xxx dnsalias_net IP address With a dynamic IP address your IP test address may change whenever you connect which makes it difficult to connect to you 606066 Apply Cancel DDNS Services work as follows You must register for the service at one of the listed DDNS Se
31. eal time and interactive traffic and improved loss characteristics Also important is making sure that providing priority for one or more flaws does Internet bandwidth for a pleasant user Ree Beat oo Fie Coad a P nemen This is to ensure that applications get enough experience Total Bandwidth Settings If not then the performance and user experience Full of time sensitive transmissions such as voice and Full video could be very poor l y P Qos Priority Queue C Bandwidth Allocation Y Disabled In order for this feature to function properly the user should first set the Uplink and Downlink Cancel bandwidth provided by your Internet Service Provider pink EXT Ponni EXT Disabled Disables the QoS feature nius 90 QoS Priority Queue Bandwidth Allocation Disabled Priority Queue Method Unlimited Priority Queue Bandwidth priority is set to either High or Low The Local IP Address Description l TE The IF address will not be bounded in th transmissions in the High queue will be processed first O High Low Priority Queue HTTP 2 C 80 TELNET o 23 SMTP o 25 POPS ls 110 Name co a Both e Mame Oo igi Both ni Name A a Both on Specific Port Each protocol uses a specific port range Please specify the ports used by this protocol nius 91 Bandwidth Allocation Method Qos Priority Queue Bandwidth Allocation Disabled You can
32. ect VPN Connection User name Password Me only 0 Anyone who uses this computer 16 You can see the VPN Connection has been established Mitel PON are Nek ae YPN Connection 5 Connected Ly WAN Miniport L2TP nius 118 How to establish a L2TP over IPSec VPN connection in Windows 7 5 SF Crrriparim 1 Click Start button and open Control Panel a Kiho fas a Conrenct Ta W harbi es ETIS Control arm e 1 SETTI i i ieee md Bier E COI rs A i Fur iced Fl Biz 7 20 pens gt EnGer ess LET RES PAra Bla Foral an Programs E J 2 Click View Network Status and Tasks then Set up a new connection or network ha set Up a new connection or network Metwork and Internet G View network status and tasks Set up a wireless broadband dial up ad hoc or VPN connection or set up a router or access point E Choose homegroup and sharing options nius 119 3 Click Connect to a workplace then Use my Internet connection VPN Connect to the Internet Ss jnurclecc fRroasodhasnea or col a aneertian tno sa lnter sol ELO ad WEES CA Dg A OI Otal CM TETEE LICA T CO LEE FILE FIEL magu Set up a new network Configure a new router or access point Connect to the Inter net LS SIPEG connection Fis Set up a dial oa pa dial up ES Connect to a Bluetooth prape area network PAM Set up a connecti
33. ent Trigger Porn Table BTS I AE Both 2300 2H401 47029 Bath Sammy ore Udete Selecta Dakeje All Aral Ay L El Port Trigger Enable Port Forwarding Tick this box to Enable the Port Trigger feature Popular applications This is a list of some common applications with preset settings Select the application and click Add to automatically enter the settings Trigger port This is the outgoing outbound port numbers for this application Trigger type Select whether the application uses TCP UDP or Both types of protocols for outbound transmissions Public Port These are the inbound incoming ports for this application Public type Select whether the application uses TCP UDP or Both types of protocols for inbound transmissions nius 8 10 5 Application Layer Gateway ALG Certain applications may require the use of ALG feature to function correctly If you use any of the applications listed please tick and select it to enable this feature The ALG Application Layer Gateway serves the purpose of a window between correspondent application processes so that they may exchange information on the open environment Egg Lal IRC E Amanda a Quake3 al Talk rl IPsec E SIP a RTSP a Apply Cancel nius 88 10 6 Universal Plug and Play UPnP The UPnP function allows automatic discovery and configuration of UPnP enabled devices on your network It also provides automatic port fo
34. er You can choose whether to Deny or only Allow computer with those IP Addresses from accessing certain Ports This can be used to control which Internet applications the computers can access You may need to have certain knowledge of what Internet ports the applications use DoS MAC Filter IP Filter U IP Filters are used to deny or allow LAN computers from accessing the Internet 4 Enable IP Filtering Table Deny all clients with IP address listed below to access the network Allow all clients with IP address listed below to access the network 192 168 0 100 al j ig 192 168 0 101 a aaa w Delete Selected Delete All 0 Cancel nius 81 Enable IP filtering Tick this box to Enable the IP filtering feature Deny all clients with IP addresses When selected the computers with IP addresses specified will be Denied access to listed below to access the network the indicated Internet ports Allow all clients with IP addresses When selected the computers with IP addresses specified will be Allowed access listed below to access the network only to the indicated Internet ports 82 9 7 URL Filter You can deny access to certain websites by blocking keywords in the URL web address For example gamer has been added to the URL Blocking Table Any web address that includes gamer will be blocked You can block access to certain Web sites for a particular PC by en
