User manual SITECOM WL-014

Wireless Router User Guide Wireless Router User Guide May, 2001 Limitation of Liability Information in this document is subject to change without notice and does not represent a commitment on the part. The material contained herein is supplied without representation or warranty of any kind. Therefore assumes no responsibility and shall have no liability of any kind arising from the supply or use of this document or the material contained herein. This manual copyright© 2001. All rights reserved. No part of this document may be copied or re-used without prior written consent Contents Wireless Router Chapter 1 IntrodWirelessuction? What's in the box? Overview of the Wireless Router Multifunction Router Wireless Router Applications Accessing the Internet Accessing Servers from the Public Network Supporting Dial-in Access to Your Network Accessing Internet and Dial-In Simultaneously Creating Your Own Private Wide Area Network Accessing Internet and LAN-to-LAN Simultaneously Creating a Virtual Private Network (VPN) A Configuration Example A Security Overview A Physical Look at the Wireless Router The Connectors on the Back The LEDs on the Front Chapter 2 Installing the Wireless Router Installing the Wireless Router Setting Up a Windows PC for Configuring the Wireless Router Connecting more Devices through a Hub to the Wireless Router Chapter 3 Configuring the Wireless Router Internet Access in Five Minutes Using Different Browsers for Wireless Router Configuration Logging On To Enable More Features Customizing the ARM for Your Specific Needs Overview of The ARM Browser Screen What is a Connection Profile? Selecting Internet Access Interface Configuring a Basic Internet Access Profile via EWAN Configuring a Basic Internet Access Profile via Modem Adding Internet Access Profiles Deleting or Modifying Internet Access Profiles Setting Up Internet Access with Advanced Features Modifying Public and Private IP Addresses Setting Up Your Router for Wireless LAN connection Configuring for Remote Office Access Advanced Options for Remote Office Profiles Deleting or Modifying Remote Office Access Profiles Configuring Dial-in User Profiles Single User Dial-In Advanced Options Deleting Dial-in User Profiles iii Setting the System Time Setting Internet Access Time Restrictions Chapter 4 Advanced Configuration Configuring and Using Port Address Translation Configuring Port Address Translation Static DHCP Assignments Creating VPN Connection Profiles (Optional) To Configure VPN Remote Office Access Profiles Set up a VPN Connection Profile Advanced Options Setup Packet Filtering A Packet Filtering Overview Configuring IP Packet Rules Configuring IPX Packet Rules To Configure Advanced IP Settings The IP Routing Table To Configure IPX Settings (Optional) The IPX Routing Table The IPX SAP Table To Enable Bridging Learning Chapter 5 Managing the Wireless Router How to View the Connection Log How to Upgrade the Wireless Router Features/Software How to Save or Clear Configuration Changes How to Reset the Wireless Router How to Change the ARM Password What if I Forget the Password? How to Customize the ARM Interface How to Configure General System Settings Chapter 6 Messages Messages Appendix A Wireless Router Specifications Appendix B Glossary Appendix C Warranty, Copyrights, FCC Notice Warranty Copyrights FCC Part 15 Notice iv 1WirelessWireless Router About This User Guide Welcome to the Networking world of multifunction routers! Thank you for investing in a Wireless Router. We are dedicated to provide the most efficient, easy to configure, and trouble free equipment in the networking industry. This manual is intended as a basic introduction to your Wireless Router. It supplies enough information to make the Wireless Router operational in most common environments: connecting to the Internet , receiving calls from dial-in users, or connecting to another network through the telephone network. We'll describe how to use your web browser to configure the Wireless Router and to perform some basic operations, e.g. upgrading the software, or viewing the connection log, a task which may be useful in ongoing operations. Finally, we'll tell you how to obtain information and help for subjects that are beyond the scope of this manual. This manual consists of seven chapters and three appendixes: Chapter One: Introduction, explains the features and capabilities of the Wireless Router. Chapter Two: Installing the Wireless Router, gives the simple steps you follow to install the Wireless Router and configure your workstations. Chapter Three: Configuring the Wireless Router, explains how to log in to the ARM Manager, describes the browser screen, and provides the steps needed to configure your Wireless Router for specific applications. It provides easy-to-follow instructions for quick Internet access and provides a guide to the most popular Wireless Router configurations. Chapter Four: Advanced Configuration, provides information on advanced