LevelOne WBR-6001 Network Router User Manual
Contents
1. PacketFilters URL Blocki Allow all to pass exceptthose match the following rules IR alee gt Deny all to pass except those match the following rules MAC Control Miscellaneous 149 161 123 100 149 161 123 149 they are allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 149 161 123 10 149 161 123 20 they can do everything block nothing Others are all blocked Example 2 34 A Vdlced Wir ADVANCED SETTING Enable amp Allow all to pass except those match the following rules Deny all to pass except those match the following rules 149 161 123 100 and 149 161 123 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the save button Domain Filter J ADMINISTRATOR S MAINMENU i Status VY wizard Wm Advanced Status PacketFilters t Domain Fil nabl E ain Ha Domain Filter El Enable URL Blockin Log DNS Query El Enable MAC Control Privilege IP Addresses Range From 100 To 199 Elprep tos E I mena on T F Drop Fl Log F Drop Fl Log El Fl Drop Log Domain Filter Let you prevent users under this device from accessi2. URL Blocking will block LAN computers to connect to pre defined websites MAC Address Control MAC Address Control allows you to assign different access right for different users andto assign a specific IP address to a certain MAC address Miscellaneous Remote Administrator Host In general only Intranet user can browse the built in web pages to perform administration task This feature enables you to perform administration task from remote host Administrator Time out The amount of time of inactivity before the device will automatically close the Administrator session Setthis to zero to disable it Discard PING from WAN side When this feature is enabled hosts on the 30 Packet Filter Packet Filters t Outbound Filte Enab NE Outbound Filter 7 Enable URL Blocking Allow all to pass exceptthose match the following rules AA Deny all to pass except those match the following rules MAC Control NEN NEM Schedule rule 00 Always Copyto D E nestmaton iP Ports Schedule Rulet EIER Aa JL Je Rh s LJ EE am KH ajl LJ EOL Ja le s LL Eo E a b AAA K m EJ aJ Lo EOS e le LL EOO E Ja le Packet Filter enables you to control what packets are allowed to pass the router Outbound filter Miscellaneous applies on all out
3. 2 Fill in the key Ex 12345678 20 WPA2 AES Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server WPA PSK WPA2 PSK The router will detect automatically which Security type the client uses to encrypt 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of Pre share key is from 8 to 63 2 Fill in the key Ex 12345678 Primary Setup DHCP Server Wireless Change Password 11 b g n Mixed 11n only Security WPA PSK WPA2 PSK Encryption Pese 0 Wireless Client List WPA WPA2 Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server The router will detect automatically which Security type Wpa psk version 1 or 2 the client uses to encrypt IP addre
4. Enable SNMP You must check either local or remote or both to enable SNMP function If Local is checked this device will response request from LAN If Remote is checked this device will response request from WAN Get Community oetting the community of Get Request your device will response Set Community Setting the community of Set Request your device will accept WAN Access IP Address IF the user wants to limit to specific the IP address to access please input in the item The default 0 0 0 0 and means every IP of Internet can get some information of device with SNMP protocol Routing j ADMINISTRATOR S MAIN MENU A Status V wizard Cal Advanced gw BASIC SETTING cS a FORWARDING RULES 3 SECURITY SETTING fy ADVANCED SETTING za TOOLBOX al n Ve i de Routing Table gt E Time Di RIP AN e System Log amp Disable RIPv1 RIPv2 ee Gel Dynaimic DHS Disable Enable m Schedule Rule QoS Rule Routing Tables allow you to determine which physical interface address to use for outgoing IP data grams If you have more than one routers and subnets you will need to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other Routing Table settings are settings used to setup the functions of static Dynamic Routing Routing Information Protocol RIP will exchange inform
5. and ok Network Properties Metwaork Network name SSID I229Kk o Connect to any available nebwors Scan Description optional a um Network type Access point infrastructure mode Ehannel Associaton made Encruption method Pre shared key WPA Rassphrase LHnmaszl Carcel 8 Back to Connection and Select 123kk If successfully the wireless client has to authenticate with Radius Server like below Piwork Properties Odyssey Client Network Network name SSID f 23kk Scan You are about to authenticate to an untrusted server Connect to any available network To terminate communication press No To temporarily trust this server press Yes To permanently trust this server check add this trusted server to the database and press Yes Description optional Odyssey Client Manager Network type Settings Commands Web Help Charmel ee Connection Connection N i Adapter TNET1130 WLAN Adapter DI Certificate chain Association mode E WirelessCA Profil gt wi 2 e Encryption method ng A ais win2000adw intra com tw ee Midas v Connect to network m lt 123kk gt DI icati Scan singel di b suos can Lists Seann Connection information Status v Authenticate using View authenticating jew Trusted Servers v Keys will be genera la Adapters Gel ge Permanent tr
6. Product Layout Rear View 1 Power Jack Heceptor for the supplied power adapter 2 LAN Ports 1 4 Connect Ethernet devices such as computers switches or hubs 3 WAN Port The WAN port is the connection for the Ethernet cable to the Cable or DSL Modem 4 Antenna Detachable antenna allows users to change antenna if necessary Hardware installation steps Decide where to place your Wireless Broadband Router You can place your Wireless Broadband Router on a desk or other flat surface For optimal performance place your Wireless Broadband Router in the center of your office or your home in a location that is away from any potential source of interference such as a metal wall or microwave oven his location must be close to power and network connection Setup LAN connection e Wired LAN connection connects an Ethernet cable from your computer s Ethernet port to one of the LAN ports of this product e Wireless LAN connection locate this product at a proper position to gain the best transmit performance E DSL Cable y Power 3 Setup WAN connection Prepare an Ethernet cable for connecting this product to your cable xDSL modem or Ethernet backbone 4 Power on Connecting the power cord to power inlet and turning the power switch on this product will automatically enter the self test phase When it is in the self test phase the Status indicator will be lighted ON for about 10 seconds and then it will be
7. Service package 1 Patch http Awww microsoft com downloads details asox displaylang en amp FamilyID 5039ef4a 6160 4c44 94f0 c25c9deOace9 64 2 Then reboot 3 Setting on the router and client Router Network ID SSID EST Channel a wj Security WPA PSK y Key Mode ASCI q Y Preshare Key 12345678 Client Go to Network Connection and select wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Wireless Network Connection Properties KE 123kk properties General Wireless Networks Advanced Use Windows to configure my wireless network settings Network name 55ID Available networks Wireless network key To connect to an available network click Configure i ask amit elwark Authentication A JOYCE Ml Data encruption Prefered networks Network kep Automatically connect to available networks in the order listed below Confirm network key 1 123k Beem Move down Kev index advanced The Key i provided For me automatically Remove Properties Learn about setting up wireless network This iza computer to computer ad hoc network wireless configuration Advanced access points are nat used WPA For this function we need the server to authenticate This function is like 802 1x PC1 USER A PC USER B Authentication Server Windows 2000 Rodius server 192 168 122 1 The above is
8. 2 Enter the RADIUS server IP 3 Enter the shared key The key shared by the RADIUS server and DUT 4 We will change 802 1X encryption key length to fit the variable test condition Setup Network adapter on PC 1 Choose the IEEE802 1X as the authentication method Fig 2 2 Choose MD5 Challenge or Smart Card or other Certificate as the EAP type 3 If choosing use smart card or the certificate as the EAP type we select to use a certificate on this computer 4 We will change EAP type to fit the variable test condition Figure 2 is a setting picture of Windows XP without service pack 1 If users Es upgrade to service pack 1 then they can t see MD5 Challenge from EAP type list any more but they will get a new Protected EAP PEAP option 58 Wireless Network Connection Properties KIEM wh EN General Wireless Networks amp uthentication Advarced Select this optan to provide authenticated network access for wired and wireless Ethernet networks Enable network access control using IEEE 802 1 mes EAP tope smart Lard o other Liertificate Sart Card ar other Certificate 4 Authenticas as computer when computer informalion is available amp utlierilicaue as quest when user ur compres inifumialiuri is unavailable Figure 2 Enable IEEE 802 1X access control Smart card or certificate properties Windows 2000 RADIUS server Authentication testing DUT authenticate PC