35. eral Options Securty Networking Advanced Security options Typical recommended settings Advanced custom settings Using these settings requires 4 knowledge of security protocols IPSec Settings Advanced Security Settings El Ed Data encryption Require encryption disconnect if Server declines Logon security O Use Extensible Authentication Protocol EAF Allow these protocols Unencypted password FAF Shiva Password Authentication Protocol SPAP Challenge Handshake Authentication Protocol CHAP Microsoft CHAP MS CHAP Se Allow older MS CHAP version for Windows 95 servers O For M5 CHAP based protocols automatically use my Windows logon name and password and domain if ary 116 mad he A 13 Click IPSec Settings then tick Use pre shared key for authentication altiva Enter the Key then click OK button gt Deca recorded rel E Per rl 14 In Networking select L2TP IPSec VPN then click OK button This connection uses the following items Moa Network Monitor Onver 4137 Intemet Protocol TCPAP mal QoS Packet Scheduler E 2 File and Printer Sharing for Microsoft Networks iv Ll VMware Bridge Protocol Install Uninstall Description Metmon Packet capture driver that allows the Netmon LI to acquire packets from the local network nius 117 15 Click Connect button to connect VPN connection Conn
36. ess Point wirelessly and in doing so oe extend a wired infrastructure to locations where cabling is not 2 4 GHz B G N possible or inefficient to implement zi r n Note that compatibility between different brands and models is not guaranteed It is recommended that the WDS network be created EnGenius000004 using the same models for maximum compatibility 8 Also note that all Access Points in the WDS network needs to use 000000000000 the same Channel and Security settings 000000000000 To create a WDS network please enter the MAC addresses of the eee Access Points that you want included in the WDS There can be a 300M maximum of four access points Set Security 99 8 2 Advanced This page allows you to configure wireless advance settings It is recommended the default settings are used unless the user has experience with these functions Basic Advanced Security Filter WPS Client List Policy These settings are only for more technically advanced users who have a sufficient knowledge about wireless LAN These settings should not be changed unless you know what effect the changes will have on your Broadband router 2346 256 2346 2347 1 2347 100 20 1024 ms 1 1 255 Auto ll Auto 20 40 MHZ 20 MHZ Long Preamble Short Preamble Auto Always None 100 Cancel nius 60 Advanced Fragment Threshold Specifies the size
37. ice network or set up a new one O Set up an advanced connection Connect directly to another computer using your serial parallel or infrared port or set up this computer so that other computers can connect tot Hew Connection Wizard Network Connection How do vou want to connect to the network at your workplace Create the following connection O Dial up connection Connect using a modem and a regular phone line or an Integrated Services Digital Network ISON phone line Connect to the network using a virtual private network VPA connection over the Internet 112 Hew Connection Wizard 5 Enter the Company Name then click Next button Connection Name Specify a name for this connection to your workplace Tipe a name for this connection in the following box Company Name For example you could type the name of pour workplace or the name of a server you will connect to 6 Select Do not dial the initial connection then click Next button Hew Connection Wizard Public Network Windows can make sure the public network is connected first Windows can automatically dial the initial connection to the Internet or other public network before establishing the virtual connection O Automatically dial this initial connection y gt ius 113 7 Enter the VPN server IP address then click Next button New Connection Wizard WPN Server Selection What ts the name or address of the
