What would you like to do ? Help us find the most requested user's guides Upload your
user manual Search for a user manual Register Login and access your manuals Reset your password

	Browse all user guides
	The GIGAFAST WF711-APR product forum
	Upload your user manual
	Sign-up Log in
	Help us find the most requested user's guides
	Include the add-on to download manuals from your site, forum or blog
	Frequently Asked Questions
	Contact Diplodocs team
ALL GUIDES BY CATEGORY Domestic Appliance TV & Audio Car & Motorcycle Phone Computer Camera & Video Music Sport Gardening & Housekeeping Video Game & Software Jewelry & Watch Baby & Toys Hygiene & Health Other

GigaFast Ethernet 11Wireless Mbps Access Point User Manual Router WF711-APR GigaFast Ethernet C opyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without prior written permission. Trademark All product, company, and brand names are trademarks or registered trademarks of their respective companies. They are used for identification purpose only. Specifications are subject to be changed without prior notice. S GigaFast Ethernet able of T ontent C : Introduction : Features : Package Contents : System Requirements : Panel Description Section 1 2 3 4 5 : Installation : Hardware Connection to WAN : Hardware Connection to LAN : Network Setting in Administrator's computer : Device Administration : Web Based Configuration : Telnet/Console Configuration : Firewall and Advanced Functions : Access Control : Service Time Allocation : URL Keyword Blocking : Virtual Server : DMZ : Multiple DMZ Host : Auto 2-Way Applications : Dynamic DNS : Troubleshooting : Common Problems & Solutions : Frequently Asked Questions GigaFast Ethernet Appendix A B C D E F : TCP/IP Well-Known Port : Illustrated Typical Application : Cabling and Pin Assignment : Configure IP Manually : Technical Information : Technical Support / Warranty info GigaFast Ethernet Introduction Congratulations on your purchase of this outstanding 11Mbps Wireless Access Router. This product is the perfect option to connect a group of wired or wireless PCs to a high-speed Broadband Internet connection or to an Ethernet based Backbone (ETTH/ETTB: Ethernet to the Home/Building). Configurable as a DHCP server, this product is the only externally recognized server device on your local area network (LAN). Thus even a non-technical person will easily configure it to meet the different applications. This product does not only provide a complete solution to share the Internet bandwidth, it also serves as an Internet Firewall to protect your LAN data from being accessed by outside intruders/hackers (Figure 1.1). Since all incoming data packets have been analyzed and monitored, all unwanted packets may be filtered-out and be recorded as an intrusion event. The 11Mbps Wireless Access Router can also be configured to block some internal LAN users' access to the Internet for management purposes. Section 1 GigaFast Ethernet Features Fully compatible with IEEE 802.11B (DSSS: Direct Sequence Spread Spectrum) wireless LAN standard and interoperable with any 802.11B compliant equipments Wireless interface support 64/128-bit WEP (Wire Equivalent Privacy) encryption Integrated wireless AP (Access Point) and Broadband SOHO router in one unit Connects to 10/100M Broadband (cable or DSL) modem or Ethernet backbone for Internet Surfing Multiple WAN connection type: Static IP DHCP PPPoE PPTP client : for leased line or router-router interconnect : for most cable modem service : for Dial-up ADSL service :for some European Dial-up ADSL or L2-VPN application Equipped with a 4-port 10/100M switched Hub for LAN users DHCP Server/ DNS proxy support (can save an extra PC/Server in LAN) All the networked computers in LAN can retrieve TCP/IP setting (IP address, subnet mask, gateway, DNS...) automatically from this device Simultaneously act as both DHCP Server on the LAN and a DHCP Client on the WAN for most simple applications Connects multiple LAN PCs to the Internet with only one dynamiclyassigned IP address (NAT mode) or a range of legal IP address (NAT/Routing mode) Web-based Configuring Configurable through any networked computer's web browsers using Internet Explorer or Netscape Allow/Deny remote administration through WAN connection by Web browser Supports Telnet/Console administration from a networked computer in LAN Section 1 GigaFast Ethernet Firewall capability to protect LAN PCs from outside intruder access/attack Avoid unwanted packets from the WAN and provides a system event log to record intrusion information. (Date/time, source IP address & port...) LAN user Access Privilege Administrator can arrange interior LAN user's access privilege to the Internet by IP address, TCP/IP port service, URL name keyword, and 24-hour time zone Virtual Server (Port forwarding) function Internet servers (WWW, FTP, E-mail...) in LAN could be virtually exposed to WAN for outside Internet user access. This is a useful and secure network deployment for Internet servers DMZ (De-Militarized Zone) Host Administrator can completely expose a host PC in the LAN to the Internet without any firewall protection mechanism. This option allows a full two-way communication between the local host PC and remote Internet nodes. (ex. bidirectional games, video/audio conferences...) Multi DMZ Host support In static IP configuration with a range of legal IP addresses, the administrator can completely expose several host PCs in the LAN to the Internet according to LAN/WAN IP address mapping Auto 2-way applications Provides an automatic mechanism to support some specific applications which need one or many incoming ports when they connect with application servers in Internet. (Like