User manual LINKSYS WRT54GP2A-AT

® A Division of Cisco Systems, Inc. 2.4 GHz Wireless-G 802.11g WIRELESS Broadband Router with 2 Phone Ports User Guide Model No. WRT54GP2A-AT Wireless-G Broadband Router with 2 Phone Ports Copyright and Trademarks Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright © 2004 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders. WARNING: This product contains chemicals, including lead, known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling. How to Use this Guide Your guide to the Wireless-G Broadband Router with 2 Phone Ports has been designed to make understanding networking with the Router easier than ever. Look for the following items when reading this User Guide: This checkmark means there is a note of interest and is something you should pay special attention to while using the Router. This exclamation point means there is a caution or warning and is something that could damage your property or the Router. This question mark provides you with a reminder about something you might need to do while using the Router. In addition to these symbols, there are definitions for technical terms that are presented like this: word: definition. Also, each figure (diagram, screenshot, or other image) is provided with a figure number and description, like this: Figure 0-1: Sample Figure Description Figure numbers and descriptions can also be found in the "List of Figures" section. WRT54GP2A-AT-UG-40907A JL Wireless-G Broadband Router with 2 Phone Ports Table of Contents Chapter 1: Introduction Welcome What's in this Guide? 1 1 2 Chapter 2: Planning Your Wireless Network Network Topology Ad-Hoc versus Infrastructure Mode Network Layout 4 4 4 5 Chapter 3: Getting to Know the Router The Back Panel The Front Panel 6 6 7 Chapter 4: Connecting the Router Overview Connecting the Router to Your Broadband Modem Connecting One Router to Another 8 8 8 9 Chapter 5: Configuring the Router Overview How to Access the Web-based Utility The Setup Tab - Basic Setup The Setup Tab - DDNS The Setup Tab - MAC Address Clone The Wireless Tab - Basic Wireless Settings The Wireless Tab - Wireless Security The Wireless Tab - Wireless MAC Filter The Wireless Tab - Advanced Wireless Settings The Security Tab - Firewall The Security Tab - VPN The Access Restrictions Tab - Internet Access The Applications & Gaming Tab - Port Range Forward The Applications & Gaming Tab - Port Trigger The Applications & Gaming Tab - UPnP Forward The Applications & Gaming Tab - DMZ The Administration Tab - Management 11 11 13 13 18 19 20 21 23 24 25 26 27 29 30 31 33 34 Wireless-G Broadband Router with 2 Phone Ports The Administration Tab - Log The Administration Tab - Diagnostics The Administration Tab - Factory Defaults The Administration Tab - Backup and Restore The Administration Tab - Reboot The Status Tab - Router The Status Tab - Local Network The Status Tab - Wireless The Status Tab - Voice 36 37 38 39 39 40 41 42 43 Chapter 6: Signing up for AT&T CallVantagesm Service Overview Instructions 44 44 44 Appendix A: Troubleshooting Common Problems and Solutions Frequently Asked Questions 45 45 55 Appendix B: Wireless Security Security Precautions Security Threats Facing Wireless Networks 59 59 59 Appendix C: Windows Help Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter Windows 98 or Me Instructions Windows 2000 or XP Instructions For the Router's Web-based Utility 62 63 63 63 64 Appendix E: Glossary Appendix F: Specifications Appendix G: Warranty Information Appendix H: Regulatory Information Appendix I: Contact Information AT&T Linksys 65 72 74 75 77 77 77 Wireless-G Broadband Router with 2 Phone Ports List of Figures Figure 3-1: Back Panel Figure 3-2: Front Panel Figure 4-1: Connect the Broadband Modem Figure 4-2: Connect a Telephone Figure 4-3: Connect a PC Figure 4-4: Connect the Power Figure 4-5: Router Connected to Another Router Figure 4-6: Connect the Broadband Modem Figure 4-7: Connect a Telephone Figure 4-8: Connect the Other Router Figure 4-9: Connect the Power Figure 5-1: Router's IP Address Figure 5-2: Router Login Figure 5-3: Setup Tab - Basic Setup - Automatic Configuration (DHCP) Figure 5-4: Static IP Figure 5-5: PPPoE Figure 5-6: PPTP Figure 5-7: Setup Tab - DDNS (DynDNS.org) Figure 5-8: Setup Tab - DDNS (TZO.com) Figure 5-9: Setup Tab - MAC Address Clone Figure 5-10: Wireless Tab - Basic Wireless Settings Figure 5-11: Wireless Tab - Wireless Security (WPA Pre-Shared Key) Figure 5-12: Wireless Tab - Wireless Security (WPA RADIUS) Figure 5-13: Wireless Tab - Wireless Security (RADIUS) Figure 5-14: Wireless Tab - Wireless Security (WPA RADIUS) Figure 5-15: Wireless Tab - Wireless MAC Filter Figure 5-16: MAC Address Filter List Figure 5-17: Wireless Client MAC List 6 7 8 8 8 8 9 10 10 10 10 13 13 13 14 14 15 18 18 19 20 21 21 22 22 23 23 23 Wireless-G Broadband Router with 2 Phone Ports Figure 5-18: Wireless Tab - Advanced Wireless Settings Figure 5-19: Security Tab - Firewall Figure 5-20: Security Tab - VPN Figure 5-21: Access Restrictions Tab - Internet Access Figure 5-22: Internet Policy Summary Figure 5-23: List of PCs Figure 5-24: Applications & Gaming Tab - Port Range Forward Figure 5-25: Applications & Gaming Tab - Port Trigger Figure 5-26: Applications & Gaming Tab - UPnP Forward Figure 5-27: Applications & Gaming Tab - DMZ Figure 5-28: Administration Tab - Management Figure 5-29: Administration Tab - Log Figure 5-30: Administration Tab - Diagnostics Figure 5-31: Ping Test Figure 5-32: Traceroute Test Figure 5-33: Administration Tab - Factory Defaults Figure 5-34: Administration Tab - Backup and Restore Figure 5-35: Administration Tab - Reboot Figure 5-36: Status Tab - Router Figure 5-37: Status Tab - Local Network Figure 5-38: DHCP Clients Table Figure 5-39: Status Tab - Wireless Figure 5-40: Wireless Client MAC List Figure 5-41: Status Tab - Voice Figure 6-1: Website for AT&T CallVantage Service Figure D-1: IP Configuration Screen Figure D-2: MAC Address/Adapter Address Figure D-3: MAC Address/Physical Address Figure D-4: Access Restrictions - MAC and IP Addresses Figure D-5: MAC Address Clone 24 25 26 27 27 28 29 30 31 33 34 36 37 37 37 38 39 39 40 41 41 42 42 43 44 63 63 64 64 64 Wireless-G Broadband Router with 2 Phone Ports Chapter 1: Introduction Welcome Thank you for choosing the Wireless-G Broadband Router with 2 Phone Ports. This Router can direct and control communications for your wired and wireless networks, sharing Internet access, files and fun, easily and securely. Plus, after you have set up your Internet phone service, make phone or fax calls using your Internet connection. How does the Router do all of this? A router is a device that allows access to an Internet connection over a network. With the Wireless-G Broadband Router, this access can be shared over the four switched ports or via the wireless broadcast at either up to 11Mbps for Wireless-B or up to 54Mbps for Wireless-G. In addition, the WPA standard provides greater security opportunities while the whole network is protected through NAT technology. Full configurability, including these security features, are accessed through the easy-to-use, web-based utility. But what does all of this mean? Networks are useful tools for sharing Internet access and computer resources. Multiple computers can share Internet access, so you don't need more than one high-speed Internet connection. After you set up your Internet phone service, you can also make Internet phone or fax calls, even while you're surfing the Internet. Plus, you can access one printer from different computers and access data located on another computer's hard drive. Networks are even used for playing multiplayer video games. All the while, the Router protects your networks from unauthorized and unwelcome users. So, networks not only are useful in homes and offices, but also can be fun. PCs on a wired network create a LAN, or Local Area Network. They are connected with Ethernet cables, which is why the network is called "wired". PCs equipped with wireless cards or adapters can communicate without cumbersome cables. By sharing the same wireless settings, within their transmission radius, they form a wireless network, which is sometimes called a Wireless Local Area Network (WLAN). The Router bridges wireless networks of both 802.11b and 802.11g standards and wired networks, allowing them to communicate with each other. To create your network, install and set up the Router. To guide you through the process, Linksys strongly recommends that you run the Setup Wizard on the Setup CD-ROM. If you prefer to manually set up the Router, use the instructions in the Quick Installation or this User Guide to help you. These instructions should be all you need to get the most out of the Wireless-G Broadband Router. NOTE: If you want to sign up for Internet phone service or activate your account, visit http://www.att.com/linksys after you have installed and configured the Router. Refer to "Chapter 6: Signing up for AT&T CallVantagesm Service" for more information. Chapter 1: Introduction Welcome mbps: one million bits per second; a unit of measurement for data transmission nat (network address translation): NAT technology translated IP addresses of a local area network to a different IP address for the Internet wpa (wi-fi protected access): a wireless security protocol using TKIP (Temporal Key Integrity Protocol) encryption, which can be used in conjunction with a RADIUS server browser: an application program that provides a way to look at and interact with all the information on the World Wide Web lan (local area network): the computers and networking products that make up the network in your home or office ethernet: an IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium 802.11b: an IEEE wireless networking standard that specifies a maximum data transfer rate of 11Mbps and an operating frequency of 2.4GHz 802.11g: an IEEE wireless networking standard that specifies a maximum data transfer rate of 54Mbps, an operating frequency of 2.4GHz, and backward compatibility with 802.11b devices 1 Wireless-G Broadband Router with 2 Phone Ports What's in this Guide? This user guide covers the basic steps for setting up a network with a router. After going through "Chapter 3: Getting to Know the Router," most users will only need to use the following chapters: · Chapter 4: Connecting the Router This chapter instructs you on how to connect the Router to your cable or DSL modem and PCs. After you create your network, then you will connect the telephones (or fax machines) to AT&T CallVantagesm Service via the Router. · Chapter 5: Configuring the Router This chapter explains how to configure the Router using your web browser and the Router's Web-based Utility. You will configure the Router using the settings provided by your ISP. · Chapter 6: Signing up for AT&T CallVantagesm Service When you are ready to sign up for or activate your AT&T CallVantage Service account, refer to the instructions in this chapter. When you're finished with the basic steps, then you are ready to connect to the Internet. You also have other chapter available for reference: · Chapter 1: Introduction This chapter describes the Router's applications and this User Guide. · Chapter 2: Planning Your Wireless Network This chapter describes the basics of wireless networking. · Appendix A: Troubleshooting This appendix describes some possible problems and solutions, as well as frequently asked questions, regarding installation and use of the Router. · Appendix B: Wireless Security This appendix explains the risks of wireless networking and some solutions to reduce the risks. · Appendix C: Windows Help This appendix describes how you can use Windows Help for instructions about networking, such as installing the TCP/IP protocol. Chapter 1: Introduction What's in this Guide? 2 Wireless-G Broadband Router with 2 Phone Ports · Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter This appendix instructs you on how to find the MAC address or Ethernet address of your PC's Ethernet network adapter. · Appendix E: Glossary This appendix gives a brief glossary of terms frequently used in networking. · Appendix F: Specifications This appendix provides the technical specifications for the Router. · Appendix G: Warranty Information This appendix supplies the warranty information for the Router. · Appendix H: Regulatory Information This appendix supplies the regulatory information regarding the Router. · Appendix I: Contact Information This appendix provides contact information for a variety of Linksys resources, including Technical Support. Chapter 1: Introduction What's in this Guide? 3 Wireless-G Broadband Router with 2 Phone Ports Chapter 2: Planning Your Wireless Network Network Topology A Wireless Local Area Network (WLAN) is exactly like a regular Local Area Network (LAN), except that each computer in the WLAN uses a wireless device to connect to the network. Computers in a WLAN share the same frequency channel and SSID, which is an identification name shared by the wireless devices belonging to the same wireless network. network: a series of computers or devices connected for the purpose of data sharing, storage, and/or transmission between users ssid: your wireless network's name Ad-Hoc versus Infrastructure Mode Unlike wired networks, wireless networks have two different modes in which they may be set up: infrastructure and ad-hoc. An infrastructure configuration is a WLAN and wired LAN communicating to each other through an access point. An ad-hoc configuration is wireless-equipped computers communicating directly with each other. Choosing between these two modes depends on whether or not the wireless network needs to share data or peripherals with a wired network or not. If the computers on the wireless network need to be accessible by a wired network or need to share a peripheral, such as a printer, with the wired network computers, the wireless network should be set up in Infrastructure mode. The basis of Infrastructure mode centers around an access point or wireless router, such as the Wireless-G Broadband Router with 2 Phone Ports, which serves as the main point of communications in a wireless network. The Router transmits data to PCs equipped with wireless network adapters, which can roam within a certain radial range of the Router. You can arrange the Router and multiple access points to work in succession to extend the roaming range, and you can set up your wireless network to communicate with your Ethernet hardware as well. If the wireless network is relatively small and needs to share resources only with the other computers on the wireless network, then the Ad-Hoc mode can be used. Ad-Hoc mode allows computers equipped with wireless transmitters and receivers to communicate directly with each other, eliminating the need for a wireless router or access point. The drawback of this mode is that in Ad-Hoc mode, wireless-equipped computers are not able to communicate with computers on a wired network. And, of course, communication between the wirelessequipped computers is limited by the distance and interference directly between them. ad-hoc: a group of wireless devices communicating directly to each other (peer-to-peer) without the use of an access point infrastructure: a wireless network that is bridged to a wired network via an access point adapter: a device that adds network functionality to your PC ethernet: IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium access point: a device that allows wirelessequipped computers and other devices to communicate with a wired network. Also used to expand the range of a wireless network Chapter 2: Planning Your Wireless Network Network Topology 4 Wireless-G Broadband Router with 2 Phone Ports Network Layout The Router has been specifically designed for use with both your 802.11b and 802.11g products. It is compatible with all 802.11b and 802.11g adapters, such as the Notebook Adapters (WPC54G, WPC11) for your laptop computers, PCI Adapter (WMP54G, WMP11) for your desktop PC, and USB Adapter (WUSB54G, WUSB11) when you want to enjoy USB connectivity. The Router will also communicate with the Wireless PrintServer (WPS54GU2, WPS54G, WPS11) and Wireless Ethernet Bridges (WET54G, WET11). When you wish to connect your wireless network with your wired network, you can use the Router's four Ethernet network ports. To add more ports, any of the Router's Ethernet network ports can be connected to any of Linksys's switches (such as the EZXS55W or EZXS88W). With these, and many other, Linksys products, your networking options are limitless. Go to the Linksys website at www.linksys.com for more information about products that work with the Wireless-G Broadband Router with 2 Phone Ports. Chapter 2: Planning Your Wireless Network Network Layout 5 Wireless-G Broadband Router with 2 Phone Ports Chapter 3: Getting to Know the Router The Back Panel The Router's ports and the Reset button are located on the back panel of the Router. Figure 3-1: Back Panel Internet Phone1 This Internet port connects to your cable or DSL modem. For your primary Internet phone line, the Phone1 port allows you to connect the Router to your telephone (or fax machine) using an RJ-11 telephone cable (not included). If you have a second Internet phone line, the Phone2 port allows you to connect the Router to your second telephone (or fax machine) using an RJ-11 telephone cable (not included). These four Ethernet ports connect to network devices, such as PCs, print servers, or additional switches. There are two ways to reset the Router to its factory default settings. Either press the Reset button for approximately five seconds, or restore the defaults from the Administration tab Factory Defaults of the Router's Web-based Utility. The Power port is where you will connect the power adapter. IMPORTANT: If you reset the Router, all of your settings, including Internet connection, Internet phone service, and security settings, will be deleted and replaced with the factory defaults. Do not reset the Router if you want to retain these settings. (If you have an active Internet phone service account and reset the Router, then the Router will automatically download its Internet phone service settings once it is connected to the Internet again.) 6 Phone2 Ethernet 1-4 Reset Button Power Chapter 3: Getting to Know the Router The Back Panel Wireless-G Broadband Router with 2 Phone Ports The Front Panel The Router's LEDs, which inform you about network activities, are located on the front panel. Figure 3-2: Front Panel Power Green. The Power LED lights up when the Router is powered on. If the LED is flashing, the Router is booting up or running a system self-test. Green. The WLAN LED lights up whenever there is a successful wireless connection. If the LED is flashing, the Router is actively sending or receiving data over the wireless network. Green. The Ethernet LED serves two purposes. If the LED is solidly lit, the Router is connected to a device through the corresponding port (Ethernet 1, 2, 3, or 4). If the LED is flashing, the Router is sending or receiving data over that port. Green. The Phone LED is solidly lit when a telephone or fax machine has a registered connection to AT&T through the corresponding port (Phone 1 or Phone 2). (The connection is registered if your Internet phone service account is active.) This LED is not lit when there is no registered connection. It flashes when the phone is being used or an incoming call has been detected. Green. The Internet LED lights up when the Router is connected to your cable or DSL modem. If the LED is flashing, the Router is sending or receiving data over the Internet port. Proceed to "Chapter 4: Connecting the Router." Chapter 3: Getting to Know the Router The Front Panel WLAN Ethernet 1-4 Phone 1-2 Internet 7 Wireless-G Broadband Router with 2 Phone Ports Chapter 4: Connecting the Router Overview This chapter includes two sets of instructions. If the Wireless-G Broadband Router with 2 Phone Ports will be the only router in your network, follow the instructions in "Connecting the Router to Your Broadband Modem." If you already have a router in your network and want to add the Wireless-G Broadband Router with 2 Phone Ports, follow the instructions in "Connecting One Router to Another." Figure 4-1: Connect the Broadband Modem Connecting the Router to Your Broadband Modem 1. Make sure that all of your hardware is powered off, including the Router, PCs, and broadband modem. 