User manual COMET LABS WRB54+

User's Manual Wireless Internet Broadband Router (Model-Nr. WRB54+) English version 1 Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written permission. Trademarks All product, company, brand names are trademarks or registered trademarks of their respective companies. They are used for identification purpose only. Specifications are subject to be changed without prior notice. FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio interference in a commercial environment. This equipment can generate, use and radiate radio frequency energy and, if not installed and used in accordance with the instructions in this manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause interference, in which case the user, at his own expense, wi ll be required to take whatever measures are necessary to correct the interference. CE Declaration of Conformity This equipment complies with the requirements relating to electromagnetic compatibility, EN 55022/A1 Class B. The specification is subject to change without notice. 2 Table of Contents Chapter 1 Introduction........................................................................................................... 4 Functions and Features .........................................................................4 Packing List ..........................................................................................7 Chapter 2 Hardware Installation........................................................................................... 8 2.1 Panel Layout ...................................................................................8 2.2 Procedure for Hardware Installation.............................................10 Chapter 3 Network Settings and Software Installation..................................................... 11 3.1 Make Correct Network Settings of Your Computer .....................11 Chapter 3 Configuring Wireless Broadband Router ......................................................... 12 3.1 Start-up and Log in .......................................................................13 3.2 Status.............................................................................................14 3.3 Wizard...........................................................................................15 3.4 Basic Setting .................................................................................16 3.5 Forwarding Rules..........................................................................25 3.6 Security Settings ...........................................................................29 3.7 Advanced Settings.........................................................................52 3.8 Toolbox.........................................................................................66 Appendix A TCP/IP Configuration for Windows 95/98................................................... 71 Appendix B Win 2000/XP IPSEC Setting guide............................................................... 77 Appendix C PPTP and L2TP Configurations .................................................................. 114 Appendix D 802.1x Setting............................................................................................... 120 Appendix E FAQ and Troubleshooting ........................................................................... 126 Console mode ............................................Erreur ! Signet non défini. Reset to factory Default....................................................................126 TFTP Mode................................................Erreur ! Signet non défini. Contact us .........................................................................................126 3 Chaptte r 1 Inttroduc ttiion Chap e r 1 In roduc o n Congratulations on your purchase of this outstanding Wireless Broadband Router. This product is specifically designed for Small Office and Home Office needs. It provides a complete SOHO solution for Internet surfing, and is easy to configure and operate even for non-technical users. Instructions for installing and configuring this product can be found in this manual. Before you install and use this product, please read this manual carefully for fully exploiting the functions of this product. Functions and Features Router Basic functions l l Auto-sensing Ethernet Switch Equipped with a 4-port auto-sensing Ethernet switch. Wan type supported The router supports some wan types, Static ,Dynamic, PPPOE ,PPTP , Dynamic IP with Road Runner. l l l Firewall All unwanted packets from outside intruders are blocked to protect your Intranet. DHCP server supported All of the networked computers can retrieve TCP/IP settings automatically from this product. Web-based configuring Configurable through any networked computer's web browser using Netscape or Internet Explorer. l Virtual Server supported Enables you to expose WWW, FTP and other services on your LAN to be accessible to Internet users. l User-Definable Application Sensing Tunnel User can define the attributes to support the special applications requiring multiple connections, like Internet gaming, video conferencing, Internet telephony and so on, then this product can sense the application type and open multi-port tunnel for it. l DMZ Host supported Lets a networked computer be fully exposed to the Internet; this function is used when special application sensing tunnel feature is insufficient to allow an application to function correctly. l Statistics of WAN Supported Enables you to monitor inbound and outbound packets 4 Wireless functions l High speed for wireless LAN connection Up to 54Mbps data rate by incorporating Orthogonal Frequency Division Multiplexing (OFDM).Texas Instrument 4X (Four times) mode supported ­ IEEE802.11g++ l Roaming Provides seamless roaming within the IEEE 802.11b(11M) and IEEE 