User's Manual Version: 1.1 Wireless LAN Broadband Router Trademarks Copyright @2005 Contents are subject to change without notice. All trademarks belong to their respective proprietors. Copyright Statement THIS DOCUMENT CONTAINS OF PROPRIETARY TECHNICAL INFORMATION THAT IS THE PROPERTY OF THIS COMPANY. AND NO PART OF THIS DOCUMENTATION MAY BE REPRODUCED, STORED IN A RETRIEVAL SYSTEM OR TRANSMITTED IN ANY FORM OR BY ANY MEANS, ELECTRICAL OR MECHANICAL, BY PHOTOCOPYING, RECORDING, OR OTHERWISE, WITHOUT THE PRIOR WRITTEN CONSENT OF THIS COMPANY. Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. IMPORTANT NOTE: FCC Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Table of Contents REVISION HISTORY .....................................................................................................................I TERMINOLOGY ........................................................................................................................... II 1 INTRODUCTION.................................................................................................................... 1 1.1 1.2 1.3 1.4 1.5 2 PACKAGE CONTENTS ............................................................................................................ 1 PRODUCT SPECIFICATIONS ................................................................................................... 1 PRODUCT FEATURES ............................................................................................................ 2 FRONT PANEL DESCRIPTION................................................................................................. 3 REAR PANEL DESCRIPTION................................................................................................... 4 INSTALLATION ..................................................................................................................... 6 2.1 2.2 HARDWARE INSTALLATION .................................................................................................. 6 SOFTWARE INSTALLATION.................................................................................................... 6 3 SOFTWARE CONFIGURATION ......................................................................................... 7 3.1 PREPARE YOUR PC TO CONFIGURE THE WLAN BROADBAND ROUTER ................................ 7 3.2 CONNECT TO THE WLAN BROADBAND ROUTER ................................................................. 9 3.3 MANAGEMENT AND CONFIGURATION ON THE WLAN BROADBAND ROUTER....................... 9 3.3.1 Status.......................................................................................................................... 9 3.3.2 Setup Wizard............................................................................................................ 11 I Operation Mode ........................................................................................................... 11 II Time Zone Setting........................................................................................................ 12 III LAN Interface Setup ................................................................................................ 12 IV WAN Interface Setup ............................................................................................... 13 V Wireless Basic Settings................................................................................................ 13 VI Wireless Security Setup ........................................................................................... 14 3.3.3 Operation Mode ....................................................................................................... 14 3.3.4 Wireless - Basic Settings.......................................................................................... 15 3.3.5 Wireless - Advanced Settings .................................................................................. 16 3.3.6 Wireless - Security Setup ......................................................................................... 18 I WEP Key Setup ........................................................................................................... 20 3.3.7 Wireless - Access Control ........................................................................................ 21 3.3.8 WDS Settings........................................................................................................... 22 i USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 I II 3.3.9 3.3.10 3.3.11 I II III IV 3.3.12 3.3.13 3.3.14 3.3.15 3.3.16 3.3.17 I II 3.3.18 3.3.19 3.3.20 3.3.21 3.3.22 3.3.23 3.3.24 3.3.25 4 WDS Security Setup .................................................................................................... 23 WDS AP Table ............................................................................................................. 24 Site Survey ............................................................................................................... 25 LAN Interface Setup ................................................................................................ 25 WAN Interface Setup ............................................................................................... 27 Static IP........................................................................................................................ 27 DHCP Client ................................................................................................................ 28 PPPoE ...................................................................................................................... 30 PPTP ........................................................................................................................ 32 Firewall - Port Filtering ........................................................................................... 33 Firewall - IP Filtering............................................................................................... 34 Firewall - MAC Filtering ......................................................................................... 35 Firewall - Port Forwarding....................................................................................... 36 Firewall - DMZ ........................................................................................................ 38 VPN Setting ............................................................................................................. 38 VPN Setup - Edit Tunnel ............................................................................................. 40 Advanced IKE Setup.................................................................................................... 42 Management - Statistics ........................................................................................... 43 Management - DDNS .............................................................................................. 