User manual LINKSYS WAG54GS

USER GUIDE Wireless-G ADSL Gateway with SpeedBooster Model No: WAG54GS (EU) About This Guide About Ths Gude Icon Descriptions While reading through the User Guide you may see various icons that call attention to specific items. Below is a description of these icons: NOTE: This check mark indicates that there is a note of interest and is something that you should pay special attention to while using the product. WARNING: This exclamation point indicates that there is a caution or warning and it is something that could damage your property or product. WEB: This globe icon indicates a noteworthy website address or e-mail address. Online Resources Website addresses in this document are listed without http:// in front of the address because most current web browsers do not require it. If you use an older web browser, you may have to add http:// in front of the web address. Resource Linksys Linksys International Glossary Network Security Webste www.linksys.com www.linksys.com/international www.linksys.com/glossary www.linksys.com/security Copyright and Trademarks Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright © 2007 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders. Wreless-G ADSL Gateway wth SpeedBooster Table of Contents Chapter 1: Product Overview 4 Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Chapter 2: Wireless Security Checklist 5 General Network Security Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Additional Security Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Chapter 3: Installation 6 Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Chapter 4: Advanced Configuration 7 Setup > Basic Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Setup > DDNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 Setup > Advanced Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12 Wireless > Basic Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13 Wireless > Wireless Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13 Wireless > Wireless Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14 Wireless > Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15 Security > Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16 Security > VPN Passthrough . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16 Access Restrictions > Internet Access Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . .17 Applications and Gaming > Single Port Forwarding. . . . . . . . . . . . . . . . . . . . . . . .18 Applications and Gaming > Port Range Forwarding . . . . . . . . . . . . . . . . . . . . . . .18 Applications & Gaming > Port Range Triggering . . . . . . . . . . . . . . . . . . . . . . . . . .19 Applications and Gaming > DMZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19 Applications and Gaming > QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20 Administration > Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21 Administration > Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22 Administration > Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22 Administration > Backup & Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23 Administration > Factory Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23 Administration > Firmware Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23 Status > Gateway. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24 Status > Local Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24 Status > Wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25 Status > DSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25 Appendix A: Troubleshooting Appendix B: Specifications Appendix C: Warranty Information 27 28 29 Wreless-G ADSL Gateway wth SpeedBooster Table of Contents Appendix D: Regulatory Information 30 FCC Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 Safety Notices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 Industry Canada Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 Avis d'Industrie Canada. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 Declaration of Conformity with Regard to EU Directive 1999/5/EC (R&TTE Directive) . .31 CE Marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32 National Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32 Product Usage Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33 Technical Documents on www.linksys.com/international . . . . . . . . . . . . . . . . . . . .33 User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34 Wreless-G ADSL Gateway wth SpeedBooster Chapter1 Product Overview Power (Green) The Power LED lights up and stays on while the Gateway is powered on. Wreless (Green) The Wireless LED lights up when the wireless feature is enabled. It flashes when the Gateway is actively sending or receiving data over the network. Ethernet 1- (Green) These numbered LEDs, corresponding with the numbered ports on the Gateway's back panel, serve two purposes. If the LED is continuously lit, the Gateway is successfully connected to a device through that port. It flashes to indicate network activity over that port. DSL (Green) The DSL LED lights up whenever there is a successful DSL connection. The LED flashes while the Gateway is establishing the ADSL connection. Internet (Green) The Internet LED lights up and stays on when there is a connection made through the Internet port. It flashes to indicate network activity over the Internet port. Chapter 1: Product Overvew Thank you for choosing the Linksys Wireless-G ADSL Gateway with SpeedBooster. The Gateway lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Gateway to share resources such as computers, printers and files. A variety of security features help to protect your data and your privacy while online. Security features include WPA2 security, a Stateful Packet Inspection (SPI) firewall and NAT technology. Configuring the Gateway is easy using the provided browser-based utility. Front Panel Power Button When you want to power the Gateway on or off, push this button. SecureEasySetup Button (Orange/White) It lights up when the Gateway is powered on. The SecureEasySetup button lights up white to indicate that the wireless network uses WPAPersonal with TKIP security. Otherwise, the button lights up orange. NOTE: SecureEasySetup is a feature that makes it easy to set up your wireless network. If you have devices that support SecureEasySetup, run the Gateway's Setup Wizard CD-ROM, and follow the on-screen instructions to use SecureEasySetup. To use the SecureEasySetup feature, press the SecureEasySetup button for one second and release. Ten seconds later, this button changes to white and starts flashing to indicate that the Gateway is in SecureEasySetup mode. After the Gateway has generated the wireless network name (SSID) and WPA-Personal key, the button stops flashing and stays white. To clear the wireless network name and WPAPersonal key, press and hold down the button for five seconds. The button flashes slowly as the Gateway resets itself. When the reset is complete, the button changes to orange. Back Panel Lne The Line port connects to the ADSL line. Ethernet 1, 2, 3, These Ethernet ports (1, 2, 3, 4) connect the Gateway to wired computers and other Ethernet network devices. Reset There are two ways to reset the Gateway's factory defaults. Either press and hold the Reset button for approximately five seconds, or restore the defaults from the Administration > Factory Defaults screen of the Gateway's web-based utility. Power The Power port is where you will connect the power adapter. Wreless-G ADSL Gateway wth SpeedBooster Chapter2 Wireless Security Checklist Chapter 2: Wreless Securty Checklst Wireless networks are convenient and easy to install, so homes with high-speed Internet access are adopting them at a rapid pace. Because wireless networking operates by sending information over radio waves, it can be more vulnerable to intruders than a traditional wired network. Like signals from your cellular or cordless phones, signals from your wireless network can also be intercepted. Since you cannot physically prevent someone from connecting to your wireless network, you need to take some additional steps to keep your network secure. . Enable encrypton Encryption protects data transmitted over a wireless network. Wi-Fi Protected Access (WPA/WPA2) and Wired Equivalency Privacy (WEP) offer different levels of security for wireless communication. A network encrypted with WPA/WPA2 is more secure than a network encrypted with WEP, because WPA/WPA2 uses dynamic key encryption. To protect the information as it passes over the airwaves, you should enable the highest level of encryption supported by your network equipment. WEP is an older encryption standard and may be the only option available on some older devices that do not support WPA. 1. Change the default wreless network name or SSID Wireless devices have a default wireless network name or Service Set Identifier (SSID) set by the factory. This is the name of your wireless network, and can be up to 32 characters in length. Linksys wireless products use lnksys as the default wireless network name. You should change the wireless network name to something unique to distinguish your wireless network from other wireless networks that may exist around you, but do not use personal information (such as your Social Security number) because this information may be available for anyone to see when browsing for wireless networks. General Network Security Guidelines Wireless network security is useless if the underlying network is not secure. · · · · Password protect all computers on the network and individually password protect sensitive files. Change passwords on a regular basis. Install anti-virus software and personal firewall software. Disable file sharing (peer-to-peer). Some applications may open file sharing without your consent and/or knowledge. 