router configuration setup. Chapter Five: Managing the Wireless Router, explains the management features of the Wireless Router. Chapter Six: Messages, lists messages you may see in the ARM message window, and what they mean. Appendix A: Specifications Appendix B: Glossary Appendix C: Warranty, Copyright, FCC Notice Safety Warnings · The Wireless Router is not intended to be serviced by the user. Do not open the case. 1Wireless Router 1 Introduction This chapter gives the introduction to the Wireless Router. What' in the Box? s Your Wireless Router box should contain the items listed below · · · 1 Wireless Router 1 AC Adapter, AC 9V 1A 1 RS-232 serial cable with DB-9 (9 pin) male connector and RJ45 plug to connect the Wireless Router Console/COM port and external ISDN TA/Analog Modem 1 female to female 9 pin adaptor to connect the Wireless Router Console port to a PC COM port. 1 CAT5 UTP cross-over LAN cable to connect the Wireless Router EWAN port to an external ADSL or Cable Modem · · Note: · · Some Cable Modems use straight LAN cable 1 CD-ROM containing the online documentation 1 Quick-Start Guide Overview of the Wireless Router The Wireless Router is a small desktop router that sits between your local Ethernet network and a remote network (e.g., the Internet or a remote office). The Wireless Router contains an EWAN port connecting to an external ADSL/Cable modem , a Console/ COM port for connection to a console device(such as a PC COM port ), and a four-port 10/100Mbps Ethernet switch for connection to PCs on your local network. The Console/COM port can alsobe used to connect to the Internet(as a back-up such as when the ADSL/Cable modem line is not operational) or a remote office via an external ISDN TA or Analog Modem, and even allows a remote user(a tele-commuter or a traveling sales person) to dial in and access your local network. Data comes into the Wireless Router from the local LAN and then is "routed" to the remote network, and vice versa. Wireless Router Applications The main functions of the Wireless Router -to allow devices on your LAN to access the Internet, -to allow access to the servers from the public network, 1-1 -to support remote users to directly dial in and access your LAN, -to support direct dial-up communication with remote offices and share resources between remnote LANs. - to create Virtual Private Network (VPN) to allow remote LANs to share resources with each other over the Internet. Accessing the Internet The most common use for the Wireless Router is to provide Internet access, so that everyone on your LAN can surf the web and send/receive email or files. The Wireless Router automatically acquires the necessary IP address when the connection to the Internet is established. You don't need to apply for and assign an IP address to each PC or workstation on your network. Accessing Servers from the Public Network If you want special servers to be accessible by remote users across the Internet (e.g., an e-mail server, an FTP server, or a web server), you can configure the Wireless Router to proxy the service from its own address. This means that the remote user can address the router as if it were the special server and the Wireless Router will re-direct this connection to the appropriate computer on the network. Supporting Dial-in Access to Your Network You can set up your Wireless Router to allow users to connect to your network and share resources from home or while they're travelling. The Wireless Router built-in configuration program makes the necessary setup a snap. As a security feature, after a user calls in, the Wireless Router can hang up and call that user back at a preconfigured telephone number. Figure 1-1 Dial-in Access You can set up the Wireless Router to provide Internet access for everyone on your LAN and allow a remote user to dial in to your network via V.90 Modem or ISDN TA simultaneously. 1-2 Figure 1-2 Internet Access and Dial-in Simultaneously Creating Your Own Private Wide Area Network You can create your own private wide area network with Wireless Router via external ISDN TA / modem and allow two or more remote networks to connect to one another and share resources. The remote network can use a Wireless router even though it is a different vendor - as long as it also supports LAN to LAN communications. Figure 1-3 Connecting Two Networks with Wireless Router You can set up the Wireless Router to provide Internet access for everyone on your LAN and create your own private wide area network via V.90 Modem or ISDN TA simultaneously. 