Wireless-N ADSL2+ Firewall Router User Manual Last Revised Date: March 20, 2015 Table of Contents Chapter 1 ................................................................................................................................................................ 1 1.1 Introducing the Router ................................................................................................................................. 1 Express Internet Access .................................................................................................................................. 1 Firewall Security and Smooth Traffic.............................................................................................................. 1 Easy Network Management ........................................................................................................................... 1 IPv6 Ready - Pathway to the Future ............................................................................................................... 1 Quick Start Wizard .......................................................................................................................................... 2 Firmware Upgradeable ................................................................................................................................... 2 1.2 Features of the Router ................................................................................................................................. 3 Network Protocols and Features .................................................................................................................... 3 Firewall ........................................................................................................................................................... 4 Quality of Service Control ............................................................................................................................... 4 Wireless LAN ................................................................................................................................................... 4 IPTV Applications ............................................................................................................................................ 4 Management .................................................................................................................................................. 4 1.3 Hardware Specifications............................................................................................................................... 5 Physical Interface............................................................................................................................................ 5 1.4 Applications for the Router .......................................................................................................................... 6 Chapter 2 ................................................................................................................................................................ 7 Installing the Router............................................................................................................................................... 7 2.1 Important note for using the Router ........................................................................................................... 7 2.2 Package Contents ......................................................................................................................................... 8 2.3 The Front LEDs.............................................................................................................................................. 9 2.4 The Rear Ports ............................................................................................................................................ 10 2.5 Cabling ........................................................................................................................................................ 11 Chapter 3 .............................................................................................................................................................. 12 3.1 Before Configuration .................................................................................................................................. 12 3.1.1 Configuring a PC in Windows 7/8 ........................................................................................................ 13 3.1.2 Configuring a PC in Windows Vista...................................................................................................... 16 3.1.3 Configuring a PC in Windows XP ......................................................................................................... 18 3.2 Factory Default Settings ............................................................................................................................. 20 3.2.1 Username and Password ..................................................................................................................... 20 3.3 LAN Port Addresses .................................................................................................................................... 