User's Manual Wireless Internet Broadband Router (Model-Nr. WRB54+) English version 1 Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written permission. Trademarks All product, company, brand names are trademarks or registered trademarks of their respective companies. They are used for identification purpose only. Specifications are subject to be changed without prior notice. FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio interference in a commercial environment. This equipment can generate, use and radiate radio frequency energy and, if not installed and used in accordance with the instructions in this manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause interference, in which case the user, at his own expense, wi ll be required to take whatever measures are necessary to correct the interference. CE Declaration of Conformity This equipment complies with the requirements relating to electromagnetic compatibility, EN 55022/A1 Class B. The specification is subject to change without notice. 2 Table of Contents Chapter 1 Introduction........................................................................................................... 4 Functions and Features .........................................................................4 Packing List ..........................................................................................7 Chapter 2 Hardware Installation........................................................................................... 8 2.1 Panel Layout ...................................................................................8 2.2 Procedure for Hardware Installation.............................................10 Chapter 3 Network Settings and Software Installation..................................................... 11 3.1 Make Correct Network Settings of Your Computer .....................11 Chapter 3 Configuring Wireless Broadband Router ......................................................... 12 3.1 Start-up and Log in .......................................................................13 3.2 Status.............................................................................................14 3.3 Wizard...........................................................................................15 3.4 Basic Setting .................................................................................16 3.5 Forwarding Rules..........................................................................25 3.6 Security Settings ...........................................................................29 3.7 Advanced Settings.........................................................................52 3.8 Toolbox.........................................................................................66 Appendix A TCP/IP Configuration for Windows 95/98................................................... 71 Appendix B Win 2000/XP IPSEC Setting guide............................................................... 77 Appendix C PPTP and L2TP Configurations .................................................................. 114 Appendix D 802.1x Setting............................................................................................... 120 Appendix E FAQ and Troubleshooting ........................................................................... 126 Console mode ............................................Erreur ! Signet non défini. Reset to factory Default....................................................................126 TFTP Mode................................................Erreur ! Signet non défini. Contact us .........................................................................................126 3 Chaptte r 1 Inttroduc ttiion Chap e r 1 In roduc o n Congratulations on your purchase of this outstanding Wireless Broadband Router. This product is specifically designed for Small Office and Home Office needs. It provides a complete SOHO solution for Internet surfing, and is easy to configure and operate even for non-technical users. Instructions for installing and configuring this product can be found in this manual. Before you install and use this product, please read this manual carefully for fully exploiting the functions of this product. Functions and Features Router Basic functions l l Auto-sensing Ethernet Switch Equipped with a 4-port auto-sensing Ethernet switch. Wan type supported The router supports some wan types, Static ,Dynamic, PPPOE ,PPTP , Dynamic IP with Road Runner. l l l Firewall All unwanted packets from outside intruders are blocked to protect your Intranet. DHCP server supported All of the networked computers can retrieve TCP/IP settings automatically from this product. Web-based configuring Configurable through any networked computer's web browser using Netscape or Internet Explorer. l Virtual Server supported Enables you to expose WWW, FTP and other services on your LAN to be accessible to Internet users. l User-Definable Application Sensing Tunnel User can define the attributes to support the special applications requiring multiple connections, like Internet gaming, video conferencing, Internet telephony and so on, then this product can sense the application type and open multi-port tunnel for it. l DMZ Host supported Lets a networked computer be fully exposed to the Internet; this function is used when special application sensing tunnel feature is insufficient to allow an application to function correctly. l Statistics of WAN Supported Enables you to monitor inbound and outbound packets 4 Wireless functions l High speed for wireless LAN connection Up to 54Mbps data rate by incorporating Orthogonal Frequency Division Multiplexing (OFDM).Texas Instrument 4X (Four times) mode supported ­ IEEE802.11g++ l Roaming Provides seamless roaming within the IEEE 802.11b(11M) and IEEE 802.11g(54M) WLAN infrastructure. l IEEE 802.11b compatible(11M) Allowing inter-operation among multiple vendors. l IEEE 802.11g compatible(54M) Allowing inter-operation among multiple vendors. l Auto fallback 54M, 48M,36M, 24M,18M,12M, 6M data rate with auto fallback in 802.11g mode. 