Microsoft Game Zone, Battle.net...) Dynamic DNS Via www.DynDns.org DNS service provider, your registered domain name can be updated automatically whenever the system's WAN IP is changed Section 2 GigaFast Ethernet Package Contents One 11Mbps Wireless Access Point Router One power adapter One User Manual System Requirements One Ethernet based broadband Internet connection (like cable/ADSL modem or other router) One PC with a NIC card, 802.11b PCMCIA card or USB network adapter, and installed TCP/IP protocol stack. (for initial setup) Microsoft Internet Explorer 5 or Netscape V4.7 web browser All TCP/IP networked computers in LAN Panel Description Front Panel GigaFast Ethernet PWR WAN 1234 WF711-APR WLAN Power WAN The Power LED illuminates whenever the Wireless Access Point Router is powered on ON : WAN (ADSL/Cable modem) is connected to the Wireless Access Point Router Blinking: There is data communication The WAN port has NIC card type pin assignment, so it can connect to a HUB device directly or to a PC with a crossover cable. (Please refer to Appendix C-1 for your correct RJ-45 cabling) WLAN LAN 1 - 4 On : Wireless interface is ready Off : Wireless Interface has failed Blinking: There is wireless communication Link/Act ON : LAN PC/device is connected correctly to the Wireless Access Point Router Blinking: There is data communication Section 2 GigaFast Ethernet Rear Panel 4 3 2 1 Reset RDY WAN DC in 1-4 WAN Reset RDY DC in Ports for connecting to PCs. Use straight through cables Port for connecting to Cable/DSL modem Reset to factory default settings button. Hold down continuously for at least 5 seconds to reset the hardware. The LAN IP becomes 192.168.8.1 by default Flashes when the system is ready Plug in power cord here Section 2 GigaFast Ethernet Installation Attach the power cord into the inlet first and follow these sections to set up the WAN/LAN connection. Hardware Connection to WAN Connect the network cable from the Cable/ DSL modem to the WAN port of the Wireless Router (Fig 2-1). If the Link/Act LED is off, please check the feeding power and the connection cable between the Cable/DSL modem and WAN port (Please refer to Appendix C for detailed cabling and pin assignment). 4 3 2 1 Reset RDY WAN DC in Internet/ ISP Cable/DSL Modem Fig 2-1 The hardware connection of WAN interface for the Wireless Access Point Router Hardware Connection to LAN Connect the network cable from your computer's Ethernet port to one of the Wireless Access Point Router's 4 LAN ports (Fig 2-2). If it is correctly connected, the corresponding Link/Act LED will be on. Section 3 GigaFast Ethernet 4 3 2 1 Reset M1 WAN DC in Lan Adapter Lan Adapter Lan Adapter HUB Lan Adapter Fig 2-1 The hardware connection of the LAN interface for the Wireless Access Point Router Please use a crossover RJ-45 cable if you want to connect the LAN port to another hub or switch. Once both the WAN/LAN are connected successfully, hold down the reset button for at least 5 seconds to make sure the Wireless Router is in factory default condition. Network Setting in Administrator's computer In order to configure the Wireless Router with a networked PC in LAN, it is necessary for the administrator to have accurate network settings in this PC. Then, the communication between the Wireless Router and the administrator`s PC is possible. The following description assumes that the Wireless Router is in factory default condition. (If not, please hold the reset button down for at least 5 seconds). The Wireless Router LAN interface IP will become 192.168.8.1 and the DHCP server for LAN user is on (offered IP range from 192.168.8.17 to 192.168.8.128 by default). Section 3 GigaFast Ethernet Follow the procedures to set your computer as a DHCP Client. (If the fixed IP mode for the administrator's computer is desired, please refer to Appendix E.) Step 1: Click Start button, select Settings, and then choose Control Panel. Double click Network icon. Choose the configuration tab. Select the TCP/IP protocol option, which is associated with your network card/adapter. (To install TCP/IP protocol first.) Section 3 GigaFast Ethernet Step 2: Click the Properties button, and then click the IP Address tab. Select Obtain an IP address automatically. Step 3: Press [OK] ro continue. System may request to restart. After restart, the connection between the Wireless Access Point Router & window is established. Please check it as follows. Windows 9x/ME: Start -> Control Panel -> Run Type "winipcfg", and then press [ok] button. Section 3 GigaFast Ethernet All Ethernet adapter information is shown in this window. Check if you get an IP address like 192.168.8.x and the default gateway is 192.168.8.1. Windows XP/2000/NT4: Please change to MS-DOS command window, and type "ipconfig/all" to check Ethernet adapter information. All Ethernet adapter information is shown in this window. Check if you get an IP address like 192.168.8.x and the default gateway is the default IP of the Wireless Access Point Router. If all the steps are finished, the network should be working now. In case there is something wrong, please refer to Chapter 5 for troubleshooting. Section 3 GigaFast Ethernet Device Administration The Wireless Router can be configured via Web browser, telnet, and console terminal. The administrator can choose either one of the three methods to perform device administration. No matter which method is used, this administration only allows one login session at a time. This is in consideration of system database consistency. If there is anyone else trying to login, it would not be possible. The Wireless Router will pop-up an alert message. The following description also assumes the Wireless Router is in