9. Always on The device will link with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Status page 14 Virtual Computers Only for Static and dynamic IP address Wan type 1 ADMINISTRATOR s MAIN MENU Al Status Wizard MM Advanced Primary Setup DHCP Server Wireless Change Password 192 158 0 Virtual Computer enables you to use the original NAT feature and allows you to setup the one to one mapping of multiple global IP address and local IP address e Global IP Enter the global IP address assigned by your ISP Local IP Enter the local IP address of your LAN PC corresponding to the global IP address e Enable Check this item to enable the Virtual Computer feature DHCP Server 2 ADMINISTRATOR s MAIN MENU l Status VY wizard Call Advanced BASIC SETTING lt 2 FORWARDING RULES 53 SECURITY SETTING ff ADVANCED SETTING 14 TOOLBOX Primary Setup DHCP Server HELP DHCP Server k i j ii F DN ig Wireless DHCP Server Disable Enable gt Change Passwora NNUS t IP Pool Ending Address 199 Pomme 0 0 Press More gt gt 1 DHCP Server Choose Disable or Enable 2 Lease time This is the length of time that the client may use the IP address it has been assigned by DHCP server 3 IP pool starting Address IP pool starting Address
10. Consult the dealer or an experienced radio TV technician for help CE Declaration of conformity This equipment complies with the requirements relating to electromagnetic compatibility EN 55022 class B for ITE the essential protection requirement of Council Directive 89 336 EEC on the approximation of the laws of the Member States relating to electromagnetic compatibility CE Marking Warning Hereby Digital Data Communications declares that this Model no WBR 6001 is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC The CE Declaration of Conformity can be downloaded at http www levelone eu support php FECE s E ii Table of Content TABLE OF CONTENT e o a LIE V Te INTRODUCTION ertt o o alo 1 USER MANUAL OVERVIE EE 1 2 UNPACKING AND SETUP Qu icc eee ee cece eee e ee eeeeeeeeeeeeneneneneneneecececacacueecueacacaeacaeasaeueaeueneneueneneas 3 mi Umm ER e 3 PACKAGE INMENSA ARM E A LE CEDE CE edi 3 3 HARDWARE INSTALLATION ecerener renun NNN NENNEN EN EN EN EN EN EN EN EN EN EN EN EN EN EN EN EN EN ENK 5 PRODUCT LAYOUT FRONT VIEW A AAA Aa 5 PRODUCT A YO T PEARL VIEWS rra Mise Dale Anna dida honed dae dade Pide dod E d eu Nea Ee AT UR A UO 6 HARDWARE INSTALLATION STEPS ccccccccccccccccccccccccccccceaeaeaeaeaeaeseaeaeaeaeaeseaeaeaeaeaeaeaeaeseaeaeaeaeaeaeaeaens 6 NETWORK CALC EE 8 4 CONFIGURING WIRELESS ROUTER sek KENNEN RANNER ENNEN ENKEN REENEN EN EN
11. S MAIN MENU Ml status VY Wizard all Advanced ra BASIC SETTING RA FORWARDING RULES amp SECURITY SETTING ff ADVANCED SETTING sc TOOLBOX k Sach e Li is Outbound Packet Filter HELP Packet Filters Outbound Filter Enable Domain Filters URL L Blocking Allow all to pass exceptthose match the following rules Deny all to pass except those match the following rules m MAC Control _ Schedule rule 00 Always D Miscellaneous 22 1 2 3 100 1 2 3 149 they are allow to send mail port 25 and browse the Internet port 80 1 2 3 10 1 2 3 20 they can do everything block nothing Others are all blocked Example 2 o eevee UE Outbound Packet Filter HELP Packet Filters k Tr Tm ilt v ira Ey TREES Qutbound Filter Enable Allow all to pass exceptthose match the following rules URL Blocking H HAL Deny all to pass except those match the following rules MAC Control Miscellaneous 1 2 3 100 1 2 3 119 they can do everything except read net news port 119 and transfer files via FIP port 21 Others are all allowed After Inbound Packet Filter setting is configured click the save button Outbound Filter To enable Outbound Packet Filter click the check box next to Enable in the Outbound Packet Filter field Example 1 HELP
12. deny to allow or deny the clients whose MAC addresses are not in the Control table please see below to connect to this device Association control Check Association control to enable the controlling of which wireless client can associate to the wireless LAN If a client is denied to associate to the wireless LAN it means the client can t send or receive any data via this device Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table to associate to the wireless LAN Control table 40 2 MAC Address IP Address KAES Control table is the table at the bottom of the MAC Address Control page Each row of this table 192 168 0 El Fl indicates the MAC address and the expected IP address mapping of a client There are four columns in this table MAC 1 1 na DH MAC address indicates a specific client IP Address Expected IP address of the corresponding client Keep it empty if you don t care its IP address When Connection control is checked check C will allow the corresponding client to connect to this device associate to the wireless LAN TN When Association control is checked check A will allow the corresponding client to In this page we provide the following Combobox and button to help you to input the MAC address CHCE clients E select ane Copy to D You can select a specific client in the DHCP clients Combobox and then
13. espn will be blocked but the action will be record in log file MAC Address Control 2 ADMINISTRATOR s MAIN MENU Al Status XY Wizard TH Advanced re BASIC SETTING lt FORWARDING RULES 3 SECURITY SETTING ff ADVANCED SETTING ks TOOLBOX E pe pe x e gt i 1 s Crab MAC Address Control HELP Packet Filters k MAL 255 Control nable e Domain Filters MAC Address Control 7 Enable URL Blocking A l Wireless and wired clients with C checked can connect to this device and EOD Cat allow unspecified MAC addresses to connect LE MAC Control Miscellaneous Wireless clients with A checked can associate to the wireless LAN and F Association control deny e unspecified MAC addresses to associate Hote Association control has no effect on wired clients DHCP dientes Select one Copyto ID e mI mee exem A Gp wm faja MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address MAC Address Control Check Enable to enable the MAC Address Control All of the settings in this page will take effect only when Enable is checked Connection control Check Connection control to enable the controlling of which wired and wireless clients can connect to this device If a client is denied to connect to this device it means the client can t access to the Internet either Choose allow or
14. flashed 3 times to indicate that the self test operation has finished Finally the Status indicator will be continuously flashed once per second to indicate that this product is in normal operation Network Check 1 Please make sure your PC can get IP address automatically so the WBR 6001 can communicate with your PC during configuration e Select Control Panel gt Network Connections e Right click the Local Area Connection and choose Properties e Select the TCP IP protocol for your network card e Click on the Properties button You should then see the following screen and make sure you have selected Obtain IP address automatically ERI Local Area Connection 2 Properties KI 2 3 General Advanced d Connect using BB Realtek RTL8168 8111 PCI E Gigabi This connection uses the following items E dal aos Packet Scheduler Y 3 AEGIS Protocol IEEE 802 1x v3 5 3 0 d Internet Protocol TCP IP L Install Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communicatio across diverse interconnected networks Show icon in notification area when connected Notify me when this connection has limited or no connectivity Gu this capability Otherwise you need to ask your network administrator for Internet Protocol TCP IP Properties General Altemate Configuration You can g
15. from WAN side Miscellaneous t SPI mode t Dos Attack Detection t IPSec Passthrough Remote Administrator Host Port In general only Intranet user can browse the built in web pages to perform administration task This feature enables you to perform administration task from remote host If this feature is enabled only the specified IP address can perform remote administration If the specified IP address is 0 0 0 0 any host can connect to this product to perform administration task You can use subnet mask bits nn notation to specified a group of trusted IP addresses For example 10 1 2 0 24 When Remote Administration is enabled the web server port will be shifted to 88 You can change web server port to other port too Administrator Time out The time elapses of no activity to logout automatically Set it to zero to disable this feature Discard PING from WAN side When this feature is enabled any host on the WAN cannot ping this product SPI Mode When this feature is enabled the router will record the packet information pass through the router like IP address port address ACK SEQ number and so on And the router will check every incoming packet to detect if this packet is valid DoS Attack Detection When this feature is enabled the router will detect and log the DoS attack comes from the Internet Currently the router can detect the following DoS attack SYN Attack WinNuke Port Scan Ping of D