1-3 Figure 1-4 Internet Access and LAN-to-LAN Simultaneously Creating a Virtual Private Network (VPN) Virtual Private Networking (VPN) provides a means to connect remote LANs over the Internet, while only local toll charges to an Internet Service Provider are incurred even if the two LANs are physically remote to each other. To create a VPN between two sites, a special connection called "tunnel" followed by a VPN data session has to be set up over the Internet. After a VPN data session is set up, data can be sent over it, optionally encrypted to prevent unauthorized access. Additionally, VPN tunnels allow IP, IPX and Bridging traffic to flow across the Internet, including NetBIOS information (for Windows networking) encapsulated within IP or IPX packets. All information required for a VPN is defined in a VPN profile, which contains, for example, the IP address of the VPN partner and authentication information (including the encryption key that is used). When a PC from one site tries to communicate with a device on the other site for the first time, the VPN tunnel and data session establishment process will be triggered automatically. For the originating side, first the destination IP address will be used to search for the corresponding VPN profile. Based on the information conifgured in the matched VPN profile, a VPN tunnel is created, a VPN data session will be created and authentication information exchanged, then data traffic can start to flow. For the destination side, when a VPN data session creation is requested, the router will base on the originating IP address to search for a matched profile. Once found, the Wireless Router will use the information in the matched profile to authenticate the incoming "call", after which data transfer can begin. More than one VPN data sessions can be established over the same tunnel. See chapter 4 for detailed configuration instructions. 1-4 Figure 1-5 Creating a Virtual Private Network A Configuration Example In Figure 1-6, two Wireless Routers are installed in two different locations. They are connected to the Internet via ADSL/Cable modem, allowing users to surf the Web. They are also connected to each other through the telephone network, forming a private company network. Figure 1-6 Connecting Two Private Networks This example illustrates an important feature of the Wireless Router: a private device can be accessed from the Internet by mapping the application port number to a port number on the Wireless Router. In this case, an Internet user accesses a web server with IP address 206.112.113.6, which is the Wireless Router's IP address. When properly configured, the Wireless Router will translate that port 80 of that address to port 80 of the private IP address, 192.168.168.112. In this example, all devices on both LANs (except for the Web servers) are configured to obtain their IP addresses automatically (i.e., from the built-in DHCP server in the Wireless Router). It is important for the Web Server on LAN #1 to have the same IP address all the time (so that users can use the same IP address to access it), it also means the Wireless Router should also be assigned a static IP address. IP addresses assigned to the devices on the LAN are only used in the local LAN environment (with default IP network address of 192.168.168.0), therefore these devices naturally form a private network and are not accessible by users across the Internet, unless they are mapped. It is still possible to assign public IP addresses obtained from your ISP to devices on your LAN so that they can be accessed by users across the Internet. These public addresses can co-exist with private IP address on the 1-5 same LAN. In order for LAN to LAN communication to work in such configurations, the default private network Wireless Routeraddress (192.168.168.0) for one of the above Wireless Router has to be changed (to 192.168.170.0 in the above example). The traffic between these two networks is secure because data are sent across the telephone network via a direct phone call. A Security Overview More and more people are concerned about security of their data in the Internet The Wireless Router provides many ways to help make your network and your data secure: · · · · · · All dial-in users and LAN-to-LAN communications require PPP PAP/CHAP/ MS-CHAP authentication (basically user name and password) The Wireless Router also supports call-back for dial-in users - so that remote user are really who they say they are The Wireless Router uses a private IP addressing scheme to prevent devices on your LAN from access by outside users Console, Telnet and ARM support password protection DES encryption with PPP/ECP negotiation is supported for VPN connections IP packet filtering may be used to futher enhance security requirements A Physical Look at the Wireless Router The Connectors on the Back The following illustration shows the rear panel of Wireless Router. (1 )4 RJ-45 10/100 Switch connectors for connecting to PCs and workstations or connecting external Ethernet hub, or switch with uplink switch on port 1. (2) 1 RJ-45 EWAN connector for connecting to Internet via ADSL/Cable modem (3) 1 RJ-45 connector to be a COM port connecting to external ISDN TA/ modem or to be a Console port connecting to PC. (4) 1 AC power connector for connecting through an AC power adapter (included as part of the product) to the wall power outlet (5) 1 power ON/OFF switch 1-6 