factory default condition. Web Based Configuration Open the web browser and type http://192.168.8.1 in the browser's address box. This IP address is the Wireless Router's LAN interface address. The main page should show up as below. Section 3 GigaFast Ethernet This page is not protected by any password. It is used to provide all LAN users a place to inquire about the Wireless Router's status at any time. Type in the default Administrator password, "admin". Then click enter to login. Device Information After login, the first page is the Device Information of the Wireless Router. This page shows the detailed status of the Wireless Router, and displays the current WAN's information about dial-up duration and traffic (bytes count) Section 4 GigaFast Ethernet Clicking the [Clear] button will clear the WAN traffic counter. To update to the latest information, click the [Refresh] button. Administration Click the Administration link on the left frame of this page to assign or change settings. Section 4 GigaFast Ethernet System Setting: [Reset to Default]: [Backup Setting]: [Restore Setting]: Reset system settings to factory default, and restart automatically after completion. Save the current system settings into a file in order to restore the Wireless Access Point Router settings if needed in the future. Restore the previous system settings from a saved backup file. When completed, the Wireless Access Point Router restarts automatically. The Wireless Access Point Router allows system settings Backup/Restore only when both firmware versions are the same. Otherwise the Wireless Access Point Router will deny the restore operation for reliability considerations. Administrator: [Reset to Default]: [Auto Logout]: Type in your old password and new password and confirm it. Then press OK to send the request. Whenever the administrator is idle for more than the specified time (default is 300 seconds), the Wireless Router will logout automatically for security. Upgrade Firmware: Click [browse] to choose the correct firmware upgrade file (*.upg). When a file has been selected, click [Go] to send the request. The Wireless Router's firmware will be upgraded immediately. After a about 20-30 second, the Wireless Router will restart automatically. Section 4 GigaFast Ethernet Miscellaneous Command: [View system events log] records system events such as system start, administrator log-in / log-out, dial/hang-up, and hacker intrusion events. In addition, it stamps the date/time for each event. Normally each event will be shown sequentially by the order of time-stamp except some time-out events. Click [View System Log] to browse the log record. This page stores lots of useful information such as system start time, administrator log-in/log-out history, dial ­up activities and intrusion event records. This function provides the administrator with a convenient diagnostic method for troubleshooting. Furthermore, it also provides detailed intruder/hacker information. You can click [Refresh] to upgrade these events and click [Back] to return to the Administration page. [Clone MAC]: [Restart System]: Duplicates the MAC address of the administrator's PC into WAN MAC of the Wireless Access Point Router. Forces the Wireless Access Point Router to restart immediately. Section 4 GigaFast Ethernet EZ Setup - WAN Click the EZ Setup-WAN link in the left frame. There are 5-connection types in this page. Only one connection type must be configured because the network is connected to the Internet via one method at a time. It can be changed later if your connection type changes. The five connection types are described in the following. A. Static Connection Static connection is used when a fixed IP address is used. Certain ISPs will assign a static, or unchanging, IP address. Please check with your ISP to find out. If you have a Static IP, select the "static" option and fill in the blanks according to the information provided by your ISP. Section 4 GigaFast Ethernet WAN IP Address: WAN Subnet Mask: WAN Gateway: WAN 1st DNS: WAN 2nd DNS: The IP Address of the Wireless Access Point Router as seen by external users on the Internet (including your ISP) The Wireless Access Point Router WAN IP address ranges. (i.e. 255.255.255.248) The ISP will provide you with the Gateway IP Address DNS (Domain Name Server). The ISP will provide this address The second DNS Click the [Save&Restart] button. A. DHCP Client Connection DHCP Client connection means that the ISP will dynamically assign the Wireless Router IP address and other settings. The [Domain Name] and [Host Name] are unused for most ISPs, so keep them blank. If they are needed for your Internet connection, please contact your ISP for the correct Domain name and Host Name. Click the [Save&Restart] button to store these settings. Section 4 GigaFast Ethernet This connection type is popular for most Cable modems. After [Save&Restart], the assigned IP address can be checked on the "Device Info" page. (refer to 3.1.1) C. PPPoE Connection If the Wireless Access Point Router is connected to the Internet through a DSL line, ask the ISP if they use PPPoE for dial-up service. If they do, select the PPPoE option, then fill in: Your PPPoE account and PPPoE password. (The PPPoE Service Name may be optional, depending on the ISP). Dial on Demand: Choose this option. The Wireless Access Point Router will attempt to connect with the ISP if (1) there is at least one LAN user trying to access the Internet and (2) the current WAN connection is disconnected. Auto disconnect when Idle over _ sec: fill in a time period in seconds if you want to disconnect automatically when your Internet connection is idle more than that period of time. Section 