16. o LES We rnm Dana atra antala Pre sheretl key FS A respira 12345678 gt m EE Ulranesk OK Cancel 4 Back to Connection Then Select Connect to network You will see e e i 5 Odyssey Client Manager e eem Commands Meb Help Media State Hedia disco C Connection anneclion C Documents and Settings fae gt ping 112 168 0 247 t adapter THE TTL 3D Ww AN Adapter t P ofiles Adapter typa wrees Pinging 192 158 8 247 with 32 bytes of data d Vica Ee 4 Networks iv Connect ta nemor pa EET Contra l E ne scan B ito Scan L sts GisDocuments and Settings fae gt ping 172 168 0 248 t e Ee Coarection in amatian SE z 5 ES T usted Servers Stats gjen Pinging 172 158 8 248 with 32 bytes of data odia 00413 Reply fron 192 168 8 248 bytes 32 time ims TIL 54 B ase Network ISSID ES Reply from 192 168 bytes 32 time ims TIL 54 Access paint D3 50 1 8 D00 OF E Reply from 192 168 bytes J2 time ims A penne ae 136 2 6 Reply fron 192 168 bytes 12 time 1ms TIL 64 Reply from 192 168 6 hytez 32 time ims TIL 54 Reply fron 192 168 H bytes 32 time ims TIL 54 Piecornect E estais il v i Reply from 192 168 bytes J2 time ims TIL 64 Reply from 192 168 bytes 12 time 4ms TIL 54 Reply from 192 168 bytes 32 time ims TIL 54 Reply from 192 168 bytes 32 time ims TIL 54 Reply from 192 168 hytezs 122 time ims TIL 64 Method2 1 First patch windows XP and have to install
17. settings Select your application and click Copy to to add the predefined setting to your list Note At any given time only one PC can use each Special Application tunnel 28 Miscellaneous Items a ADMINISTRATOR S MAIN MENU rs BASIC SETTING 2 Se T pec Miscellaneous IP Address of DMZ Hast t Non standard FTP port k UPnP setting k Xbox Support IP Address of DMZ Host DMZ Demilitarized Zone Host is a host without the protection of firewall It allows a computer to be exposed to unrestricted 2 way communication for Internet games Video conferencing Internet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP server whose port number is not 21 This setting will be lost after rebooting Xbox Support The Xbox is a video game console produced by Microsoft Corporation Please enable this function when you play games UpnP Setting The device also supports this function If the OS supports this function enable it Security Settings CED PAL Ta ey Allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address ofthe source and destination Domain Filters Let you prevent users under this device from acces sing specific URLs URL Blocking
18. 1 using certificate PC2 follows the same test procedures 1 Download and install the certificate on PC1 Fig 4 2 PC1 chooses the SSID of DUT as the Access Point 3 Set authentication type of wireless client and RADIUS server both to EAP_TLS 4 Disable the wireless connection and enable again 5 The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PC1 Fig 5 6 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure Fig 6 7 Terminate the test steps when PC1 get dynamic IP and PING remote host successfully Certificates Intended purpose lt All gt Ke Personal other People Intermediate Certification Authorities Trusted Root Cartificatior STEP ERE SOE A PARA men Wirclo33CA 2 6 2001 lt Mone gt import Export Remove Advanced Certificate intended purposes Figure 4 Certificate information on PC1 z Network Connections Fie Edit View Favorites Tools Gdvarced Help Quo o d jj search Folders RS LAN or High Speed Internet hetwork Tasks x Lecal Area Connection 5 Create a new Disabled connection A D Link CFE S30TxX PCI ast Er 9 Set uo ahcme or srrall office network Figure 5 Authenticating 60 Network Connections Fle Edit View Favorites Tools Advanced Help y 7 Ki E Search Folders ES Address e Necwork Co
19. 2 WAN Type WAN connection type of your ISP You can click Change button to choose a correct one from the following four options A Static IP Address ISP assigns you a static IP address B Dynamic IP Address Obtain an IP address from ISP automatically C Dynamic IP Address with Road Runner Session Management e g Telstra BigPond D PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services E PPTP Some ISPs require the use of PPTP to connect to their services F L2TP Some ISPs require the use of L2TP to connect to their services Static IP Address WAN IP Address Subnet Mask Gateway Primary and Secondary DNS enter the proper setting provided by your ISP 12 Dynamic IP Address 1 Host Name optional Required by some ISPs for example WHome 2 Renew IP Forever this feature enables this product to renew your IP address automatically when the lease time is expiring even when the system is idle Dynamic IP Address with Road Runner Session Management e g Telstra BigPond 1 LAN IP Address is the IP address of this product It must be the default gateway of your computers 2 WAN Type is Dynamic IP Address If the WAN type is not correct change it 3 Host Name optional Required by some ISPs e g WHome 4 Renew IP Forever this feature enable this product renew IP address automatically when the lease time is being expired even the system is in idle state PPP over Ethernet 1 P
20. D v lt D III oMNENN LevelOne User Manual WBR 6001 N Max Wireless Broadband Router Ver 1 0 0 0801 Safety FCC WARNING This equipment may generate or use radio frequency energy Changes or modifications to this equipment may cause harmful interference unless the modifications are expressly approved in the instruction manual The user could lose the authority to operate this equipment if an unauthorized change or modification is made This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4
21. ENKEN 10 LED INDICATOR FOR N MAx WIRELESS ROUTER c 0coccoccnccnconcnncnconconccncnnonnoncnnnnncnnonnoncnncnnonnonnnnnnnens 10 LOGIN TO CONFIGURE FROM WIGApD non nn seres aereas ages 7 A 10 Primary Setup WAN Type Virtual Computers coooccccccconcnnccocnonoonononnononnonannonannonannonannonanos 10 SIG ME ee LEE 12 Dynamic IP Address with Road Runner Session Management eg Telstra BigPond 13 PPP over Ethernet EE 13 PET Pa a a a te aude eamediateaaaces 13 A 14 Virtual Computers Only for Static and dynamic IP address Wan type 15 O A A NI NESE Sea nen a ENTREE REN Tet Rear 16 Wireless setting 802 1X setting and WI 17 OIR e EE 25 FORWARDING TEE 26 Virt al SCF VCR RUOTE 27 ccm T m 28 USC NANA a ai EE 29 EIERE EE 30 Hackettiter narnia 31 DIES A O IN eae RIES ty ee RIE es Ely PEE RIED EORUMDEM 36 A A no T 38 MACACO SS DIN ac 40 WMISCONANCEOUS ee ii 43 ADVANCED NS ee 44 Y 5 210g an N10 PCR PERO OP ERROR NEEDS 45 A A EE 46 DIAN EC E ren Pe ee ee ee eee renee oe re 47 Rey BVA mar CIN po bp E 49 a 01H Toro mtr 50 SENOS AUTO rt Um 52 OS MU d 54 TOOLBAR OD ii EA Boro EE 55 UR IESU Iz A A ES MEN 59 riis GEUMO GE 55 A a meee te era eee 56 Eeer 56 APPENDIX A 902 1X SETTING isis 57 APPENDIX B WPA PSK AND WPA 11 eee eren eene enne nnn nn anna annona anas eaae aan ants 62 APPENDI
22. Internet service provider Before you enable Dynamic DNS you need to register an account on one of these Dynamic DNS servers that we list in provider field To enable Dynamic DNS click the check box next to Enable in the DDNS field Next you can enter the appropriate information about your Dynamic DNS Server You have to define Provider Host Name Username E mail Password Key You will get this information when you register an account on a Dynamic DNS server Example rs BASIC SETTING A FORWARDING RULES R SECURITY SETTING Miri ADVANCED SETTING i TOOLBOX SE Sr e d nae ES E qT UG HELP System Time a DDN Disable 8 Enabl System Log DDNS D Disable Enable Dynamic DNS Provider DynDNS org Dynamic Provider website saps aaa Host Name levelone dyndns org Routing Username E mail service ilevelT com QoS Rule After Dynamic DNS setting is configured click the save button 48 SNMP Setting 4 ADMINISTRATOR s MAIN MENU e VY Wizard x Status System Time System Log Dynamic DNS SNMP Routing Schedule Rule QoS Rule In brief SNMP the Simple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events