21 3.4 Information from your ISP ......................................................................................................................... 21 Chapter 4 .............................................................................................................................................................. 22 4.1 Configuring the Router with your Web Browser ....................................................................................... 22 4.2 Status .......................................................................................................................................................... 24 4.2.1 Device Info ........................................................................................................................................... 25 4.2.2 System Log ........................................................................................................................................... 27 4.2.4 Statistics ............................................................................................................................................... 28 4.2.5 DHCP Table .......................................................................................................................................... 31 4.2.5 ADSL Status .......................................................................................................................................... 32 4.3 Quick Start .................................................................................................................................................. 33 4.4 Configuration .............................................................................................................................................. 36 4.4.1 Interface Setup .................................................................................................................................... 37 4.4.1.1 Internet ......................................................................................................................................... 38 4.4.1.2 LAN ................................................................................................................................................ 42 4.4.1.3 Wireless......................................................................................................................................... 46 4.4.1.4 Wireless MAC Filter ...................................................................................................................... 57 4.4.2 Advanced Setup ................................................................................................................................... 58 4.4.2.1 Firewall .......................................................................................................................................... 59 4.4.2.2 Routing .......................................................................................................................................... 60 4.4.2.3 NAT................................................................................................................................................ 62 4.4.2.4 Static DNS...................................................................................................................................... 67 4.4.2.5 ADSL .............................................................................................................................................. 68 4.4.2.6 QoS ................................................................................................................................................ 69 4.4.2.7 Interface Grouping ........................................................................................................................ 72 4.4.2.8 Time Schedule ............................................................................................................................... 74 4.4.2.9 Remote System Log ...................................................................................................................... 75 4.4.3 Access Management............................................................................................................................ 76 4.4.3.1 Device Management ..................................................................................................................... 77 4.4.3.2 SNMP............................................................................................................................................. 78 4.4.3.3 Universal Plug & Play .................................................................................................................... 79 4.4.3.4 Dynamic DNS................................................................................................................................. 80 4.4.3.5 Access Control............................................................................................................................... 82 4.4.3.6 Packet Filter .................................................................................................................................. 84 4.4.3.7 CWMP (TR-069)............................................................................................................................. 