2. Change the default password For wireless products such as access points, routers, and gateways, you will be asked for a password when you want to change their settings. These devices have a default password set by the factory. The Linksys default password is admn. Hackers know these defaults and may try to use them to access your wireless device and change your network settings. To thwart any unauthorized changes, customize the device's password so it will be hard to guess. Additional Security Tips · · Keep wireless routers, access points, or gateways away from exterior walls and windows. Turn wireless routers, access points, or gateways off when they are not being used (at night, during vacations). Use strong passphrases that are at least eight characters in length. Combine letters and numbers to avoid using standard words that can be found in the dictionary. · 3. Enable MAC address flterng Linksys routers and gateways give you the ability to enable Media Access Control (MAC) address filtering. The MAC address is a unique series of numbers and letters assigned to every networking device. With MAC address filtering enabled, wireless network access is provided solely for wireless devices with specific MAC addresses. For example, you can specify the MAC address of each computer in your home so that only those computers can access your wireless network. Wreless-G ADSL Gateway wth SpeedBooster WEB: For more information on wireless security, visit www.lnksys.com/securty Chapter3 Installation NOTE: To avoid interference, you may need to place a microfilter or splitter between the phone cable and wall jack. Contact your ISP to determine if one is required. (UK residents need to connect the microfilter to the wall phone jack with ADSL service and then connect one end of the provided phone cable to the RJ-11 port on it.) If you use ISDN, then you do not need a microfilter. 6. Connect the power adapter to the Gateway's power port and the electrical outlet. Chapter 3: Installaton Linksys strongly recommends that you run the Setup CDROM. If you have problems running the Setup CD-ROM, use this chapter. Connection 1. Make sure that all the devices that you are working with are powered down, including your computer(s) and the Gateway. If you have a modem connected to your network, disconnect it. The Gateway replaces your modem. 2. Connect one end of the provided Ethernet cable to your computer's Ethernet adapter. Connect the other end of the Ethernet cable to one of the Ethernet ports on the back of the Gateway. Connect the Power 7. To power on the Gateway, push the power button on the front panel. Connect the Computer 8. Power on the computer that you want to use to configure the Gateway. NOTE: If you have more than one phone and you experience static on the line after installing the Gateway, then you need to install an additional microfilter for each phone or fax that you use. Connecton s complete. Contnue to the "Setup" secton. 3. Repeat step 2 for every computer or device that you want to connect to the Gateway via Ethernet. If you connect more than four computers to the Gateway, you also need to connect a switch to the Gateway. NOTE: If your computer's Ethernet adapter is not set up, refer to the Ethernet adapter's documentation for more information. 4. Connect one end of the provided phone cable to the wall jack with ADSL service. 5. Connect the other end of the phone cable to the Line port on the back of the Gateway. Setup For setup, configure the Gateway to access the Internet through your ADSL Internet Service Provider (ISP). Use the setup information provided by your ISP. Continue to "Chapter 4: Advanced Configuration", and complete the following sections: · · · Setup > Basic Setup Wireless > Basic Wireless Settings Wireless > Wireless Security After completing the setup, to test it, enter www.lnksys.com/regstraton in the web browser's Address field, and press Enter. Connect the DSL Setup s complete. Wreless-G ADSL Gateway wth SpeedBooster Chapter4 Advanced Configuration Chapter : Advanced Confguraton After setting up the Gateway with the Setup Wizard (located on the CD-ROM), the Gateway will be ready for use. However, if you'd like to change its advanced settings, use the Gateway's web-based utility. This chapter describes each web page of the utility and each page's key functions. You can access the utility via a web browser on a computer connected to the Gateway. The web-based utility has these main tabs: Setup, Wireless, Security, Access Restrictions, Applications & Gaming, Administration, and Status. Additional tabs will be available after you click one of the main tabs. NOTE: When first installing the Gateway, you should use the Setup Wizard on the Setup CDROM. If you want to configure advanced settings, use this chapter. How to Access the Web-Based Utility To access the web-based utility, launch the web browser on your computer, and enter the Gateway's default IP address, 192.18.1.1, in the Address field. Then, press Enter. A login screen appears. Use the default user name and password, admn, unless you have changed them during the Setup Wizard. (You can set a new user name and password from the Administration tab's Management screen.) Click OK to continue. Setup > Basic Setup Internet Setup The Internet Setup section configures the Gateway to your Internet connection. Most of this information can be obtained through your ISP. Internet Connection Type Select the appropriate encapsulation method from the drop-down menu. Each Basic Setup screen and available features will differ depending on which encapsulation method you select. These are the available methods: · Login Screen RFC 2364 PPPoA RFC 2516 PPPoE RFC 1483 Routed IPoA RFC 1483 Bridged Bridge Mode Only · · · · · Setup > Basic Setup The first screen that appears is the Basic Setup screen. This allows you to change the Gateway's general settings. VC Settings Configure your Virtual Circuit (VC) settings in this section. Multplexng Select LLC or VC, depending on your ISP. Wreless-G ADSL Gateway wth SpeedBooster Chapter4 Advanced Configuration inactivity, Connect on Demand enables the Gateway to automatically re-establish your connection as soon as you attempt to access the Internet again. To use this option, select Connect on Demand. In the Max Idle Time field, enter the number of minutes you want to have elapsed before your Internet connection terminates. The default Max Idle Time is minutes. Keep Alve: Redal Perod If you select this option, the Gateway will periodically check your Internet connection. If you are disconnected, then the Gateway will automatically re-establish your connection. To use this option, select Keep Alve. In the Redial Period field, you specify how often you want the Gateway to check the Internet connection. The default Redial Period is 30 seconds. QoS Type Select from the drop-down menu: CBR (Continuous Bit Rate) to specify fixed bandwidth for voice or data traffic; UBR (Unspecific Bit Rate) for application that are not time-sensitive, such as e-mail; or VBR (Variable Bit Rate) for bursty traffic and bandwidth-sharing with other applications. PCR Rate For the Peak Cell Rate (PCR), divide the DSL line rate by 424 to get the maximum rate the sender can send cells. Enter the rate in the field (if required by your service provider). SCR Rate The Sustain Cell Rate (SCR) sets the average cell rate that can be transmitted. The SCR value is normally less than the PCR value. Enter the rate in the field (if required by your service provider). Autodetect Select Enable to have the settings