44 Management - Time Zone Setting............................................................................ 45 Management - Log................................................................................................... 45 Management - Upgrade Firmware ........................................................................... 46 Management Save/ Reload Settings......................................................................... 47 Management - Password Setup................................................................................ 48 Logout ...................................................................................................................... 48 FREQUENTLY ASKED QUESTIONS (FAQ).................................................................... 50 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 WHAT AND HOW TO FIND MY PC'S IP AND MAC ADDRESS? ............................................... 50 WHAT IS WIRELESS LAN? ................................................................................................. 50 WHAT ARE ISM BANDS? .................................................................................................... 50 HOW DOES WIRELESS NETWORKING WORK?....................................................................... 50 WHAT IS BSSID? ............................................................................................................... 51 WHAT IS ESSID? ............................................................................................................... 51 WHAT ARE POTENTIAL FACTORS THAT MAY CAUSES INTERFERENCE? ................................. 52 WHAT ARE THE OPEN SYSTEM AND SHARED KEY AUTHENTICATIONS? .............................. 52 WHAT IS WEP? .................................................................................................................. 52 WHAT IS FRAGMENT THRESHOLD?..................................................................................... 52 ii USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 4.11 WHAT IS RTS (REQUEST TO SEND) THRESHOLD? .............................................................. 53 4.12 WHAT IS BEACON INTERVAL?............................................................................................. 53 4.13 WHAT IS PREAMBLE TYPE? ................................................................................................ 54 4.14 WHAT IS SSID BROADCAST? ............................................................................................. 54 4.15 WHAT IS WI-FI PROTECTED ACCESS (WPA)? .................................................................... 54 4.16 WHAT IS WPA2? ................................................................................................................ 55 4.17 WHAT IS 802.1X AUTHENTICATION? .................................................................................. 55 4.18 WHAT IS TEMPORAL KEY INTEGRITY PROTOCOL (TKIP)? ................................................. 55 4.19 WHAT IS ADVANCED ENCRYPTION STANDARD (AES)? ...................................................... 55 4.20 WHAT IS INTER-ACCESS POINT PROTOCOL (IAPP)?........................................................... 55 4.21 WHAT IS WIRELESS DISTRIBUTION SYSTEM (WDS)?......................................................... 56 4.22 WHAT IS UNIVERSAL PLUG AND PLAY (UPNP)?................................................................. 56 4.23 WHAT IS MAXIMUM TRANSMISSION UNIT (MTU) SIZE?.................................................... 56 4.24 WHAT IS CLONE MAC ADDRESS?...................................................................................... 56 4.25 WHAT IS DDNS?................................................................................................................ 56 4.26 WHAT IS NTP CLIENT? ...................................................................................................... 56 4.27 WHAT IS VPN?................................................................................................................... 56 4.28 WHAT IS IPSEC?................................................................................................................ 57 5.1 EXAMPLE ONE ­ PPPOE ON THE WAN ................................................................................... 58 5.2 EXAMPLE TWO ­ FIXED IP ON THE WAN ................................................................................ 60 iii USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Revision History DATE 2005/4/7 2005/6/15 REVISION OF USER'S MANUAL First release (Version 1.0) Add product with SMA Antenna info FIRMWARE V1.2.0 V1.2.x i USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Terminology 3DES AES ANSI AP CCK CSMA/CA CSMA/CD DDNS DH DHCP DSSS EAP ESP FCC FTP IEEE IKE IP ISM LAN MAC MD5 NAT NT NTP PPTP PSD RF SHA1 SNR SSID TCP TFTP Triple Data Encryption Standard Advanced Encryption Standard American National Standards Institute Access Point Complementary Code Keying Carrier Sense Multiple Access/ Collision Avoidance Carrier Sense Multiple Access/ Collision Detection Dynamic Domain Name Server Diffie-Hellman Algorithm Dynamic Host Configuration Protocol Direct Sequence Spread Spectrum Extensible Authentication Protocol Encapsulating Security Payload Federal Communications Commission File Transfer Protocol Institute of Electrical and Electronic Engineers Internet Key Exchange Internet Protocol Industrial, Scientific and Medical Local Area Network Media Access Control Message Digest 5 Network Address Translation Network Termination Network Time Protocol Point to Point Tunneling Protocol Power Spectral Density Radio Frequency Secure Hash Algorithm Signal to Noise Ratio Service Set Identification Transmission Control Protocol Trivial File Transfer Protocol ii USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 TKIP UPNP VPN WDS WEP WLAN WPA Temporal Key Integrity Protocol Universal Plug and Play Virtual Private Network Wireless Distribution System Wired Equivalent Privacy Wireless Local Area Network Wi-Fi Protected Access iii USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 1 Introduction The Wireless LAN Broadband Router is an affordable IEEE 802.11b/g wireless LAN broadband router solution; setting SOHO and enterprise standard for high performance, secure, manageable and reliable WLAN. This document describes the steps required for the initial IP address assign and other WLAN router configuration. The description includes the implementation of the above steps. 