23. PPTP Some ISPs require the use of PPTP to connect to their services C ote Some ISPs require the use of LZTP to connect to their services 5 When I use Static IP Address to roam Internet can access or ping global IP 202 93 91 218 But can not access the site that inputs domain name for example http espn com A Please check the DNS configuration of Static IP Address Please refer to the information of ISP and assign one or two in DNS item How do connect router by using wireless 1 How to start to use wireless A First make sure that you already installed wireless client device in your computer Then check the configuration of wireless router The default is as below J Wireless Setting HELP Item setting Wireless O Enable Disable b Network ID SSID default Wireless Mode O11 bigin Mixed O 11n only t SSID Broadcast Enable ODisable t Channel MA se t Security Mone m Then click and will see the AP list that wireless client can be accessed LevelOne WPC 0301 Utility X i Link Info Available Network i Configuration SSID Mac Address Signs Refresh WwAP O003 0D 11 6B 60 5A C5 io AAA Advanced sbsiisbs 02 13 CE 00 00 E4 100 Connect DD 11 6B 22 17 6E 780 wireless DD 11 6B 15 8F 27 78 Spencertest D0 11 5B 17 38 F apro wbr3405 00 11 66 61 43 7D 5294 Danny wbr3405 D0 11 68 B0 65 18 3094 ze lil Profile Profile Marne WAP DCS A If the cl
24. PPoE Account and Password the account and password your ISP assigned to you For security this field appears blank If you don t want to change the password leave it empty 2 PPPoE Service Name optional Input the service name if your ISP requires it Otherwise leave it blank 3 Maximum Idle Time the amount of time of inactivity before disconnecting your PPPoE session oet it to zero or enable Auto reconnect to disable this feature 4 Maximum Transmission Unit MTU Most ISP offers MTU value to users The most common MTU value is 1492 5 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Staus page PPTP First please check your ISP assigned and Select Static IP Address or Dynamic IP Address 1 My IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you 2 Server IP Address the IP address of the PPTP server 3 PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty 3 Connection ID optional Input the connection ID if your ISP requires it 4 Maximum idle Time the time of no activity to disconnect your PPTP session Set it
25. Whenever there is a request the DHCP server will automatically allocate an unused IP address from the IP address pool to the requesting computer You must specify the starting and ending address of the IP address pool 4 Domain Name Optional this information will be passed to the client 5 Primary DNS Secondary DNS This feature allows you to assign DNS Servers 6 Primary WINS Secondary WINS This feature allows you to assign WINS Servers 7 Gateway The Gateway Address would be the IP address of an alternate Gateway This function enables you to assign another gateway to your PC when DHCP server offers an IP to your PC 16 Wireless setting 802 1X setting and WDS level O Th amp ADMINISTRATOR s MAIN MENU 8 Status NY Wizard XII Advanced Logout BC Basic SETTING 29 FORWARDING RULES e SECURITY SETTING fy ADVANCED SETTING 4 1 TOOLBOX pum ue IER EECH j Pisnary Setup Wireless Setting HELP DHCP Server t Wireless Enable Disable Wireless E Wireless Mode 11 b gin Mixed 11n only t SSID Broadcast Enable Disable wes Wireless settings allow you to set the wireless configuration items Wireless The user can enable or disable wireless function Network ID SSID Network ID is used for identifying the Wireless LAN WLAN Client stations can roam freely over this product and other Access Poi
26. X C FAQ AND TROUBLESHOOTING ec eeeeeee nennen nennen nnn nnn nnn nnns 73 TECHNICAL SPECIFICATIONS eee eeeeee eene nen nnne nnn enhn nnne anna n n oaa nean noa a ennnen 78 vi 1 Introduction Congratulations on your purchase of LevelOne N_Max Wireless Broadband Router This product is specifically designed for Small Office and Home Office needs It provides a complete SOHO solution for Internet surfing and is easy to configure and operate even for non technical users Instructions for installing and configuring this product can be found in this manual Before you install and use this product please read the manual carefully for fully exploiting the functions of this product User Manual Overview Introduction Unpacking and Setup Hardware Installation Configuration Technical Specifications Describes N Max Wireless Broadband Router Helps user to get started with the basic installation of the N Max Wireless Broadband Router Describes the LED indicators of the N Max Wireless Broadband Router Describes the functionalities and its settings Lists the technical general physical and environmental specifications of the N Max Wireless Broadband Router 2 Unpacking and Setup This chapter provides the package contents and setup information for the N_Max Wireless Broadband Router Features Extended and high speed wireless connectivity with wireless N technolo
27. address X X X 1 X X X 20 can access network without restriction URL Blocking d ADMINISTRATOR S MAIN MENU li Status Status Packet Filters Sapa URL Blocking Enable Bama URL Blocking 1m MAC Control Miscellaneous URL Blocking will block LAN computers to connect to pre define Websites The major difference between Domain filter and URL Blocking is Domain filter require user to input suffix like com or org etc while URL Blocking require user to input a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Check if you want to enable URL Blocking URL If any part of the Website s URL matches the pre defined word the connection will be blocked For example you can use pre defined word sex to block all websites if their URLs contain pre defined word sex Enable Check to enable each rule 38 m URL Blocking HELP A gt E URL Blockin Enable MAC Control s LR Miscellaneous E E h CH In this example 1 URL include msn will be blocked and the action will be record in log file 2 URL include sina will be blocked but the action will be record in log file 3 URL include enne will not be blocked but the action will be record in log file 4 URL include
28. ation about destinations for computing routes throughout the network Please select RIPv2 only if you have different subnet in your network Otherwise please select RIPv1 if you need this protocol Static Routing For static routing you can specify up to 8 routing rules You can enter the destination IP address subnet mask gateway and hop for each routing rule and then enable or disable the rule by checking or un checking the Enable checkbox Example 50 192 188 123 XXX Submask A Client Router Lager liene mE WR 192 168 129 106 OI 0 18 1 Client 12 19 17 2 Configuration on NAT Router Destination SubnetMask Gateway Hop Enabled 192 168 1 0 255 255 255 0 192 168 123 216 1 192 168 0 0 255 255 255 0 192 168 123 103 1 So if for example the client3 wanted to send an IP data gram to 192 168 0 2 it would use the above table to determine that it had to go via 192 168 123 103 a gateway And if it sends Packets to 192 168 1 11 will go via 192 168 123 216 Each rule can be enabled or disabled individually After routing table setting is configured click the save button Schedule Rule System Time k SChedu Ke System Log Schedule 7 Enable Eee Add New Rule Routing Schedule Rule QoS Rule You can set the schedule time to decide which service will be turned on or off Select the enable item Press Add New Rule You can write a rule name and set w
29. bound packets However Inbound filter applies on packets that destined to Virtual Servers or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can specify 8 rules for each direction inbound or outbound For each rule you can define the following e Source IP address e Source port address Destination IP address Destination port address Protocol TCP or UDP or both Use Rule For source or destination IP address you can define a single IP address 4 3 2 1 or a range of IP addresses 4 3 2 1 4 3 2 254 An empty implies all IP addresses For source or destination port you can define a single port 80 or a range of ports 1000 1999 Add prefix T or U to specify TCP or UDP protocol For example T80 U53 U2000 2999 No prefix indicates both TCP and UDP are defined An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule Each rule can be enabled or disabled individually Inbound Filter To enable Inbound Packet Filter click the check box next to Enable in the Inbound Packet Filter field Suppose you have SMTP Server 25 POP Server 110 Web Server 80 FTP Server 21 and News Server 119 defined in Virtual Server or DMZ Host Example 1 J ADMINISTRATOR
30. ced Use Windcwe to configure my wireless network settings Available newworks To connect to an avalable network click Configure i ase amit Preferred neworks Automatically connect to available networks in the order listed below i 123kk Move up Move down Learn about setting up wireless network discum configuration EE 123kk properties Association Authentication Network name 55 01 Wireless network key This network Network key L anfirm network key Kev indes advanced The key e provided for me automatically Theis a computer to computer ad hoc network wireless access points are not used Then if the wireless client wants to associate it has to request to authenticate T2 Appendix C FAQ and Troubleshooting What can I do when I have some trouble at the first time 1 Why can I not configure the router even if the cable is plugged in the ports of Router and the led is also light A First make sure that which port is plugged If the cable is in the Wan port please change to plug in LAN port 1 or LAN port 4 3 WAN Then please check if the Pc gets ip address from Router Use command mode as below BITE ig findows IP Configuration Ethernet adapter Local Area Connection Connection specific DNS Suffix IP Address 192 168 123 115 Subnet Mask 255 255 255 0 Default Gateway 192 168 123 254 lf yes please execute Bro