88 4.4.3.8 Parental Control ............................................................................................................................ 90 4.4.4 Maintenance ........................................................................................................................................ 91 4.4.4.1 User Management ........................................................................................................................ 92 4.4.4.2 Time Zone ..................................................................................................................................... 96 4.4.4.3 Firmware & Configuraion.............................................................................................................. 97 4.4.4.4 System Restart .............................................................................................................................. 99 4.4.4.5 Diagnostics Tool .......................................................................................................................... 100 Chapter 5 ............................................................................................................................................................ 101 Problems starting up the router ............................................................................................................. 101 Problems with the WAN Interface .......................................................................................................... 101 Problems with the LAN Interface ............................................................................................................ 101 APPENDIX ........................................................................................................................................................... 102 Chapter 1 Introduction the Router 1.1 Introducing the Router This Router is an economical ADSL2+ router ideal for Home and SOHO users to enjoy improved Wireless Access Speed with a maximum operational speed of 150Mbps.It delivers the highest level of security with higher speed and better coverage of wireless-n solutions. With an integrated 802.11n wireless access point, the router enables faster wireless speeds of up to 150Mbps. The SOHO Firewall is integrated to provide protection against hacker attacks while the Quality of Service prioritizes queues and traffic for applications such as music downloads, online gaming, video streaming and file sharing. Express Internet Access Complying with worldwide ADSL standards, the Router supports downstream data transmission rates of up to 12/24 Mbps with ADSL2/2+, 8 Mbps with ADSL, and performs at upstream rates of up to 1 Mbps. Moreover, the Router includes Annex M technology that supports the latest ADSL2/2+ standard for higher upload speeds by increasing the upstream operation rate to approximately 2.5Mbps (up to 3Mbps under ideal conditions). With this technology, you can enjoy even higher-speed broadband multimedia applications such as interactive gaming, video streaming and real-time audios that run faster and easier than ever. Firewall Security and Smooth Traffic With the built-in NAT default firewall, the advanced anti-hacker pattern-filtering protection features automatically detect and block Denial of Service (DoS) attacks. In addition, packet filtering provides high-level security for access control. Quality of Service control prioritizes the traffic and allows users to enjoy smooth traffic while running applications such as IPTV, VoIP calls or interactive game through the Internet. Easy Network Management The Web-based user interface of the Router makes it extremely easy for users to install and manage the network. The router supports both DHCP client and server, enabling system administrators to easily integrate this router into existing network environments, as well as manage IP assignment without having to reconfigure other stations. IPv6 Ready - Pathway to the Future The Router fully supports IPv6 (Internet Protocol Version 6), launched as the current IPv4 range is filling up, and IPv6 is gradually becoming the indispensable addressing system for savvy cloud computing users. Dual stack means the router is capable of running IPv4 and IPv6 in parallel during the transition period. With IPv6 enabled devices, three major transition mechanisms such as Dual-Stack, Dual-Stack Lite, and 6RD (IPv6 rapid deployment) are supported to be adapted easily into service provider’s IPv4/IPv6 network. 