802.11g(54M) WLAN infrastructure. l IEEE 802.11b compatible(11M) Allowing inter-operation among multiple vendors. l IEEE 802.11g compatible(54M) Allowing inter-operation among multiple vendors. l Auto fallback 54M, 48M,36M, 24M,18M,12M, 6M data rate with auto fallback in 802.11g mode. 22M,11M, 5.5M, 2M, 1M data rate with auto fallback in 802.11b(b+) mode. Security functions l Packet filter supported Packet Filter allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination. l Domain Filter Supported let you prevent users under this device from accessing specific URLs. l URL Blocking Supported URL Blocking can block hundreds of websites connection by simply a keyword. l VPN Servers The router has three vpn server, IPSEC (Dynamic vpn ),PPTP,L2TP. l VPN Pass-through The router also support vpn pass-through. l 802.1X supported When the 802.1X function is enable, the Wireless user must authenticate to this router first to use the Network service. l SPI Mode Supported When SPI Mode is enabled, the router will check every incoming packet to detect if this packet is valid. l DoS Attack Detection Supported When this feature is enabled, the router will detect and log the DoS attack comes from the Internet. 5 Advanced functions l System time Supported Allow you to synchronize system time with network time server. l E-mail Alert Supported The router can send its info by mail. l Dynamic dns Supported At present,the router has 3 ddns.dyndns,TZO.com and dhs.org. l SNMP Supported Because SNMP this function has many versions, anyway, the router supports V1 and V2c. l Routing Table Supported Now, the router supports static routing and two kinds of dynamic routing RIP1 and RIP2. l Schedule Rule supported Customers can control some functions, like virtual server and packet filters when to access or when to block. Other functions l UPNP (Universal Plug and Play)Supported The router also supports this function. The applications: X-box, Msn Messenger. 6 Packing List l l l l Wireless broadband router unit Installation CD-ROM Power adapter CAT-5 UTP Fast Ethernet cable 7 Chaptte r 2 Hardware Insttalllattiion Chap e r 2 Hardware Ins a a o n 2.1 Panel Layout 2.1.1. Front Panel Figure 2-1 Front Panel LED: LED POWER Function Power indication System status 1 WAN port activity Wireless activity Color Green Status On Description Power is being applied to this product. SYS Green Blinking On This product is functioning properly. The WAN port is linked. The WAN port is sending or receiving data. Sending or receiving data via wireless An active station is connected to the corresponding LAN port. The corresponding LAN port is sending or receiving data. Data is transmitting in 100Mbps on the corresponding LAN port. WAN Green Blinking WLAN Green Blinking On Link/Act. 1~4 Link status Green Blinking 10/100 Data Rate Green On ? For details, please refer to Appendix D FAQ and Troubleshooting. 8 2.1.2. Rear Panel Figure 2-2 Rear Panel Ports: Port 5VDC WAN Description Power inlet: DC 5V, 1.5A (minimum) the port where you will connect your cable (or DSL) modem or Ethernet router. Port 1-4 the ports where you will connect networked computers and other devices. 9 2.2 Procedure for Hardware Installation 1. Decide where to place your Wireless Broadband Router You can place your Wireless Broadband Router on a desk or other flat surface, or you can mount it on a wall. For optimal performance, place your Wireless Broadband Router in the center of your office (or your home) in a location that is away from any potential source of interference, such as a metal wall or microwave oven. This location must be close to power and network connection. 2. Setup LAN connection a. Wired LAN connection: connects an Ethernet cable from your computer's Ethernet port to one of the LAN ports of this product. b. Wireless LAN connection: locate this product at a proper position to gain the best transmit performance. Figure 2-3 Setup of LAN and WAN connections for this product. 3. Setup WAN connection Prepare an Ethernet cable for connecting this product to your cable/xDSL modem or Ethernet backbone. Figure 2-3 illustrates the WAN connection. 4. Power on Connecting the power cord to power inlet and turning the power switch on, this product will automatically enter the self-test phase. When it is in the self-test phase, the indicators SYS will be lighted ON for about 10 seconds, and then SYS will be flashed 3 times to indicate that the self-test operation has finished. Finally, the SYS will be continuously flashed once per second to indicate that this product is in normal operation. 10 Chaptte r 3 Nettwork Se ttttiings and Sofftware Insttalllattiion Chap e r 3 Ne work Se n gs and So t ware Ins a a o n To use this product correctly, you have to properly configure the network settings of your computers and install the attached setup program into your MS Windows platform ( Windows 95/98/NT/2000). 3.1 Make Correct Network Settings of Your Computer The default IP address of this product is 192.168.0.1 , and the default subnet mask is 255.255.255.0. These addresses can be changed on your need, but the default values are used in this manual. If the TCP/IP environment of your computer has not yet been configured, you can refer to Appendix A to configure it. For example, 1. configure IP as 192.168.0.2, subnet mask as 255.255.255.0 and gateway as 192.168.0.1 , or more easier, 2. configure your computers to load TCP/IP setting automatically, that is, via DHCP server of this product. After installing the TCP/IP communication protocol, you can use the ping command to check if your computer has successfully connected to this product. The following example shows the ping procedure for Windows 95 platforms. First, execute the ping command ping 192.168.0.1 If the following messages appear: Pinging 192.168.0.1 with 32 bytes of data: Reply from 192.168.0.1: bytes=32 time=2ms TTL=64 a communication link between your computer and this product has been successfully established. Otherwise, if you get the following messages, Pinging 192.168.0.1 with 32 bytes of data: Request timed out. There must be something wrong in your installation procedure. You have to check the following items in sequence: 1. Is the Ethernet cable correctly connected between this product and your computer? Tip: The LAN LED of this product and the link LED of network card on your computer must be lighted. 