Wireless Router User Guide Wireless Router User Guide May, 2001 Limitation of Liability Information in this document is subject to change without notice and does not represent a commitment on the part. The material contained herein is supplied without representation or warranty of any kind. Therefore assumes no responsibility and shall have no liability of any kind arising from the supply or use of this document or the material contained herein. This manual copyright© 2001. All rights reserved. No part of this document may be copied or re-used without prior written consent Contents Wireless Router Chapter 1 IntrodWirelessuction? What's in the box? Overview of the Wireless Router Multifunction Router Wireless Router Applications Accessing the Internet Accessing Servers from the Public Network Supporting Dial-in Access to Your Network Accessing Internet and Dial-In Simultaneously Creating Your Own Private Wide Area Network Accessing Internet and LAN-to-LAN Simultaneously Creating a Virtual Private Network (VPN) A Configuration Example A Security Overview A Physical Look at the Wireless Router The Connectors on the Back The LEDs on the Front Chapter 2 Installing the Wireless Router Installing the Wireless Router Setting Up a Windows PC for Configuring the Wireless Router Connecting more Devices through a Hub to the Wireless Router Chapter 3 Configuring the Wireless Router Internet Access in Five Minutes Using Different Browsers for Wireless Router Configuration Logging On To Enable More Features Customizing the ARM for Your Specific Needs Overview of The ARM Browser Screen What is a Connection Profile? Selecting Internet Access Interface Configuring a Basic Internet Access Profile via EWAN Configuring a Basic Internet Access Profile via Modem Adding Internet Access Profiles Deleting or Modifying Internet Access Profiles Setting Up Internet Access with Advanced Features Modifying Public and Private IP Addresses Setting Up Your Router for Wireless LAN connection Configuring for Remote Office Access Advanced Options for Remote Office Profiles Deleting or Modifying Remote Office Access Profiles Configuring Dial-in User Profiles Single User Dial-In Advanced Options Deleting Dial-in User Profiles iii Setting the System Time Setting Internet Access Time Restrictions Chapter 4 Advanced Configuration Configuring and Using Port Address Translation Configuring Port Address Translation Static DHCP Assignments Creating VPN Connection Profiles (Optional) To Configure VPN Remote Office Access Profiles Set up a VPN Connection Profile Advanced Options Setup Packet Filtering A Packet Filtering Overview Configuring IP Packet Rules Configuring IPX Packet Rules To Configure Advanced IP Settings The IP Routing Table To Configure IPX Settings (Optional) The IPX Routing Table The IPX SAP Table To Enable Bridging Learning Chapter 5 Managing the Wireless Router How to View the Connection Log How to Upgrade the Wireless Router Features/Software How to Save or Clear Configuration Changes How to Reset the Wireless Router How to Change the ARM Password What if I Forget the Password? How to Customize the ARM Interface How to Configure General System Settings Chapter 6 Messages Messages Appendix A Wireless Router Specifications Appendix B Glossary Appendix C Warranty, Copyrights, FCC Notice Warranty Copyrights FCC Part 15 Notice iv 1WirelessWireless Router About This User Guide Welcome to the Networking world of multifunction routers! Thank you for investing in a Wireless Router. We are dedicated to provide the most efficient, easy to configure, and trouble free equipment in the networking industry. This manual is intended as a basic introduction to your Wireless Router. It supplies enough information to make the Wireless Router operational in most common environments: connecting to the Internet , receiving calls from dial-in users, or connecting to another network through the telephone network. We'll describe how to use your web browser to configure the Wireless Router and to perform some basic operations, e.g. upgrading the software, or viewing the connection log, a task which may be useful in ongoing operations. Finally, we'll tell you how to obtain information and help for subjects that are beyond the scope of this manual. This manual consists of seven chapters and three appendixes: Chapter One: Introduction, explains the features and capabilities of the Wireless Router. Chapter Two: Installing the Wireless Router, gives the simple steps you follow to install the Wireless Router and configure your workstations. Chapter Three: Configuring the Wireless Router, explains how to log in to the ARM Manager, describes the browser screen, and provides the steps needed to configure your Wireless Router for specific applications. It provides easy-to-follow instructions for quick Internet access and provides a guide to the most popular Wireless Router configurations. Chapter Four: Advanced Configuration, provides information on advanced router configuration setup. Chapter Five: Managing the Wireless Router, explains the management features of the Wireless Router. Chapter Six: Messages, lists messages you may see in the ARM message window, and what they mean. Appendix A: Specifications Appendix B: Glossary Appendix C: Warranty, Copyright, FCC Notice Safety Warnings · The Wireless Router is not intended to be serviced by the user. Do not open the case. 1Wireless Router 1 Introduction This chapter gives the introduction to the Wireless Router. What' in the Box? s Your Wireless Router box should contain the items listed below · · · 1 Wireless Router 1 AC Adapter, AC 9V 1A 1 RS-232 serial cable with DB-9 (9 pin) male connector and RJ45 plug to connect the Wireless Router Console/COM port and external ISDN TA/Analog Modem 1 female to female 9 pin adaptor to connect the Wireless Router Console port to a PC COM port. 1 CAT5 UTP cross-over LAN cable to connect the Wireless Router EWAN port to an external ADSL or Cable Modem · · Note: · · Some Cable Modems use straight LAN cable 1 CD-ROM containing the online documentation 1 Quick-Start Guide Overview of the Wireless Router The Wireless Router is a small desktop router that sits between your local Ethernet network and a remote network (e.g., the Internet or a remote office). The Wireless Router contains an EWAN port connecting to an external ADSL/Cable modem , a Console/ COM port for connection to a console device(such as a PC COM port ), and a four-port 