1 Quick Start Wizard Support a WEB GUI page to install this device quickly. With this wizard, end users can enter the information easily which they get from ISP, then surf the Internet immediately. Firmware Upgradeable Device can be upgraded to the latest firmware through the WEB based GUI. 2 1.2 Features of the Router • IPv6 ready (IPv4/IPv6 dual stack) • 4-port 10/100Mps Fast Ethernet switch • Multiple wireless SSIDs with wireless guest access and client isolation • IEEE 802.11 b/g/n compliant Wireless Access Point with Wi-Fi Protected Setup (WPS) • Wi-Fi Protected Access (WPA-PSK/ WPA2-PSK) and Wired Equivalent Privacy (WEP) • Wireless speed up to 150Mbps and 3 times the coverage of standard 802.11g • SOHO Firewall Security with DoS Preventing and Packet Filtering • Quality of Service Control for traffic prioritization management • Universal Plug and Play (UPnP) Compliance • Ease of Use with Quick Installation Wizard • TR-069*2 for remote management • Ideal for SOHO, office and home users ADSL Compliance • Compliant with ADSL2+ standards - G.dmt.bis plus (ITU G.992.5) - ADSL2+ Annex M (ITU G.992.5 Annex M) • Compliant with ADSL2 standards - G.dmt.bis (ITU G.992.3) - ADSL2 Annex M (ITU G.992.3 Annex M) • Compliant with ADSL standards - Full-rate ANSI T1.413 Issue 2 - G.dmt (ITU G.992.1) - G.lite (ITU G.992.2) - G.hs (ITU G.994.1) • Support G.inp (ITU G.998.4) Network Protocols and Features • PPPoE (RFC 2516), PPPoA (RFC 2364), DHCP Client, Static IP • IPv4, IPv6, IPv4 / IPv6 dual stack • Dual-Stack Lite and 6RD (IPv6 Rapid Deployment) • NAT, static routing and RIP v1/v2 • Universal Plug and Play (UPnP) compliant • Virtual server and DMZ • SNTP, DNS proxy • Dynamic Domain Name System (DDNS) • IGMP proxy and IGMP snooping • MLD proxy and MLD snooping 3 Firewall • Built-in NAT Firewall • Stateful Packet Inspection (SPI) • DoS attack prevention including Land Attack, Ping of Death, etc • Access Control • IP&MAC filter, URL Content Filter • Password protection for system management • VPN pass-through Quality of Service Control • Traffic prioritization management based-on Protocol, Port Number and IP Address (IPv4/ IPv6) Wireless LAN • Compliant with IEEE 802.11 b/ g standards • 2.4 GHz - 2.484GHz radio band for wireless • Up to 150 Mbps wireless operation rate • 64/ 128 bits WEP supported for encryption • WPS (Wi-Fi Protected Setup) for easy setup • Wireless Security with WPA-PSK/ WPA2-PSK support • Multiple wireless SSIDs • WDS repeater function support IPTV Applications*3 • IGMP Snooping and IGMP Proxy • MLD Snooping and MLD Proxy • Virtual LAN (VLAN) • Quality of Service (QoS) Management • Quick Installation Wizard • Web-based GUI for remote and local management (IPv4/ IPv6) • Web GUI permission • Firmware upgrades and configuration data upload and download via web-based GUI • Supports DHCP Server/ Client/ Relay(WAN port) • TR-069*2 supports remote management • Diagnostic tool 4 1. This router may require firmware modification for certain ADSL2/2+/Annex M DSLAMs 2. On request for Telco / ISP projects 3. IPTV application may require subscription to IPTV services from a Telco / ISP. 4. Specifications on this datasheet are subject to change without prior notice. 5 1.3 Hardware Specifications Physical Interface • WLAN: 1 detachable antenna • DSL: ADSL port • Ethernet: 4-port 10/ 100 auto-crossover (MDI/ MDI-X) Switch. • Factory default reset button • WPS& Wi-Fi ON/OFF button • Power jack • Power switch 5 1.4 Applications for the Router Diagram on how to connect your router: 6 Chapter 2 Installing the Router 2.1 Important note for using the Router Warning Do not use the Router in high humidity or high temperatures. Do not use the same power source for the Router as other equipment. Do not open or repair the case yourself. If the Router is too hot, turn off the power immediately and have it repaired at a qualified service center. Avoid using this product and all accessories outdoors. Place the Router on a stable surface. Only use the power adapter that comes with the package. Using a different voltage rating power adaptor may damage the router. Attention 7 2.2 Package Contents Wireless-N ADSL2+ Firewall Router One detachable antenna Quick Start Guide CD containing user manual Ethernet (RJ-45 CAT-5) cable RJ-11 ADSL/telephone cable Power adapter 8 2.3 The Front LEDs LED Power DSL Internet LAN1~4 WLAN WPS Status Description Green System is up and ready Red Boot failure Green Successfully connected to an ADSL line Green blinking Waiting for ADSL synchronization Green IP connected and traffic is passing through the device Red IP request failed Off Either in bridged mode or WAN connection not present Green Transmission speed is at 10/100Mbps Green blinking Data being transmitted/received Green Wireless connection established Green blinking Data being transmitted / received Off The wireless function is disabled Green blinking WPS configuration being in progress Lit up brightly and then goes off in 5 seconds WPS established Flash for 2 mins and then WPS establishment failure goes off 9 2.4 The Rear Ports Port Description 1 Power Jack (DC) Connect the supplied Power Adapter to this jack. 2 Power Switch Power on/off switch button 3 WPS & WiFi On/Off By controlling the pressing time, users can achieve two different effects: (1) WPS: Press &hold the button for less than 6 seconds to trigger WPS function. (2) Wireless On/Off: Press & hold the button for more than 6 seconds to On/Off the wireless. 4 Fast Ethernet LAN 1 ~ 4 Connect the LAN port of the router to your computer. 5 DSL Connect this port to the DSL network with the RJ-11 cable (telephone) provided. 