38. ill maintain a constant connection with the ISP Automatic Connection The device will only initiate connection to the ISP when there is an Internet connection request made from a LAN device Manual Connection The user will need to manually connect to the ISP by clicking the Connect button Idle Timeout When the connection type is Automatic Connection when Internet traffic is idle then the device will automatically disconnect from the ISP Please specify the Idle time in minutes 92 7 5 Point to Point Tunneling Protocol PPTP PPTP is used by some ISPs micIP StaticiP PPPoE PPIP L21P You can select the type of the account you have with your ISP provider WAN Interface Settings Dynamic IP Address 000000000000 Clone MAC Service 1P address cho 0 Optional mu OOOO 1400 512 lt MTU Value lt 1492 Type Keep Connection 1 1000 Minutes Apply Cancel nius 93 Point to Point Tunneling Protocol PPTP Hostname This optional Onyrequredifspecied byISP OOOO Urerame Usemame assgnedtoyoubythelSP OOOO Do not change unless mentioned by the ISP You can choose the method that the router maintains connection with the ISP Keep Connection The device will maintain a constant connection with the ISP Automatic Connection The device will only initiate connection to the ISP when there is an Internet connection request made from a LAN device Manual Connection
39. ipment complies with FCC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator amp your body We declare that the product is limited in CH1 CH11 by specified firmware controlled in the USA This transmitter must not be co located or operating in conjunction with any other antenna or transmitter nius 134 Appendix B IC Interference Statement Industry Canada statement This device complies with RSS 210 of the Industry Canada Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation IMPORTANT NOTE Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator amp your body This device has been designed to operate with an antenna having a maximum gain of 2 dBi Antenna having a higher gain is strictly prohibited per regulations of Industry Canada The required antenna impedance is 50 ohms nius
40. is policy you can un tick the box Then click Apply button to apply the settings Enable this policy immediately Note Policy MUST be enabled to activate the setting Back Apply nius 110 How to establish a L2TP over IPSec VPN connection on Windows XP 1 Click Start button and open Control Panel As LLJ Hy Recent Dorumamis a ar Hi Pr Farre m Sat Preja FE cS erm MES pur v Conrad Ta e ee ad Pic A Hap one appo Abra 2 Click Network Connections double click New Connection Wizard then click Next button Hew Connection Wizard Welcome to the New Connection Wizard This wizard helps your Wizard Connect to the Internet cd Connect to a private network such as pour workplace EE network New Connection Wizard Setup a home or small office network Network Connections To continue click Next i Cancel TAS 111 3 4 Select Connect to the network at my workplace then click Next button Select Virtual Private Network connection then click Next button AEN ius Hew Connection Wizard Network Connection Type What do you want to do 0 Connect to the Internet Connect to the Internet so you can browse the Web and read email Connect toa business network using dial up or PA so You can work from home a held office or another location 0 Set up a home or small office network Connect to an existing home or small off
41. lick this button to initialize WPS feature using the push button method WPS Via PIN Enter the PIN code of the wireless device and click this button to initialize WPS feature using the PIN method 11 Initializing WPS Feature There are two methods to initialize the WPS feature Push Button and Pin code methods 1 WPS Push Button Method Push the WPS button on the WIRELESS ROUTER device The Wireless LED light will start to flash to indicate that the WPS process is ready While the Wireless LED is flashing on the WIRELESS ROUTER press the WPS button on your wireless client This could either be a physical hardware button or a software button in the utility 12 2 Pin Code Method Note the Pin code of your WIRELESS ROUTER device W Enable W Enable Wi Fi Protected Setup Information wips Current States unConfigured EnGeniusooo004 T Disable 1 Start to Process Stan to Process Please use this Pin code to initialize the WPS process from the wireless client configuration utility This process will be different for each brand or model Please consult the user manual of the wireless client for more information 73 8 6 Client List This page shows the wireless clients that are connected to the WIRELESS ROUTER device Basic Advanced Security Filter WPS Client List Policy This WLAN Client Table shows client MAC address associate to this Broadband Router EnGenius000