4 GigaFast Ethernet Click the [Save&Restart] button. After the save & restart, the assigned IP address can be checked on the "Device Info" page. (refer to 3.1.1) If something is wrong, please browse the system event log to check the dial/log-in activity. (refer to 3.1.2) C. PPTP Connection If the Wireless Access Point Router is connected to the Internet via DSL modem (most likely an ALCATEL modem in west Europe), then choose the PPTP/PPPoA connection type. Please check with your ISP for details. This connection type is also used by PPTP L2 VPN. My IP address and Server IP address are the Wireless Access Point Router's (PPTP client) and ADSL Modem's (PPTP server) IP addresses respectively. My Gateway is optional if the PPTP client and server are in the same subnet. For L2 VPN, this field is necessary in most cases. The PPTP account and PPTP password are provided by the ISP. Section 4 GigaFast Ethernet The PPTP connection ID is left as 0 for most applications. Check with your ISP for correct setting if there are problems. Dial on Demand: The Wireless Access Point Router will attempt to connect with the ISP if (1) there is at least one LAN user trying to access the Internet and (2) the current WAN connection is disconnected. Auto disconnect when idle over _ sec: Fill in a time period in seconds if you want to disconnect automatically when your Internet connection is idle for more than that period of time. EZ Setup - LAN Click the EZ setup-LAN link on the left frame to setup LAN. LAN IP Address: The IP address of the Wireless Access Point Router as it is seen by the internal LAN user. The DHCP Server is enabled by default If LAN IP is changed, the administrator may lose the connection with the Wireless Router when they are not in the same LAN subnet. Administration operation will not work until they are in the same subnet again. (Do this by releasing and renewing the IP address on the administrator's PC.) Section 5 GigaFast Ethernet 1. DHCP Server Enabled Choose this option if you want the Wireless Router to assign IP's to computers on the network automatically. Then fill in following: DNS Proxy: LAN computers get their DNS server from the Wireless Router first. The Wireless Router will search the ISP's DNS automatically. IP pool from 192.168.8.x to 192.168.8.x: Whenever there is a request, the DHCP server will offer unused IP's from the IP address pool to the requesting computer. The end address must be greater than the start address. Lease time: the assigned IP will be valid during the lease interval. Assign fixed IP to MAC: If there are some computers, like web/E-mail server, which will be assigned a fixed IP by DHCP server, you can set those computers with their own predefined IP. Those computers will be identified by their MAC address. Press [DHCP Client List] to show the DHCP Client list. Section 5 GigaFast Ethernet Click the [Save&Restart] button to save settings. 2. DHCP Server Disabled Disable DHCP Server function of the Wireless Router. Fill in the LAN IP Address and click the [Save&Restart] button. Section 5 GigaFast Ethernet EZ Setup - Wireless (802.11b) Click the Wireless (802.11b) option to check and setup wireless LAN settings. [A] The first TAB is the "Wireless Info" page: Displays wireless 802.11b module information. Device status: Indicates the internal wireless 802.11b module's status. Normally it shows "OK". If it says "Failed", the wireless interface is unavailable. Primary/secondary Firmware Identification: Displays the version identification for the internal wireless 802.11b module. 802.11 MAC address: Shows the MAC address of the internal wireless 802.11b module. Section 5 GigaFast Ethernet [B] The second TAB is the "Basic" page: Enter the basic/mandatory settings for 802.11b. Wireless Device Name: Stores a descriptive/meaningful string used by the wireless diagnostic utility (like search or locating utility) to report which Access Point or Access Point Router it is. SSID (Service Set ID): A unique ID shared by the same group of wireless client PCs and one or more wireless Access Point Routers. The same SSID group means that all wireless client PCs and at least one (or more) Access Point/ Access Point Router uses the identical SSID. If the SSID is not correct, they will not be able to communicate with each other. Channel: The radio channel used by the wireless 802.11b module. The allowed number of channels depends on the country because radio regulations are different in different countries. (eg. US, Europe and Japan) Section 6 GigaFast Ethernet Basic rates (Mbits/s): The transfer rate that is used by a wireless client PC to associate with the Wireless Router. Supported rates (Mbits/s): The transfer rate that a wireless client PC can receive. Transmission rates (Mbits/s): Select the rate adaptation mechanism. Fixed 1 / 2 / 5.5 / 11 Mbits/s and automatic are allowed. The default is automatic, which optimizes the adaptation between performance and operating distance. Preamble Type: Choose long, short and both preambles in the physical layer. The default is long preamble. [C] The third TAB is the "Security" page. Enter the WEB key and enable/disable security feature. Section 6 GigaFast Ethernet Hide SSID in Beacon: This option hides the SSID in the beacon so that the Wireless Router cannot be found by a passive scan program or utility. This is used in a more secure application environment. Station can't use "unspecified" SSID: Allow or deny the Wireless Router to associate with any wireless client PC whose SSID is ANY. WEP enabled: Enables or disables the Wired Equivalent Privacy security function. WEP key length: Selects 64-bit or 128-bit WEP encryption. Be sure that the settings in the Wireless