31. click on the Copy to button to copy the MAC address of the client you select to the ID selected in the ID Combobox Previous page and Next Page To make this setup page simple and clear we have divided the Control table into several pages You can use these buttons to navigate to different pages Example 3 ADMINISTRATOR s MAIN MENU Status VY Wizard TAI Advanced Status Packet Filters k MA res miro di Enable XE sin Filters MAC Address Control Enable URL Blocking int l Wireless and wired clients with C checked can connect to this device and A CRM allow e unspecified MAC addresses to connect m MAC Control Miscellaneous Wireless clients with A checked can associate to the wireless LAN and Association control deny unspecified MAC addresses to associate Hote Association control has no effect on wired clients DHCP clients Select one Copyto D o ER 00 12 34 56 78 90 192362 0 100 aja 00 12 34 56 78 92 192 168 0 aja 00 97 65 43 21 482 168 0 101 aja CN EN 192 1680 mm lt Previous In this scenario there are three clients listed in the Control Table Clients 1 and 2 are wireless and client 3 is wired 1 The MAC Address Control function is enabled 2 Connection control is enabled and all of the wired and wireless clients not listed in the Control table are allowed to connect to this device 3 Association control is e
32. ctory default A There are 2 methods to reset to default Method 1 Restore with RESET button First turn off the router and press the RESET button in And then power on the router and push the RESET button down until the Status start flashing then remove the finger If LED flashes about 8 times the RESTORE process is completed However if LED flashes 2 times repeat steps and try again Method 2 Restore directly when the router power on First push the RESET button about 5 seconds Status will start flashing about 5 times remove the finger The RESTORE process is completed 4 Why can not connect Internet even though the cables are plugged in WAN port and LAN port and the LEDs are blink In addition Status led is also normal and can configure web management A Make sure that the network cable from DSL or Cable modem is plugged in Wan port of Router and that the network cable from LAN port of router is plugged in Ethernet adapter Then please check which wan type you use If you are not sure please call the ISP Then please go to this page to input the information of ISP is assigned 74 J Choose WAN Type Type Usage Q Static IP Address ISP assigns vau a static IP address Gei Dynamic IP Address Obtain an IP address from ISP automatically Dynamic IP Address with Road Runner Session Management eg Telstra BigPond PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services gt
33. dius server 132 168 122 1 Wireless Router LAN IP 192 168 123 254 WAN IP 192 168 122 216 Radius Server 192 168 122 1 User A XP Wireless Card Ti 11g Tool Odyssey Client Manager Hefer to www funk com Download http www funk com News amp Events ody c wpa preview pn asp Or Another Configuration PC USER A Pl 2 m Wired LM USER B S ham TY 192 161 123 254 LX E Authentication Server Windows 2000 Radius server 152 168 123 93 WPA PSK In fact it is not necessary for this function to authenticate by Radius Server the client and wireless Router authenticate by them 62 Method1 1 Go to the Web manager of Wireless Router to configure like below Network ID SSID Channel Security Key Mode Preshare Key 12345678 2 Go to Odyssey Client Manager first choose Network Before doing that you should verify if the software can show the wireless card Open Adapters Odyssey Client Manager Settings Commands Web Help Connection Networks The following networks are corfigured Profiles dank Lag coo 1236k gt Th Au Scan Liste EA Trusted Servers Adapters 3 Add and edit some settings Network Properties Network OF Er e RR REP N iwusk name SSID 123kk Connect to any available nctwork Description optional Network type Access point infrastructure mode E el e nada Auuthentimatinn Authenticate using profile
34. e file config bin from 192 168 123 254 would you like to open the fle or save it to your computer Y Always ask before opening this type of file You can backup your settings by clicking the Backup Setting button and save it as a bin file Once you want to restore these settings please click Firmware Upgrade button and use the bin file you saved Reset to default Microsoft Internet Explorer E K el Reset al setting to default Cancel You can also reset this product to factory default by clicking the Reset to default button Reboot Microsoft Internet Explorer K Reboot right now i Cancel You can also reboot this product by clicking the Reboot button Miscellaneous ltems J Miscellaneous Items HELP Item k MAC Address for Wake on L 4h t Domain Mame or IF address for Ping Test MAC Address for Wake on LAN Wake on LAN is a technology that enables you to power up a networked device remotely In order to enjoy this feature the target device must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 22 33 44 55 Clicking Wake up button will make the router to send the wake up frame to the target device immediately Domain Name or IP Address for Test Allow you to configure an IP and ping the device You can ping a specific IP to test whether it is alive 56 Appendix A 802 1x Setting PL USER A i i WK Wied LAN USER B
35. eath Land Attack etc Advanced Settings 2 ADMINISTRATOR s MAIN MENU Status V wizard H Advanced We BASIC SETTING lt 4 FORWARDING RULES 3 SECURITY SETTING H ADVANCED SETTING BS IL GE m THE qs ae Ein weg n hoe Le Status 4 Advanced Setting System Time System Time System Log Allow you to set device time manually or consult network time from NTP Dynamic DNS SEDIS E 3 System L SNMP r Send system log to a dedicated host or email to specific receipts EE e Dynamic DNS Schedule Rule To host your server on a changing IP address you have to use dynamic MN domain name service DDINS I SNMP Gives a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events Routing If you have mare than one routers and subnets you may wantto enable routing table to allow packets to find proper routing path and allow different La subnets to communicate with each other Schedule Rule Apply schedule rules to Packet Filters and Virtual Server QoS Rule Y 44 System Time re BASIC SET SECURITY SETTING DE ADVANCED SETTING o TOOLBOX System Time 200737 11A18 EF 01 57 50 Get Date and Time by NTP Protocol Time Zone GMT 08 00 Pacific Time US amp Canada Set Date and T
36. eless Client List WPA PSK 1 Select Encryption and Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of pre share key is from 8 to 63 2 Fill in the key Ex 12345678 O ADMINISTRATOR S MAIN MENU A Status I BASIC SETTING 2 FORWARDING RULES PA AA Kai Wireless Setting Primary Setup DHCP Server Wireless amp Enable Disable Wireless z Change Password Network ID SSID WBR 6004 Wireless Mode 11 b gin Mixed 11n only SSID Broadcast Enable Disable Channel gt WDS WPS reese 1 WPA Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select Encryption and RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user elects ASCII the length of pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server WPA2 PSK AES 1 Select Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of Pre share key is from 8 to 63
37. er name Password 2 Then Install this certificate and finish 3 Setting on the router and client Router dll amp Remember my password 70 bytes 32 bytes 32 gt bytes 32 bytes 32 bytes 32 time ims time 2ms time 2ms time ims time ims TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 Metwor lt DS 123k Channel E v Security WPA v 802 1X Settings RADIUS Server IP 4821881224 RADIUS port ua sd RADIUS Shared Key costra Client Go to Network Connection and select wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Select WirelessCA and Enable in Trusted root certificate authority i Wireless Network Connection 4 Properties KEN E ga General Authentication Advanced Smart Card or other Certificate Properties fx When connecting select this option to provide authenticated network access for a wired and wireless Ethernet networks O Use my smart card 5 Use a certificate on this computer Validate server certificate Connect only if server name ends with n T mmi em Come D Authenticate as computer when computer information is available Trusted root certific ity y Use a different user name Far the connection Authenticate as guest when user or computer information is unavailable Wireless Network Connection Properties Wireless Networks Advan