2. Is the TCP/IP environment of your computers properly configured? Tip: If the IP address of this product is 192.168.0.1, the IP address of your computer must be 192.168.0.X and default gateway must be 192.168.0.1. 11 Chaptte r 3 Conffiigur iing Wiire lless Broadband Routte r Chap e r 3 Con g ur n g W r e e ss Broadband Rou e r This product provides Web based configuration scheme, that is, configuring by your Web browser, such as Netscape Communicator or Internet Explorer. This approach can be adopted in any MS Windows, Macintosh or UNIX based platforms. 12 3.1 Start-up and Log in Activate your browser, and disable the proxy or add the IP address of this product into the exceptions. Then, type this product's IP address in the Location (for Netscape) or Address (for IE) field and press ENTER. For example: http://192.168.0.1. After the connection is established, you will see the web user interface of this product. There are two appearances of web user interface: for general users and for system administrator. To log in as an administrator, enter the system password (the factory setting is "admin") in the System Password field and click on the Log in button. If the password is correct, the web appearance will be changed into administrator configure mode. As listed in its main menu, there are several options for system administration. 13 3.2 Status This option provides the function for observing this product's working status: A. WAN Port Status. If the WAN port is assigned a dynamic IP, there may appear a "Renew" or "Release" button on the Sidenote column. You can click this button to renew or release IP manually. B. Statistics of WAN: enables you to monitor inbound and outbound packets 14 3.3 Wizard Setup Wizard will guide you through a basic configuration procedure step by step.Press "Next >" 15 Setup Wizard - Select WAN Type: For detail settings, please refer to 3.4.1 primary setup. 3.4 Basic Setting 16 3.4.1 Primary Setup ­ WAN Type, Virtual Computers Press "Change" 17 This option is primary to enable this product to work properly. The setting items and the web appearance depend on the WAN type. Choose correct WAN type before you start. 1. LAN IP Address: the local IP address of this device. The computers on your network must use the LAN IP address of your product as their Default Gateway. You can change it if necessary. 2. WAN Type: WAN connection type of your ISP. You can click Change button to choose a correct one from the following four options: A. Static IP Address: ISP assigns you a static IP address. B. Dynamic IP Address: Obtain an IP address from ISP automatically. C. Dynamic IP Address with Road Runner Session Management.(e.g. Telstra BigPond) D. PPP over Ethernet: Some ISPs require the use of PPPoE to connect to their services. E. PPTP: Some ISPs require the use of PPTP to connect to their services. 3.4.1.1 Static IP Address WAN IP Address, Subnet Mask, Gateway, Primary and Secondary DNS: enter the proper setting provided by your ISP. 3.4.1.2 Dynamic IP Address 1. 2. Host Name: optional. Required by some ISPs, for example, @Home. Renew IP Forever: this feature enables this product to renew your IP address automatically when the lease time is expiring-- even when the system is idle. 18 3.4.1.3 Dynamic IP Address with Road Runner Session Management.(e.g. Telstra BigPond) 1. LAN IP Address is the IP address of this product. It must be the default gateway of your computers. 2. 3. 4. WAN Type is Dynamic IP Address. If the WAN type is not correct, change it! Host Name: optional. Required by some ISPs, e.g. @Home. Renew IP Forever: this feature enable this product renew IP address automatically when the lease time is being expired even the system is in idle state. 3.4.1.4 PPP over Ethernet 1. PPPoE Account and Password: the account and password your ISP assigned to you. For security, this field appears blank. If you don't want to change the password, leave it empty. 2. PPPoE Service Name: optional. Input the service name if your ISP requires it. Otherwise, leave it blank. 3. Maximum Idle Time: the amount of time of inactivity before disconnecting your PPPoE session. Set it to zero or enable Auto-reconnect to disable this feature. 4. Maximum Transmission Unit (MTU): Most ISP offers MTU value to users. The most common MTU value is 1492. 3.4.1.5 PPTP 1. My IP Address and My Subnet Mask: the private IP address and subnet mask your ISP assigned to you. 2. 3. Server IP Address: the IP address of the PPTP server. PPTP Account and Password: the account and password your ISP assigned to you. If you don't want to change the password, keep it empty. 3. 4. Connection ID: optional. Input the connection ID if your ISP requires it. Maximum Idle Time: the time of no activity to disconnect your PPTP session. Set it to zero or enable Auto-reconnect to disable this feature. If Auto-reconnect is enabled, this product will automatically connect to ISP after system is restarted or connection is dropped. 19 3.4.1.6 Virtual Computers Virtual Computer enables you to use the original NAT feature, and allows you to setup the one -to-one mapping of multiple global IP address and local IP address. · · · Global IP: Enter the global IP address assigned by your ISP. Local IP: Enter the local IP address of your LAN PC corresponding to the global IP address. Enable: Check this item to enable the Virtual Computer feature. 20