Figure 1-7 Wireless Router Connectors The LEDs on the Front There are 17 LEDs on the front of the Wireless Router that show connection and traffic status of Power, PPPoE, EWAN and LAN ports: Figure 1-8 LEDs Power: Green. The LED illuminates whe the Router is Powered on. WLAN: Green. The LED illuminates when the wireless client is power on, and flickering when wireless is activity. LAN Indicators 100/10: Green. If the LED illuminates when the throughput is 100Mbps. LNK/ACT: Green. The LED is continously illuminated, indicating the Router is connected to a device successfully. The LED is flickering, indicating the Router is actively sending or receiving data over the port. FDX/COL: Green. The LED is continously illuminated, indicating the connection is running in full duplex mode. The LED is flickering, indicating the connection is experiencing collisions. EWAN Indicators LNK/ACT: Green. The LNK/ACT LED serves two purposes. One is, it indicates the Router is connected to your Broadband successfuly when it illuminates. The other is indicates the Router is actively sending or receiveing data over the WAN interface. COL: Green. The LED indicates the connection is experiencing collisions. PPPoE: Green. The PPPoE LED indicates if the PPPoE is enabled. Some DSL-based ISPs use PPPoE to establish communications with an end-user. If you are using a DSL line, check with your ISP if they use PPPoE. 1-7 2Wireless RouterWireless Router 2 Installing the Wireless Router Now you should be ready to connect your Wireless Router devices on your LAN . Follow these steps to install the Wireless Router: Step 1 Connect ADSL/Cable modem to the Wireless Router EWAN port using crossover CAT5 UTP LAN cable. Some Cable Modems use straight LAN cables Note: Step 2 Connect a PC/Workstation to one of the LAN ports of the Wireless Router, such as port 1 or port 2 (using a straight or cross-over LAN cable, respectively). See below for more details of how to connect to an external repeater hub or LAN switch. Connect the AC adapter to the Wireless Router and an electrical outlet. Step 3 Figure 2-1 Wireless Router Connectors 2-1 Setting Up a Windows PC for Configuring the Wireless Router This section describes how to configurea PC on the LAN in order to communicate with the Wireless Router. The PC need to have an Ethernet interface cards installed, and be connected to the Wireless Router either directly(to its LAN ports) or indirectly through an external LAN hub or switch. It should also have TCP/IP installed, enabled, and configured to obtain an IP address automatically(i.e., through a DHCP server). If TCP/IP is not already installed, follow the steps below for its installation. Note: Any TCP/IP capable workstation can communicate with the Wireless Router. To configure workstations other than Windows 95/98/NT, please consult the manufacturer's documentation. Step 1 Connect your PC to one of the Wireless Router Switch ports. If you connect to LAN port 1, you should use a straight LAN cable and set the Uplink switch to the Normal position. or use a crossover LAN cable and set the Uplink switch to Uplink. See Figure 2-3.. From the Win95/98 Start Button, select Settings, then Control Panel. The Win95/98 Control Panel displays. Double-click on the Network icon. Step 2 Step 3 Step 4 Check your list of Network Components in the Network window Configuration tab. If TCP/IP has already been installed, go to Step 8. Otherwise, select Add to install it now. Installed components Look for TCP/IP Add button Client for Microsoft Networks 2-2 Step 5 Step 6 In the new Network Component Type window, select Protocol. In the new Select Network Protocol window, select Microsoft in the Manufacturers area. Select Microsoft Select TCP/IP Step 7 In the Network Protocols area of the same window, select TCP/IP, then click OK. You may need your Win95/98 CD to complete the installation. After TCP/IP installation is complete, go back to the Network window shown in Step 4. Select TCP/IP in the list of Network Components. Click Properties, and check the settings in each of the TCP/IP Properties window: Step 8 Step 9 TCP/IP Properties Tabs (IP Address Tab shown) -Bindings Tab: both Client for Microsoft Networks and File and printer sharing for Microsoft Networks should be selected. -Gateway Tab: All fields should be blank -DNS Configuration Tab: Disable DNS should be selected -IP Address Tab: Obtain IP address automatically should be selected Step 10 When the Wireless Router connected to the LAN (and powered on), reboot the PC. After the PC is re-booted, you should be ready to configure the Wireless Router. See Chapter 3. 