Router are the same as all wireless client PCs. Otherwise communication will not be possible. PassPhrase: Used to generate WEP-64 or WEP-128 key 1-4 automatically. WEP key: For 64-bit WEP encryption. A key of 10 hexadecimal characters in length must be filled in. For 128-bit WEP encryption, a key of 26 hexadecimal characters in length must be filled in. Be sure that the key in the Wireless Router is the same as all wireless client PCs. Otherwise communication will not be possible. WEP key to use: Selects one of four key sets to be used for encryption. To connect to a Wi-Fi compliant wireless device, key #1 must be selected. Deny unencrypted data: Any unencrypted data frames will be denied if this option is selected. Authentication: Selects the mechanism of shared key, open system, or both authentication algorithms. [D] The forth TAB is the "Associate" page. The upper list shows all MAC addresses associated with the Wireless Router currently. Section 6 GigaFast Ethernet Below the list is a MAC address filtering function. mechanisms provided: There are two 1) Allow all wireless client PCs except the following MAC address stations. 2) Deny all wireless client Pcs except the following MAC address stations. The allowed / denied list can be filled from the upper associated MAC list or keyed in manually. Section 6 GigaFast Ethernet Telnet/Console Configuration The telnet-based configuration is almost the same as console configuration. The difference is that console configuration requires being connected to the Wireless Router with your computer by null modem cable (Please refer to Apendix C-2). Telnet configuration can only be used via LAN. Click Start and select Run... Type "telnet" and when the window opens, type "open 192.168.8.1". The terminal parameters should be set to 115200 8-N1(baud rate 115200, 8 data bit, No parity,1 stop bit). Press the Enter key once. In general, the Telnet/console configuration is menu-driven. Enter the password ("admin" is the default) and press Enter to login. The main menu is shown below. Type the number of each item to select your choice. Section 6 GigaFast Ethernet Device Information and Administration configuration in the Wireless Access Point Router When you select 1 to enter the device information, you can see the device information as follows: Press Esc to exit. Select 2 to enter administrator setup. 1. Change administrator password: Press 1 for this setting. The system will ask you to enter your old password, enter your new password, and retype your new password to confirm. 2. Upgrade new firmware: Press 2 for this setting. You must use a telnet program with file transfer capability to upgrade your firmware. Window's built-in hyperterminal does not provide this feature. 3. Set Date/Time: Press 3 for this setting. Set the date and time seperately. Section 6 GigaFast Ethernet A. Date/Time needs to be initialized every time the Wireless Router is reset.. B. Whenever the administrator logs on via web browser, the date/time is calibrated automatically according to the login PC. 4. Reset to factory default and restart. 5. Restart System WAN Setup Select WAN setup to select the correct configuration. Press 1 to select the WAN Connection type option menu. Section 6 GigaFast Ethernet Four connection types can be chosen by enter the available type number(A~D). 1. Static IP address: Static connection is used when a fixed IP address is used. Certain ISPs will assign a static, or unchanging, IP address. Please check with your ISP to find out. If you have a Static IP, select the "static" option and fill in the blanks according to the information provided by your ISP. WAN IP Address: WAN Subnet Mask: WAN Gateway: WAN 1st DNS: WAN 2nd DNS: The IP Address of the Wireless Router as seen by external users on the Internet (including your ISP) The Wireless Router WAN IP address ranges. (i.e. 255.255.255.248) ISP will provide you with the Gateway IP Address DNS (Domain Name Server). ISP will provide this address The second DNS When all settings are finished, don't forget to type Y to restart the system. 2. DHCP Client: DHCP Client connection means that the ISP will dynamically assign an IP address to the Wireless Router and all settings automatically, so no other settings are required to be filled in. If your Internet connection type is a DHCP client type, such as a Cable modem, you should select this option. When all settings are finished, don't forget to type Y to restart the system. Section 6 GigaFast Ethernet 3. PPP over Ethernet: PPPoE (point to point protocol over Ethernet) connection means that personal users can browse the Internet through DSL-based broadband connection. If you are connected to the Internet through a DSL line, check your ISP if they use PPPoE. If they do, choose the PPPoE option, then type in: Your PPPoE account and PPPoE password. (The PPPoE Service Name may be optional, depending on the ISP) Dial on Demand: If you choose this option, the Wireless Router will attempt to connect with the ISP if (1) there is at least one LAN user trying to access the Internet and (2) the current WAN connection is disconnected Auto disconnect when idled over sec: Fill in a time period in seconds if you want to disconnect automatically when your Internet connection is idle for more than that period of time When all settings are finished, don't forget to type Y to restart the system. 