1.1 Package contents The package of the WLAN Broadband Router includes the following items, The WLAN Broadband Router The AC to DC power adapter The Documentation CD 1.8M RJ-45 Cable Line 1.2 Product Specifications Product Name Standard Data Transfer Rate Modulation Method Frequency Band RF Output Power Receiver Sensitivity Operation Range Antenna LED Security LAN interface Power Consumption Operating Temperature Storage Temperature Humidity Dimension WLAN Broadband Router 802.11b/g(Wireless), 802.3(10BaseT), 802.3u(100BaseT) 54Mbps(Wireless), 100Mbps(Ethernet) CCK(802.11b), OFDM(802.11g) 2.4GHz ­ 2.497GJz ISM Band, DSSS CCK< 17 dBm, OFDM< 13.5 dBm 802.11b -80 dBm@8%, 802.11g -68 dBm@5% 30 to 280 meters (depend on surrounding) External Antenna Power, Active (WLAN), Act/Link (Ethernet) 64 bit/ 128 bit WEP, WPA, WPA2, port filtering, IP filtering, MAC filtering, port forwarding and DMZ hosting One 10/100BaseT with RJ45 connector (WAN) Four 10/100BaseT with RJ45 connectors (LAN) 7.5V DC Power Adapter 0 ~ 50oC ambient temperature -20 ~ 70oC ambient temperature 5 to 90 % maximum (non-condensing) 137 x 96 x 35 mm 1 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 1.3 Product Features Complies with IEEE 802.11b/g standard for 2.4GHz Wireless LAN. Supports bridging, routing, VPN, WISP functions between wireless and wired Ethernet interfaces. Supports 64-bit and 128-bit WEP, WPA, WPA2 encryption/decryption function to protect the wireless data transmission. Supports IEEE 802.1x Authentication. Support Wi-Fi Protected Access Authentication with Radius and Pre-Shared Key mode. Supports Inter-Access Point Protocol (IAPP). Supports Wireless Distribution System (WDS). Supports IEEE 802.3x full duplex flow control on 10/100M Ethernet interface. Supports DHCP server to provide clients auto IP addresses assignment. Supports DHCP client for Ethernet WAN interface auto IP address assignment. Supports static and dynamic IP routing. Supports PPPoE on Ethernet WAN interface. Supports clone MAC address function. Supports firewall security with port filtering, IP filtering, MAC filtering, port forwarding, trigger port and DMZ hosting functions. Supports WEB based management and configuration. Supports PPTP Client on Ethernet WAN interface. Supports UPnP for automatic Internet access. Supports Dynamic DNS service. Supports NTP client service. Supports Log table and remote Log service. Support Setup Wizard mode. Supports Virtual Private Network (VPN) connection. Supports IPSEC tunnel encryption(3DES/AES128) and authentication(MD5/SHA1) Supports WISP (Wireless ISP). 2 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 1.4 Front Panel Description Power LED WLAN LED LAN LED WAN LED Figure 1 ­WLAN Broadband Router Front Panel LED Indicator State On Off Description 1. Power LED 2. WLAN LED The WLAN Broadband Router is powered on. The WLAN Broadband Router is powered off. Data is transmitting or receiving on the antenna. No data is transmitting or receiving on the antenna. Data is transmitting or receiving on the WAN interface. No data is transmitting or receiving on the WAN interface. Connection speed is 100Mbps on WAN interface. Connection speed is 10Mbps on WAN interface. Data is transmitting or receiving on the LAN interface. No data is transmitting or receiving on the LAN interface. Connection speed is 100Mbps on LAN interface. Connection speed is 10Mbps on LAN interface. Flashing Off 3. WAN LED ACT Flashing Off 10/100M On Off 4. LAN LED ACT Flashing Off 10/100M On Off 3 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 1.5 Rear Panel Description Fixed Antenna Reset WAN LAN Power Figure 2 ­ WLAN Broadband Router Rear Panel (Fixed Antenna) SMA Antenna WAN LAN Power Reset Figure 2.1 ­ WLAN Broadband Router Rear Panel (SMA Antenna) 4 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Interfaces Description 1. Antenna (Fixed / SMA) 2. Reset 3. WAN The Wireless LAN Antenna. (Figure 2 / Figure 2.1) Push continually the reset button 5 ~ 10 seconds to reset the configuration parameters to factory defaults. The RJ-45 socket allows WAN connection through a Category 5 cable. Support auto-sensing on 10/100M speed and half/ full duplex; comply with IEEE 802.3/ 802.3u respectively. The RJ-45 sockets allow LAN connection through Category 5 cables. Support auto-sensing on 10/100M speed and half/ full duplex; comply with IEEE 802.3/ 802.3u respectively. The power jack allows an external DC +7.5 V power supply connection. The external AC to DC adaptor provide adaptive power requirement to the WLAN Broadband Router. 4. LAN 5. Power 5 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 2 Installation 2.1 Hardware Installation Step 1: Place the Wireless LAN Broadband Router to the best optimum transmission location. The best transmission location for your WLAN Broadband Router is usually at the geographic center of your wireless network, with line of sign to all of your mobile stations. Step 2: Connect the WLAN Broadband Router to your wired network. Connect the Ethernet WAN interface of WLAN Broadband Router by category 5 Ethernet cable to your switch/ hub/ xDSL modem or cable modem. A straight-through Ethernet cable with appropriate cable length is needed. Step 3: Supply DC power to the WLAN Broadband Router. Use only the AC/DC power adapter supplied with the WLAN Broadband Router; it may occur damage by using a different type of power adapter. The hardware installation finished. 2.2 Software Installation There are no software drivers, patches or utilities installation needed, but only the configuration setting. Please refer to chapter 3 for software configuration. Notice: It will take about 55 seconds to complete the boot up sequence after powered on the WLAN Broadband Router; Power LED will be active, and after that the WLAN Activity LED will be flashing to show the WLAN interface is enabled and working now. 6 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 3 Software configuration There are web based management and configuration functions allowing you to have the jobs done easily. The WLAN Broadband Router is delivered with the following factory default parameters on the Ethernet LAN interfaces. Default IP Address: 192.168.1.254 Default IP subnet mask: 255.255.255.0 WEB login User Name: WEB login Password: 3.1 Prepare your PC to configure the WLAN Broadband Router For OS of Microsoft Windows 95/ 98/ Me: 1. Click the Start button and select Settings, then click Control Panel. The Control Panel window will appear. Note: Windows Me users may not see the Network control panel. If so, select View all Control Panel options on the left side of the window Move mouse and double-click the right button on Network icon. The Network window will appear. Check the installed list of Network Components. If TCP/IP is not installed, click the Add button to install it; otherwise go to step 6. Select Protocol in the Network Component Type dialog box and click Add button. Select TCP/IP in Microsoft of Select Network Protocol dialog box then click OK button to install the TCP/IP protocol, it may need the Microsoft Windows CD to complete the installation. Close and go back to Network dialog box after the TCP/IP installation. Select TCP/IP and click the properties button on the Network dialog box. Select Specify an IP address and type in values as following example. IP Address: 192.168.1.1, any IP address within 192.168.1.1 to 192.168.1.253 is good to connect the Wireless LAN Access Point. IP Subnet Mask: 255.255.255.0 8. Click OK and reboot your PC after completes the IP parameters setting. For OS of Microsoft Windows 2000, XP: 1. Click the Start button and select Settings, then click Control Panel. The Control 7 2. 