automatically entered, or select Dsable to enter the values manually. Vrtual Crcut These fields consist of two items: VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier). Enter the settings provided by your ISP. DSL Modulaton Select the appropriate mode: MultMode, T1.13, G.dmt, G.lte, ADSL2, or ADSL2+. Contact your ISP if you are not sure which mode to use. Follow the instructions for your type of encapsulation. RFC 2516 PPPoE Some DSL-based ISPs use PPPoE (Point-to-Point Protocol over Ethernet) to establish Internet connections. If you are connected to the Internet through a DSL line, check with your ISP to see if they use PPPoE. If they do, you will have to enable PPPoE. RFC 2364 PPPoA Some DSL-based ISPs use PPPoA (Point-to-Point Protocol over ATM) to establish Internet connections. If you are connected to the Internet through a DSL line, check with your ISP to see if they use PPPoA. If they do, you will have to enable PPPoA. Internet Connection Type > RFC 2516 PPPoE PPPoE Settings Username and Password Enter the Username and Password provided by your ISP. Connect on Demand: Max Idle Tme You can configure the Gateway to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the Gateway to automatically re-establish your connection as soon as you attempt to access the Internet again. To use this option, select Connect on Demand. In the Max Idle Time field, enter the number of minutes you want to have elapsed before your Internet connection terminates. The default Max Idle Time is minutes. Keep Alve: Redal Perod If you select this option, the Gateway will periodically check your Internet connection. If you are disconnected, then the Gateway 8 Internet Connection Type > RFC 2364 PPPoA PPPoA Settings Username and Password Enter the Username and Password provided by your ISP. Connect on Demand: Max Idle Tme You can configure the Gateway to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time). If your Internet connection has been terminated due to Wreless-G ADSL Gateway wth SpeedBooster Chapter4 Advanced Configuration IP Settings Your ISP provides these settings. Internet IP Address Enter the Gateway's IP address, as seen from the Internet. Subnet Mask Enter the Gateway's Subnet Mask, as seen from the Internet (including your ISP). Default Gateway Enter the IP address of the ISP server. Prmary (Requred) and Secondary (Optonal) DNS Enter the DNS (Domain Name System) server IP address(es) provided by your ISP. At least one is required. will automatically re-establish your connection. To use this option, select Keep Alve. In the Redial Period field, you specify how often you want the Gateway to check the Internet connection. The default Redial Period is 30 seconds. RFC 1483 Routed If you are required to use RFC 1483 Routed, then select RFC 183 Routed. RFC 1483 Bridged If you are required to use RFC 1483 Bridged, then select RFC 183 Brdged. Internet Connection Type > RFC 1483 Routed IP Settings Your ISP provides these settings. Internet IP Address Enter the Gateway's IP address, as seen from the Internet. Subnet Mask Enter the Gateway's Subnet Mask, as seen from the Internet (including your ISP). Default Gateway Enter the IP address of the ISP server. Prmary (Requred) and Secondary (Optonal) DNS Enter the DNS (Domain Name System) server IP address(es) provided by your ISP. At least one is required. Internet Connection Type > RFC 1483 Bridged IP Settings Select Obtan an IP Address Automatcally if your ISP says you are connecting through a dynamic IP address. If you are required to use a permanent (static) IP address to connect to the Internet, then select Use the followng IP Address. Your ISP provides the settings needed for the following fields: Internet IP Address Enter the Gateway's IP address, as seen from the Internet. Subnet Mask Enter the Gateway's Subnet Mask, as seen from the Internet (including your ISP). Default Gateway Enter the IP address of the ISP server. Prmary (Requred) and Secondary (Optonal) DNS Enter the DNS (Domain Name System) server IP address(es) provided by your ISP. At least one is required. IPoA If you are required to use IPoA (IP over ATM), then select IPoA. Bridge Mode Only Internet Connection Type > IPoA Wreless-G ADSL Gateway wth SpeedBooster If you are using your Gateway as a bridge, which makes the Gateway act like a stand-alone modem, select Brdge 9 Chapter4 Advanced Configuration Local IP Address The default value is 192.18.1.1. Subnet Mask The default value is 2.2.2.0. Mode Only. All NAT and routing settings are disabled in this mode. Network Address Server Settings (DHCP) The settings allow you to configure the Gateway's Dynamic Host Configuration Protocol (DHCP) server function. The Gateway can be used as a DHCP server for your network. A DHCP server automatically assigns an IP address to each computer on your network. If you choose to enable the Gateway's DHCP server option, make sure there is no other DHCP server on your network. Internet Connection Type > Bridge Mode Only Optional Settings Some of these settings may be required by your ISP. Verify with your ISP before making any changes. Network Address Server Settings (DHCP) Optional Settings Host Name and Doman Name These fields allow you to supply a host and domain name for the Gateway. Some ISPs, usually cable ISPs, require these names as identification. You may have to check with your ISP to see if your broadband Internet service has been configured with a host and domain name. In most cases, leaving these fields blank will work. MTU MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for Internet transmission. Select Manual if you want to manually enter the largest packet size that is transmitted. To have the Gateway select the best MTU for your Internet connection, keep the default, Auto. Sze When Manual is selected in the MTU field, this option is enabled. Leave this value in the 1200 to 1500 range. The default, MTU is configured automatically. DHCP Server A Dynamic Host Configuration Protocol (DHCP) server automatically assigns an IP address to each computer on your network for you. Unless you already have one, Linksys recommends that you keep the default, Enable. You can also use the Gateway in DHCP Relay mode. (This setting is not available for all encapsulation types.) DHCP Server If you enable the DHCP Relay mode for the DHCP Server setting, enter the IP address for the DHCP relay server in the fields provided. (This setting is not available for all encapsulation types.) Startng IP Address Enter a value for the DHCP server to start with when issuing IP addresses. Because the Gateway's default IP address is 192.168.1.1, the Starting IP Address must be 192.168.1.2 or greater, but smaller than 192.168.1.253. The default is 192.18.1.100. Maxmum Number of DHCP Users Enter the maximum number of users (network devices) that can obtain an IP address. The number will vary depending on the starting IP address entered and cannot be greater than 253. The default is 0. Clent Lease Tme The Client Lease Time is the amount of time a network device will be allowed connection to the Gateway with its current dynamic IP address. Enter the number of minutes that the device will be "leased" this dynamic IP address. After the time is up, the device will be automatically assigned a new dynamic IP address. The default is 0 minutes, which means one day. Statc DNS 1-3 The Domain Name System (DNS) is how the Internet translates domain or website names into Internet addresses or URLs. At least one DNS server IP address is provided by your ISP. You can enter up to three 10 Network Setup The Network Setup section changes the settings on the network connected to the Gateway's Ethernet ports. Wireless setup is performed through the Wireless tab. Gateway IP The values for the Gateway's Local IP Address and Subnet Mask are shown here. In most cases, keeping the default values will work. Gateway IP Wreless-G ADSL Gateway wth SpeedBooster Chapter4 Advanced Configuration DynDNS.org DNS server IP addresses here. The Gateway will use these for quicker access to functioning DNS servers. WINS The Windows Internet Naming Service (WINS) converts NetBIOS names to IP addresses. If you use a WINS server, enter that server's IP address here. Otherwise, leave this field blank. Time Settings Tme Zone Select the time zone in which your network functions. Automatcally adjust clock for daylght savng changes Select this option if you want the Gateway to automatically adjust for daylight saving time. Setup > DDNS > DynDNS Username Enter the Username for your account. Password Enter the Password for your account. Time Settings and Language Host Name Enter the DDNS URL assigned by the service. Status The status of the DDNS service connection is displayed. Connect To manually trigger an update, click this button. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Language Select the language you want the web-based utility to use: Englsh, French, or German. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Setup > DDNS The Gateway offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the Gateway. Before you can use this feature, you need to sign up for DDNS service with a DDNS service provider, www.dyndns.org or www.TZO.com. If you do not want to use this feature, keep the default, Dsabled. TZO.com DDNS DDNS Service If your DDNS service is provided by DynDNS.org, then select DynDNS.org from the drop-down menu. If your DDNS service is provided by TZO, then select TZO.com. The features available on the DDNS screen will vary, depending on which DDNS service provider you use. Setup > DDNS > TZO E-mal Address Enter the E-mail Address for your account. TZO Password Enter the Password for your account. Doman Name Enter the DDNS URL assigned by the service. Status The status of the DDNS service connection is displayed here. Connect To manually trigger an update, click this button. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Wreless-G ADSL Gateway wth SpeedBooster 11 Chapter4 Advanced Configuration Destnaton IP Address The Destination IP Address is the IP address of the remote network or host to which you want to assign a static route. Subnet Mask The Subnet Mask determines which portion of a Destination IP Address is the network portion, and which portion is the host portion. Gateway This is the IP address of the gateway device that allows for contact between the Gateway and the remote network or host. Hop Count This is the number of hops to each node until the destination is reached (16 hops maximum). Enter the appropriate Hop Count. Click Show Routng Table to view the static routes you have already set up. Setup > Advanced Routing This screen is used to set up the Gateway's advanced functions. Operating Mode allows you to select the type(s) of advanced functions you use. Dynamic Routing automatically adjusts how packets travel on your network. Static Routing sets up a fixed route to another network destination. Setup > Advanced Routing Advanced Routing NAT Enabled/Dsabled If this Gateway is hosting your network's connection to the Internet, keep the default, Enabled. If another gateway or router exists on your network, select Dsabled. Advanced Routing > Routing Table Routing Table For each route, the Destination LAN IP address, Subnet Mask, Gateway, and Interface are displayed. Click Refresh to update the information. Click Close to exit this screen. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Dynamic Routing RIP This feature enables the Gateway to automatically adjust to physical changes in the network's layout and exchange routing tables with the other router(s). The Gateway determines the network packets' route based on the fewest number of hops between the source and the destination. Select Enabled to use the Dynamic Routing feature. Otherwise, keep the default, Dsabled. RIP Verson Select the appropriate protocol version, RIP1 or RIP2. Static Routing A static route is a pre-determined pathway that network information must travel to reach a specific host or network. Enter the information described below to set up a new static route. Select set number To set up a static route between the Gateway and another network, select a number from the drop-down list. Click Delete Ths Entry to delete a static route. Wreless-G ADSL Gateway wth SpeedBooster 12 Chapter4 Advanced Configuration by the Gateway. If you want to broadcast the Gateway's SSID, keep the default, Enable. Otherwise, select Dsable. Wreless SES Functon If you want to allow use of the SecureEasySetup (SES) feature, keep the default, Enable. Otherwise, select Dsable. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Wireless > Basic Wireless Settings The basic settings for wireless networking are set on this screen. Wireless > Wireless Security The Wireless Security screen configures the security of your wireless network(s). There are four wireless security mode options supported by the Gateway: WPA2-Personal, WPA2-Mixed, WPA Personal, and WEP. (WPA stands for Wi-Fi Protected Access, which is a security standard stronger than WEP encryption, and WEP stands for Wired Equivalent Privacy.) These four are briefly discussed here. For detailed instructions on configuring wireless security for the Gateway, refer to "Chapter 2: Wireless Security". NOTE: If you used SecureEasySetup to configure your wireless network(s), then wireless security has already been set up. Do not make changes to the Wireless Security screen. Wireless > Basic Wireless Settings There are two ways to configure the Gateway's wireless settings, manual and SecureEasySetup. For manual configuration, use this screen to change the settings. SecureEasySetup is a feature that makes it easy to set up your wireless network. If you have devices that support SecureEasySetup, run the Gateway's Setup Wizard CD-ROM and follow the on-screen instructions to use SecureEasySetup. NOTE: SecureEasySetup ONLY uses WPA-Personal with TKIP security. If your current wireless devices do not support WPA-Personal security OR you want to use WPA2 security, then you cannot use SecureEasySetup on your network. You need to manually configure the security settings for your wireless network. Wireless Security Securty Mode Select the security method for your wireless network. Proceed to the appropriate instructions. If you do not want to use wireless security, keep the default, Dsabled. NOTE: If you are using wireless security, remember that each device in your wireless network MUST use the same security method and settings, or else the wireless devices cannot communicate. Wireless Network Wreless Network Mode Select the wireless standards running on your network. If you have Wireless-G and Wireless-B devices in your network, keep the default, Mxed. If you have only Wireless-G devices, select G-Only. If you have only Wireless-B devices, select B-Only. If you do not have any wireless devices, select Dsabled. Wreless Network Name (SSID) The network name is case-sensitive and must not exceed 32 characters (use any of the characters on the keyboard). Linksys recommends that you change the default, lnksys, to a unique name of your choice. Wreless Channel Select the channel you want to use. All devices in your wireless network must use the same channel in order to communicate. Wreless SSID Broadcast When wireless devices survey the local area for wireless networks to associate with, they will detect the wireless network name or SSID broadcast Wreless-G ADSL Gateway wth SpeedBooster WPA2-Personal Security Mode > WPA2-Personal Encrypton AES is automatically selected. 13 Chapter4 Advanced Configuration WEP Passphrase Enter a Passphrase (also called a WPA shared key) of 8-63 characters. Key Renewal Enter a Key Renewal period, which instructs the Gateway how often it should change the encryption keys. The default is 300 seconds. WPA2-Mixed Security Mode > WEP Encrypton Select a level of WEP encryption, -bt or 128-bt. Passphrase Enter a Passphrase to automatically generate WEP keys. Then click Generate. NOTE: The WEP Passphrase is compatible with Linksys wireless products only. If you are use nonLinksys products, manually enter the appropriate WEP key on those devices. WEP Key 1- If you did not enter a Passphrase, enter the WEP key(s) manually. TX Key Select which TX (Transmit) Key to use. The default is 1. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Security Mode > WPA2-Mixed Encrypton TKIP + AES is automatically selected. Passphrase Enter a Passphrase (also called a WPA shared key) of 8-63 characters. Key Renewal Enter a Key Renewal period, which instructs the Gateway how often it should change the encryption keys. The default is 300 seconds. WPA-Personal Wireless > Wireless Access Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network's radius. Security Mode > WPA-Personal Encrypton WPA supports two encryption methods, TKIP and AES, with dynamic encryption keys. Select the type of algorithm, TKIP or AES. The default is TKIP. Passphrase Enter a Passphrase (also called a WPA shared key) of 8-63 characters. Key Renewal Enter a Key Renewal period, which instructs the Gateway how often it should change the encryption keys. The default is 300 seconds. Wireless > Wireless Access Wireless Network Access Allow All/Restrct Access To filter wireless users by MAC address, either permitting or blocking access, select Restrct Wreless-G ADSL Gateway wth SpeedBooster 1 Chapter4 Advanced Configuration Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Access. If you do not wish to filter users by MAC address, keep the default, Allow All. Prevent lsted computers from accessng the wreless network Select this to block wireless access by MAC address. This setting is selected by default. Permt only lsted computers to access the wreless network Select this to allow wireless access by MAC address. Update Flter Lst Click this to open the MAC Address Filter List screen. Wireless > Advanced Wireless Settings This Advanced Wireless Settings screen is used to set up the Gateway's advanced wireless functions. These settings should only be adjusted by an expert administrator as incorrect settings can reduce wireless performance. MAC Address Filter List Wireless > Advanced Wireless Settings Advanced Wireless Authentcaton Type The default is Auto, which allows either Open System or Shared Key authentication to be used. With Open System authentication, the sender and the recipient do NOT use a WEP key for authentication. With Shared Key authentication, the sender and recipient use a WEP key for authentication. Select Shared Key to only use Shared Key authentication. Control TX Rate The Control TX Rate should be set depending on the speed of your wireless network. Select from a range of transmission speeds, or keep the default, Auto. When the Auto setting is selected, the Gateway automatically uses the fastest possible data rate and enables the Auto-Fallback feature, which negotiates the best possible connection speed between the Gateway and a wireless device. Wreless Afterburner To improve wireless performance when the Gateway is used with devices that support SpeedBooster, keep the default, Enable. Otherwise, select Dsable. Wireless Client List MAC Address Filter List MAC 01-20 Enter the MAC addresses of the devices whose wireless access you want to block or allow. Wreless Clent MAC Lst Click this to open the Wireless Client List screen. Wireless Client List This screen lists the MAC addresses of the wireless devices. Select Enable MAC Flter for any device you want to add to the MAC Address Filter List. Then click Update Flter Lst. To retrieve the most up-to-date information, click Refresh. To exit this screen and return to the Wireless MAC Filter List screen, click Close. Wreless-G ADSL Gateway wth SpeedBooster Beacon Interval Enter a value between 1 and 65,535 milliseconds. The Beacon Interval value indicates the frequency interval of the beacon. A beacon is a packet broadcast by the Gateway to synchronize the wireless network(s). The default value is 100. DTIM Interval This value, between 1 and 255, indicates the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the Gateway has buffered broadcast or multicast messages for associated clients, it 1 Chapter4 Advanced Configuration Flter Java Applets Java is a programming language for websites. If you deny Java, you run the risk of not having access to Internet sites created using this programming language. Select Flter Java Applets to enable Java filtering. Deselect the feature to allow Java usage. Flter Cookes A cookie is data stored on your computer and used by Internet sites when you interact with them. Select Flter Cookes to filter cookies. Deselect the feature to allow cookie usage. Flter ActveX ActiveX is a programming language for websites. If you deny ActiveX, you run the risk of not having access to Internet sites created using this programming language. Select Flter ActveX to enable ActiveX filtering. Deselect the feature to allow ActiveX usage. sends the next DTIM with a DTIM Interval value. Its clients hear the beacons and awaken to receive the broadcast and multicast messages. The default value is 1. Fragmentaton Threshold This value specifies the maximum size for a packet before data is fragmented into multiple packets. If you experience a high packet error rate, you may slightly increase the Fragmentation Threshold. Setting the Fragmentation Threshold too low may result in poor network performance. Only minor reduction of the default value is recommended. In most cases, it should remain at its default value of 23. RTS Threshold Should you encounter inconsistent data flow, only minor reduction of the default, 23, is recommended. If a network packet is smaller than the preset RTS threshold size, the RTS/CTS mechanism will not be enabled. The Gateway sends Request to Send (RTS) frames to a particular receiving station and negotiates the sending of a data frame. After receiving an RTS, the wireless station responds with a Clear to Send (CTS) frame to acknowledge the right to begin transmission. The RTS Threshold value should remain at its default value of 23. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Block WAN Requests Block Anonymous Internet Requests This feature makes it more difficult for outside users to work their way into your network. This feature is selected by default. Deselect the feature to allow anonymous Internet requests. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Security > Firewall The Firewall screen is used to configure a firewall that can filter out various types of unwanted traffic on the Gateway's local network. Security > VPN Passthrough The VPN Passthrough screen allows you to enable VPN tunnels using IPSec, PPTP, or L2TP protocols to pass through the Gateway's firewall. Security > Firewall Security > VPN Passthrough Firewall SPI Frewall Protecton To use firewall protection, keep the default selection, Enable. To turn off firewall protection, select Dsable. VPN Passthrough IPSec Passthrough Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec tunnels to pass through the Gateway, keep the default, Enable. PPTP Passthrough Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass through the Gateway, keep the default, Enable. Additional Filters Flter Proxy Use of WAN proxy servers may compromise the Gateway's security. Denying Proxy will disable access to any WAN proxy servers. Select Flter Proxy to enable proxy filtering. Deselect the feature to allow proxy access. Wreless-G ADSL Gateway wth SpeedBooster 1 Chapter4 Advanced Configuration L2TP Passthrough Layer 2 Tunneling Protocol is the method used to enable Point-to-Point sessions via the Internet on the Layer 2 level. To allow L2TP tunnels to pass through the Gateway, keep the default, Enable. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Access Restrictions > Internet Access Policy The Internet Access Policy screen allows you to block or allow specific kinds of Internet usage and traffic, such as Internet access, designated services, and websites during specific days and times. Summary Status Policies are disabled by default. To enable a policy, select the policy number from the drop-down menu, and select Enable. To create a policy, follow steps 1-11. Repeat these steps to create additional policies, one at a time. 1. Select a number from the Internet Access Policy dropdown menu. 2. To enable this policy, select Enable. 3. Enter a Policy Name in the field provided. 4. Click Edt Lst of PCs to select which computers will be affected by the policy. The Internet Access PC List screen appears. You can select a computer by MAC address or IP address. You can also enter a range of IP addresses if you want this policy to affect a group of computers. After making your changes, click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Then click Close. Access Restrictions > Internet Access Policy Internet Access Policy Internet Access Polcy Access can be managed by a policy. Use the settings on this screen to establish an access policy (after Save Settngs is clicked). Selecting a policy from the drop-down menu will display that policy's settings. To delete a policy, select that policy's number and click Delete. To view all the policies, click Summary. Summary The policies are listed with the following information: No., Policy Name, Days, and Time of Day. To delete a policy, select Delete. To return to the Internet Access Policy screen, click Close. Internet Access PC List Wreless-G ADSL Gateway wth SpeedBooster 1 Chapter4 Advanced Configuration 5. Select the appropriate option, Deny or Allow, depending on whether you want to block or allow Internet access for the computers you selected on the Internet Access PC List screen. 6. Decide which days and what times you want this policy to be enforced. Select the individual days during which the policy will be in effect, or select Everyday. Then enter a range of hours and minutes during which the policy will be in effect, or select 2 Hours. 7. You can block websites with specific URL addresses. Enter each URL in a separate Website Blocking by URL Address field. 8. You can also block websites using specific keywords. Enter each keyword in a separate Website Blocking by Keyword field. 