2. Connect your broadband modem's Ethernet cable to the Router's Internet port. 3. Plug a standard telephone into the Router's Phone1 port. IMPORTANT: Do not connect the Phone port to a telephone wall jack. Make sure you only connect a telephone or fax machine to the Phone port. Otherwise, the Router or the telephone wiring in your home or office may be damaged. NOTE: Make sure your telephone is set to its tone setting (not pulse). Figure 4-2: Connect a Telephone 4. Connect one end of an Ethernet network cable to one of the numbered ports on the back of the Router. Connect the other end to an Ethernet port on a network device, e.g., a PC, print server, or switch. Repeat this step to connect more PCs or other network devices to the Router. 5. Power on the broadband modem. 6. Connect the included power adapter to the Router's Power port, and then plug the power adapter into an electrical outlet. The Power LED on the front panel will light up as soon as the Router powers on. 7. Power on your PC(s). Proceed to "Chapter 5: Configuring the Router." Figure 4-4: Connect the Power Chapter 4: Connecting the Router Overview Figure 4-3: Connect a PC 8 Wireless-G Broadband Router with 2 Phone Ports Connecting One Router to Another If you already have a router (for example, a wireless router) and want to add the Wireless-G Broadband Router with 2 Phone Ports, then you should use the Wireless-G Broadband Router with 2 Phone Ports as your primary router so the Internet phone calls will be routed properly. For example, the following connection diagram shows the Wireless-G Broadband Router with 2 Phone Ports connected to a wired router, phone, and desktop PCs. Internet Broadband Modem Phone PCs Wireless-G Broadband Router with 2 Phone Ports Wired Router Figure 4-5: Router Connected to Another Router Chapter 4: Connecting the Router Connecting One Router to Another 9 Wireless-G Broadband Router with 2 Phone Ports To connect the Wireless-G Broadband Router with 2 Phone Ports to another router, follow these instructions: 1. Make sure that all of your hardware is powered off, including both routers, PCs, and broadband modem. 2. Disconnect your existing router from the broadband modem, PCs, and other network devices. 3. Connect your broadband modem's Ethernet cable to the Internet port on the back of the Wireless-G Broadband Router with 2 Phone Ports. 4. Plug a standard telephone into the Router's Phone1 port. IMPORTANT: Do not connect the Phone port to a telephone wall jack. Make sure you only connect a telephone or fax machine to the Phone port. Otherwise, the Router or the telephone wiring in your home or office may be damaged. NOTE: Make sure your telephone is set to its tone setting (not pulse). Figure 4-6: Connect the Broadband Modem 5. Connect one end of an Ethernet network cable to one of the numbered ports on the back of the Router. Connect the other end to the Internet port on the back of the other router. Repeat this step to connect PCs or other network devices to the Router. 6. Power on the cable or DSL modem. 7. Connect the included power adapter to the Router's Power port, and then plug the power adapter into an electrical outlet. The Power LED on the front panel will light up as soon as the Router powers on. 8. Power on the other router. 9. Power on your PC(s). Proceed to "Chapter 5: Configuring the Router." Figure 4-7: Connect a Telephone Figure 4-8: Connect the Other Router Figure 4-9: Connect the Power Chapter 4: Connecting the Router Connecting One Router to Another 10 Broadband Router with 2 Phone Ports Chapter 5: Configuring the Router Overview Linksys recommends using the Setup CD-ROM for first-time installation of the Router. If you do not wish to run the Setup Wizard on the Setup CD-ROM, then you can use the Web-based Utility to configure the Router. For advanced users, you may configure the Router's advanced settings through the Web-based Utility. NOTE: If you want to sign up for Internet phone service or activate your account, visit http://www.att.com/linksys after you have installed and configured the Router. Refer to "Chapter 6: Signing up for AT&T CallVantagesm Service" for more information. This chapter will describe each web page on the Utility and each page's key functions. The Utility can be accessed via your web browser through use of a computer connected to the Router. For a basic network setup, most users only have to use the following screens of the Utility: · Basic Setup. On the Basic Setup screen, enter the Internet connection settings provided by your ISP. If you do not have this information, you can call your ISP to request the settings. Once you have the setup information for your specific type of Internet connection, then you can configure the Router. · Management. Click the Administration tab and then the Management tab. The Router's default password is admin. To secure the Router, change the Password from its default. There are six main tabs: Setup, Security, Access Restrictions, Applications & Gaming, Administration, and Status. Additional tabs will be available after you click one of the main tabs. Setup · Basic Setup. Enter the Internet connection and network settings on this screen. · DDNS. Enable the Router's Dynamic Domain Name System (DDNS) feature on this screen. · MAC Address Clone. If you need to clone a MAC address onto the Router, use this screen. Wireless · Basic Wireless Settings. Enter the basic settings for your wireless network on this screen. · Wireless Security. Enable and configure the security settings for your wireless network. Chapter 5: Configuring the Router Overview 11 Broadband Router with 2 Phone Ports · Wireless MAC Filter. Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network's radius. · Advanced Wireless Settings. For advanced users, you can alter data transmission settings on this screen. Security · Firewall. On this screen, you can configure a variety of filters to enhance the security of your network. · VPN. To enable or disable IPSec, PPTP, and/or L2TP Passthrough, use this screen. Access Restrictions · Internet Access. This screen allows you to permit or block specific kinds of Internet usage and traffic. Applications & Gaming · Port Range Forward. Set up public services or other specialized Internet applications on your network. · Port Trigger. To set up triggered ranges and forwarded ranges for Internet applications, click this tab. · UPnP Forward. Use this screen to alter UPnP forwarding settings. · DMZ. Click this tab to allow one local user to be exposed to the Internet for use of special-purpose services. Administration · Management. On this screen, alter the Router's password and access privileges, as well as the SNMP and UPnP settings. · Log. If you want to view or save activity logs, click this tab. · Diagnostics. Use this screen to check the connections of your network components. · Factory Defaults. If you want to restore the Router's factory defaults, then use this screen. · Backup and Restore. You can back up and restore the Router's configuration if necessary. · Reboot. Use this screen to remotely reboot the Router from your computer. Chapter 5: Configuring the Router Overview 12 Broadband Router with 2 Phone Ports Status · Router. This screen provides status information about the Router. · Local Network. This provides status information about the local network. · Wireless. The settings for your wireless network are displayed on this screen. · Voice. This screen provides status information about the Internet phone lines. Figure 5-1: Router's IP Address How to Access the Web-based Utility To access the Web-based Utility of the Router, launch Internet Explorer or Netscape Navigator, and enter the Router's default IP address, 192.168.15.1, in the Address field. Press the Enter key. A screen will appear asking you for your User Name and Password. Leave the User Name field blank, and enter admin in the Password field. Then click the OK button. Make the necessary changes through the Utility. When you have finished making changes to a screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information on a tab, click Help. Figure 5-2: Router Login The Setup Tab - Basic Setup The Basic Setup screen is the first screen you see when you access the Web-based Utility. Internet Setup The Internet Setup section configures the Router for your Internet connection type. This information can be obtained from your ISP. Internet Connection Type The Router supports four connection types: Automatic Configuration (DHCP), Static IP, PPPoE, and PPTP. Each Basic Setup screen and available features will differ depending on what kind of connection type you select. Automatic Configuration (DHCP) By default, the Router's Internet Connection Type is set to Automatic Configuration (DHCP), and it should be used only if your ISP supports DHCP or you are connecting through a dynamic IP address. Chapter 5: Configuring the Router How to Access the Web-based Utility Figure 5-3: Setup Tab - Basic Setup Automatic Configuration (DHCP) 13 Broadband Router with 2 Phone Ports Static IP If you are required to use a permanent IP address, then select Static IP. Internet IP Address. This is the IP address that the Router has, when seen from the Internet. Your ISP will provide you with the IP Address you need to specify here. Subnet Mask. This is the Router's Subnet Mask, as seen by external users on the Internet (including your ISP). Your ISP will provide you with the Subnet Mask. Default Gateway. Your ISP will provide you with the Default Gateway Address. Static DNS 1-2. Your ISP will provide you with at least one DNS (Domain Name System) Server IP Address. Figure 5-4: Static IP static ip address: a fixed address assigned to a computer or device connected to a network. subnet mask: an address code that determines the size of the network default gateway: a device that forwards Internet traffic from your local area network PPPoE Some DSL-based ISPs use PPPoE (Point-to-Point Protocol over Ethernet) to establish Internet connections for end-users. If you use a DSL line, check with your ISP to see if they use PPPoE. If they do, you will have to enable it. User Name and Password. Enter the User Name and Password provided by your ISP. Connect on Demand and Max Idle Time. You can