3. 4. 5. 6. 7. USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 2. 3. 4. 5. 6. 7. Panel window will appear. Move mouse and double-click the right button on Network and Dial-up Connections icon. Move mouse and double-click the Local Area Connection icon. The Local Area Connection window will appear. Click Properties button in the Local Area Connection window. Check the installed list of Network Components. If TCP/IP is not installed, click the Add button to install it; otherwise go to step 6. Select Protocol in the Network Component Type dialog box and click Add button. Select TCP/IP in Microsoft of Select Network Protocol dialog box then click OK button to install the TCP/IP protocol, it may need the Microsoft Windows CD to complete the installation. Close and go back to Network dialog box after the TCP/IP installation. Select TCP/IP and click the properties button on the Network dialog box. Select Specify an IP address and type in values as following example. IP Address: 192.168.1.1, any IP address within 192.168.1.1 to 192.168.1.253 is good to connect the Wireless LAN Access Point. IP Subnet Mask: 255.255.255.0 8. Click OK to completes the IP parameters setting. For OS of Microsoft Windows NT: 1. Click the Start button and select Settings, then click Control Panel. The Control Panel window will appear. 2. Move mouse and double-click the right button on Network icon. The Network window will appear. Click Protocol tab from the Network window. 3. Check the installed list of Network Protocol window. If TCP/IP is not installed, click the Add button to install it; otherwise go to step 6. 4. Select Protocol in the Network Component Type dialog box and click Add button. 5. Select TCP/IP in Microsoft of Select Network Protocol dialog box then click OK button to install the TCP/IP protocol, it may need the Microsoft Windows CD to complete the installation. Close and go back to Network dialog box after the TCP/IP installation. 6. Select TCP/IP and click the properties button on the Network dialog box. 7. Select Specify an IP address and type in values as following example. IP Address: 192.168.1.1, any IP address within 192.168.1.1 to 192.168.1.253 is good to connect the Wireless LAN Access Point. IP Subnet Mask: 255.255.255.0 8. Click OK to complete the IP parameters setting. 8 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 3.2 Connect to the WLAN Broadband Router Open a WEB browser, i.e. Microsoft Internet Explore, then enter 192.168.1.254 on the URL to connect the WLAN Broadband Router. 3.3 Management and configuration on the WLAN Broadband Router 3.3.1 Status This page shows the current status and some basic settings of the device, includes system, wireless, Ethernet LAN and WAN configuration information. Screen snapshot ­ Status Item System Uptime Firmware version It shows the duration since WLAN Broadband Router is powered on. It shows the firmware version of WLAN Broadband Router. Description 9 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Wireless configuration Mode Band SSID It shows wireless operation mode It shows the current wireless operating frequency. It shows the SSID of this WLAN Broadband Router. The SSID is the unique name of WLAN Broadband Router and shared among its service area, so all devices attempts to join the same wireless network can identify it. It shows the wireless channel connected currently. It shows the status of encryption function. It shows the number of connected clients (or stations, PCs). It shows the BSSID address of the WLAN Broadband Router. BSSID is a six-byte address. It shows the IP address of LAN interfaces of WLAN Broadband Router. It shows the IP subnet mask of LAN interfaces of WLAN Broadband Router. It shows the default gateway setting for LAN interfaces outgoing data packets. It shows the DHCP server is enabled or not. It shows the MAC address of LAN interfaces of WLAN Broadband Router. It shows how the WLAN Broadband Router gets the IP address. The IP address can be set manually to a fixed one or set dynamically by DHCP server or attain IP by PPPoE / PPTP connection. It shows the IP address of WAN interface of WLAN Broadband Router. It shows the IP subnet mask of WAN interface of WLAN Broadband Router. It shows the default gateway setting for WAN interface outgoing data packets. It shows the MAC address of WAN interface of WLAN Broadband Router. Channel Number Encryption Associated Clients BSSID LAN configuration IP Address Subnet Mask Default Gateway DHCP Server MAC Address WAN configuration Attain IP Protocol IP Address Subnet Mask Default Gateway MAC Address 10 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 3.3.2 Setup Wizard This page guides you to configure wireless broadband router for first time Screen snapshot ­ Setup Wizard I Operation Mode This page followed by Setup Wizard page to define the operation mode. Screen snapshot ­ Operation Mode 11 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 II Time Zone Setting This page is used to enable and configure NTP client Screen snapshot ­ Time Zone Settings III LAN Interface Setup This page is used to configure local area network IP address and subnet mask Screen snapshot ­ LAN Interface Setup 12 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 IV WAN Interface Setup This page is used to configure WAN access type Screen snapshot ­ WAN Interface Setup V Wireless Basic Settings This page is used to configure basic wireless parameters like Band, Mode, Network Type SSID, Channel Number, Enable Mac Clone(Single Ethernet Client) Screen snapshot ­ Wireless Basic Settings 13 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 VI Wireless Security Setup This page is used to configure wireless security Screen snapshot ­ Wireless Security Setup 3.3.3 Operation Mode This page is used to configure which mode wireless broadband router acts Screen snapshot ­ Operation Mode Item Gateway Description Traditional gateway configuration. It always connects internet via ADSL/Cable Modem. LAN interface, WAN 14 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 interface, Wireless interface, NAT and Firewall modules are applied to this mode Bridge Each interface (LAN, WAN and Wireless) regards as bridge. NAT, Firewall and all router's functions are not supported Switch Wireless interface to WAN port and all Ethernet ports in bridge mode. Wireless interface can do all router's functions Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. Wireless ISP Apply Changes Reset 3.3.4 Wireless - Basic Settings This