42. o configure advanced VPN settings Network Advanced Enable Disable Enable Disable Advanced NAT Traversal Enabling NAT Traversal allow IPSec traffic from this endpoint to traverse through the translation process during NAT The remote VPN endpoint must also support this feature and it must be enabled to function properly over the VPN Dead Peer Detection Enable DPD Dead Peer Detection to delete the VPN tunnel if there is no traffic detected The VPN will re establish once traffic is again sent through the tunnel 102 10 1 2 L2TP over IPSec L2TP over IPSec VPNs enable a business to transport data over the Internet while still maintaining a high level of security to protect data You can use this type of secure connection for small or remote office clients that need access to the corporate network You can also use L2TP over IPSec VPNs for routers at remote sites by using the local ISP and creating a demand dial connection into corporate headquarters General General L2TP The page allows you to configure the general VPN settings L2TP L2TP over IPSec pre shared key 1234567890 1234567090 COI ERA Enter your Shared Key again for verification Auto test COC ereusemaneterauention 104 Network Network VPN Server IP Setting 192 168 99 1 192 168 99 21 186 SeverIP Enter the VPN Server IP address Remote IP Range Assign a range of IP addresses
43. of the packet per fragment This function can reduce the chance of packet collision However when this value is set too low there will be increased overheads resulting in poor performance RTS Threshold When the packet size is smaller than the RTS Threshold then the packet will be sent without RTS CTS handshake which may result in incorrect transmission Beacon Interval The time interval that the device broadcasts a beacon This beacon is used to synchronize all wireless clients on the network DTIM Period A Delivery Traffic Indication Message informs all wireless clients that the access point will be sending Multi casted data N Data Rate You can limit the transfer rates between the device and wireless clients Each Modulation Coding Scheme MCS refers to a specific transfer speed Channel Bandwidth Set whether each channel uses 20 or 40Mhz To achieve 11n speeds 40Mhz channels must be used Preamble Type A preamble is a message that helps access points synchronize with the client Long Preamble is standard based so increases compatibility Short Preamble is non standard so it decreases compatibility but increases performance CTS Protection When Enabled the performance is slightly lower however the chances of packet collision is greatly reduced Set the power output of the wireless signal 61 8 3 Security This page allows you to set the wireless security settings Basic Advanced Security Filter WPs Client
44. ograms gt Log OFF 0 Turn OFF Computer Windows XP NIN lus cE My Documents i 2 My Recent Documents te My Pictures E My Music 43 My Computer Control Panel Set Program Access and Defaults Z ET e onnect To Ed Printers and Faxes Help and Support yo Search I S Run T 3 Internet a Mozilla Firefox i E mail aa ee All Programs Eta rt Search Windows Vista Documents Pictures Music Garnes Mo custorn definition Network Connect To Control Panel Default Programs Help and Support a hrie Esplrel El Tas Tam Pro Zz Command Prarret aif Holepad E Wires ar hina Cra be cd Part Ea T Ery KiF Hj Eiz Ip Ak Mage ga Eres iea HID Gi Moura Firelca o Al Preje Windows 7 Cermei To Central Fane AAC Hi Pies 11 eo Windows XP click Network Connection e Network Connections eo Windows Vista click View Network Status and Tasks then Manage Network Connections G Network and Internet Tacks al a Connect to the Internet te View network status and taski View computers and devices Set up file sharing Connect to a network setup a connection or network Manage network connections Diagnose and repair eo Windows 7 click View Network Status and Tasks then Change adapter settings Metwork and Internet Control Panel Home k IN View network status and task
45. on to a Bluetooth enabled device or networl 4 Enter the VPN server IP address Internet address Destination name and tick Don t connect now just set it up so I can connect later then click the Next button US ay o Sat a con onreact th J e Conteo a ne On Correcto a a E I aclare How do ou want to connect Use my mera connection PM AAA a ak PR ial direch Connect recio a pho meme wt ei qarn Shrugs toe rm rl A de Che oa bidr core cal pia Le oe the nieret address to conmect to FE eee ed ree can pre ated a dodo Ler ari lee Caren reer Lhe a prar card a ice oer perp te we ie ca maci n These opier aiman aro na ah accan o hn comp uber to woe E arma ein 120 5 Enter the correct User name and Password then click the Create button Chow charai Panemba hi pHa Grman omikra 6 Click the Close button to close the VPN connection setting gt Eu Correct to a Mopar E NE COmMNECHEOT F rasty ho Le de CEEOL TEA nius A De Llosa 121 Click Change adapter settings in Step 2 then select VPN Connection and click Change settings of this connection 7 Control Panel Home Rename this connection Delete this connection Change settings of this connection Se res Local Area Conne