4. PPTP Client: PPTP client mode is used with some European DSL modems or used to provide L2-VPN tunneling connections. If PPTP client mode is selected, please enter: My IP address and My Server IP address for the Wireless Router (PPTP client) and DSL modem (PPTP server) IP addresses respectively Input PPPTP account and PPPTP password according to the ISP assignment Dial on Demand: If this option is selected, the Wireless Router will attempt to connect with ISP if (1) there is at least one LAN user trying to access the Internet and (2) the current WAN connection is disconnected Auto disconnect when idle over sec: Fill in a time period in seconds if you want to disconnect automatically when your Internet connection is idle more than that period of time When all settings are finished, don't forget to type Y to restart the system. Section 6 GigaFast Ethernet LAN Setup The LAN Setup configuration in a telnet environment has 2 items. 1. LAN IP Address: Type in the IP address of the Wireless Access Point Router as it is seen by the internal LAN computers. If Telnet is used and the LAN IP is changed, the administrator may lose connection with the Wireless Access Point Router when they are not in the same LAN segment, so the administration will not work until they are in the same segment again. (This can be done by releasing and renewing the IP) 2. LAN DHCP Server: Choose this option if you want the Wireless Access Point Router can assign IPs to LAN computers automatically. DHCP Server enabled A. Enable/Disable DNS Proxy: LAN computers get their DNS server from the Wireless Access Point Router first. The Wireless Router will search the ISP's DNS automatically. B. Set DHCP IP Pool Range: Whenever there is a request, the DHCP server will allocate a unused IP from the IP address pool to the requesting computer. Section 6 GigaFast Ethernet The end address must greater than the start address. C. Set DHCP Lease Duration: The assigned IP will be valid during the lease duration. D. Assign fixed IP address by MAC address: If there are some computers, such as web/E-mail server, which will be assigned fixed IPs by the DHCP server, you can set those computers with their own predefined IP. Those computers will be identified by their MAC address. DHCP Server diabled Select 1 to toggle betwen disable and enable DHCP Server. Advanced function 1. Access control Under the main menu, type A to enter into access control. Allow/Deny Respond to Ping from WAN: Allow or Deny responding if there are any Ping packets sent to WAN of the Wireless Router Allow/Deny Web Management from WAN: This function allows the administrator to configure the Wireless Router from the outside Internet with browser directly. In order to reserve HTTP service (port 80), which is used for virtual servers, the remote web administration function utilizes another port 64511 instead. (e.g. http://211.79.244.45:64511 ) 2. User command This is reserved for diagnostic purposes. Section 6 GigaFast Ethernet Firewall and Advanced Functions Besides the native protection features from NAT, the Wireless Router provides many advanced functions which are popular in most firewall devices such as deny PING, block service port, URL keyword blocking, virtual server, DMZ and intrusion event log. (Recorded in the Wireless Access Point Router internal buffer, please refer to 3.1.2) Access Control "Access control" allows you to control the WAN-to-LAN or LAN-to-WAN access capability. Click the Access Control link in the left frame. There you will see the 3 options shown below. 1. Respond to Ping from WAN: Allow or Deny responding if there is any PING packet sent to WAN of the Wireless Router Section 6 GigaFast Ethernet This is very useful to avoid Internet intruder/hacker from probing the computer. Most likely, the hacker will not start to attack due to no PING response. 2. Web Management from WAN: This function allows the administrator to configure the Wireless Router from the outside Internet with browser directly. In order to reserve HTTP service (port 80), which is used for virtual servers, the remote web administration function utilizes another port 64511 instead. (e.g. http://211.79.244.45:64511 ) Block Client in LAN: This function is used to inhibit some LAN clients (by IP address) from accessing Internet resources. Since all LAN client are recognized by their IP addresses, regardless of if the LAN client's IP address is assigned by DHCP server or manual setting, this function always works well. Filter Packets from LAN: This function allows the administrator to inhibit LAN users from using some Internet services for management purposes. For example, if the Wireless Router is used in a SOHO environment and the administrator wants to inhibit LAN users from using Telnet services (like BBS, on-line chat), then it is easily achieved by blocking all packets to service port 23. Another example would be blocking service port 110 (POP3) which will inhibit LAN users from checking/retrieving outside Internet e-Mail accounts periodically. This is very useful when the WAN connection type is Dial-On-Demand (like PPPoE/PPP). Then, the Wireless Router can autodisconnect at normal conditions. Otherwise the periodic e-Mail checking from the LAN user will cause the Wireless Router to keep the WAN connection alive forever. Therefore, in this situation, the LAN user can only use e-Mail servers inside the network. (if a POP3 server exist in LAN). 3. 