10/100Mbps Ethernet switch for connection to PCs on your local network. The Console/COM port can alsobe used to connect to the Internet(as a back-up such as when the ADSL/Cable modem line is not operational) or a remote office via an external ISDN TA or Analog Modem, and even allows a remote user(a tele-commuter or a traveling sales person) to dial in and access your local network. Data comes into the Wireless Router from the local LAN and then is "routed" to the remote network, and vice versa. Wireless Router Applications The main functions of the Wireless Router -to allow devices on your LAN to access the Internet, -to allow access to the servers from the public network, 1-1 -to support remote users to directly dial in and access your LAN, -to support direct dial-up communication with remote offices and share resources between remnote LANs. - to create Virtual Private Network (VPN) to allow remote LANs to share resources with each other over the Internet. Accessing the Internet The most common use for the Wireless Router is to provide Internet access, so that everyone on your LAN can surf the web and send/receive email or files. The Wireless Router automatically acquires the necessary IP address when the connection to the Internet is established. You don't need to apply for and assign an IP address to each PC or workstation on your network. Accessing Servers from the Public Network If you want special servers to be accessible by remote users across the Internet (e.g., an e-mail server, an FTP server, or a web server), you can configure the Wireless Router to proxy the service from its own address. This means that the remote user can address the router as if it were the special server and the Wireless Router will re-direct this connection to the appropriate computer on the network. Supporting Dial-in Access to Your Network You can set up your Wireless Router to allow users to connect to your network and share resources from home or while they're travelling. The Wireless Router built-in configuration program makes the necessary setup a snap. As a security feature, after a user calls in, the Wireless Router can hang up and call that user back at a preconfigured telephone number. Figure 1-1 Dial-in Access You can set up the Wireless Router to provide Internet access for everyone on your LAN and allow a remote user to dial in to your network via V.90 Modem or ISDN TA simultaneously. 1-2 Figure 1-2 Internet Access and Dial-in Simultaneously Creating Your Own Private Wide Area Network You can create your own private wide area network with Wireless Router via external ISDN TA / modem and allow two or more remote networks to connect to one another and share resources. The remote network can use a Wireless router even though it is a different vendor - as long as it also supports LAN to LAN communications. Figure 1-3 Connecting Two Networks with Wireless Router You can set up the Wireless Router to provide Internet access for everyone on your LAN and create your own private wide area network via V.90 Modem or ISDN TA simultaneously. 1-3 Figure 1-4 Internet Access and LAN-to-LAN Simultaneously Creating a Virtual Private Network (VPN) Virtual Private Networking (VPN) provides a means to connect remote LANs over the Internet, while only local toll charges to an Internet Service Provider are incurred even if the two LANs are physically remote to each other. To create a VPN between two sites, a special connection called "tunnel" followed by a VPN data session has to be set up over the Internet. After a VPN data session is set up, data can be sent over it, optionally encrypted to prevent unauthorized access. Additionally, VPN tunnels allow IP, IPX and Bridging traffic to flow across the Internet, including NetBIOS information (for Windows networking) encapsulated within IP or IPX packets. All information required for a VPN is defined in a VPN profile, which contains, for example, the IP address of the VPN partner and authentication information (including the encryption key that is used). When a PC from one site tries to communicate with a device on the other site for the first time, the VPN tunnel and data session establishment process will be triggered automatically. For the originating side, first the destination IP address will be used to search for the corresponding VPN profile. Based on the information conifgured in the matched VPN profile, a VPN tunnel is created, a VPN data session will be created and authentication information exchanged, then data traffic can start to flow. For the destination side, when a VPN data session creation is requested, the router will base on the originating IP address to search for a matched profile. Once found, the Wireless Router will use the information in the matched profile to authenticate the incoming "call", after which data transfer can begin. More than one VPN data sessions can be established over the same tunnel. See chapter 4 for detailed configuration instructions. 1-4 Figure 1-5 Creating a Virtual Private Network A Configuration Example In Figure 1-6, two Wireless Routers are installed in two different locations. They are connected to the Internet via ADSL/Cable modem, allowing users to surf the Web. They are also connected to each other through the telephone network, forming a private company network. Figure 1-6 Connecting Two Private Networks This example illustrates an important feature of the Wireless Router: a private device can be accessed from the Internet by mapping the application port number to a port number on the Wireless Router. In this case, an Internet user accesses a web server with IP address 206.112.113.6, which is the Wireless Router's IP address. When properly configured, the Wireless Router will translate that port 80 of that address to port 80 of the private IP address, 192.168.168.112. In this example, all devices on both LANs (except for the Web servers) are configured to obtain their IP addresses automatically (i.e., from the built-in DHCP server in the Wireless Router). It is important for the Web Server on LAN #1 to have the same IP address all the time (so that users can use the same IP address to access it), it also means the Wireless Router should also be assigned a static IP address. IP addresses assigned to the devices on the LAN are only used in the local LAN environment (with default IP network address of 192.168.168.0), therefore these devices naturally form a private network ...