9. You can filter access to various services accessed over the Internet, such as FTP or telnet. From the Blocked Services list, select the service you want to block. The port numbers and protocol for the selected service are automatically displayed. 10. If the service you want is not listed, select UserDefned. Enter its port numbers in the fields provided. Then select its protocol: ICMP, TCP, UDP, or TCP & UDP from the drop-down menu. 11. Click Save Settngs to save the policy's settings. To cancel the policy's settings, click Cancel Changes. Applications and Gaming > Single Port Forwarding Single Port Forwarding To forward a port, enter the information on each line for the criteria required. Applcaton Enter the name you wish to give the application. Each name can be up to 12 characters. External Port Enter the external port number used by the server or Internet application. Check with the Internet application documentation for more information. Internal Port Enter the internal port number used by the server or Internet application. Check with the Internet application documentation for more information. Protocol Select the protocol used for this application, either TCP or UDP, or Both. IP Address For each application, enter the IP address of the computer that should receive the requests. Enabled For each application, select Enabled to enable port forwarding. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Applications and Gaming > Single Port Forwarding The Single Port Forwarding screen allows you to customize port services for common applications on this screen. When users send these types of requests to your network via the Internet, the Gateway will forward those requests to the appropriate servers (computers). Before using forwarding, you should assign static IP addresses to the designated servers. Applications and Gaming > Port Range Forwarding The Port Range Forwarding screen allows you to set up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. (Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming. Some Internet applications may not require any forwarding.) Wreless-G ADSL Gateway wth SpeedBooster 18 Chapter4 Advanced Configuration Applications & Gaming > Port Range Triggering The Port Range Triggering screen allows the Gateway to watch outgoing data for specific port numbers. The IP address of the computer that sends the matching data is remembered by the Gateway, so that when the requested data returns through the Gateway, the data is pulled back to the proper computer by way of IP address and port mapping rules. When users send these types of requests to your network via the Internet, the Gateway will forward those requests to the appropriate servers (computers). Before using forwarding, you should assign static IP addresses to the designated servers. If you need to forward all ports to one computer, click the DMZ tab. Applications and Gaming > Port Range Forwarding Port Range Forwarding To forward a port range, enter the information on each line for the criteria required. Applcaton In this field, enter the name you wish to give the application. Each name can be up to 12 characters. Port Range Start and End Enter the number or range of port(s) used by the server or Internet applications. Check with the Internet application documentation for more information. Protocol Select the protocol used for this application, either TCP or UDP, or Both. IP Address For each application, enter the IP address of the computer running the specific application. Enable Select Enable to enable port forwarding for the applications you have defined. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Applications and Gaming > Port Range Triggering Port Range Triggering To trigger a port range, enter the information on each line for the criteria required. Applcaton Name Enter the application name of the trigger. Trggered Range Start Port and End Port For each application, enter the starting and ending port numbers of the triggered port number range. Check with the Internet application documentation for the port number(s) needed. Forwarded Range Start Port and End Port For each application, enter the starting and ending port numbers of the forwarded port number range. Check with the Internet application documentation for the port number(s) needed. Enabled Select Enabled to enable port triggering for the applications you have defined. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Applications and Gaming > DMZ The DMZ feature allows one network computer to be exposed to the Internet for use of a special-purpose service such as Internet gaming or videoconferencing. DMZ hosting forwards all the ports at the same time to one PC. The Port Range Forwarding feature is more secure Wreless-G ADSL Gateway wth SpeedBooster 19 Chapter4 Advanced Configuration QoS (Quality of Service) QoS To use QoS, select Enable. Otherwise, keep the default, Dsable. because it only opens the ports you want to have opened, while DMZ hosting opens all the ports of one computer, exposing the computer to the Internet. Application-based QoS Application-based QoS manages information as it is transmitted and received. Depending on the settings of the QoS screen, this feature will assign information a high, medium, or low priority for the five preset applications and three additional applications that you specify. The five preset applications are the following: · Applications and Gaming > DMZ DMZ Any computer whose port is being forwarded must have its DHCP client function disabled and should have a new static IP address assigned to it because its IP address may change when using the DHCP function. DMZ Hostng To disable DMZ hosting, keep the default, Dsable. To expose one PC, select Enable. Then configure the following setting: DMZ Host IP Address Enter the IP address of the computer. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. · · FTP (File Transfer Protocol) A protocol used to transfer files over a TCP/IP network (Internet, UNIX, etc.). For example, after HTML pages are developed for a website on a local machine, they are typically uploaded to the web server using FTP. HTTP (HyperText Transport Protocol) The communications protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client web browser. Telnet A terminal emulation protocol commonly used on Internet and TCP/IP-based networks. It allows a user at a terminal or computer to log onto a remote device and run a program. SMTP (Simple Mail Transfer Protocol) The standard e-mail protocol on the Internet. It is a TCP/IP protocol that defines the message format and the message transfer agent (MTA), which stores and forwards the mail. POP3 (Post Office Protocol 3) A standard mail server commonly used on the Internet. It provides a message store that holds incoming e-mail until users log on and download it. POP3 is a simple system with little selectivity. All pending messages and attachments are downloaded at the same time. POP3 uses the SMTP messaging protocol. · Applications and Gaming > QoS Quality of Service (QoS) ensures better service to high-priority types of network traffic, which may involve demanding, real-time applications, such as videoconferencing. · Specfc Port# You can add three more applications by entering their respective port numbers in these fields. Hgh prorty/Medum prorty/Low prorty For each application, select Hgh prorty (traffic on this queue shares 60% of the total bandwidth), Medum prorty (traffic on this queue shares 18% of the total bandwidth), or Low prorty (traffic on this queue shares 1% of the total bandwidth). Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Applications and Gaming > QoS Wreless-G ADSL Gateway wth SpeedBooster 20 Chapter4 Advanced Configuration NOTE: When you are in a remote location and wish to manage the Gateway, enter http://:port. Enter the Gateway's specific Internet IP address in place of , and enter the Management Port number in place of the word port. Administration > Management The Administration > Management screen allows the network's administrator to manage specific Gateway functions for access and security. SNMP SNMP is a popular network monitoring and management protocol. Devce Name Enter the name of the Gateway. SNMP To use SNMP, select Enable. Otherwise, select Dsable. Get Communty Enter the password that allows read-only access to the Gateway's SNMP information. Set Communty Enter the password that allows read/write access to the Gateway's SNMP information. Trap Management: Trap to Enter the IP address of the remote host computer that will receive the trap messages. Administration > Management Gateway Access Local Gateway Access To ensure the Gateway's security, you will be asked for your username and password when you access the Gateway's web-based utility. The default username and password are admn. Gateway Userlst Select the number of the user. The default is user 1. Gateway Username Enter Username, admn. the default Gateway UPnP Universal Plug and Play (UPnP) allows Windows XP and Vista to automatically configure the Gateway for various Internet applications, such as gaming and videoconferencing. UPnP If you want to use UPnP, keep the default, Enable. Otherwise, select Dsable. WLAN If you are using the Gateway in a public domain where you are giving wireless access to your guests, you can disable wireless access to the Gateway's web-based utility. Management va WLAN This feature allows the Gateway to be managed by a wireless computer on the local network when it logs into the Gateway's web-based utility. You will only be able to access the utility via a wired connection if you disable this feature. To allow wireless access to the utility, keep the default, Enable. Otherwise, select Dsable. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Gateway Password Linksys recommends that you change the default Gateway Password, admn, to one of your choice. Re-enter to Confrm Enter the Gateway Password again to confirm. For non-admin users, select a different user number, and then configure the Gateway Username and Password settings. Remote Gateway Access Remote Management To permit remote access of the Gateway, from outside the local network, select Enable. Otherwise, keep the default, Dsable. Management Port Enter the port number that will be open to outside access. Wreless-G ADSL Gateway wth SpeedBooster 21 Chapter4 Advanced Configuration Log Type Select ALL, Access Log, or Frewall Log. Click pageRefresh to update the log. Click Clear to clear all the information that is displayed. Click Prevous Page to view the previous page of information. Click Next Page to view the next page of information. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Administration > Reporting The Gateway can keep logs of traffic and events for your Internet connection. Administration > Diagnostics The ping test allows you to check the connections of your network devices, including connection to the Internet. Administration > Log Reporting Log To disable the Log function, keep the default, Dsable. To monitor traffic between the network and the Internet, select Enable. With logging enabled, you can choose to view temporary logs. E-Mal Alerts To enable E-Mail Alerts, select Enable. Denal of Servce Thresholds Enter the number of Denial of Service attacks that will trigger an e-mail alert. SMTP Mal Server Enter the IP address of the SMTP server. E-Mal Address for Alert Logs Enter the e-mail address that will receive alert logs. Return E-Mal address Enter the return address for the e-mail alerts. (This can be a dummy address.) Vew Log To view the logs, click Vew Log. Administration > Diagnostics Ping Test Ping Test Parameters The ping test checks the status of a connection. Png Target IP Enter the IP address that you want to ping. This can be either a local (LAN) or Internet (WAN) IP address. Png Sze Enter the packet size you want to use. The default is 0 bytes. Number of Pngs Enter how many times you want to ping. The default is 1. Png Interval Enter the number of milliseconds between pings. The default is 1000 milliseconds. Png Tmeout Enter the number of milliseconds before the ping test will time out. The default is 000 milliseconds. Start Test To run the test, click this button. The Ping Test screen will show if the test was successful. Click Close to return to the Diagnostics screen. Log > View Log Wreless-G ADSL Gateway wth SpeedBooster 22 Chapter4 Advanced Configuration Administration > Factory Defaults The Administration > Factory Defaults screen allows you to restore the Gateway's configuration to its factory default settings. Diagnostics > Ping Png Result The results of the ping test are displayed. Click Save Settngs to apply your changes, or click Cancel Changes to cancel your changes. Administration > Factory Defaults Administration > Backup & Restore The Backup & Restore screen allows you to back up or restore the Gateway's settings using a configuration file. NOTE: Restoring factory defaults deletes custom settings. Note your custom settings before restoring the factory defaults. Factory Defaults Restore Factory Defaults To reset settings to the default values, click this button and follow the on-screen instructions. Any custom Gateway settings you have saved will be lost when the default settings are restored. Administration > Firmware Upgrade The Firmware Upgrade screen allows you to upgrade the Gateway's firmware. Do not upgrade the firmware unless you are experiencing problems with the Gateway or the new firmware has a feature you want to use. Administration > Backup & Restore Backup Configuration Backup To save the Gateway's settings in a configuration file, click this button and follow the on-screen instructions. Restore Configuration To use this option, you must have previously backed up its configuration settings. Please select a fle to restore Click the Browse button and select the Gateway's configuration file. Restore To restore the Gateway's configuration settings, click this button and follow the on-screen instructions. Administration > Firmware Upgrade Wreless-G ADSL Gateway wth SpeedBooster 23 Chapter4 Advanced Configuration on the Internet connection type selected on the Basic Setup screen. Click Refresh to update the on-screen information. NOTE: The Gateway may lose the settings you have customized. Before you upgrade its firmware, write down all of your custom settings. After you upgrade its firmware, you will have to re-enter all of your configuration settings. Status > Local Network The Local Network screen displays information about the local, wired network. Firmware Upgrade Before upgrading the firmware, download the Gateway's firmware upgrade file from the Linksys website, www.linksys.com/international. Then extract the file. Language Select the language you want the web-based utility to use: Englsh, French, or German. The web-based utility will change to the new language five seconds after you select it. Please Select a Fle to Upgrade Click Browse and select the extracted firmware upgrade file. Start to Upgrade After you have selected the appropriate file, click this button, and follow the on-screen instructions. Status > Local Network Status > Gateway The Gateway screen displays information about the Gateway and its current settings. Local Network MAC Address The MAC address of the Gateway's local, wired interface is displayed. IP Address The Gateway's IP address, as it appears on your local network, is displayed. Subnet Mask The Subnet Mask of the Gateway is displayed. DHCP Server DHCP Server The status of the Gateway's DHCP server function is displayed. Start IP Address For the range of IP addresses used by devices on your local network, the starting IP address is displayed. Status > Gateway End IP Address For the range of IP addresses used by devices on your local network, the ending IP address is displayed. DHCP Clent Table Click this button to view a list of devices that are using the Gateway as a DHCP server. Gateway Information Frmware Verson The version number of the Gateway's current firmware is displayed. MAC Address The Gateway's MAC address, as seen by your ISP, is displayed. Current Tme The time set on the Gateway is displayed. Internet Connection This section shows the current network information stored in the Gateway. The information varies depending DHCP Active IP Table Wreless-G ADSL Gateway wth SpeedBooster 2 Chapter4 Advanced Configuration Wireless Frmware Verson The version number of the firmware is displayed. MAC Address The wireless MAC address of the Gateway's local, wireless interface is displayed. Mode The wireless network mode of the Gateway is displayed. SSID The wireless network name, which is also called the SSID, is displayed. Channel The channel of the wireless network is displayed. Encrypton Functon The wireless security method is displayed. Wreless Clents Connected Click this button to view a list of wireless clients connected to the Gateway. DHCP Active IP Table The DHCP Active IP Table lists computers and other devices that have been assigned IP addresses by the Gateway. The list displays Client Host Name, IP Address, MAC Address, and Expires time (how much time is left for the current IP address). To remove a DHCP client, click Delete. To retrieve the most up-todate information, click Refresh. To exit this screen and return to the Local Network screen, click Close. ARP/RARP Table Click this button to view the current IP and MAC addresses for