6 WiFi Antenna Connect the detachable antenna to this port After the device is powered on, press it 6 seconds or above: to restore to factory default settings (this is used when you cannot login to the router, e.g. forgot your password) 10 2.5 Cabling One of the most common causes of problems is bad cabling. Make sure that all connected devices are turned on. On the front panel of the product is a bank of LEDs. Verify that the LAN Link and LEDs are lit. If they are not, verify that you are using the proper cables. Make sure that all other devices (e.g. telephones, fax machines, analogue modems) connected to the same telephone line as your router have a line filter connected between them and the wall socket (unless you are using a Central Splitter or Central Filter installed by a qualified and licensed electrician), and that all line filters are correctly installed in a right way. If the line filter is not correctly installed and connected, it may cause problems to your connection or may result in frequent disconnections. 11 Chapter 3 Basic Installation The router can be configured with your web browser. A web browser is included as a standard application in the following operating systems: Windows XP/Vista/Win7/8, Linux, Mac OS, etc. The product provides an easy and user-friendly interface for configuration. 3.1 Before Configuration PCs must have an Ethernet interface installed properly and be connected to the router either directly or through an external repeater hub, and have TCP/IP installed and configured to obtain an IP address through a DHCP server or a fixed IP address that must be in the same subnet as the router. The default IP address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any attached PC must be in the same subnet, and have an IP address in the range of 192.168.1.1 to 192.168.1.253). The best and easiest way is to configure the PC to get an IP address automatically from the router using DHCP. If you encounter any problems accessing the router’s web interface it may also be advisable to uninstall any kind of software firewall on your PCs, as they can cause problems accessing the 192.168.1.254 IP address of the router. Users should make their own decisions on how to best protect their network. Please follow the steps below for your PC’s network environment installation. First of all, please check your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter must be installed. If not, please refer to your Windows-related or other operating system manuals. Any TCP/IP capable workstation can be used to communicate with or through the Router. To configure other types of workstations, please consult the manufacturer’s documentation. 12 3.1.1 Configuring a PC in Windows 7/8 1. Go to Start. Click on Control Panel. Then click on Network and Internet. 2. When the Network and Sharing Center window pops up, select and click on Change adapter settings on the left window panel. 3. Select the Local Area Connection, and right click the icon to select Properties. 13 IPv4: 4. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties 5. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 6. Click OK again in the Local Area Connection Properties window to apply the new configuration. 14 IPv6: 4. Select Internet Protocol Version 6 (TCP/IPv6) then click Properties 5. In the TCP/IPv6 properties window, select the Obtain an IPv6 address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 6. Click OK again in the Local Area Connection Properties window to apply the new configuration. 15 3.1.2 Configuring a PC in Windows Vista 1. Go to Start. Click on Network. Then click on Network and Sharing Center at the top bar. 2. When the Network and Sharing Center window pops up, select and click on Manage network connections on the left window pane. 3. Select the Local Area Connection, and right click the icon to select Properties. 16 IPv4: 4. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. 5. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 6. Click OK again in the Local Area Connection Properties window to apply the new configuration. 17 3.1.3 Configuring a PC in Windows XP IPv4: 1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click on Network Connections 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration. 18 IPv6: IPv6 is supported by Windows XP, but you should install it first. Act as shown below: 1. On the desktop, Click Start > Run, type cmd, then press Enter key in the keyboard, the following screen appears. 2. Key in command ipv6 install Configuration is OK now, you can test whether it works ok. 19 3.2 Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface: Username: admin Password: admin LAN Device IP Settings: IP Address: 192.168.1.254 Subnet Mask: 255.255.255.0 DHCP server: DHCP server is enabled. Start IP Address: 192.168.1.100 IP pool counts: 20 3.2.1 Username and Password The default username and password are “admin” and “admin” respectively. If you ever forget the password to log in, you may press the RESET button up to 6 seconds to restore the factory default settings. Attention Attention 20 3.3 LAN Port Addresses The parameters of LAN ports are pre-set in the factory. The default values are shown below. IPv4: IP address 192.168.1.254 Subnet Mask 255.255.255.0 DHCP server function Enabled IP addresses for distribution to PCs 20 IP addresses continuing from 192.168.1.100 through 192.168.1.119 3.4 Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) what kind of service is provided such as ADSL(Dynamic IP Address, Static IP Address, PPPoE, PPPoA, Bridge Mode) Gather the information as