46. ppear in the Upgrade File field 3 Click the Apply button to commence the firmware upgrade Note The Wireless Router is unavailable during the upgrade process and must restart when the upgrade is completed Any connections to or through the Wireless Router will be lost nius 130 Use BACKUP to save the routers current configuration to a file named config dlf You can use RESTORE to restore the saved configuration Alternatively you can use RESTORE TO FACTORY DEFAULT to force the router to restore the factory default settings Restore to factory Restores the device to factory default settings default Backup Settings Save the current configuration settings to a file Restore Settings Restores a previously saved configuration file Click Browse to select the file Then Upload to load the settings nius 131 12 8 Reset In some circumstances it may be required to force the device to reboot Admin Time DDNS Power Diagnosis Firmware Back up Reset In the event the system stops responding correctly or stops functioning you can perform a reset Your settings will not be changed To perform the reset click on the APPLY button Apply Cancel nius 132 Appendix A FCC Interference Statement Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15
47. r IP datagrams and to provide protection against replay attacks ESP Encapsulating Security Payload to provide confidentiality data origin authentication connectionless integrity an anti replay service a form of partial sequence integrity and limited traffic flow confidentiality Encryption EVR100 supports DES 3DES AES128 AES192 AES256 encryption methods for traffic through the VPN Authentication EVR100 supports SHA1 MD5 methods for authentication Perfect Forward Select Enable or Disable to enable or disable PFS Perfect Forward Secrecy PFS is an additional Secrecy security protocol Select a PFS DH Group from the drop down menu Group 1 Group2 Group5 Group14 As the DH Group number increases the higher the level of encryption implemented for PFS Enter the number of seconds for the IPSec Lifetime The period of time to pass before establishing Life Time a new IPSec security association SA with the remote endpoint The default value is 28800 100 Network This page allows you to configure the VPN server and local remote subnet IP Address ig 192 168 752 192 168 0 0 255 255 255 0 132 168 9 0 255 255 255 0 Security Gateway The IP address or domain name of the VPN server Local Network Enter the local LAN subnet and mask ex 192 168 0 0 255 255 255 0 Remote Network Enter the remote subnet and mask ex 192 168 9 0 255 255 255 0 101 Advanced This page allows you t
48. rding to the 802 1x standard Data transmissions are encrypted using the WPA standard If this option is selected This Access Point must have a client login on the Radius Server Each user must have a user login on the Radius Server Each user s wireless client must support 802 1x and provide the login data when required All data transmission is encrypted using the WPA standard Keys are automatically generated so no key input is required IEEE 802 1x is an authentication protocol Every user must use a valid account to login to this Access Point before accessing the wireless LAN The authentication is processed by a RADIUS server This mode only authenticates users by IEEE 802 1x but it does not encrypt the data during communication 63 V Enable 802 1x Authentication 1612 802 1x Authentication RADIUS Server IP The IP Address of the RADIUS Server Address RADIUS Server port The port number of the RADIUS Server RADIUS Server The RADIUS Server s password password 64 WEP Encryption WEP x Open System C Shared Key _ Auto 64 bit ASCII 5 characters WEP Encryption Authentication Type Please ensure that your wireless clients use the same authentication type Key type ASCII regular text recommended HEX for advanced users Key Length Select the desired option and ensure the wireless clients use the same setting e 64 Bit data is encrypted using the default key before being transmitted
49. rface From here you will continue the setup process using your browser To continue click Next Internet Wireless Firewall Next VPN Advanced Tools nius 19 5 Select the Operation Mode Please ensure you have the proper cables connected as described in the Hardware Installation section Please choose the Operation Mode AP Router Mode AP Router is the most common Wireless LAN device with which you will work as a Wireless LAN administrator and Internet Access Point AP Router provides clients with a point of access into the Internet AP Repeater Mode AP Repeater Mode provides a wireless upstream link into a network instead of being hard wired to the network and using Its Ethernet port Next nius 20 AP Router Mode a The device will search for the correct Internet settings automatically Automatically detecting the Services on WAN port Please wait 2 seconds b The most appropriate WAN type will be determined and selected automatically If it a Please choose your service type or select Others to setup WAN configurations manually is incorrect please select Others to set up the WAN settings manually O mo serie escritos F O ae 7 nius 21 c There are many WAN service types available Please obtain the correct settings from your Please enter the data which is supplied by your ISP Internet Service Provider ISP