configure the Router to cut the Internet connection after it has been inactive for a specific period of time (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your connection as soon as you attempt to access the Internet again. If you wish to activate Connect on Demand, click the radio button. If you want your Internet connection to remain on at all times, enter 0 in the Max Idle Time field. Otherwise, enter the number of minutes you want to have elapsed before your Internet access disconnects. Keep Alive and Redial Period. This option keeps your Internet access connected indefinitely, even when it sits idle. If you select this option, the Router will periodically check your Internet connection. If the connection is down, then the Router will automatically re-establish the connection. To use this option, click the radio button next to Keep Alive. The default Redial Period is 30 seconds. When you are finished, click the Save Settings button. Then click the Status tab, and click the Connect button to start the connection. NOTE: For DSL users, if you need to enable PPPoE support, remember to remove any PPPoE applications that are installed on your PCs. Chapter 5: Configuring the Router The Setup Tab - Basic Setup Figure 5-5: PPPoE pppoe: a type of broadband connection that provides authentication (username and password) in addition to data transport 14 Broadband Router with 2 Phone Ports PPTP Point-to-Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe and Israel only. Internet IP Address. This is the IP address that the Router has, when seen from the Internet. Your ISP will provide you with the IP Address you need to specify here. Subnet Mask. This is the Router's Subnet Mask, as seen by external users on the Internet (including your ISP). Your ISP will provide you with the Subnet Mask. Gateway. Your ISP will provide you with the Default Gateway Address. User Name and Password. Enter the User Name and Password provided by your ISP. Connect on Demand and Max Idle Time. You can configure the Router to cut the Internet connection after it has been inactive for a specific period of time (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your connection as soon as you attempt to access the Internet again. If you wish to activate Connect on Demand, click the radio button. If you want your Internet connection to remain on at all times, enter 0 in the Max Idle Time field. Otherwise, enter the number of minutes you want to have elapsed before your Internet access disconnects. Keep Alive and Redial Period. This option keeps your Internet access connected indefinitely, even when it sits idle. If you select this option, the Router will periodically check your Internet connection. If the connection is down, then the Router will automatically re-establish the connection. To use this option, click the radio button next to Keep Alive. The default Redial Period is 30 seconds. When you are finished, click the Save Settings button. Then click the Status tab, and click the Connect button to start the connection. Figure 5-6: PPTP Optional Settings Some of these settings may be required by your ISP. Verify with your ISP before making any changes. Router Name. Enter a name for this Router. Host Name and Domain Name. These fields allow you to supply a host and domain name for the Router. Some ISPs require these names as identification. You may have to check with your ISP to see if your broadband Internet service has been configured with a host and domain name. In most cases, leaving these fields blank will work. MTU. The MTU (Maximum Transmission Unit) setting specifies the largest packet size permitted for network transmission. The default is Auto. If you want to manually enter a value, select Manual and enter the value Chapter 5: Configuring the Router The Setup Tab - Basic Setup packet: a unit of data sent over a network 15 Broadband Router with 2 Phone Ports desired. It is recommended that you leave this value in the 1200 to 1500 range. For most DSL users, it is recommended to use the value 1492. By default, MTU is set at 1500 when disabled. Network Setup The Network Setup section allows you to change the Router's local network settings. Router IP The values for the Router's Local IP Address and Subnet Mask are shown here. In most cases, keeping the default values will work. Local IP Address. The default value is 192.168.15.1. Subnet Mask. The default value is 255.255.255.0. Network Address Server Settings (DHCP) These settings allow you to configure the Router's Dynamic Host Configuration Protocol (DHCP) server function. The Router can be used as a DHCP server for your network. A DHCP server automatically assigns an IP address to each computer on your network. Unless you already have one, it is highly recommended that you leave the Router enabled as a DHCP server. DHCP Server. DHCP is enabled by factory default. If you already have a DHCP server on your network, set the Router's DHCP option to Disable. If you disable DHCP, remember to assign a static IP address to the Router. Starting IP Address. Enter a value for the DHCP server to start with when issuing IP addresses. Because the default IP address for the Router is 192.168.15.1, the Start IP Address must be 192.168.15. 2 or greater, but smaller than 192.168.15.254. The default Start IP Address is 192.168.15.100. Maximum Number of DHCP Users (Optional). Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. This number cannot be greater than 253. The default is 50. Client Lease Time. The Client Lease Time is the amount of time a network user will be allowed connection to the Router with their current dynamic IP address. Enter the amount of time, in minutes, that the user will be "leased" this dynamic IP address. After the dynamic IP address has expired, the user will be automatically assigned a new dynamic IP address. The default is 0 minutes, which means one day. Static DNS 1-2. The Domain Name System (DNS) is how the Internet translates domain or website names into Internet addresses or URLs. Your ISP will provide you with at least one DNS Server IP Address. You can enter up to two DNS Server IP Addresses here. The Router will use these for quicker access to functioning DNS servers. Chapter 5: Configuring the Router The Setup Tab - Basic Setup dynamic ip address: a temporary IP address assigned by a DHCP server 16 Broadband Router with 2 Phone Ports WINS. The Windows Internet Naming Service (WINS) converts NetBIOS names to IP addresses. If you use a WINS server, enter that server's IP address here. Otherwise, leave this field blank. Time Setting Time Zone. Select the time zone in which your network functions from this pull-down menu. If you want the Router to automatically adjust its clock for daylight savings, click the checkbox next to Automatically adjust clock for daylight saving changes. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. NOTE: To test your settings, connect to the Internet now. Chapter 5: Configuring the Router The Setup Tab - Basic Setup 17 Broadband Router with 2 Phone Ports The Setup Tab - DDNS The Router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the Router. Before you can use this feature, you need to sign up for DDNS service at one of two DDNS service providers, DynDNS.org or TZO.com. If you do not want to use this feature, keep the default setting, Disable. ddns: allows the hosting of a website, FTP server, or e-mail server with a fixed domain name (e.g., www.xyz.com) and a dynamic IP address DDNS DDNS Service. If your DDNS service is provided by DynDNS.org, then select DynDNS.org from the drop-down menu. If your DDNS service is provided by TZO, then select TZO.com. The features available on the DDNS screen will vary, depending on which DDNS service provider you use. DynDNS.org User Name, Password, and Host Name. Enter the User Name, Password, and Host Name of the account you set up with DynDNS.org. Internet IP Address. The Router's current Internet IP Address is displayed here. Because it is dynamic, it will change. Status. The status of the DDNS service connection is displayed here. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-7: Setup Tab - DDNS (DynDNS.org) TZO.com E-mail Address, Password, and Domain Name. Enter the Email Address, Password, and Domain Name of the service you set up with TZO. Internet IP Address. The Router's current Internet IP Address is displayed here. Because it is dynamic, this will change. Status. The status of the DDNS service connection is displayed here. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-8: Setup Tab - DDNS (TZO.com) Chapter 5: Configuring the Router The Setup Tab - DDNS 18 Broadband Router with 2 Phone Ports The Setup Tab - MAC Address Clone A MAC address is a 12-digit code assigned to a unique piece of hardware for identification, like a social security number. Some ISPs will require you to register a MAC address in order to access the Internet. If you do not wish to re-register the MAC address with your ISP, you may assign the MAC address currently registered with your ISP to the Router using the MAC Address Clone feature. MAC Clone To use MAC address cloning, select Enable. Otherwise, keep the default, Disable. User Defined Entry. Enter the MAC Address registered with your ISP. Then click the Save Settings button. Clone Your PC's MAC. If you want to clone the MAC address of the PC you are currently using to configure the Router, then click the Clone Your PC's MAC button. The Router will automatically detect your PC's MAC address, so you do NOT have to call your ISP to change the registered MAC address to the Router's MAC address. It is recommended that the PC registered with the ISP is used to open the MAC Address Clone screen. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-9: Setup Tab - MAC Address Clone mac address: the unique address that a manufacturer assigns to each networking device. Chapter 5: Configuring the Router The Setup Tab - MAC Address Clone 19 Broadband Router with 2 Phone Ports The Wireless Tab - Basic Wireless Settings The basic settings for wireless networking are set on this screen. Wireless Network Mode. From this drop-down menu, you can select the wireless standards running on your network. If you have both 802.11g and 802.11b devices in your network, keep the default setting, Mixed. If you have only 802.11g devices, select G-Only. If you have only 802.11b devices, select B-Only. If you do not have any 802.11g and 802.11b devices in your network, select Disable. Wireless Network Name (SSID). The SSID is the network name shared among all points in a wireless network. The SSID must be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32 characters (use any of the characters on the keyboard). Make sure this setting is the same for all points in your wireless network. For added security, you should change the default SSID (linksys) to a unique name. Wireless Channel. Select the appropriate channel from the list provided to correspond with your network settings. All devices in your wireless network must be broadcast on the same channel in order to function correctly. Wireless SSID Broadcast. When wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the Router. To broadcast the Router's SSID, keep the default setting, Enable. If you do not want to broadcast the Router's SSID, then select Disable. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-10: Wireless Tab - Basic Wireless Settings Chapter 5: Configuring the Router The Wireless Tab - Basic Wireless Settings 20 Broadband Router with 2 Phone Ports The Wireless Tab - Wireless Security These settings configure the security of your wireless network. There are four wireless security mode options supported by the Router: WPA Pre-Shared Key, WPA RADIUS, RADIUS, and WEP. (WPA stands for Wi-Fi Protected Access, which is a security standard stronger than WEP encryption. WEP stands for Wired Equivalent Privacy, while RADIUS stands for Remote Authentication Dial-In User Service.) These four are briefly discussed here. For detailed instructions on configuring wireless security for the Router, turn to "Appendix B: Wireless Security." WPA Pre-Shared Key. WPA offers two encryption methods, TKIP and AES, with dynamic encryption keys. Select the type of algorithm, TKIP or AES. Enter a WPA Shared Key of 8-63 characters. Then enter a Group Key Renewal period, which instructs the Router how often it should change the encryption keys. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-11: Wireless Tab - Wireless Security (WPA Pre-Shared Key) WPA RADIUS. This option features WPA used in coordination with a RADIUS server. (This should only be used when a RADIUS server is connected to the Router.) First, select the type of WPA algorithm you want to use, TKIP or AES. Enter the RADIUS server's IP Address and port number, along with the key shared between the Router and the server. Last, enter the Key Renewal Timeout period, which instructs the Router how often it should change the encryption keys. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-12: Wireless Tab - Wireless Security (WPA RADIUS) Chapter 5: Configuring the Router The Wireless Tab - Wireless Security 21 Broadband Router with 2 Phone Ports RADIUS. This option features WEP used in coordination with a RADIUS server. (This should only be used when a RADIUS server is connected to the Router.) First, enter the RADIUS server's IP Address and port number, along with the key shared between the Router and the server. Then, to indicate which WEP key to use, select a Default Transmit Key number. Select the appropriate level of WEP encryption, 64 bits 10 hex digits or 128 bits 26 hex digits. If you want to use a Passphrase, then enter it in the Passphrase field and click the Generate button. If you want to manually enter the WEP keys, then enter them in the Key 1-4 fields. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-13: Wireless Tab - Wireless Security (RADIUS) WEP. WEP is a basic encryption method, which is not as secure as WPA. To indicate which WEP key to use, select a Default Transmit Key number. Select the appropriate level of WEP encryption, 64 bits 10 hex digits or 128 bits 26 hex digits. If you want to use a Passphrase, then enter it in the Passphrase field and click the Generate button. If you want to manually enter the WEP keys, then enter them in the Key 1-4 fields. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-14: Wireless Tab - Wireless Security (WPA RADIUS) Chapter 5: Configuring the Router The Wireless Tab - Wireless Security 22 Broadband Router with 2 Phone Ports The Wireless Tab - Wireless MAC Filter Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network's radius. Wireless MAC Filter. To filter wireless users by MAC Address, either permitting or blocking access, click Enable. If you do not wish to filter users by MAC Address, select Disable. Prevent. Clicking this button will block wireless access by MAC Address. Permit Only. Clicking this button will allow wireless access by MAC Address. Edit MAC Address Filter List. Clicking this button will open the MAC Address Filter List. On this screen, you can list users whose wireless access you to permit or block. For added convenience, click the Wireless Client MAC List button to display a list of wireless network users by MAC Address. Then click the Enable MAC Filter checkbox for any device you want to add to the MAC Address Filter List. To update the information on this list, click the Refresh button. When you have finished making changes to the Wireless Client MAC List screen, click the Update Filter List button to save the changes. Click the Close button to return to the MAC Address Filter List screen. When you have finished making changes to the MAC Address Filter List screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. When you have finished making changes to the Wireless MAC Filter screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-15: Wireless Tab - Wireless MAC Filter Figure 5-16: MAC Address Filter List Figure 5-17: Wireless Client MAC List Chapter 5: Configuring the Router The Wireless Tab - Wireless MAC Filter 23 Broadband Router with 2 Phone Ports The Wireless Tab - Advanced Wireless Settings This tab is used to set up the Router's advanced wireless functions. These settings should only be adjusted by an expert administrator as incorrect settings can reduce wireless performance. Authentication Type. The default is set to Auto, which allows either Open System or Shared Key authentication to be used. With Open System authentication, the sender and the recipient do NOT use a WEP key for authentication. With Shared Key authentication, the sender and recipient use a WEP key for authentication. Transmission Rate. The rate of data transmission should be set depending on the speed of your wireless network. You can select from a range of transmission speeds, or you can select Auto to have the Router automatically use the fastest possible data rate and enable the Auto-Fallback feature. Auto-Fallback will negotiate the best possible connection speed between the Router and a wireless client. The default value is Auto. Beacon Interval. Enter a value between 1 and 65,535 milliseconds. The Beacon Interval value indicates the frequency interval of the beacon. A beacon is a packet broadcast by the Router to synchronize the wireless network. The default value is 100. DTIM Interval. This value, between 1 and 255, indicates the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the Router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. Its clients hear the beacons and awaken to receive the broadcast and multicast messages. The default value is 3. Fragmentation Threshold. This value specifies the maximum size for a packet before data is fragmented into multiple packets. If you experience a high packet error rate, you may slightly increase the Fragmentation Threshold. Setting the Fragmentation Threshold too low may result in poor network performance. Only minor reduction of the default value is recommended. In most cases, it should remain at its default value of 2346. RTS Threshold. Should you encounter inconsistent data flow, only minor reduction of the default value, 2347, is recommended. If a network packet is smaller than the preset RTS threshold size, the RTS/CTS mechanism will not be enabled. The Router sends Request to Send (RTS) frames to a particular receiving station and negotiates the sending of a data frame. After receiving an RTS, the wireless station responds with a Clear to Send (CTS) frame to acknowledge the right to begin transmission. The RTS Threshold value should remain at its default value of 2347. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-18: Wireless Tab - Advanced Wireless Settings Chapter 5: Configuring the Router The Wireless Tab - Advanced Wireless Settings 24 Broadband Router with 2 Phone Ports The Security Tab - Firewall When you click the Security tab, you will see the Firewall screen. The Router's firewall enhances the security of your network. You can also enable a variety of filters to further protect your network and block anonymous Internet requests. Firewall The firewall uses Stateful Packet Inspection (SPI) to check the incoming data transmissions before allowing them to enter your network. To enhance the security of your network, this feature is enabled by default and cannot be disabled. Figure 5-19: Security Tab - Firewall Additional Filters Filter Proxy. Use of WAN proxy servers may compromise the Router's security. If you deny proxy, you will block access to any WAN proxy servers. Click the checkbox to enable proxy filtering. Filter Cookies. A cookie is data stored on your PC and used by Internet sites when you interact with them. Click the checkbox to enable cookie filtering. Filter Java Applets. Java is a programming language for websites. If you deny Java Applets, you run the risk of not having access to Internet sites created using this programming language. Click the checkbox to enable Java Applet filtering. Filter ActiveX. ActiveX is a programming language for websites. If you deny ActiveX, you run the risk of not having access to Internet sites created using this programming language. Click the checkbox to enable ActiveX filtering. Filter Multicast. Multicasting allows for multiple transmissions to specific recipients at the same time. If multicasting is permitted, then the Router will allow IP multicast packets to be forwarded to the appropriate computers. Click the checkbox to enable multicast filtering. spi (stateful packet inspection) firewall: A technology that inspects incoming packets of information before allowing them to enter the network Block WAN Requests Block Anonymous Internet Requests. This keeps your network from being "pinged" or detected and reinforces your network security by hiding your network ports, so it is more difficult for intruders to work their way into your network. Click the checkbox to block anonymous Internet requests. This feature is enabled by default. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Chapter 5: Configuring the Router The Security Tab - Firewall 25 Broadband Router with 2 Phone Ports The Security Tab - VPN The VPN screen allows you to allow VPN tunnels using IPSec, PPTP, or L2TP protocols to pass through the Router. VPN Passthrough IPSec Passthrough. IPSec (Internet Protocol Security) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec Passthrough, click the Enable button. To disable IPSec Passthrough, click the Disable button. PPTP Passthrough. PPTP (Point-to-Point Tunneling Protocol) Passthrough allows the Point-to-Point (PPP) to be tunneled through an IP network. To allow PPTP Passthrough, click the Enable button. To disable PPTP Passthrough, click the Disable button. L2TP Passthrough. Layer 2 Tunneling Protocol Passthrough is the method used to enable Point-to-Point (PPP) sessions via the Internet on the Layer 2 level. To allow L2TP Passthrough, click the Enable button. To disable L2TP Passthrough, click the Disable button. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-20: Security Tab - VPN vpn: a security measure to protect data as it leaves one network and goes to another over the Internet ipsec: a VPN protocol used to implement secure exchange of packets at the IP layer pptp: a VPN protocol that allows the Point to Point Protocol (PPP) to be tunneled through an IP network. This protocol is also used as a type of broadband connection in Europe Chapter 5: Configuring the Router The Security Tab - VPN 26 Broadband Router with 2 Phone Ports The Access Restrictions Tab - Internet Access The Internet Access screen allows you to block or allow specific kinds of Internet usage and traffic, such as Internet access, designated services, and websites during specific days and times. NOTE: If you have an AT&T CallVantage Service account, contact AT&T technical support at 1-866-596-8464 before you enable an Internet Access Policy. Internet Access Internet Access Policy. Access can be managed by a policy. Use the settings on this screen to establish an access policy (after the Save Settings button is clicked). Selecting a policy from the drop-down menu will display that policy's settings. To delete a policy, select that policy's number and click the Delete button. To view all the policies, click the Summary button. Status. Policies are disabled by default. To enable a policy, select the policy number from the drop-down menu, and click the radio button beside Enable. To disable a policy, select the policy number from the drop-down menu, and click the radio button beside Disable. To create an Internet Access Policy: 1. Select a number from the Internet Access Policy drop-down menu. 2. To enable this policy, click the radio button beside Enable. 3. Enter a Policy Name in the field provided. Figure 5-21: Access Restrictions Tab - Internet Access Figure 5-22: Internet Policy Summary Chapter 5: Configuring the Router The Access Restrictions Tab - Internet Access 27 Broadband Router with 2 Phone Ports 4. Click the Edit List of PCs button to select which PCs will be affected by the policy. The List of PCs screen will appear. You can select a PC by MAC Address or IP Address. You can also enter a range of IP Addresses if you want this policy to affect a group of PCs. After making your changes, click the Save Settings button to apply your changes or Cancel Changes to cancel your changes. Click the Close button to return to the Internet Access screen. 5. Click the appropriate option, Deny or Allow, depending on whether you want to block or allow Internet access for the PCs you listed on the List of PCs screen. 6. Decide which days and what times you want this policy to be enforced. Select the individual days during which the policy will be in effect, or select Everyday. Then enter a range of hours and minutes during which the policy will be in effect, or select 24 Hours. 7. In the Blocked Services section, you can filter access to various services accessed over the Internet, such as FTP or telnet. Select the service from the drop-down menu listing your choice of services. Then click the >> button to add the service to the Blocked services list. (You can block up to two services per policy.) If you want to remove a service from the Blocked services list, then select it and click the << button. If the service you want is not available, then you can add a service. Enter the service's name in the Service Name field. Select its protocol from the Protocol drop-down menu, and enter its range in the Port Range fields. Then click the Add button. If you want to edit a service's settings, then select the service in the drop-down menu on the left. Change its name, protocol setting, or port range. Then click the Modify button. To delete a service, select it from the list on the left. Then click the Delete button. 8. If you want to block websites with specific URL addresses, enter each URL in a separate field next to Website Blocking by URL Address. 9. If you want to block websites using specific keywords, enter each keyword in a separate field next to Website Blocking by Keyword. 10. Click the Save Settings button to save the policy's settings. To cancel the policy's settings, click the Cancel Changes button. 11. Repeat steps 1-10 to create more policies. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Chapter 5: Configuring the Router The Access Restrictions Tab - Internet Access Figure 5-23: List of PCs 28 Broadband Router with 2 Phone Ports The Applications & Gaming Tab - Port Range Forward When you click the Applications & Gaming tab, you will see the Port Range Forward screen. Port range forwarding sets up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. (Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming. Some Internet applications may not require any forwarding.) When users send this type of request to your network via the Internet, the Router will forward those requests to the appropriate PC. Before using forwarding, you should assign a static IP address to the designated PC. If you need to forward all ports to one PC, click the DMZ tab. Port Range Forward Port Range To add a server using Port Range Forwarding, complete the following fields: Application. Enter the name of the application. Start and End. Enter the number or range of external port(s) used by the server or Internet application. Check with the Internet application software documentation for more information. Protocol. Select the protocol TCP or UDP, or select Both. IP Address. Enter the IP address of the server that you want the Internet users to be able to access. To find the IP address, go to "Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter." Enable. Check the Enable box to enable the application you have defined. Port Range Forwarding for a specific application will not function if its Enable button is left unchecked. This is disabled (unchecked) by default. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. udp: a network protocol for transmitting data that does not require acknowledgement from the recipient of the data that is sent. ip (internet protocol): a protocol used to send data over a network ip address: the address used to identify a computer or device on a network tcp: a network protocol for transmitting data that requires acknowledgement from the recipient of data sent Figure 5-24: Applications & Gaming Tab Port Range Forward Chapter 5: Configuring the Router The Applications & Gaming Tab - Port Range Forward 29 Broadband Router with 2 Phone Ports The Applications & Gaming Tab - Port Trigger The Port Trigger screen allows the Router to watch outgoing data for specific port numbers. The IP address of the computer that sends the matching data is remembered by the Router, so that when the requested data returns through the Router, the data is pulled back to the proper computer by way of IP address and port mapping rules. Port Trigger Application. Enter the application name of the trigger. Triggered Range Protocol. Select the protocol TCP or UDP. For each application, list the triggered port number range. Check with the Internet application documentation for the port number(s) needed. Start Port. Enter the starting port number of the Triggered Range. End Port. Enter the ending port number of the Triggered Range. Figure 5-25: Applications & Gaming Tab Port Trigger Forwarded Range Protocol. Select the protocol TCP or UDP. For each application, list the forwarded port number range. Check with the Internet application documentation for the port number(s) needed. Start Port. Enter the starting port number of the Forwarded Range. End Port. Enter the ending port number of the Forwarded Range. Enable. Check the Enable box to enable the application you have defined. Port Triggering for a specific application will not function if its Enable box is left unchecked. This is disabled (unchecked) by default. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Chapter 5: Configuring the Router The Applications & Gaming Tab - Port Trigger 30 Broadband Router with 2 Phone Ports The Applications & Gaming Tab - UPnP Forward The UPnP Forward screen displays preset application settings as well as options to customize port services for other applications. UPnP Forward Application. Ten applications are preset. For custom applications, enter the name of your application in one of the available fields. The preset applications are among the most widely used Internet applications. They include the following: FTP (File Transfer Protocol). A protocol used to transfer files over a TCP/IP network (Internet, UNIX, etc.). For example, after developing the HTML pages for a website on a local machine, they are typically uploaded to the web server using FTP. Telnet. A terminal emulation protocol commonly used on Internet and TCP/IP-based networks. It allows a user at a terminal or computer to log onto a remote device and run a program. SMTP (Simple Mail Transfer Protocol). The standard e-mail protocol on the Internet. It is a TCP/IP protocol that defines the message format and the message transfer agent (MTA), which stores and forwards the mail. DNS (Domain Name System). The way that Internet domain names are located and translated into IP addresses. A domain name is a meaningful and easy-to-remember "handle" for an Internet address. TFTP (Trivial File Transfer Protocol). A version of the TCP/IP FTP protocol that has no directory or password capability. Finger. A UNIX command widely used on the Internet to find out information about a particular user, such as a telephone number, whether the user is currently logged on, and the last time the user was logged on. The person being "fingered" must have placed his or her profile on the system in order for the information to be available. Fingering requires entering the full user@domain address. HTTP (HyperText Transport Protocol). The communications protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client web browser. POP3 (Post Office Protocol 3). A standard mail server commonly used on the Internet. It provides a message store that holds incoming e-mail until users log on and download it. POP3 is a simple system with little selectivity. All pending messages and attachments are downloaded at the same time. POP3 uses the SMTP messaging protocol. Figure 5-26: Applications & Gaming Tab UPnP Forward Chapter 5: Configuring the Router The Applications & Gaming Tab - UPnP Forward 31 Broadband Router with 2 Phone Ports NNTP (Network News Transfer Protocol). The protocol used to connect to Usenet groups on the Internet. Usenet newsreaders support the NNTP protocol. SNMP (Simple Network Management Protocol). A widely used network monitoring and control protocol. Data is passed from SNMP agents, which are hardware and/or software processes reporting activity in each network device (hub, router, bridge, etc.) to the workstation console used to oversee the network. The agents return information contained in a MIB (Management Information Base), which is a data structure that defines what is obtainable from the device and what can be controlled (turned off, on, etc.). Ext. Port. Enter the number of the external port used by the server in the Ext. Port column. Check with the Internet application documentation for more information. TCP or UDP. Select the protocol UDP or TCP for each application. You cannot select both protocols. Int. Port. Enter the number of the internal port used by the server in the Int. Port column. Check with the Internet application software documentation for more information. IP Address. Enter the IP address of the server that you want the Internet users to be able to access. To find the IP address, go to "Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter." Enable. Check the Enable box to enable the application you have defined. UPnP Forwarding for a specific application will not function if its Enable box is left unchecked. This is disabled (unchecked) by default. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Chapter 5: Configuring the Router The Applications & Gaming Tab - UPnP Forward 32 Broadband Router with 2 Phone Ports The Applications & Gaming Tab - DMZ The DMZ screen allows one local user to be exposed to the Internet for use of a special-purpose service such as Internet gaming and videoconferencing. DMZ hosting forwards all the ports at the same time to one PC. Port Range Forwarding is more secure because it only opens the ports you want to have opened, while DMZ hosting opens all the ports of one computer, exposing the computer to the Internet. Any PC whose port is being forwarded must have its DHCP client function disabled and should have a new static IP address assigned to it because its IP address may change when using the DHCP function. Figure 5-27: Applications & Gaming Tab - DMZ DMZ DMZ. To use this feature, select Enable. To disable DMZ hosting, select Disable. DMZ Host IP Address. To expose one PC, enter the computer's IP address. To get the IP address of a computer, refer to "Appendix D: Finding the MAC Address and IP Address for Your Ethernet Adapter." Deactivate DMZ by entering 0 in the field. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Chapter 5: Configuring the Router The Applications & Gaming Tab - DMZ 33 Broadband Router with 2 Phone Ports The Administration Tab - Management When you click the Administration tab, you will see the Management screen. This screen allows you to change the Router's access settings as well as configure the SNMP (Simple Network Management Protocol) and UPnP (Universal Plug and Play) features. Router Password Local Router Access To ensure the Router's security, you will be asked for your password when you access the Router's Web-based Utility. The default password is admin. Router Password. It is recommended that you change the default password to one of your choice. Re-enter to confirm. Re-enter the Router's new Password to confirm it. Remote Router Access This feature allows you to access the Router from a remote location, via the Internet. Remote Management. This feature allows you to manage the Router from a remote location, via the Internet. To enabled Remote Management, click the Enable radio button. Management Port. Enter the port number you will use to remotely access the Router. NOTE: When you are in a remote location and wish to manage the Router, enter http://: port. Enter the Router's specific Internet IP address in place of , and enter the Administration Port number in place of the word port. Figure 5-28: Administration Tab - Management Use https. A Secure Sockets Layer (SSL) connection enhances the security of your data transmissions. If you want to use an SSL connection to remotely manage the Router, click the checkbox. NOTE: If the https feature is enabled, then enter https://: port when you are in a remote location and wish to manage the Router. Enter the Router's specific Internet IP address in place of , and enter the Administration Port number in place of the word port. Chapter 5: Configuring the Router The Administration Tab - Management 34 Broadband Router with 2 Phone Ports SNMP SNMP, Simple Network Management Protocol, is a network protocol that provides network administrators with the ability to monitor the status of the Router and receive notification of any critical events as they occur on the network. SNMP. To enable SNMP, check the Enabled box. To configure SNMP, complete all fields on this screen. To disable the SNMP agent, remove the checkmark. Get Community. Enter the password that allows read-only access to the Router's SNMP information. The default name is public. Set Community. Enter the password that allows read/write access to the Router's SNMP information.The default name is private. A name must be entered in this field. SNMP Trap Community. Enter the password required by the remote host computer that will receive trap messages or notices sent by the Router. SNMP Trap Destination. Enter the IP address of the remote host computer that will receive the trap messages. UPnP UPnP. UPnP allows Windows XP and Me to automatically configure the Router for various Internet applications, such as gaming and videoconferencing. To enable UPnP, click the Enable radio button. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Chapter 5: Configuring the Router The Administration Tab - Management 35 Broadband Router with 2 Phone Ports The Administration Tab - Log The Log screen provides you with a log of all incoming and outgoing URLs or IP addresses for your Internet connection. Log Log. To keep activity logs, select the Enable radio button. With logging enabled, you can choose to view temporary logs or keep a permanent record using the Logviewer software. Click the Disable button to disable this function. Log Viewer IP Address. For a permanent record of these logs, Logviewer software must be used. This software is downloadable from the Linksys website, www.linksys.com. The Logviewer saves all incoming and outgoing activity in a permanent file on your PC's hard drive. In the Log Viewer IP Address field, enter the fixed IP address of the PC running the Logviewer software. The Router will now send updated logs to that PC. Incoming Log. Click the Incoming Log button to view a temporary log of the Source IP addresses and Destination Port Numbers for all the incoming Internet traffic. Click the Refresh button to update the log. Outgoing Log. Click the Outgoing Log button to view a temporary log of all the URLs and IP addresses of Internet sites that users on your network have accessed. The LAN IP address, Destination URL/IP, and Service/Port Number for each site are listed. Click the Refresh button to update the log. When you have finished making changes to this screen, click the Save Settings button to save the changes, or click the Cancel Changes button to undo your changes. For help information, click Help. Figure 5-29: Administration Tab - Log Chapter 5: Configuring the Router The Administration Tab - Log 36 Broadband Router with 2 Phone Ports The Administration Tab - Diagnostics The diagnostic tests (Ping and Traceroute) allow you to check the connections of your network components. Ping Test Ping Parameters Ping. The Ping test will check the status of a connection. Click the Ping button to open the Ping Test screen. Enter the IP address or domain name of the PC whose connection you wish to test and how many times you wish to test it, 5, 10, or unlimited. Then, click the Ping button. To stop the test, click the Stop button. Click the Clear Log button to clear the screen. Click the Close button to return to the Diagnostics screen. Figure 5-30: Administration Tab - Diagnostics Traceroute Test Traceroute Parameters Traceroute. To test the performance of a connection, click the Traceroute button. Enter the IP address or domain name of the PC whose connection you wish to test and click the Traceroute button. To stop the test, click the Stop button. Click the Clear Log button to clear the screen. Click the Close button to return to the Diagnostics