38. et IP settings assigned automatically if pour network supports the appropriate IP settings Obtain an IP address automatically Use the following IP E Obtain DNS server address automatically C Use the following DNS server addresses Reboot computer to make sure you have received the IP address correctly Start your Web browser In the Address box enter WBR 6001 s default IP Address http 192 168 0 1 4 When prompted use the following default password to login Syssem Password default par word vagin System Status HELP 8 an WAN Clue y Dianai HA ng Lease Tim Xv 0000 T Suen enna B on In oa Unreachable mai 0000 SEN j 00 50 1621 Cha G D Less ms Password password l m WI AN Stata Lien i ved sable J Siatisiics information samanea erwan nens gt Oct c EI ai P 3 i Jean Default Settings IP Address 192 168 0 1 Password Wireless Mode SSID WBR 6001 Security Please enter the default system password in lowercase only N 4 Configuring Wireless Router LED Indicator for N Max Wireless Router Status System Green Blinking Status flashed once per second to indicate system status is alive wan WAN port Green The WAN port is linked activity On Blinking The WAN port is sending or receiving data WLAN Wireless SH activity Blinki n Sending or receiving data via wireless Link feas e
39. gy Advanced QoS Services for Intelligent Internet Backward compliant with IEEE802 11g and 11b standards Operates on the 2 4GHz frequency band otay Protected with Advanced Network Security WEP and WPA WPA2 PSK encryption supported along with Wi Fi Protected Setup Integrate 4 Port Fast Ethernet Switch with 10 100Mbps MDI MDI X auto sensing Built in NAT function allows multiple PCs and devices to share Internet connection Browser based interface configuration and management Quick Setup Wizard provides alternative way to manage device Package Contents Open the box of the N Max Wireless Broadband Router and carefully unpack it The box should contain the following items e WBR 6001 N Max Wireless Broadband Router e Power Adapter e Cat 5 Cable e Antenna e CD Manual Utility e Quick Installation Guide If any item is found missing or damaged please contact your local reseller for replacement 3 Hardware Installation Product Layout Front View 1 Reset Press the Reset button to reboot device or restores factory default setting 2 Status A blinking light indicates the device is ready 3 WAN A solid light indicates the WAN port is connected 4 WLAN A solid light indicates the Wireless segment is ready LED blinks during wireless data transmission 5 LAN LEDs A solid light indicates to an Ethernet enable computer on ports 1 4 LED blinks during data transmission 6 WPS Wi Fi Protected Setup push button
40. hich day and what time to schedule from Start Time to End Time The following example configure ftp time as everyday 14 10 to 16 20 52 k Mame of Rule 1 k System Time Saturday Every Day Schedule Enable Selected if you want to Enable the Scheduler press Edit To edit the schedule rule press Delete To delete the schedule rule and the rule of the rules behind the deleted one will decrease one automatically ochedule Rule can be applied to Virtual server and Packet Filter Qos Rule AAA A Valced Local IP Please input Client IP Example 192 168 12 33 Remote Priority Please input Global IP and port Example 168 96 2 3 and port 21 54 Toolbox System Log Firmware Upgrade ADMINISTRATOR S MAIN MENU i Status Wd Wizard Hm Advanced re BASIC SETTING lt FORWARDING RULES SECURITY SETTING Bro ADVANCED SETTING AS TOOLBOX Rete SEN eil a SEKR e Ss Backup Setting Current firmware version is R1 8 7g6 R86 20071204 The upgrade procedure takes about 20 seconds Reset to Default Reboot Note Do not power aff the unit when itis being upgraded Miscellaneous When the upgrade is done successfully the unit will be restarted autamatically You can upgrade firmware by clicking Firmware Upgrade button Backup Setting File Download You are downloading Ur
41. ient can not access your wireless router please refresh network list again Choose the one that you will want to connect and connect If successfully the computer will show iy Wireless Network Connection 5 is now connected A Speed 54 0 Mbps nmand Prompt W untitled Paint p Al User will also retrieve IP from router thernet adapter Wireless Metwork Connection 5 Gonnection specific DAS Suffix IP Address Subnet Mask Default Gateway 192 168 123 165 255 255 255 H 192 168 123 254 2 When I use AES encryption of WPA PSK to connect even if input the correct pre share key A First you must check if the driver of wireless client supports AES encryption Please refer to the below 76 r Related Tasks J Y Mon secure wireless network E Change preferred d ue e 217 Signal Strength np wireless network MF Security enabled wireless network e D Learn about wireless networking Fe ZYXEL Signal Strength all lt Mon secure wireless network e Change settings of this E 2 ange Settings OF CMS connection Aaronz Signal Strength onl lf SSID is default and click Properties to check if the driver of wireless client supports AES encryption default properties xl Association Authentication Connection Network name 55101 T Wireless network key This network requires a key For Ihe following Network Authentication PW PA PSK Data encryption Netwo
42. ime using PC s Date and Time PC Date and Time 2008121858 FF 06 01 09 Set Date and Time manually Month Mov Minute 0 0 59 Second 0 0 59 t Daylight Saving Enable Disable Month Jan ay Hour 00 Month Jan e lay Hour OO se Get Date and Time by NTP Protocol Select it if you want to Get Date and Time by NTP Protocol Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates Set Date and Time manually Select it if you want to Set Date and Time manually Set Date and Time manually Select it if you want to Set Date and Time manually Function of Buttons Sync Now Synchronize system time with network time server Daylight Saving Set up where the location is System Log 3 ADMINISTRATOR S MAIN MENU A Status WN wizard Ww BASIC SETTING MA FORWARDING RULES SECURITY SETTING DI ADVANCED SETTING ga TOOLBOX l dack i aes E Status cm Log System Time t IP Address for Syslogd System Log 3 Dynamic DNS t IP Address of Outgoing Mail Server roni SMTP Server IP Part Routing E mail addresses Schedule Rule E mail Subject Password Log Type System Activity Debug Infarmation Attacks Dropped Packets cR Notice This page support two methods to export system logs to specific destination by means
43. ing A virtual server is defined as a Service Port and all requests to this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule For example if you have an FTP server port 21 at 192 168 0 2 a Web server port 80 at 192 168 0 3 and a VPN server at 192 168 0 6 then you need to specify the following virtual server mapping table Service Port Server IP_ Enable 192 168 0 2 80 192 168 0 3 1723 192 168 0 6 Special AP 1j ADMINISTRATOR s MAIN MENU i Status VY Wizard Cal Advanced Virtual Server Special AP op plicatio Select Copyto p v Miscellaneous Some applications require multiple connections like Internet games Video conferencing Internet telephony etc Because of the firewall function these applications cannot work with a pure NAT router The Special Applications feature allows some of these applications to work with this product If the mechanism of Special Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger packet is detected the inbound packets sent to the specified port numbers are allowed to pass through the firewall This product provides some predefined
44. nabled and all of the wireless clients not listed in the Control table are denied to associate to the wireless LAN 4 Clients 1 and 3 have fixed IP address either from the DHCP server of this device or manually assigned ID 1 00 12 34 56 78 90 gt 192 168 12 100 ID 3 00 98 76 54 32 10 gt 192 168 12 101 Client 2 will obtain its IP address from the IP Address pool specified in the DHCP Server page or can use a manually assigned static IP address If for example client 3 tries to use an IP address different from the address listed in the Control table 192 168 12 101 it will be denied to connect to this device 5 Clients 2 and 3 and other wired clients with a MAC address unspecified in the Control table are all allowed to connect to this device But client 1 is denied to connect to this device 42 6 Clients 1 and 2 are allowed to associate to the wireless LAN but a wireless client with a MAC address not specified in the Control table is denied to associate to the wireless LAN Client 3 is a wired client and so is not affected by Association control Miscellaneous Items 2 ADMINISTRATOR S MAIN MENU Ml Status V Wizard Tal Advanced We BASIC SAMLAL EE FORWARDING RULES SECURI TY SE TTING S ADVANCED SETTING 1 LUES Miscellaneous Items Status Packet Filters Domain Filters URL Blocking Administrator Time out MAC Control k Discard PING