illustrated in the following table and keep it for reference. ADSL: PPPoE VPI/VCI, VC-based/LLC-based multiplexing, Username, Password, Service Name, and Domain Name System (DNS) IP address (it can be automatically assigned by your ISP when you connect or be set manually). PPPoA VPI/VCI, VC-based/LLC-based multiplexing, Username, Password, and Domain Name System (DNS) IP address (it can be automatically assigned by your ISP when you connect or be set manually). RFC1483 Bridged IP Dynamic Address IP RFC1483 Routed IP Static Address VPI/ VCI, LLC-based/ VC-based multiplexing, and Domain Name System (DNS) IP address (it can be automatically assigned by your ISP when you connect or be set manually). IP Bridge Mode VPI/ VCI, LLC-based/ VC-based multiplexing, and Domain Name System (DNS) IP address (it can be automatically assigned by your ISP when you connect or be set manually). RFC1483 Bridged IP VPI/ VCI, LLC-based/ VC-based multiplexing, Static IP Address, IP Subnet Mask, Gateway IP Address, and Domain Name System (DNS) IP address. RFC1483 Routed IP VPI/ VCI, LLC-based/ VC-based multiplexing, Static IP Address, IP Subnet Mask, Gateway IP Address, and Domain Name System (DNS) IP address. 1483 Bridged Only VPI/ VCI, LLC-based/ VC-based multiplexing. 21 Chapter 4 Configuration 4.1 Configuring the Router with your Web Browser Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click “OK”, a user name and password window prompt will appear. The default username and password are “admin” and “admin”. Congratulation! You are now successfully logged on to the Router! 22 At the configuration homepage, the left navigation pane where bookmarks are provided links you directly to the desired setup page, including: Status(Device Info, System Log, Statistics, DHCP Table, ADSL Status) Quick Start (Wizard Setup) Configuration (Interface Setup, Advanced Setup, Access Management, Maintenance) Language Please see the relevant sections of this manual for detailed instructions on how to configure your router. 23 4.2 Status In this section, you can check the router working status, including Device Info, System Log, Statistics, DHCP Table, ADSL Status. 24 4.2.1 Device Info Users will see device's basic information in this page. Device Information Model Name: Show model name of the router Firmware Version: This is the Firmware version MAC Address: This is the MAC Address Date Time: The current day time. System Up Time: The duration since system is up. Physical Port Status Here the page shows the status of physical port of ADSL, Ethernet and Wireless. WAN Interface: The now used connection method, "ADSL(PVC0-PVC70)". Protocol: The protocol in use. VPI/VCI: The VPI/VCI in use. Connection: The status of the link. IP Address: The WAN interface IP address obtained. Default Gateway: The default gateway address. LAN IP Address: LAN port address. Subnet Mask/Prefix Length: LAN port IP subnet mask for IPv4 and Prefix length for IPv6.. DHCP Server: LAN port DHCP information. Wireless 25 Mode: The wireless mode in use. SSID: The SSID. Channel: The current channel. Security: The wireless security setting, authentication type. 26 4.2.2 System Log In system log, users can check the operations to the router and track the glitches to the router when occurred. Refresh: Press this button to refresh the statistics. \ 27 4.2.4 Statistics ADSL Transmit total PDUs: This field displays the number of total PDU transmitted until the latest second. Transmit total Error Counts: This field displays the number of total error transmitted until the latest second. Receive total PDUs: This field displays the number of total PDU received until the latest second. Receive total Error Counts: This field displays the number of total error received until the latest second. Refresh: Press this button to refresh the statistics. 28 Ethernet Interface: This field displays the type of port Transmit Frames: This field displays the number of frames transmitted until the latest second. Transmit Multicast Frames: This field displays the number of multicast frames transmitted until the latest second. Transmit Total Bytes: This field displays the number of bytes transmitted until the latest second. Transmit Collision: This is the number of collisions on this port. Transmit Error Frames: This field displays the number of error packets on this port. Receive Frames: This field displays the number of frames received until the latest second. Receive Multicast Frames: This field displays the number of multicast frames received until the latest second. Receive Total Bytes: This field displays the number of bytes received until the latest second. Receive CRC Errors: This field displays the number of error packets on this port. Receive Under-size Frames: This field displays the number of under-size frames received until the latest second. Refresh: Press this button to refresh the statistics. 29 Wireless Transmit Frames: This field displays the number of frames transmitted until the latest second. Transmit Error Frames: This field displays the number of error frames transmitted until the latest second. Transmit Drop Frames: This field displays the number of drop frames transmitted until the latest second. Receive Frames: This field displays the number of frames received until the latest second. Receive Error Frames: This field displays the number of error frames received until the latest second. Receive Drop Frames: This field displays the number of drop frames received until the latest second. Refresh: Press this button to refresh the statistics. 