2-3 Connecting more Devices through a Hub to the Wireless Router The Wireless Router provides four LAN ports to allow up to four PCs or Workstations to be connected to it directly. If you want to connect more devices, you can connect an external hub or switch to LAN port 1 using a straight LAN cable if the Uplink switch is set to the Uplink position, or using a cross-over LAN cable if the Uplink switch is set to the Normal position. Figure 2-2 Connecting a Hub or Switch to the Wireless Router The uplink switch is shown in the following picture. Figure 2-3 Uplink Switch 2-4 3Wireless Router 3 Configuring the Wireless Router Once you have completed the installation stage and have configured a PC properly as described in chapter two, you are ready to configure the Wireless Router for actual applications. This chapter describes how to configure your Wireless Router for basic Internet access, as well as for the following configurations: · · · · · To set up Internet access with advanced features To configure remote office access profiles To configure dial-in user profiles To set the system time To configure Internet access time restrictions Internet Access in Five Minutes In this section you will be shown how to configure the Wireless Router for basic Internet access in less than five minutes using the web browser-based Acess Router Manager (ARM). Using Different Browsers for Wireless Router Configuration To configure your Wireless Router, you can use popular browsers such as Netscape 4.5 and Internet Explorer 5.x. The following describes, after each browser is brought up, how to use it to start the ARM interface: Netscape Navigator 4.5 (or newer): In the Location box (where you normally enter the URL address), enter the default private IP address of the Wireless Router followed by hitting the return key: http://192.168.168.230 Internet Explorer 5.0 (or newer): In the Address box (where you normally enter the URL address), enter the default private IP address of the Wireless Router followed by hitting the return key: http://192.168.168.230 Logging On After entering the default IP address as described above, a password prompt screen will ask you to log on. If you are logging on for the first time, you should accept the factory default password (which is "password"). The password is always displayed as a string of asterisks ("*"). Clicking the Log On button will begin a Access Router Manager (ARM) session. The next time you log in, even if you have modified the 3-1 password , the default password ("password") will still be used as the default. You need to change it to the correct password before you will be let in. No matter what password you use, each character will always be displayed in the logon prompt as a "*". If you forget the password, you need to follow steps described in chapter 5 to be able to log on. 3-2 Customizing the ARM for Your Specific Needs When you log on for the first time, the ARM Customization screen will be automatically displayed, allowing you to customize the ARM session to suit your own specific needs: Note: The ARM Customization screen is displayed the very first time you invoke the ARM tool. To return to this screen, select Customize User Interface from the ARM Menu. The choices available depend on what feature keys have been installed. The selections you make determine what configuration menu and buttons will appear in the ARM interface. For example, if you select Basic Internet Access only, the ARM interface will display only buttons and screens that you need for basic Internet access. If you subsequently use ARM to configure the Wireless Router for other applications, you can return to this ARM Customization screen to "re-customize" your ARM interface by selecting Customize User Interface from the ARM Menu (on the left hand side of the ARM interface). Basic Internet Access Select this option if you need basic Internet access. This will enable you to configure Internet Access for all of your LAN users. Internet Access with Advanced Configuration Select this option if you want to configure advanced options, such as changing the private IP address (e.g., when you intend to create your own private WAN among multiple Wireless Router ), or adding a public IP address (e.g., when you want to install servers on the LAN which are accessible from the Internet). Access to/from Remote Site (e.g., Branch Office) Select this option if you want to create connections to other LAN sites - so that users at each site can share resources. If you use Windows PCs, for example, then from the Network Neighborhood facility, you can access files from remote PCs directly. 3-3 Dial-in Access for Off-Site Users Select this option if you want to allow users on a stand-alone computer to dial in and access resources on your network. Click Next when you have selected the options you want. Share Netware (IPX) Resource Select this option if you use Novell servers on your network and want to allow dial-in users or remote offices to share them. Note: The choice displayed in this screen depend on the feature keys which are installed in your system. Overview of The ARM Browser Screen Before you begin the configuration, take a moment to look at the ARM screen. Look for these areas: · · · · ARM Menu Configuration Window Message Window Status Window AAARM Menu AAMessage Window AAConfiguration Window 3-4