45. ng specific URLs Domain Filter Enable Check if you want to enable Domain Filter Log DNS Query Check if you want to log the action when someone accesses the specific URLs Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restricted For example com xxx com Action When someone is accessing the URL met the domain suffix what kind of action you want Check drop to block the access Check log to log these accesses Enable Check to enable each rule 36 Example rs BASIC SETTING lt FORWARDING RULES SECURITY SETTING AM ADVANCED SETTING ia TOOLBOX i enn e va rtp e E RE E li Abad snima HELP Lesen es ting SS Domain Filt m Domain Filters Domain Filter Enable R k A W enaa URL Blockinc Log DNS Query Enable MAC Control Privilege IP Addresses Range From 100 To 1399 WWWW msn corm Drop Log www sina com Fl Drop Y Log Drop Log Drop El Log Fl Drop El Log Drop El Log Drop Al Log Drop Log Drop Cl Log In this example 1 URL include www msn com will be blocked and the action will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www google com will be blocked but the action will not be record in log file 4 IP
46. nnections Laer been nee Network Tasks Local rea Connection ro Create 3 Dew i Disabled Authentication succeeded cennectior Cay D link DFE S30T4 er ET y R IES f Setup a home o smal office natwors Figure 6 Authentication success DUT authenticate PC2 using PEAP TLS 1 PC2 chooses the SSID of DUT as the Access Point 2 Set authentication type of wireless client and RADIUS server both to PEAP TLS 3 Disable the wireless connection and enable again 4 The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PC2 5 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure 6 Terminate the test steps when PC2 get dynamic IP and PING remote host successfully Support Type The router supports the types of 802 1x Authentication PEAP CHAPv2 and PEAP TLS 1 PC1 is on Windows XP platform without Service Pack 1 2 PC2 is on Windows XP platform with Service Pack 1a 3 PEAP is supported on Windows XP with Service Pack 1 only 4 Windows XP with Service Pack 1 allows 802 1x authentication only when data encryption function is enable PN Appendix B WPA PSK and WPA PU l USER A a ls T 5 AN Wan ip 192 168 122 216 j m Wireless oo Pe 2 7 Wired LAN USER 6 QN Agar ot Y 1 F Lan 1p 192 158 23 254 i wn Authentication Server Windows 2000 Ra
47. nts that have the same Network ID The factory setting is default SSID Broadcast The router will Broadcast beacons that have some information including SSID so that the wireless clients can know how many AP devices by scanning function in the network Therefore this function is disabled the wireless clients can not find the device from beacons Channel The radio channel number The permissible channels depend on the Regulatory Domain The factory setting is as follow channel 6 for North America channel 7 for European ETSI channel 7 for Japan Security Select the data privacy algorithm you want Enabling the security can protect your data while it is transferred from one station to another There are several security types to use WEP When you enable the 128 or 64 bit WEP key security please select one WEP key to be used and input 26 or 10 hexadecimal 0 1 2 8 9 A B F digits 802 1X Check Box was used to switch the function of the 802 1X When the 802 1X function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name RADIUS Shared Key Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server 18 HELP Lom amp Enable Disable 11 big n Mixed 11n only amp Enable Disable Save Undo Wir
48. of syslog UDP and SMTP TCP The items you have to setup including IP Address for Syslog Host IP of destination where syslogs will be sent to Check Enable to enable this function E mail Alert Enable Check if you want to enable Email alert send syslog via email SMTP Server IP and Port 46 Input the SMTP server IP and port which are concated with If you do not specify port number the default value is 25 For example mail your url com or 192 168 1 100 26 Send E mail alert to Send e mail alert to the recipient who will receive these logs You can assign more than 1 recipient by using or to separate these email addresses Dynamic DNS li Status V Wizard VM Advanced We BASIC SETTING A FORWARDING RULES CA SECURITY SETTING 7 ADVANCED SETTING TES TOOLBOX 2 pem mia i mmm T y Dynamic DNS HELP Status k DD Disable Enabl e System Log DDMS Disable Enable l Provider DvnDNS ora Dynamic Provider website t Host Name Routing t Username E mail Schedule Rule t Password Key QoS Rule Undo To host your server on a changing IP address you have to use dynamic domain name service DDNS So that anyone wishing to reach your host only needs to know the name of it Dynamic DNS will map the name of your host to your current IP address which changes each time you connect your
49. our environment Method 1 1 The User A or User B have to get certificate from Radius first http 192 168 122 1 certsrv Account fae1 Password fae1 Connecting to 192 168 122 1 Remember my password x 2 Then Install this certificate and finish 3 Go to the Web manager of Wireless Router to configure like below 66 Networs ID SSID EST Channel E v Securit MAPA v RADIUS Server IP 1821881224 RADIUS port 1812 RADIUS Shared Key costra 4 Go to Odyssey Client Manager choose Profiles and Setup Profile name as 1 Add Profile Profile name User Info Authentication ITLS Settings PEAP Settings Login name fas Password Iw Permit login using password C use Windows password C prompt for password use the following password fas le Linmask Certificate e Permit login using my certificate fae View Browse Lancel Login name and passwd are fae1 and fael Remember that you get certificate from Radius in Step1 5 Then Choose certificate like above Select Certificate Personal Certificates IT go WirelessG Frofile name f User Info Authentication TTLS Settings FEAF Settings Authenication protocols in Orce ol preference EAP TLS Add Remove 4 Validate server certificate OK Cancel 68 7 Go Network and Select 1
50. p by step Press Next WY wizard MI Advanced Setup Wizard Setup Wizard will quide you through a basic configuration procedure step by step Step 1 Setup Login Password Step 2 WAN Setup Step 3 Wireless Setup Step 4 Summary t Step 5 Finish Start gt Password gt WAN gt Wireless gt Summary Finish Once the user finishes those steps and the router screen displayed as below lt means that the Internet connection is now established 3 Setup Wizard WAN Connection Test Congratulations The internet connection is established Connection information is WAN Type Dynamic IP Address IP Address 192 168 50 102 Subnet Mask 255 255 255 0 Gateway 192 168 50 1 Domain Name Server 168 95 192 1 168 95 1 1 Start gt Password gt WAN gt Wireless gt Summary gt Finish Basic Setting Please Select Advanced Setup to Setup o e e E 4 3 4 ADMINISTRATOR S MAIN MENU Mi Status VI Wizard Am Advanced Logout WC Basic SETTING lt 7 FORWARDING RULES S SECURITY SETTING Sfr ADVANCED SETTING 134 TOOLBOX 1 Basic Setting Primary Setup Configure LAN IP and select WAN type DHCP Server The settings include Hast IP Subnet Mask Gateway DNS and WINS configurations Wireless Wireless settings allow you to configure the wireless confi guration items The device also supports WDS Wireless Distribution System and WPS WiFi P
51. rk kep Confim network kep 3 When I use wireless to connect the router but I find the signal is very low even if I am close to the router A Please check if the wireless client is normal first If yes please send the unit to the seller and verify what the problem is Technical Specifications WBR 6001 N Max Wireless Broadband Router Data Transfer Rate 1 2 5 5 6 9 11 12 18 24 36 48 54Mbps Max physical rate up to 300 Mbps in 802 11n mode Transmit Power 802 11b 17x2dBm 802 11g 15 2dBm 802 11n 14 2dBm America FCC 2 412 2 462GHz 11 Channels Europe ETSI 2 412 2 472GHz 13 Channels Frequency Range Modulation Schemes DBPSK DQPSK CCK OFDM Channels 1 11 channels FCC 1 13 channels ETSI 1714 channels MKK Japan 64 128 bits WEP Encryption WPA PSK WPA2 PSK WPA WPA2 802 x Reset Status Diagnostic LED WAN WLAN LAN LEDs Physical and Environmental Operating 0 40 C Storage 10 70 C 78
52. rotected Setup Change Password Allow you to change system password Primary Setup WAN Type Virtual Computers 10 d MINISTRA no MAIN MENO E fpa fu 3n AURUM S LR TOR AD eee pe eh a Pa LR ZE A AL AM ADVANCED SETTING LAM IP Address k WAN Type WAN s MAC Address Clone MAC Era Auto reconnect ILE Kg e Press Change I FS ETE Le a E 2 ADMINISTRATOR s MAIN MENU A status VY wizard TH Advanced b Lonont S BASIC n FORWARDING RULES 2 SECURITY SETTING QTI ADVANCED SETTING Sc TOOLBOX Primary Setup Choose WAN Type SE 9 Static IP Address ISP assigns you a static IP address Wireless i DynamicIP Address Obtain an IP address from ISP automatically Change Password Dynamic IP Address with Road Runner Session Management e g Telstra BigPond 5 PPP over Ethernet some SPs require the use of PPPoE to connect to their services PPTP some ISPs require the use of PPTP to connect to their services LTP some ISPs require the use of LATP to connect to their services This option is primary to enable this product to work properly The setting items and the web appearance depend on the WAN type Choose correct WAN type before you start 1 LAN IP Address the local IP address of this device The computers on your network must use the LAN IP address of your product as their Default Gateway You can change it if necessary