22M,11M, 5.5M, 2M, 1M data rate with auto fallback in 802.11b(b+) mode. Security functions l Packet filter supported Packet Filter allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination. l Domain Filter Supported let you prevent users under this device from accessing specific URLs. l URL Blocking Supported URL Blocking can block hundreds of websites connection by simply a keyword. l VPN Servers The router has three vpn server, IPSEC (Dynamic vpn ),PPTP,L2TP. l VPN Pass-through The router also support vpn pass-through. l 802.1X supported When the 802.1X function is enable, the Wireless user must authenticate to this router first to use the Network service. l SPI Mode Supported When SPI Mode is enabled, the router will check every incoming packet to detect if this packet is valid. l DoS Attack Detection Supported When this feature is enabled, the router will detect and log the DoS attack comes from the Internet. 5 Advanced functions l System time Supported Allow you to synchronize system time with network time server. l E-mail Alert Supported The router can send its info by mail. l Dynamic dns Supported At present,the router has 3 ddns.dyndns,TZO.com and dhs.org. l SNMP Supported Because SNMP this function has many versions, anyway, the router supports V1 and V2c. l Routing Table Supported Now, the router supports static routing and two kinds of dynamic routing RIP1 and RIP2. l Schedule Rule supported Customers can control some functions, like virtual server and packet filters when to access or when to block. Other functions l UPNP (Universal Plug and Play)Supported The router also supports this function. The applications: X-box, Msn Messenger. 6 Packing List l l l l Wireless broadband router unit Installation CD-ROM Power adapter CAT-5 UTP Fast Ethernet cable 7 Chaptte r 2 Hardware Insttalllattiion Chap e r 2 Hardware Ins a a o n 2.1 Panel Layout 2.1.1. Front Panel Figure 2-1 Front Panel LED: LED POWER Function Power indication System status 1 WAN port activity Wireless activity Color Green Status On Description Power is being applied to this product. SYS Green Blinking On This product is functioning properly. The WAN port is linked. The WAN port is sending or receiving data. Sending or receiving data via wireless An active station is connected to the corresponding LAN port. The corresponding LAN port is sending or receiving data. Data is transmitting in 100Mbps on the corresponding LAN port. WAN Green Blinking WLAN Green Blinking On Link/Act. 1~4 Link status Green Blinking 10/100 Data Rate Green On ? For details, please refer to Appendix D FAQ and Troubleshooting. 8 2.1.2. Rear Panel Figure 2-2 Rear Panel Ports: Port 5VDC WAN Description Power inlet: DC 5V, 1.5A (minimum) the port where you will connect your cable (or DSL) modem or Ethernet router. Port 1-4 the ports where you will connect networked computers and other devices. 9 2.2 Procedure for Hardware Installation 1. Decide where to place your Wireless Broadband Router You can place your Wireless Broadband Router on a desk or other flat surface, or you can mount it on a wall. For optimal performance, place your Wireless Broadband Router in the center of your office (or your home) in a location that is away from any potential source of interference, such as a metal wall or microwave oven. This location must be close to power and network connection. 2. Setup LAN connection a. Wired LAN connection: connects an Ethernet cable from your computer's Ethernet port to one of the LAN ports of this product. b. Wireless LAN connection: locate this product at a proper position to gain the best transmit performance. Figure 2-3 Setup of LAN and WAN connections for this product. 3. Setup WAN connection Prepare an Ethernet cable for connecting this product to your cable/xDSL modem or Ethernet backbone. Figure 2-3 illustrates the WAN connection. 4. Power on Connecting the power cord to power inlet and turning the power switch on, this product will automatically enter the self-test phase. When it is in the self-test phase, the indicators SYS will be lighted ON for about 10 seconds, and then SYS will be flashed 3 times to indicate that the self-test operation has finished. Finally, the SYS will be continuously flashed once per second to indicate that this product is in normal operation. 10 Chaptte r 3 Nettwork Se ttttiings and Sofftware Insttalllattiion Chap e r 3 Ne work Se n gs and So t ware Ins a a o n To use this product correctly, you have to properly configure the network settings of your computers and install the attached setup program into your MS Windows platform ( Windows 95/98/NT/2000). 3.1 Make Correct Network Settings of Your Computer The default IP address of this product is 192.168.0.1 , and the default subnet mask is 255.255.255.0. These addresses can be changed on your need, but the default values are used in this manual. If the TCP/IP environment of your computer has not yet been configured, you can refer to Appendix A to configure it. For example, 1. configure IP as 192.168.0.2, subnet mask as 255.255.255.0 and gateway as 192.168.0.1 , or more easier, 2. configure your computers to load TCP/IP setting automatically, that is, via DHCP server of this product. After installing the TCP/IP communication protocol, you can use the ping command to check if your computer has successfully connected to this product. The following example shows the ping procedure for Windows 95 platforms. First, execute the ping command ping 192.168.0.1 If the following messages appear: Pinging 192.168.0.1 with 32 bytes of data: Reply from 192.168.0.1: bytes=32 time=2ms TTL=64 a communication link between your computer and this product has been successfully established. Otherwise, if you get the following messages, Pinging 192.168.0.1 with 32 bytes of data: Request timed out. There must be something wrong in your installation procedure. You have to check the following items in sequence: 1. Is the Ethernet cable correctly connected between this product and your computer? Tip: The LAN LED of this product and the link LED of network card on your computer must be lighted. 2. Is the TCP/IP environment of your co ...