page is used to configure the parameters for wireless LAN clients that may connect to your Broadband Router. Here you may change wireless encryption settings as well as wireless network parameters. Screen snapshot ­ Wireless Basic Settings Item Description Disable Wireless LAN Click on to disable the wireless LAN data transmission. Interface Band Click to select 2.4GHz(B) / 2.4GHz(G) / 2.4GHz(B+G) 15 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Mode Site Survey Click to select the WLAN AP / Client / WDS / AP+WDS wireless mode. The Site Survey button provides tool to scan the wireless network. If any Access Point or IBSS is found, you could choose to connect it manually when client mode is enabled. Refer to 3.3.9 Site Survey. It is the wireless network name. The SSID can be 32 bytes long. Select the wireless communication channel from pull-down menu. Click the Show Active Clients button to open Active Wireless Client Table that shows the MAC address, transmit-packet, receive-packet and transmission-rate for each associated wireless client. SSID Channel Number Associated Clients Enable Mac Clone Take Laptop NIC MAC address as wireless client MAC (Single Ethernet Client) address. [Client Mode only] Apply Changes Reset Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. 3.3.5 Wireless - Advanced Settings These settings are only for more technically advanced users who have a sufficient knowledge about wireless LAN. These settings should not be changed unless you know what effect the changes will have on your WLAN Broadband Router. 16 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Screen snapshot ­ Wireless Advanced Settings Item Authentication Type Fragment Threshold Description Click to select the authentication type in Open System, Shared Key or Auto selection. Set the data packet fragmentation threshold, value can be written between 256 and 2346 bytes. Refer to 4.10 What is Fragment Threshold? Set the RTS Threshold, value can be written between 0 and 2347 bytes. Refer to 4.11 What is RTS(Request To Send) Threshold? Set the Beacon Interval, value can be written between 20 and 1024 ms. Refer to 4.12 What is Beacon Interval? Select the transmission data rate from pull-down menu. Data rate can be auto-select, 11M, 5.5M, 2M or 1Mbps. Click to select the Long Preamble or Short Preamble support on the wireless data packet transmission. Refer to 4.13 What is Preamble Type? Click to enable or disable the SSID broadcast function. Refer to 4.14 What is SSID Broadcast? Click to enable or disable the IAPP function. Refer to 4.20 What is Inter-Access Point Protocol(IAPP)? RTS Threshold Beacon Interval Data Rate Preamble Type Broadcast SSID IAPP 17 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 802.11g Protection Apply Changes Reset Protect 802.11b user. Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. 3.3.6 Wireless - Security Setup This page allows you setup the wireless security. Turn on WEP, WPA, WPA2 by using encryption keys could prevent any unauthorized access to your wireless network. Screen snapshot ­ Wireless Security Setup Item Encryption Description Select the encryption supported over wireless access. The encryption method can be None, WEP, WPA(TKIP), WPA2 or WPA2 Mixed Refer to 4.9 What is WEP? 4.15 What is Wi-Fi Protected Access (WPA)? 4.16 What is WPA2(AES)? 4.17 What is 802.1X Authentication? 4.18 What is Temporal Key Integrity Protocol (TKIP)? 4.19 What is Advanced Encryption Standard (AES)? 18 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Use 802.1x Authentication While Encryption is selected to be WEP. Click the check box to enable IEEE 802.1x authentication function. Refer to 4.16 What is 802.1x Authentication? While Encryption is selected to be WPA. Click to select the WPA Authentication Mode with Enterprise (RADIUS) or Personal (Pre-Shared Key). Refer to 4.15 What is Wi-Fi Protected Access (WPA)? WPA Authentication Mode Pre-Shared Key Format While Encryption is selected to be WPA. Select the Pre-shared key format from the pull-down menu. The format can be Passphrase or Hex (64 characters). [WPA, Personal(Pre-Shared Key) only] Pre-Shared Key Enable Pre-Authentication Authentication RADIUS Server Apply Changes Reset Fill in the key value. [WPA, Personal(Pre-Shared Key) only] Click to enable Pre-Authentication. [WPA2/WPA2 Mixed only, Enterprise only] Set the IP address, port and login password information of authentication RADIUS sever. Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. 19 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 I WEP Key Setup Screen snapshot ­ WEP Key Setup Item Key Length Description Select the WEP shared secret key length from pull-down menu. The length can be chose between 64-bit and 128-bit (known as "WEP2") keys. The WEP key is composed of initialization vector (24 bits) and secret key (40-bit or 104-bit). Select the WEP shared secret key format from pull-down menu. The format can be chose between plant text (ASCII) and hexadecimal (HEX) code. Set the default secret key for WEP security function. Value can be chose between 1 and 4. Secret key 1 of WEP security encryption function. Secret key 2 of WEP security encryption function. Secret key 3 of WEP security encryption function. Secret key 4 of WEP security encryption function. Click the Apply Changes button to complete the new configuration setting. Click to close this WEP Key setup window. Click the Reset button to abort change and recover the Key Format Default Tx Key Encryption Key 1 Encryption Key 2 Encryption Key 3 Encryption Key 4 Apply Changes Close Reset 20 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 previous configuration setting. WEP encryption key (secret key) length: Length 64-bit Format ASCII HEX 5 characters 10 hexadecimal codes 128-bit 13 characters 26 hexadecimal codes 3.3.7 Wireless - Access Control If you enable wireless access control, only those clients whose wireless MAC addresses are in the access control list will be able to connect to your Access Point. When this option is enabled, no wireless clients will be able to connect if the list contains no entries. Screen snapshot ­ Wireless Access Control Item Wireless Access Control Mode Description Click the Disabled, Allow Listed or Deny Listed of drop down menu choose wireless access control mode. This is a security control function; only those clients registered in the access control list can link to this WLAN Broadband Router. Fill in the MAC address of client to register this WLAN 21 MAC Address USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Broadband Router access capability. Comment Apply Changes Reset Fill in the comment tag for the registered client. Click the Apply Changes button to register the client to new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. Current Access Control It shows the registered clients that are allowed to link to List this WLAN Broadband Router. Delete Selected Delete All Reset Click to delete the selected clients that will be access right removed from this WLAN Broadband Router. Click to delete all the registered clients from the access allowed list. Click the Reset button to abort change and recover the previous configuration setting. 