50. rvice providers 2 After registration use the Service provider s normal procedure to obtain your desired Domain name 3 Enter your DDNS data on the EVR100 s DDNS screen and enable the DDNS feature 4 The Wireless Router will then automatically ensure that your current IP Address is recorded at the DDNS service provider s Domain Name Server 5 From the Internet users will be able to connect to your Virtual Servers or DMZ PC using your Domain name as shown on this screen nius 127 12 4 Power This page allows you to Enable or Disable the wireless LAN power saving features Power Diagnosis Firmware Back up Reset You can use the power page to save energy for WLAN interfaces Power Saving Mode Apply Cancel 128 12 5 Diagnosis This page allows you determine if the WIRELESS ROUTER device has an active Internet connection 129 12 6 Firmware The firmware software in the WIRELESS ROUTER device can be upgraded using your Web Browser Back up Reset Diagnosis Firmware You can upgrade the firmware of the router in this page Ensure the firmware you want to use is on the local hard drive of your computer Click on Browse to browse and locate the firmware to be used for your update Browse Cancel To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will a
51. rwarding for supported applications to seamlessly bypass the Firewall NAT Portmap Port fw Porttri ALG UPnP Universal Plug and Play is designed to support zero configuration invisible networking and automatic discovery for a range of device from a wide range of vendors With UPnP a device can dynamically join a network obtain an IP address and learn about the presence and capabilities of other devices all automatically Devices can subsequently communicate with each other directly 4 Enable the Universal Plug and Play UPnP Feature 4 Allow users to make port forwarding changes through UPnP Apply Universal Plug and Play UPnP Enable the UPnP Feature Tick this box to Enable the UPnP feature to allow supported devices to be visible on the network Allow users to make port Tick this box to allow applications to automatically set their port forwarding rules to bypass forwarding changes the firewall without any user set up through UPnP nius 89 10 7 Quality of Service QoS QoS allows you to control the priority that the UPnP Routing data is transmitted over the Internet or to reserve a specific amount of Internet bandwidth Quality of Service Q05 refers to the capability of a network to provide better service to selected network traffic The primary goal of QoS is to provide priority including dedicated bandwidth controlled jitter and latency required by some r
52. s Pe Change adapter settings Choose homegroup and sharing options Change advanced sharing settings nius 12 e Right click on Local Area Connection and select Properties Local Area Connection Check Client for Microsoft Networks File and Printer Sharing for Microsoft Networks and Internet Protocol J TCP IP is ticked If not please install them Y a Link Layer Topology Discovery Mapper 1 0 Driver Y a Link Layer Topology Discovery Responder 13 Client for Microsoft Networks I 8005 Packet Scheduler 8 File and Printer Sharing for Microsoft Networks i Intemet Protocol Version 6 TCP IP v6 IORN intermet Protocol Version 4 TCP IP v4 W 4 Link Layer Topology Discovery Mapper 1 0 Driver Ww a Link Layer Topology Discovery Responder q R Oo Select Internet Protocol TCP IP and click Properties E Y me Oo Select Obtain an IP Address automatically and Obtain DNS server address automatically then click OK Genera Alternate Configuration You can pet IP settings ased automaticaly if your nebrork supports thie capability Ofhernise you need to ack your network administrator for the appropriate IP settings a yore an IP address autos tically Lise the fofionang IP address ten DNS server addrece automaticaly Lice the folowing DNS server addresses nius ta o 14 2 3 Hardware Installa
53. s use the same settings RADIUS Server IP Enter the IP address of the RADIUS Server address RADIUS Server Port Enter the port number used for connections to the RADIUS server RADIUS Server Enter the password required to connect to the RADIUS server password 67 8 4 Filter This page allows you to create filters to control which wireless clients can connect to this device by only allowing the MAC addresses entered into the Filtering Table Basic Advanced Security Filter WPS ClientList Policy For secunty reason the Access Point features MAC Address Filtering which only allows authorized MAC Addresses to associate with the Access Point Enable Wireless Access Control Notebook 004012345676 MAC Address Filtering Table CO Duct Notebooki 00 0C B4 56 78 91 F Delete Selected Delete All Reset Apply Cancel NIN lus 68 Wireless Filter Enable Wireless Access Tick the box to Enable Wireless Access Control Control When Enabled only wireless clients on the Filtering Table will be allowed Enter a name or description for this entry MAC address Enter the MAC address of the wireless client that you wish to allow connection Click this button to add the entry Click this button if you have made a mistake and want to reset the MAC address and Description fields MAC Address Filtering Table Only clients listed in this table will be allowed access to the wireless ne