4. Section 6 GigaFast Ethernet Service Time Allocation "Service Time Allocation" allows the administrator to control the Wireless Router's LAN-to-WAN if the service is available or disabled at any time. This feature is implemented by two mechanisms. One method is to specify the maximum continuous service period. This is primarily used for parental control in home/family applications. It can protect children from surfing the Internet continuously for more than a pre-defined period X. Meanwhile, the Wireless Router will still stop service until period Y is expired. Section 6 GigaFast Ethernet The other mechanism is simply dependent on a daily time zone. This means the Wireless Router's LAN-to-WAN service is on or off according to a predefined daily schedule table. URL Keyword Blocking In order to prevent LAN users from accessing specific websites, the Wireless Router provides a function to perform such a filtering mechanism. The administrator can enter the URL keywords of which websites are to be rejected. Then the Wireless Router will reject any websites which have URL names that matched or partially match. For example, if the keyword is xyz, then www.xyz.com, ftp.xyz.com, xyz.abc.com are all blocked. Click the [Save&Restart] button after listing the keywords. Section 6 GigaFast Ethernet Virtual Server Generally, NAT based routers/firewalls filter out all unrecognized packets from the WAN to protect your Internal LAN computers; therefore, all LAN computers behind the Wireless Router are invisible to the outside Internet. However, some Internet servers (like WWW, FTP, E-mail) should be visible and accessible by the outside Internet. As a result, the Wireless Router provides Virtual Server functions to meet this demand. In addition, the Wireless Router also protect the servers and all other computers in the LAN simultaneously. Since all the Internet servers always handle the fixed TCP/UDP service port number (like WWW is 80, FTP is 21) any packets from the WAN which have a destination port number that matches a virtual server's ports, then these packets will be forwarded to the pre-defined LAN's IP. The destination port number is also kept the same or mapped into another port for LAN. TCP ports are always mapped into TCP ports. For example, if you have an FTP server (port21) at 192.168.8.5, a mail server (port 110) at 192.168.8.6, and a VPN server at 192.168.8.7, then you need to specify the virtual server as: WAN IP + port 21 192.168.8.5 + port 21 WAN IP + port 110 192.168.8.6 + port 110 WAN IP + port 1723 192.168.8.7 + port 1723 Another example : If there are 2 Web servers in LAN (and installed by 2 different computers) WAN IP + port 80 192.168.8.8 + port 80 WAN IP + port 8080 192.168.8.9 + port 80 Please refer to Appendix A for some well-know service ports. Section 6 GigaFast Ethernet DMZ DMZ (DeMilitarized Zone) is a zone, which is not protected by firewall. It means that all computers in the DMZ are dangerous and subject to be attacked/accessed by Internet intruders/hackers. However, the advantage is that all computers in the DMZ are completely exposed to Internet, thus all of them gain the full access privilege to the outside Internet. In such a case, most Internet applications should be compatible with them because there is no interference from the firewall. Currently there are more Internet applications that require 2-way access right, so they open many TCP/UDP ports simultaneously (like video and/or audio conference, on-line gaming). The Wireless Router provides this feature to allow some computers in the LAN to have unrestricted 2-way access privilege. As a result, those computers in the DMZ are more compatible with Internet applications. Thus, they seem to be dangerous in comparison with those other computers in the LAN. The Wireless Router generally allows a computer in the LAN to be logically exposed to the Internet with unrestricted 2-way communication. This is very useful whenever you encounter some incompatible applications (especially for online game or audio/video conference). The DMZ feature can often avoid these problems. The following shows a single DMZ host is allowed due to the single WAN IP address shown. (for example, the WAN connection type is DHCP client, PPPoE, PPTP and PPP) Section 6 GigaFast Ethernet Multiple DMZ Host If the WAN connection type is static and there is a range of IP addresses assigned to the WAN interface instead of a single IP only (please refer to section 3.1), then the Wireless Router allows 8 computers in the LAN to become DMZ hosts. In general, the mechanism for multiple DMZ hosts is based on the mapping relation between the WAN IP and the LAN IP (shown below). These DMZ host IPs will skip NAT port translation handling to gain unrestricted 2-way communication capability. WAN IP1 Wireless Router WAN IP2 Wireless Router WAN IP3 Wireless Router ............................................................... WAN IP8 Wireless Router LAN IP1 (DMZ host1) LAN IP2 (DMZ host2) LAN IP3 (DMZ host3) LAN IP8 (DMZ host8) Most likely the multiple DMZ host are applied in a router-to-router inter-connection SOHO environment (please refer to Figure 4 2). It is less popular with home users due to the "range of WAN IP address" because IP addresses are important and expensive resources now. Some ISPs provide leased line services (DSL is a common one) to subscribers, and can offer a range of IP addresses for subscription. In this case, there are two type of connection configurations. One is Bridging mode, the other is Routing mode. Section 6 GigaFast Ethernet For example, if the ISP provides 210.65.226.1 through 210.65.226.7 IP (subnet mask is 255.255.255.248), then the subscriber can have 6 computers at most accessing the Internet simultaneously. With the Wireless Router, additional computers can access the Internet. (Please refer to Fig 4-1) Fig 4-1 Bridging mode Unfortunately, the multiple DMZ host will not work with the Fig 4-1 configuration because the Wireless Router can only handle one IP address' packets, not 5 IP address' packets. In such conditions, the bridging mode option is available for Multiple DMZ. The following Fig 4-2 is a typical Router-to-Router Multi-DMZ configuration. Fig 4-2 Routing mode Those DMZ hosts in the LAN are virtually exposed in the Internet environment. The Wireless Router no longer provides the firewall protection function for them. Section 6 GigaFast Ethernet Auto 2-Way Applications From the above two sections (Virtual Server and DMZ), it can be concluded as follows : 1) Virtual Server can support those applications which are fully dependent on the incoming destination TCP/UDP ports regardless of the incoming destination IP address. DMZ can support those applications which are dependent on the incoming destination IP address only no matter which TCP/UDP port they use or no matter how many TCP/UDP ports they use simultaneously. 