30 4.2.5 DHCP Table DHCP table displays the devices connected to the router with clear information. #: The index identifying the connected devices. Host Name: Show the hostname of the PC. IP Address: The IP allocated to the device. MAC Address: The MAC of the connected device. Expire Time: The total remaining interval since the IP assignment to the PC. 31 4.2.5 ADSL Status The ADSL Status section displays the ADSL synchronization status. 32 4.3 Quick Start For detailed instructions on configuring WAN settings, see the Interface Setup section of this manual. The Quick Start Wizard is a useful and easy utility to help setup the device to quickly connect to your ISP (Internet Service Provider) with only a few steps required. It will guide you step by step to configure the password, time zone, and WAN settings of your device. The Quick Start Wizard is a helpful guide for first time users to the device. Click NEXT to enter step 1. Step1. Set new password of the “admin” account. The password was used to manage the web access. The default is “admin”. Once changed, please remember carefully. Click NEXT to continue. Step2: Choose your time zone. Click NEXT to continue. Step3: Set your wireless connection. Click NEXT to continue. 33 Step4: Set your Internet connection WAN Transfer Modes: ADSL 1) Enter the PPPoE/PPPoA account / VPI,VCI information provided to you by your ISP. Click NEXT to continue. 2).The Setup Wizard has completed. Click on BACK to modify changes or mistakes. Click NEXT to save the current settings. 3). Quick Start Completed! 34 35 4.4 Configuration Click this item to access the following sub-items that configure the router: Interface Setup, Advanced Setup, Access Management, and Maintenance. 36 4.4.1 Interface Setup First, let us take a look at the Interface Setup. There are four items contained in this section, namely, Internet, LAN, Wireless and Wireless MAC Filter. Each is described in the following scenario. 37 4.4.1.1 Internet 38 ATM VC ATM settings are used to connect to your ADSL service. Your ISP provides VPI, VCI settings to you (VPI, VCI pair is used to set a PVC). In this Device, you can totally setup 8 PVCs on different encapsulations, if you apply 8 different virtual circuits from your ISP. You need to activate the PVC to take effect. For PVCs management, you can use ATM QoS to setup each PVC traffic line's priority. Virtual Circuit: VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit. VPI, VCI paire is used to set a PVC PVC Summary: show the information for each PVC where users can check status of each PVC. VPI: The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. This field may already be configured. VCI: The valid range for the VCI is 32 to 65535. Enter the VCI assigned to you. This field may already be configured. QoS ATM QoS: Select the Quality of Service types for this Virtual Circuit. The ATM QoS types include CBR (Constant Bit Rate), VBR (Variable Bit Rate) and UBR (Unspecified Bit Rate). These QoS types are all controlled by the parameters specified below, including PCR, SCR and MBS. Select CBR to specify fixed (always-on) bandwidth for voice or data traffic. Select UBR for applications that are non-time sensitive, such as e-mail. Select VBR for burst traffic and bandwidth sharing with other applications. PCR: Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell Rate (PCR). This is the maximum rate at which the sender can send cells. SCR: The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be transmitted. MBS: Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535 IPv4/IPv6 IP version: choose IPv4, IPv4/IPv6, IPv6 base on users’ environment. Here we take IPv4/IPv6 for example, when you just choose IPv4 or IPv6, you can just get information from the following listed parameters. Encapsulation: ISP: Select the encapsulation type your ISP uses from the Encapsulation list. Choices vary depending on what you select in the Mode field. Dynamic IP: Select this option if your ISP provides you an IP address automatically. Please enter the Dynamic IP information accordingly. 39 Static IP: Select this option to set static IP information. You will need to enter IP address, subnet mask, and gateway address, provided to you by your ISP. Each IP address entered in the fields must be in the appropriate IP form, which is four IP octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format. PPPoE/PPPoA: Select this option if your ISP requires you to use a PPPoE/PPPoA connection. This option is typically used for DSL services. Bridge Mode: select this option if you want use this router as a OSI 2 layer device like a switch. 