54. start to run when it get GMT Time from Time Server Please set up the Time Server correctly in Toolbox The services will start at the time in the following Schedule Table or it will stop Enabled Schedule Table up to 8 1 schedule 01 Firewall From 08 00 To 20 00 Mon Wed Fri a 2 schedule 02 Power Saving From 21 00 To 23 30 Mon a Tue Wed Thu Fri Add Edit Delete Selected _ Delete Selected Delete All Delete All Apply Cancel NIN lus 43 schedule 01 Firewall C Power Saving E Every Day W Mon C Tue Y Wed El Thu E Fri El sat El Sun E AN Day use 24 hour clock From 4 mt To 20 eD Cancel Schedule Description Assign a name to the schedule The service provides for the schedule Define the Days to activate or deactivate the schedule Time of day Define the Time of day to activate or deactivated the schedule Please use 24 hour clock format 44 6 5 Log This page displays the system log of the device When powered down or rebooted the log will be cleared View the system operation information day 1 00 00 02 SYSTEM WAN start DHCP mode day i 00 00 02 SYSTEM UPnP start day 1 00 00 01 SYSTEM WLAN 46 Channel 11 day 1 00 00 01 SYSTEM WLAN 2 46 CountryRegion 0 day i 00 00 01 SYSTEM LAN IP address 192 168 0 1 day i 00 00 01 SYSTEM LAN start day i 00 00 01 SYSTEM BE start day i 00 00 01 SYSTEM SYS Applic
55. t from the ISP Please specify the Idle time in minutes 96 8 Wireless The Wireless section allows you to configure the Wireless settings 8 1 Basic This page shows the current status of the device s Wireless settings Basic This page allows you to define SSID and Channel for the wireless connection These parameters are used for the wireless stations to connect to the Access Point Enable Disable AP y 2 4 GHz B G N EnGenius000004 Enable Disable 11 Apply Cancel nius 57 Enable or Disable the device s wireless signal Mode Select between Access Point or Wireless Distribution System WDS modes Select the types of wireless clients that the device will accept eg 2 4 GHz B G N Only 802 11b and 11g clients will be allowed Enable SSID Select the number of SSID s Wireless Network names you would like You can create up to 4 separate wireless networks E Enter the name of your wireless network You can use up to 32 characters Auto Channel When enabled the device will scan the wireless signals around your area and select the channel with the least interference Manually select which channel the wireless signal will use Check Channel Time When Auto Channel is Enabled you can specify the period of the device will scan the wireless signals around your area 98 Wireless Distribution System WDS Enable Disable Using WDS to connect Acc
56. ter IP Filter URL Filter The Firewall can detect and block DOS attacks DOS Dental of Service attacks can flood your Internet Connection with invalid packets and connection requests using so much bandwidth and so many resourcess that Internet access becomes unavailable Block DoS Enable Disable Apply Cancel nius 79 9 5 MAC Filter You can choose whether to Deny or only Allow those computers listed in the MAC Filtering table to access the Internet MAC Filter IP Filter URL Filter MAC Filters are used to deny or allow LAN computers from accessing the Internet W Enable MAC filtering Deny all clients with MAC address listed below to access the network 5 Allow all clients with MAC address listed below to access the network PCe 083244E24321 Add Reset MAC Filtering table LAN MAC Address _ Select 1 PCI 00 0C 84 56 78 91 _ Delete Selected Delete All Reset Apply Cancel MAC Filter Enable MAC filtering Tick this box to Enable the MAC filtering feature Deny all clients with MAC addresses When selected the computers listed in the MAC Filtering table will be Denied listed below to access the network access to the Internet Allow all clients with MAC addresses When selected only the computers listed in the MAC Filtering table will be listed below to access the network Allowed access to the Internet nius 80 9 6 IP Filt