2) Although the Wireless Router provides the above two methods for compatibility improvements under the firewall protection, there is some inconvenience for the administrator to manage many PCs at home or in a SOHO environment. For example, in spite of the Virtual Server or DMZ functions, the administrator must know the specific LAN PC's IP address in advance. Then, the administrator can fill it into the WEB page for Virtual Server or DMZ. Nevertheless, if another LAN PC would like to use the same services, then the administrator would have to perform the same setting again. It is not an automatic method. Some special applications (like MS messenger, MS game zone, some VoIP devices) always connect to an outside server with a fixed destination port, so the server will communicate with the application in the LAN by using a predefined incoming port (or a specific range of incoming ports). In this case, the Wireless Router can provide a fully automatic mechanism to support such kinds of applications. Section 6 GigaFast Ethernet 1) 2) Trigger Port: The application sends a packet out first to the trigger port. Incoming Ports: All the incoming packets to the specified ports are allowed to pass the firewall. There are several predefined well know applications listed on the top of the settings page. Select an application and Click the "Copy to" index ID. Each trigger port is used by only one LAN PC at a time. Once a trigger is occupied, a second LAN PC cannot use that trigger port until the first LAN PC has released it. (Release means the first PC stops using that trigger port for more than 5~6 minutes). Dynamic DNS For most dial-up ADSL and Cable modem users, it is not easy to get a fixed WAN IP address when the Wireless Router connects with the Internet. (Whenever the Wireless Router's WAN connection type is PPPoE, DHCP client or PPTP client, then the Wireless Router WAN IP is obtained from the ISP side dynamically). As a result, it is very difficult to host a Web server or FTP server by using a dial-up ADSL or Cable modem. Fortunately, there are some non-profitable organizations ,like www.DynDns.org, or commercial dynamic DNS service providers, like www.dns2go.com or www.DynIP.com, that have proposed a solution to serve such applications. All of them work in the same way. They need a LAN PC (Internet access capable) to update their DNS server's record periodically to keep the WAN IP address up to date. Most of the differences are the update packet syntax or format and how often the update event occurs ­ when dial up is successful or every N minutes. Section 6 GigaFast Ethernet The Wireless Router has a built-in update client function to meet www.DynDNS.org update specifications internally. This means that the Wireless Router can act as a dynamic DNS update client itself, so the administrator doesn't need another PC in the LAN to install the update client program. This function can be disabled (which is the default) when the dynamic DNS is never used or another dynamic DNS service provider is preferred. After 5 minutes, an event update will occur whenever a new WAN IP is received. To enable this function, it is necessary to apply for a dynamic DNS account as your registered URL name. Please visit www.DynDns.org for more detailed information. Section 6 GigaFast Ethernet Troubleshooting Common Problems & Solutions This section provides possible solutions to problems regarding the installation and operation of the Wireless Router. Try to find answers here if there is any problem when you setup the device. Check your device and settings step by step. 1. Connecting to the Wireless Access Point Router LAN port fail Check to see that the Wireless Router's LAN connections are properly connected and the unit is powered on. (Check the Link LED) Set the Wireless Router to factory default condition. Ensure that your PC and the Wireless Router are on the same network segment. If you are not sure, initiate the DHCP function to let PC get an IP address from the Wireless Router automatically. Make sure that the IP address of your PC is within the default range of 192.168.8.17 to 192.168.8.128. Check Subnet Mask. It should be set to 255.255.255.0 to match the Wireless Router. 2. Failed to configure the Wireless Access Point through web browser (by a client PC in LAN) Check the cable connections to the Wireless Router LAN port and see if the Link/Act LEDs on the front panel are working properly. In Windows9x/ME series, run "winipcfg" (NT4/2000/XP series,"ipconfig") to check the client side by clicking on the [Start] button and selecting [Run]. The PC should show: 1) IP address: 192.168.8.xxx (xxx is from 17 to 128) 2) Submask: 255.255.255.0 3) Default Gateway IP: 192.168.8.1 3. WAN can't obtain an IP address from a Cable or DSL modem in WAN Ensure if the WAN LED is lit. (refer to Appendix-C for correct cabling) Turn off your DSL or Cable modem for a few seconds. Turn it back on. After the modem goes through its self-test, check to see if you now have an IP address. Your ISP may require a Mac address/Host name/Domain name. Check if it is correct. Section 6