screen. For help information, click Help. Figure 5-31: Ping Test Figure 5-32: Traceroute Test Chapter 5: Configuring the Router The Administration Tab - Diagnostics 37 Broadband Router with 2 Phone Ports The Administration Tab - Factory Defaults The Factory Defaults screen allows you to restore the Router's configuration to its factory default settings. Factory Defaults Restore Factory Defaults. To clear all of the Router's settings and reset them to its factory defaults, click the Yes radio button. After you have clicked the Yes radio button, click the Save Settings button to restore the Router to its factory defaults, or click the Cancel Changes button to undo your change. For help information, click Help. NOTE: Do not restore the factory defaults unless you are having difficulties with the Router and have exhausted all other troubleshooting measures. Once the Router is reset, you will have to re-enter all of your configuration settings. (However, if you have an active Internet phone service account, the Router will automatically download its Internet phone service settings once it is connected to the Internet again.) Figure 5-33: Administration Tab - Factory Defaults Chapter 5: Configuring the Router The Administration Tab - Factory Defaults 38 Broadband Router with 2 Phone Ports The Administration Tab - Backup and Restore The Backup and Restore screen allows you to back up and restore the Router's configuration. Backup and Restore Please select a file to restore. In the field provided, enter the name of the configuration file you want to restore, or click the Browse button to find this file. Backup. To create a backup configuration file, click the Backup button, and follow the on-screen instructions. Restore. After you have selected the appropriate file, click the Restore button, and follow the on-screen instructions. For help information, click Help. Figure 5-34: Administration Tab - Backup and Restore The Administration Tab - Reboot The Reboot screen allows you to remotely reboot the Router from your computer. Reboot Device Reboot. Click the Yes radio button if you want to reboot the Router. Otherwise, keep the default setting, No. After you have clicked the Yes radio button, click the Save Settings button to reboot the Router, or click the Cancel Changes button to undo your change. For help information, click Help. Figure 5-35: Administration Tab - Reboot Chapter 5: Configuring the Router The Administration Tab - Backup and Restore 39 Broadband Router with 2 Phone Ports The Status Tab - Router The Router screen displays information about the Router and its current settings. Router Information Current Firmware Version. This shows the version and date of the firmware that is currently installed. Previous Firmware Version. This shows the version and date of the firmware that was previously installed. Current Time. The current time and date are displayed here. MAC Address. The MAC Address of the Router's Internet interface is displayed here. Router Name. This shows the name you have assigned to the Router. Host Name. The Host Name for the Router is shown here. Domain Name. The Domain Name for the Router is displayed here. Figure 5-36: Status Tab - Router Internet Configuration Type Login Type. This indicates the type of Internet connection you are using. Login Status. For these dial-up style connections, PPPoE and PPTP, the status of the connection is displayed, and there is a Connect button to click if there is no connection and you want to establish an Internet connection. IP Address. The Router's Internet IP Address is displayed here. Subnet Mask and Default Gateway. The Router's Subnet Mask and Default Gateway address are shown here. DNS 1-2. Shown here are the DNS (Domain Name System) IP addresses currently used by the Router. DHCP Release. For a DHCP connection, click the DHCP Release button to release the current IP address of the device connected to the Router's Internet port. DHCP Renew. For a DHCP connection, click the DHCP Renew button to replace the current IP address--of the device connected to the Router's Internet port--with a new IP address. Click the Refresh button to update the on-screen information. For help information, click Help. Chapter 5: Configuring the Router The Status Tab - Router NOTE: The on-screen information will vary depending on the Internet Connection Type selected on the Setup screen. 40 Broadband Router with 2 Phone Ports The Status Tab - Local Network The Local Network screen displays information about the local network. Local Network MAC Address. The MAC Address of the Router's LAN (local area network) interface is displayed here. IP Address. The Router's local IP Address is shown here. Subnet Mask. The Router's Subnet Mask is shown here. DHCP Server. The status of the DHCP server is displayed here. Start IP Address. This is the starting IP address of the range assigned by the Router. End IP Address. This is the last IP address of the range assigned by the Router. DHCP Clients Table. Click the DHCP Clients Table button to view a list of PCs that have been assigned IP addresses by the Router. The DHCP Active IP Table screen lists the DHCP Server IP Address, Client Host Names, IP Addresses, MAC Addresses, and Expiration dates. Click the Delete checkbox to delete a DHCP client listing. Click the Refresh button to update the information. Click the Close button to return to the Local Network screen. Click the Refresh button to update the on-screen information. For help information, click Help. Figure 5-38: DHCP Clients Table Figure 5-37: Status Tab - Local Network Chapter 5: Configuring the Router The Status Tab - Local Network 41 Broadband Router with 2 Phone Ports The Status Tab - Wireless The Wireless screen displays the status of your wireless network. Wireless Wireless Firmware Version. This shows the version and date of the wireless firmware that is currently installed. MAC Address. The MAC Address of the Router's wireless interface is displayed here. Status. This indicates the status of the Router's wireless network. Mode. As selected from the Wireless tab, this will display the wireless mode (Mixed, G-Only, or Disabled) used by the network. SSID. As entered on the Wireless tab, this will display the wireless network name or SSID. Channel. As entered on the Wireless tab, this will display the channel on which your wireless network is broadcasting. Encryption Function. As selected on the Security Tab, this will indicate which wireless security method the Router uses. Active Client List. Click the View button to display a list of wireless network users by MAC Address. Then click the Enable MAC Filter checkbox for any device you want to add to the MAC Address Filter List, which is accessed through the Wireless tab and then the Wireless MAC Filter screen. To update the information on this list, click the Refresh button. When you have finished making changes to the Wireless Client MAC List screen, click the Update Filter List button to save the changes. Click the Close button to return to the MAC Address Filter List screen. Click the Refresh button to update the information on the Wireless screen. For help information, click Help. Figure 5-40: Wireless Client MAC List Figure 5-39: Status Tab - Wireless Chapter 5: Configuring the Router The Status Tab - Wireless 42 Broadband Router with 2 Phone Ports The Status Tab - Voice The Voice screen displays information about your Internet phone line(s). Auto Config Status Auto Config Status. Each time the Router boots up, it automatically checks to see if it has the latest configuration for Internet phone service. If necessary, the Router will automatically update its configuration. You can make Internet phone calls only if the Router has the most recent configuration. User1 Status Registration Status. This indicates whether or not this phone line is registered with AT&T CallVantage Service. If the phone line is not registered and you want Internet phone service, then refer to "Chapter 6: Signing up for AT&T CallVantagesm Service." If the registration status indicates that the registration has failed, then refer to "Appendix A: Troubleshooting." Call1 Status. The status of the active phone call is shown here. Call2 Status. If you are using call waiting, the status of the incoming phone call is shown here. Figure 5-41: Status Tab - Voice User2 Status Registration Status. This indicates whether or not this phone line is registered with AT&T CallVantage Service. If the phone line is not registered and you want Internet phone service, then refer to "Chapter 6: Signing up for AT&T CallVantagesm Service." If the registration status indicates that the registration has failed, then refer to "Appendix A: Troubleshooting." Call1 Status. The status of the active phone call is shown here. Call2 Status. If you are using call waiting, the status of the incoming phone call is shown here. Click the Refresh button to update the on-screen information. For help information, click Help. Chapter 5: Configuring the Router The Status Tab - Voice 43 Wireless-G Broadband Router with 2 Phone Ports Chapter 6: Signing up for AT&T CallVantagesm Service Overview After you have installed and configured the Router for your Internet connection, you can sign up for Internet phone service or activate your account. Follow these instructions to access the AT&T website. Instructions 1. Launch Internet Explorer, and enter http://www.att.com/linksys in the Address field. Then press the Enter key. 2. You will see two choices. Select the one that applies to you. If you already have an Internet phone service account with AT&T, then select I signed up for service and want to activate. If you do not have an Internet phone service account with AT&T, then select I have my Linksys Router and want to sign up for service. 3. Follow the on-screen instructions. When you have activated your Internet phone service, the Phone 1 LED on the Router's front panel will light up. When you pick up the phone, you will hear a dial tone. Then you will be able to make Internet phone calls. If you experience any problems, refer to "Appendix A: Troubleshooting" for more information. Figure 6-1: Website for AT&T CallVantage Service Chapter 6: Signing up for AT&T CallVantagesm Service Overview 44