the local network clients of the Gateway. ARP/RARP Table ARP/RARP Table An ARP request is a request sent by the Gateway asking local network devices with IP addresses for their MAC addresses, so the Gateway can map IP addresses to MAC addresses. RARP is the reverse of ARP. (This data is stored in temporary memory and changes periodically.) To retrieve the most up-to-date information, click Refresh. To exit this screen and return to the Local Network screen, click Close. Networked Computers Networked Computers The list of wireless devices displays Computer Name, IP Address, and MAC Address. To retrieve the most up-todate information, click Refresh. To exit this screen and return to the Wireless screen, click Close. Status > Wireless The Wireless screen displays information about your wireless network. Status > DSL The DSL screen displays information about your DSL connection. Status > Wireless Status > DSL Wreless-G ADSL Gateway wth SpeedBooster 2 Chapter4 Advanced Configuration DSL Connection Status The status of the DSL connection is displayed. Downstream Rate The download speed of traffic from the Internet to the Gateway is displayed. Upstream Rate The upload speed of traffic from the Gateway to the Internet is displayed. For ADSL connection, the Upstream Rate is typically 25% of the Downstream Rate. NOTE: The Downstream and Upstream Rates are affected by distance from and configuration of the DSL central office. PVC Connection Encapsulaton The Encapsulation setting selected on the Basic Setup screen is displayed. DSL Modulaton Mode The DSL Modulation Mode selected on the Basic Setup screen is displayed. Multplexng The Multiplexing setting selected on the Basic Setup screen is displayed. Qos The QoS method selected on the Basic Setup screen is displayed. PCR Rate The PCR Rate value entered on the Basic Setup screen is displayed. SCR Rate The SCR Rate value entered on the Basic Setup screen is displayed. Autodetect The Autodetect setting selected on the Basic Setup screen is displayed. VPI The VPI value entered on the Basic Setup screen is displayed. VCI The VCI value entered on the Basic Setup screen is displayed. Enable The number of Permanent Virtual Circuits (PVC) is displayed. PVC Status The status of the PVC is displayed. Wreless-G ADSL Gateway wth SpeedBooster 2 AppendixA Troubleshooting You need to modify the basic settings on the Gateway. Run the Setup Wizard on the Setup CD-ROM. You need to modify the advanced settings on the Gateway. Open the web browser (for example, Internet Explorer or Firefox), and enter the Gateway's IP address in the address field (the default IP address is 192.18.1.1). When prompted, complete the User name and Password fields (the default user name and password is admn). Click the appropriate tab to change the settings. Appendx A: Troubleshootng Your computer cannot connect to the Internet. Follow the instructions until your computer can connect to the Internet: · · Make sure that the Gateway is powered on. The Power LED should be green and not flashing. If the Power LED is flashing, then power off all of your network devices, including the Gateway and computers. Then power on each device in the following order: 1. 2. Gateway Computer WEB: If your questions are not addressed here, refer to the Linksys www.lnksys.com/nternatonal website, · Check the LEDs on the front panel of the Gateway. Make sure the Power, DSL, and at least one of the numbered LEDs are lit. If they are not, then check the cable connections. The computer should be connected to one of the ports numbered 1-4 on the Gateway, and the Line port of the Gateway must be connected to the ADSL line. When you double-click the web browser, you are prompted for a username and password. If you want to get rid of the prompt, follow these instructions. Launch the web browser and perform the following steps (these steps are specific to Internet Explorer but are similar for other browsers): 1. 2. 3. 4. Select Tools > Internet Optons. Click the Connectons tab. Select Never dal a connecton. Click OK. You are using a static IP address and cannot connect. Refer to Windows Help, and change your Internet Protocol (TCP/IP) Properties to Obtan an IP address automatcally. The computer cannot connect wirelessly to the network. Make sure the wireless network name or SSID is the same on both the computer and the Gateway. If you have enabled wireless security, then make sure the same security method and key are used by both the computer and the Gateway. Wreless-G ADSL Gateway wth SpeedBooster 2 AppendixB Specifications Appendx B: Specfcatons Model Number Standards WAG54GS IEEE 802.11g, IEEE 802.11b, IEEE 802.3u, IEEE 802.3, g.992.1 (g.dmt), g.992.2 (g.lite), g.992.3, g.992.5, T1.413i2, U-R2 for Annex B Power, Line, Ethernet (1-4) Reset, Power, SES (SecureEasySetup) CAT 5 UTP Power, Wireless, Ethernet (1-4), DSL, Internet, SecureEasySetup 18 dBm Able Ports Button Cabling Type LEDs Transmit Power UPnP able/cert Security Features Password-Protected Configuration for Web Access PAP and CHAP Authentication Denial of Service (DoS) Prevention URL Filtering, and Keyword, Java, ActiveX, Proxy, Cookie Blocking ToD Filter (Blocks Access by Time) VPN Passthrough for IPSec, PPTP, and L2TP Protocols 128, 64 Bits WEP with Passphrase WEP Key Generation, WPA, WPA2 SSID Broadcast Disable Access Restriction by MAC and IP Addresses WEP Key Bits 64, 128 140 x 140 x 27 mm 270 g 12VDC 1A CE 0 to 40°C -20 to 70°C 10 to 85% Noncondensing Envronmental Dimensions Weight Power Certification Operating Temp. Storage Temp. Operating Humidity Storage Humidity 5 to 90% Noncondensing Wreless-G ADSL Gateway wth SpeedBooster 28 AppendixC Warranty Information TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT WILL LINKSYS BE LIABLE FOR ANY LOST DATA, REVENUE OR PROFIT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, REGARDLESS OF THE THEORY OF LIABILITY (INCLUDING NEGLIGENCE), ARISING OUT OF OR RELATED TO THE USE OF OR INABILITY TO USE THE PRODUCT (INCLUDING ANY SOFTWARE), EVEN IF LINKSYS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL LINKSYS' LIABILITY EXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT. The foregoing limitations will apply even if any warranty or remedy provided under this Agreement fails of its essential purpose. Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above limitation or exclusion may not apply to You. Ths Warranty s vald and may be processed only n the country of purchase. Please direct all inquiries to: Linksys, P.O. Box 18558, Irvine, CA 92623. Appendx C: Warranty Informaton Linksys warrants to You that, for a period of three years (the "Warranty Period"), your Linksys Product will be substantially free of defects in materials and workmanship under normal use. Your exclusive remedy and Linksys' entire liability under this warranty will be for Linksys at its option to repair or replace the Product or refund Your purchase price less any rebates. This limited warranty extends only to the original purchaser. If the Product proves defective during the Warranty Period call Linksys Technical Support in order to obtain a Return Authorization Number, if applicable. BE SURE TO HAVE YOUR PROOF OF PURCHASE ON HAND WHEN CALLING. If You are requested to return the Product, mark the Return Authorization Number clearly on the outside of the package and include a copy of your original proof of purchase. RETURN REQUESTS CANNOT BE PROCESSED WITHOUT PROOF OF PURCHASE. You are responsible for shipping defective Products to Linksys. Linksys pays for UPS Ground shipping from Linksys back to You only. Customers located outside of the United States of America and Canada are responsible for all shipping and handling charges. ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE ARE LIMITED TO THE DURATION OF THE WARRANTY PERIOD. ALL OTHER EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF NONINFRINGEMENT, ARE DISCLAIMED. Some jurisdictions do not allow limitations on how long an implied warranty lasts, so the above limitation may not apply to You. This warranty gives You specific legal rights, and You may also have other rights which vary by jurisdiction. This warranty does not apply if the Product (a) has been altered, except by Linksys, (b) has not been installed, operated, repaired, or maintained in accordance with instructions supplied by Linksys, or (c) has been subjected to abnormal physical or electrical stress, misuse, negligence, or accident. In addition, due to the continual development of new techniques for intruding upon and attacking networks, Linksys does not warrant that the Product will be free of vulnerability to intrusion or attack. Wreless-G ADSL Gateway wth SpeedBooster 29 AppendixD Regulatory Information