57. tering either a full URL address or just a keyword of the Web site 4 Enable URL Blocking y Current URL Blocking Table 1 gamer Fl Delete Selected Delete Al Reset 83 10 Advanced The Advanced section allows you to configure the Advanced settings of the router 10 1 Network Address Translation NAT This page allows you to Enable Disable the Network Address Translation NAT and Network Turbine features The NAT is required to share one Internet account with multiple LAN users Enabling Network Turbine will soeed up your NAT throughput It also is required for certain Firewall features to work properly porte roim atc upar 008 Routing NAT Network Address Translation involves re writing the source and or destination addresses of IP packets as they pass though a Router or firewall NAT enable multiple hosts on a private network to access the Internet using a single public IP address NAT Enable Disable Network Turbine boosts network performance Network Turbine Enable Disable Apply 84 10 2 Port Mapping Port Mapping allows you to redirect a particular range of ports to a computer on your LAN network This helps you host servers behind the NAT and Firewall In the example below there is a Mail Server that requires ports 25 When there is a connection from the Internet on those ports it will be redirected to the Mail Server at IP address 192 168 0
58. tion 1 Place the unit in an appropriate location after conducting a site survey 2 Plug one end of the Ethernet cable into the LAN port of the device and another end into your PC Notebook 3 Plug one end of another Ethernet cable to WAN port of the device and the other end into you cable DSL modem Internet 4 Insert the DC inlet of the power adapter into the port labeled DC IN and the other end into the power socket on the wall This diagram depicts the hardware configuration Cable DSL Modem Ethernet Ethernet WLAN Router AC DC Cable Power Outlet 15 3 Configuring your Router This section will show you how to configure the device using the web based configuration interface Please use your wireless network adapter to connect the WIRELESS ROUTER Default Settings IP Address 192 168 0 1 EVR100 OLD east il TU i MA in Note xxxxxx represented in the wireless SSID above is the last 6 characters of your device MAC Address This can be found on the device body label and is unique for each device 16 4 Setup Wizard 1 Open a web browser Internet Explorer Firefox Safari and enter the IP Address http 192 168 0 1 Note If you have changed the default LAN IP Address of the WIRELESS ROUTER ensure you enter the correct IP Address ie Favorites Goto 19216801 2 The default username and password are admin Once you have entered the correct usern
59. twork Delete Selected Delete the selected entries Delete All Delete all entries Reset Un tick all selected entries 69 8 5 Wi Fi Protected Setup WPS WPS feature is following the Wi Fi Alliance WPS standard and it eases the set up of security enabled Wi Fi networks in the home and small office environment It reduces the user steps required to configure a network and supports two methods that are familiar to most consumers to configure a network and enable security Advanced Security Filter WES Client List Policy EC Enable WPS Button Y Enable Wi Fi Protected Setup Information Configured Release Configuration 00000048 EWR100 WPA2 pre shared key Start to Process Start to Process 70 Wi Fi Protected Setup WPS Tick to Enable the WPS feature WPS Button Tick to Enable the WPS push button Wi Fi Protected Setup Information WPS Current Status Shows whether the WPS function is Configured or Un configured Configured means that WPS has been used to authorize connection between the device and wireless clients SSID The SSID wireless network name used when connecting using WPS Authentication Mode Shows the encryption method used by the WPS process Passphrase Key This is the passphrase key that is randomly generated during the WPS process It is required if wireless clients that do not support WPS attempts to connect to the wireless network WPS Via Push Button C
60. y level in the security bar Lowest i EE IO IU hes Type of wireless security WPA2 strength Highest WPA security offers the highest strength wireless security but Lowest compatibility with older wireless network equipment Enter a security key that is between 8 63 characters long Make sure the key is not a word or number that is easy to guess SE seam 1234567300 SSID Enter the name of your wireless network Key Enter the security key for your wireless network nius 29 e Check the settings are correct and then click Reboot to apply the settings AP Router Dynamic IP Address Encentus000020 WPA2 pre shared key 123456890 WLAN Router setup successfully Please click reboot button to reboot system NIN lus 30 5 VPN Wizard Using VPN Wizard you can establish VPN connection easily Please refer to 11 3 31 6 System 6 1 Status This page will display status of the device Model Wireless Gigabit VPN Router Mode AP Router Uptime 54 sec Current Date Time 2009 01 01 00 01 16 Hardware version 1 0 0 Serial Number 987654320 Application version 1 0 6 Model Description of this device Mode The device is currently in which mode Uptime The duration about the device has been operating without powering down or reboot Current Date Time The device s system time If this is incorrect please set the time in the Tools Time page Hardware version and H
Download Pdf Manuals
Related Search