3.3.8 WDS Settings Wireless Distribution System uses wireless media to communicate with other APs, like the Ethernet does. To do this, you must set these APs in the same channel and set MAC address of other AP that you want to communicate with in the table and then enable the WDS. Screen snapshot ­ WDS Setup 22 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Item Enable WDS Description Click the check box to enable wireless distribution system. Refer to 4.21 What is Wireless Distribution System (WDS)? Fill in the MAC address of AP to register the wireless distribution system access capability. Fill in the comment tag for the registered AP. Click the Apply Changes button to register the AP to new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. Click button to configure wireless security like WEP(64bits), WEP(128bits), WPA(TKIP), WPA2(AES) or None MAC Address Comment Apply Changes Reset Set Security Show Statistics Delete Selected Delete All Reset It shows the TX, RX packets, rate statistics Click to delete the selected clients that will be removed from the wireless distribution system. Click to delete all the registered APs from the wireless distribution system allowed list. Click the Reset button to abort change and recover the previous configuration setting. I WDS Security Setup Requirement: Set [Wireless]->[Basic Settings]->[Mode]->AP+WDS This page is used to configure the wireless security between APs. Refer to 3.3.6 Wireless Security Setup. 23 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Screen snapshot ­ WDS Security Setup II WDS AP Table This page is used to show WDS statistics Screen snapshot ­ WDS AP Table Item MAC Address Tx Packets Tx Errors Rx Packets Description It shows the MAC Address within WDS. It shows the statistic count of sent packets on the wireless LAN interface. It shows the statistic count of error sent packets on the Wireless LAN interface. It shows the statistic count of received packets on the wireless LAN interface. 24 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Tx Rare (Mbps) Refresh Close It shows the wireless link rate within WDS. Click to refresh the statistic counters on the screen. Click to close the current window. 3.3.9 Site Survey This page is used to view or configure other APs near yours. Screen snapshot ­ Wireless Site Survey Item SSID BSSID Channel Type Encrypt Signal Select Refresh Connect Description It shows the SSID of AP. It shows BSSID of AP. It show the current channel of AP occupied. It show which type AP acts. It shows the encryption status. It shows the power level of current AP. Click to select AP or client you'd like to connect. Click the Refresh button to re-scan site survey on the screen. Click the Connect button to establish connection. 3.3.10 LAN Interface Setup This page is used to configure the parameters for local area network that connects to the LAN ports of your WLAN Broadband Router. Here you may 25 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 change the setting for IP address, subnet mask, DHCP, etc. Screen snapshot ­ LAN Interface Setup Item IP Address Subnet Mask Default Gateway DHCP Server DHCP Client Range Description Fill in the IP address of LAN interfaces of this WLAN Broadband Router. Fill in the subnet mask of LAN interfaces of this WLAN Broadband Router. Fill in the default gateway for LAN interfaces out going data packets. Click to select Disabled, Client or Server in different operation mode of wireless broadband router. Fill in the start IP address and end IP address to allocate a range of IP addresses; client with DHCP function set will be assigned an IP address from the range. Click to open the Active DHCP Client Table window that shows the active clients with their assigned IP address, MAC address and time expired information. [Server mode only] 802.1d Spanning Tree Clone MAC Address Select to enable or disable the IEEE 802.1d Spanning Tree function from pull-down menu. Fill in the MAC address that is the MAC address to be cloned. Refer to 4.24 What is Clone MAC Address? Show Client 26 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Apply Changes Reset Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. 3.3.11 WAN Interface Setup This page is used to configure the parameters for wide area network that connects to the WAN port of your WLAN Broadband Router. Here you may change the access method to Static IP, DHCP, PPPoE or PPTP by click the item value of WAN Access Type. I Static IP Screen snapshot ­ WAN Interface Setup ­ Static IP Item Static IP Description Click to select Static IP support on WAN interface. There are IP address, subnet mask and default gateway settings need to be done. If you select the Static IP support on WAN interface, fill in the IP address for it. If you select the Static IP support on WAN interface, fill IP Address Subnet Mask 27 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 in the subnet mask for it. Default Gateway If you select the Static IP support on WAN interface, fill in the default gateway for WAN interface out going data packets. Fill in the IP address of Domain Name Server 1. Fill in the IP address of Domain Name Server 2. Fill in the IP address of Domain Name Server 3. Fill in the MAC address that is the MAC address to be cloned. Refer to 4.24 What is Clone MAC Address? Click the checkbox to enable uPNP function. Refer to 4.22 What is Universal Plug and Play (uPNP)? Click the checkbox to enable web configuration from WAN side. Click the checkbox to enable WAN ICMP response. Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. DNS 1 DNS 2 DNS 3 Clone MAC Address Enable uPNP Enable Web Server Access on WAN Enable WAN Echo Reply Apply Changes Reset II DHCP Client Screen snapshot ­ WAN Interface Setup ­ DHCP Client 28 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Item DHCP Client Attain DNS Automatically Set DNS Manually DNS 1 DNS 2 DNS 3 Clone MAC Address Enable uPNP Enable Web Server Access on WAN Enable WAN Echo Reply Apply Changes Reset Description Click to select DHCP support on WAN interface for IP address assigned automatically from a DHCP server. Click to select getting DNS address for DHCP support. Please select Set DNS Manually if the DHCP support is selected. Click to select getting DNS address for DHCP support. Fill in the IP address of Domain Name Server 1. Fill in the IP address of Domain Name Server 2. Fill in the IP address of Domain Name Server 3. Fill in the MAC address that is the MAC address to be cloned. Refer to 4.24 What is Clone MAC Address? Click the checkbox to enable uPNP function. Refer to 4.22 What is Universal Plug and Play (uPNP)? Click the checkbox to enable web configuration from WAN side. Click the checkbox to enable WAN ICMP response. Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. 29 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 III PPPoE Screen snapshot ­ WAN Interface Setup ­ PPPoE Item PPPoE Description Click to select PPPoE support on WAN interface. There are user name, password, connection type and idle time settings need to be done. If you select the PPPoE support on WAN interface, fill in the user name and password to login the PPPoE server. If you select the PPPoE support on WAN interface, fill in the user name and password to login the PPPoE server. Select the connection type from pull-down menu. There are Continuous, Connect on Demand and Manual three types to select. Continuous connection type means to setup the connection through PPPoE protocol whenever this WLAN Broadband Router is powered on. Connect on Demand connection type means to setup the 30 User Name Password Connection Type USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 connection through PPPoE protocol whenever you send the data packets out through the WAN interface; there are a watchdog implemented to close the PPPoE connection while there are no data sent out longer than the idle time set. Manual connection type means to setup the connection through the PPPoE protocol by clicking the Connect button manually, and clicking the Disconnect button manually. Idle Time If you select the PPPoE and Connect on Demand connection type, fill in the idle time for auto-disconnect function. Value can be between 1 and 1000 minutes. Fill in the mtu size of MTU Size. The default value is 1400. Refer to 4.23 What is Maximum Transmission Unit (MTU) Size? Click to select getting DNS address for PPPoE support. Please select Set DNS Manually if the PPPoE support is selected. Click to select getting DNS address for Static IP support. Fill in the IP address of Domain Name Server 1. Fill in the IP address of Domain Name Server 2. Fill in the IP address of Domain Name Server 3. Fill in the MAC address that is the MAC address to be cloned. Refer to 4.24 What is Clone MAC Address? Click the checkbox to enable uPNP function. Refer to 4.22 What is Universal Plug and Play (uPNP)? Click the checkbox to enable web configuration from WAN side. Click the checkbox to enable WAN ICMP response. Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. MTU Size Attain DNS Automatically Set DNS Manually DNS 1 DNS 2 DNS 3 Clone MAC Address Enable uPNP Enable Web Server Access on WAN Enable WAN Echo Reply Apply Changes Reset 31 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 IV PPTP Screen snapshot ­ WAN Interface Setup ­ PPTP Item PPTP Description Allow user to make a tunnel with remote site directly to secure the data transmission among the connection. User can use embedded PPTP client supported by this router to make a VPN connection. If you select the PPTP support on WAN interface, fill in the IP address for it. If you select the PPTP support on WAN interface, fill in the subnet mask for it. Enter the IP address of the PPTP Server. If you select the PPTP support on WAN interface, fill in the user name and password to login the PPTP server. IP Address Subnet Mask Server IP Address User Name 32 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Password MTU Size f you select the PPTP support on WAN interface, fill in the user name and password to login the PPTP server. Fill in the mtu size of MTU Size. The default value is 1400. Refer to 4.23 What is Maximum Transmission Unit (MTU) Size? Click to select getting DNS address for PPTP support. Please select Set DNS Manually if the PPTP support is selected. Click to select getting DNS address for PPTP support. Fill in the IP address of Domain Name Server 1. Fill in the IP address of Domain Name Server 2. Fill in the IP address of Domain Name Server 3. Fill in the MAC address that is the MAC address to be cloned. Refer to 4.24 What is Clone MAC Address? Click the checkbox to enable uPNP function. Refer to 4.22 What is Universal Plug and Play (uPNP)? Click the checkbox to enable web configuration from WAN side. Click the checkbox to enable WAN ICMP response. Click the Apply Changes button to complete the new configuration setting. Click the Reset button to abort change and recover the previous configuration setting. Attain DNS Automatically Set DNS Manually DNS 1 DNS 2 DNS 3 Clone MAC Address Enable uPNP Enable Web Server Access on WAN Enable WAN Echo Reply Apply Changes Reset 3.3.12 Firewall - Port Filtering Entries in this table are used to restrict certain types of data packets from your local network to Internet through the Gateway. Use of such filters can be helpful in securing or restricting your local network. 33 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Screen snapshot ­ Firewall - Port Filtering Item Enable Port Filtering Port Range Protocol Comments Description Click to enable the port filtering security function. To restrict data transmission from the local network on certain ports, fill in the range of start-port and end-port, and the protocol, also put your comments on it. The Protocol can be TCP, UDP or Both. Comments let you know about whys to restrict data from the ports. Click the Apply Changes button to register the ports to port filtering list. Click the Reset button to abort change and recover the previous configuration setting. Click to delete the selected port range that will be removed from the port-filtering list. Click to delete all the registered entries from the port-filtering list. Click the Reset button to abort change and recover the previous configuration setting. Apply Changes Reset Delete Selected Delete All Reset 3.3.13 Firewall - IP Filtering Entries in this table are used to restrict certain types of data packets from your local network to Internet through the Gateway. Use of such filters can be helpful in securing or restricting your local network. 