53. rs Lo An active station is connected to the corresponding 1 4 LAN port TT The corresponding LAN port is sending or receiving Blinking Speed data 10 100 Data Rate Green On Data is transmitting in 100Mbps on the corresponding LAN port To reset system settings to factory defaults Button Special application 10 Login to Configure from Wizard Activate your browser and disable the proxy or add the IP address of this product into the exceptions Then type this product s IP address in the Location for Netscape or Address for IE field and press ENTER For example http 192 168 0 1 After the connection is established you will see the web user interface of this product There are two appearances of web user interface for general users and for system administrator To log in as an administrator enter the system password the default password is password in the oystem Password field and click on the Log in button If the password is correct the web appearance will be changed into administrator configure mode As listed in its main menu there are several options for system administration The user can setup step by step to finish the connection with Wizard 4 ADMINISTRATOR s MAIN MENU l Status Please Select the Operations i Wizard Advanced Setup This screen reminds you to configure until the Wizard is finished Setup Wizard will guide you through a basic configuration procedure ste
54. ss or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS server WPS WiFi Protection Setup WPS is WiFi Protection Setup which is similar to WCN NET and offers safe and easy way in Wireless Connection 22 POE EA E SM aaan ARTE MEA a BEE Current AP PIN Configure Wireless Station k WPS state WPS status Tigger Back Saved The change doesn t take effect until router is rebooted WDS Wireless Distribution System WDS operation as defined by the IEEE802 11 standard has been made available Using WDS it is possible to wirelessly connect Access Points and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement didi hec e aa p Ea EEA e IE MTM remm Wi tele i Ao EOQDIN ADMIN RII ES CECIDIT PETIT Anu x Ze E is Mn ARL di k E AE UT e Sr IN s AA AU AA EL E 00 11 6B 60 6A C5 00 11 6B B0 87 9 6E 4F 11 D8 6C 81 00 19 5B 43 29 BE 00 18 E7 1B EE 58 00 11 6B 22 51 50 00 C0 02 00 00 10 00 11 6B B0 6A 01 24 Change Password You can change Password here We strongly recommend you to change the system pa
55. ssword for security reason Forwarding Rules Allaws others to access WWW FTP and other services on your LAN e Sportal Application This configuration allows some applications to connect and work with the NAT router Miscellaneous IF Address of DMZ Host Allows a computer to be exposed to unrestricted 2 way communication Note that this feature should be used only when needed Non standard FTP port You have to configure this item if you wantto access an FTP server whose port number is not 21 when Client uses active mode UPnP Setting If you enable UPnP function the router will work with UPnP devices softwares 26 Virtual Server ADMINISTRATOR s MAIN MENU Ail Status VY Wizard we BASIC SETTING e FORWARDING RULES Ki SECURITY SETTING E ADVANCED SETTING ge TOOLBOX _ a E Virtual Server HELP Special AP Well known services select one Schedule rule 00 Always D Leet a ers e Je sons 192 158 0 1832 158 0 192 158 0 1832 158 0 192 158 0 182 158 0 Miscellaneous qm 192 168 0 ES 192 168 0 182 158 0 This product s NAT firewall filters out unrecognized packets to protect your Intranet so all hosts behind this product are invisible to the outside world If you wish you can make some of them accessible by enabling the Virtual Server Mapp
56. to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped 5 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always on The device will link with ISP until the connection is established Manually The device will not make the link until someone clicks the connect button in the Status page L2TP First please check your ISP assigned and Select Static IP Address or Dynamic IP Address For example Use Static 1 My IP Address and My Subnet Mask the private IP address and subnet mask your ISP assigned to you 2 Server IP Address the IP address of the PPTP server 3 PPTP Account and Password the account and password your ISP assigned to you If you don t want to change the password keep it empty 3 Connection ID optional Input the connection ID if your ISP requires it 4 Maximum idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped 6 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect
57. ust d Network SSID 123k Pre shared key WPA Access point 00 50 18 00 0F F8 Add this trusted server to the database Passphrase Baskets rout Server name must end with Unmask winanddadv intra com tw Reconnect Reauthenticate EI Z I Proceed to authenticate with this server 9 Result g Connection d t Profiles eo Networks di Auto can Lists c Odyssey Client Manager Connection Adapter Adapter type Iv Connect to network E 123kk gt Scan _ornection TNET1130 WLAN Adapter D wireless information bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 bytes 32 time ims time ims time ims time ims time ims time ims time 1ims time 1ims time 1ms time ims time 1ms time 2ms TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 TTL 63 bytes 32 time ims e yq Tree ES KA Trusted Server Status open and authenticated Elapsed time 03 bytes 32 bytes 32 time 1ms time 1ms TTL 63 TTL 63 Adapters Network SSID 123kk bytes 32 time i1ms TTL 63 Access point 00 50 11 8 00 0F FS Method 2 1 The UserA or UserB have to get certificate from Radius first Packets in out 12679 13605 Reconnect Reauthenticate http 192 168 122 1 certsrv Account fae1 Password fae Connect to 192 168 122 1 Us
58. wm NL M lante 4 A 192 164 113 254 da i hut antication Server Windows 000 Radius server 132 168 123 33 Figure 1 Testing Environment Use Windows 2000 Radius Server Equipment Details PC1 Microsoft Windows XP Professional without Service Pack 1 and LevelOne Wireless PCI Card PC2 Microsoft Windows XP Professional with Service Pack 1a or latter and LevelOne Wireless PCI Card Authentication Server Windows 2000 RADIUS server with Service Pack 3 and HotFix Q313664 Note Windows 2000 RADIUS server only supports PEAP after upgrade to Es service pack 3 and HotFix Q313664 You can get more information from http support microsoft com default aspx scid kb en us 313664 DUT Configuration 1 Enable DHCP server 2 WAN setting static IP address 3 LAN IP address 192 168 123 254 24 d Set RADIUS server IP 5 Set RADIUS server shared key 6 Configure WEP key and 802 1X setting The following test will use the inbuilt 802 1X authentication method such as EAP TLS PEAP CHAPv2 Windows XP with SP1 only and PEAP_TLS Windows XP with SP1 only using the Smart Card or other Certificate of the Windows XP Professional DUT and Windows 2000 Radius Server Setup Setup Windows 2000 RADIUS Server We have to change authentication method to MD5 Challenge or using smart card or other certificate on RADIUS server according to the test condition Setup DUT 1 Enable the 802 1X check the Enable checkbox
59. wser like Mozilla and key 192 168 123 254 in address If not please ipconfig release then ipconfig renew ripconfig release findows IP Configuration thernet adapter Local Area Connection Connection specific DNS Suffix LP Addeee 5 i5 25 45 lox ex a e Subnet Mask 5 2 i g 7 x 0 9 e Default Gateway gt tipconfig renew findows IP Configuration thernet adapter Local Area Connection Connection specific DNS Suffix LP mHIPSBREI i15 a4 aa aa Subnet Mask L i x ea 9 9 Default Gateway aoa a n n 192 168 123 115 255 255 255 H 192 168 123 254 Whatever setup the pc can not get ip Please check Status Led and refer to the Q2 2 Why can I not connect the router even if the cable is plugged in LAN port and the led is light A First please check Status Led If the device is normal the led will blink per second If not please check the blinking Status led shows There are many abnormal symptoms as below Status Led is bright or dark in work The system hanged up Suggest powering off and on the router But this symptom often occurs please reset to default or upgrade latest fw to try again Status led flashes irregularly Maybe the root cause is Flash ROM and please press reset Button to reset to default or try to use Recovery mode Refer to Q3 and Q4 Status flashes very fast while powering on Maybe the router is the recovery mode and please refer to Q4 3 How to reset to fa
Download Pdf Manuals
Related Search