34 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Screen snapshot ­ Firewall - IP Filtering Item Enable IP Filtering Local IP Address Protocol Comments Description Click to enable the IP filtering security function. To restrict data transmission from local network on certain IP addresses, fill in the IP address and the protocol, also put your comments on it. The Protocol can be TCP, UDP or Both. Comments let you know about whys to restrict data from the IP address. Click the Apply Changes button to register the IP address to IP filtering list. Click the Reset button to abort change and recover the previous configuration setting. Click to delete the selected IP address that will be removed from the IP-filtering list. Click to delete all the registered entries from the IP-filtering list. Click the Reset button to abort change and recover the previous configuration setting. Apply Changes Reset Delete Selected Delete All Reset 3.3.14 Firewall - MAC Filtering Entries in this table are used to restrict certain types of data packets from your local network to Internet through the Gateway. Use of such filters can be 35 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 helpful in securing or restricting your local network. Screen snapshot ­ Firewall - MAC Filtering Item MAC Address Comments Description To restrict data transmission from local network on certain MAC addresses, fill in the MAC address and your comments on it. Comments let you know about whys to restrict data from the MAC address. Click the Apply Changes button to register the MAC address to MAC filtering list. Click the Reset button to abort change and recover the previous configuration setting. Click to delete the selected MAC address that will be removed from the MAC-filtering list. Click to delete all the registered entries from the MAC-filtering list. Click the Reset button to abort change and recover the previous configuration setting. Enable MAC Filtering Click to enable the MAC filtering security function. Apply Changes Reset Delete Selected Delete All Reset 3.3.15 Firewall - Port Forwarding Entries in this table allow you to automatically redirect common network services to a specific machine behind the NAT firewall. These settings are only 36 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 necessary if you wish to host some sort of server like a web server or mail server on the private local network behind your Gateway's NAT firewall. Screen snapshot ­ Firewall - Port Forwarding Item IP Address Protocol Port Range Comment Description To forward data packets coming from WAN to a specific IP address that hosted in local network behind the NAT firewall, fill in the IP address, protocol, port range and your comments. The Protocol can be TCP, UDP or Both. The Port Range for data transmission. Comments let you know about whys to allow data packets forward to the IP address and port number. Click the Apply Changes button to register the IP address and port number to Port forwarding list. Click the Reset button to abort change and recover the previous configuration setting. Click to delete the selected IP address and port number that will be removed from the port-forwarding list. Click to delete all the registered entries from the port-forwarding list. Enable Port Forwarding Click to enable the Port Forwarding security function. Apply Changes Reset Delete Selected Delete All 37 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Reset Click the Reset button to abort change and recover the previous configuration setting. 3.3.16 Firewall - DMZ A Demilitarized Zone is used to provide Internet services without sacrificing unauthorized access to its local private network. Typically, the DMZ host contains devices accessible to Internet traffic, such as Web (HTTP) servers, FTP servers, SMTP (e-mail) servers and DNS servers. Screen snapshot ­ Firewall - DMZ Item Enable DMZ Description Click to enable the DMZ function. DMZ Host IP Address To support DMZ in your firewall design, fill in the IP address of DMZ host that can be access from the WAN interface. Apply Changes Reset Click the Apply Changes button to register the IP address of DMZ host. Click the Reset button to abort change and recover the previous configuration setting. 3.3.17 VPN Setting This page is used to show VPN connection table, configure IPSEC VPN, NAT Traversal, Generate RSA Key, Show RSA Public Key. 38 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Screen snapshot ­ VPN Setup Item Enable IPSEC VPN Description Click to enable IPSEC VPN function. Refer to 4.27 What is VPN? and 4.28 What is IPSEC? Click to generate RSA key. Click the Apply Changes button to enable IPSEC VPN, NAT Traversal settings. It shows current WAN interface information and VPN connection table. Click to enter the current VPN tunnel configuration page. Click to delete the current VPN tunnel that radio button stay. Click to refresh the current VPN connection table. Enable NAT Traversal Click to enable NAT Traversal function. Generate RSA Key Apply Changes Current VPN Connection Table Edit Delete Refresh Show RSA Public Key Click to show RSA public key that we generate. 39 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 I VPN Setup - Edit Tunnel Screen snapshot ­ VPN Setup-Edit-1 Item Enable Tunnel # Connection Name Auth Type Local Site Local IP Address/Network Local Subnet Mask Remote Site Remote Secure Gateway Remote IP Address/Network Remote Subnet Mask Local/Peer ID Local ID Type Local ID Remote ID Type Description Click to enable the IPSEC VPN current tunnel. Assign the connection name tag. Click to select PSK or RSA. Click to select Single Address or Subnet Address VPN connection. Fill in IP address or subnet address depends on which Local Site option you choose. Fill in the local subnet mask. Click to select Single Address, Subnet Address, Any Address or NAT-T Any Address VPN remote connection. Fill in remote gateway IP address Fill in IP address or subnet address depends on which Remote Site option you choose. Fill in remote subnet mask Define IKE exchange information type Click to select IP, DNS or E-mail as local exchange type Fill in local ID except IP selected Click to select IP, DNS or E-mail as remote exchange 40 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 Remote ID type Fill in remote ID except IP selected Screen snapshot ­ VPN Setup-Edit-2 Item Key Management Advanced Connection Type Connect Disconnect ESP PreShared Key Remote RSA Key Status SPI Encryption Key Authentication Key Apply Change Reset Refresh Back Description Click to select IKE or Manual mode. Click Advanced button to configure more IKE settings. Click to select Initiator or Responder mode. Click to connect manually. [Responder mode only] Click to disconnect manually. [Responder mode only]. Click to configure 3DES, AES128 or NULL encryption. Click to configure MD5 or SHA1 authentication. Fill in the key value. [IKE mode only] Fill in the remote gateway RSA key. [IKE mode only] It shows connection status. [IKE mode only] Fill in Security Parameter Index value. [Manual mode only] Fill in encryption key. [Manual mode only] Fill in authentication key. [Manual mode only] Click the Apply Changes button to save current tunnel settings. Click the Reset button to abort change and recover the previous configuration setting. It shows the current connection status. [Manual mode only] It returns back to VPN Setup page. 41 USER'S MANUAL OF WLAN BROADBAND ROUTER Version: 1.0 II Advanced IKE Setup Screen snapshot ­ Advanced VPN Settings for IKE Item Phase 1 Negotiation Mode Encryption Algorithm Authentication Algorithm Key Group Key Life Time Phase 2 Main mode. Click to select 3DES or AES128 encryption. Click to select MD5 or SHA1 authentication. Click to select DH1(modp768), DH2(modp1024) or DH5(modp1536) key group. Default value is DH2 Fill in the key life time value by seconds. Description 42