802.1q Options 802.1q: Select whether to activate 802.1q feature. When activated, please enter the the VLAN ID. VLAN ID: It is a parameter to specify the VLAN which the frame belongs. Enter the VLAN ID identification, tagged: 0-4095. PPPoE/PPPoA Connection Type: Select PPPoE LLC, PPPoE VC-Mux, PPPoA LLC, PPPoA VC-Mux by your ISP in the Mode field. PPP Authentication: PPP authentication method, PAP, CHAP or Auto. Username: Enter the user name exactly as your ISP assigned. Password: Enter the password associated with the user name above. Bridge Interface for PPPoE: When “Activated”, the device will gain WAN IP from your ISP with the PPPoE account. But if your PC is connected to the router working as a DHCP client, in this mode, the device acts as a NAT router; while if you dial up with the account within your PC, the device will then work as a bridge forwarding the PPPoE information to the PPPoE server and send the response to your PC, thus your PC gets a WAN IP working in the internet. Connection Setting Connection: Always On: Click on Always On to establish a PPPoE session during start up and to automatically re-establish the PPPoE session when disconnected by the ISP. Connect Manually: Select Connect Manually when you don't want the connection up all the time. TCP MSS Option: Enter the TCP Maximum Segment Size (MSS). IP Options Default Route: Select Yes to use this interface as default route interface. TCP MTU Option: Enter the TCP Maximum Transmission Unit (MTU). IPv4 options: Get IP Address: Choose Static or Dynamic Static IP Address: If Static is selected in the above field, please enter the specific IP address you get from ISP and the following IP subnet mask and gateway address. IP Subnet Mask: The default is 0.0.0.0. User can change it to other such as 255.255.255.0.Type the subnet mask assigned to you by your ISP (if given). Gateway: Enter the specific gateway IP address you get from ISP. NAT: Select Enable if you use this router to hold a group of PCs to get access to the internet. Dynamic Route: RIP Version: (Routing Information protocol) Select this option to specify the RIP version, including RIP-1, RIP-2. RIP Direction: Select this option to specify the RIP direction. 40 None is for disabling the RIP function. Both means the router will periodically send routing information and accept routing information then incorporate into routing table. IN only means the router will only accept but will not send RIP packet. OUT only means the router will only send but will not accept RIP packet. IGMP Proxy: IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group. Choose whether enable IGMP proxy. IPv6 options (only when choose IPv4/IPv6 or just IPv6 in IP version field above): IPv6 Address: Type the WAN IPv6 address from your ISP. Obtain IPv6 DNS: Choose if you want to obtain DNS automatically. Primary/Secondary: if you choose Disable in the Obtain IPv6 DNS field, please type the exactly primary and secondary DNS. MLD Proxy: MLD (Multicast Listener Discovery Protocol) is to IPv6 just as IGMP to IPv4. It is a Multicast Management protocol for IPv6 multicast packets. When router’s Internet configuration is finished successfully, you can go to status to get the connection information. 41 4.4.1.2 LAN A Local Area Network (LAN) is a shared communication system to which many computers are attached and is limited to the immediate area, usually the same building or floor of a building. IPv6: The IPv6 address composes of two parts, thus, the prefix and the interface ID. There are two ways to dynamically configure IPv6 address on hosts. One is statefull configuration, for example using DHCPv6 (which resembles its counterpart DHCP in IPv4.) In the stateful autoconfiguration model, hosts obtain interface addresses and/or configuration information and parameters from a DHCPv6 server. The Server maintains a database that keeps track of which addresses have been assigned to which hosts. The second way is stateless configuration. Stateless auto-configuration requires no manual configuration of hosts, minimal (if any) configuration of routers, and no additional servers. The stateless mechanism allows a host to generate its own addresses using a combination of locally available information (MAC address) and information (prefix) advertised by routers. Routers advertise prefixes that identify the subnet(s) associated with a link, while hosts generate an "interface identifier" that uniquely identifies an interface on a subnet. An address is formed by combining the two. When using stateless configuration, you needn’t configure anything on the client. 42 IPv4 Parameters IP Address: Enter the IP address of Router in dotted decimal notation, for example, 192.168.1.254 (factory default). IP Subnet Mask: The default is 255.255.255.0. User can change it to other such as 255.255.255.128. Alias IP Address: This is for local networks virtual IP interface. Specify an IP address on this virtual interface. Alias IP Subnet Mask: Specify a subnet mask on this virtual interface. IGMP Snooping: Select Activated to enable IGMP Snooping function, Without IGMP snooping, multicast traffic is treated in the same manner as broadcast traffic - that is, it is forwarded to all ports. With IGMP snooping, multicast traffic of a group is only forwarded to ports that have members of that group. Dynamic Route: Select the RIP version from RIP1 or RIP2. DHCPv4 Server 43 DHCP (Dynamic Host Configuration Protocol) allows individual clients to obtain TCP/IP configuration at start-up from a server. DHCPv4 Server: If set to Enabled, your Router can assign IP addresses, default gateway and DNS servers to the DHCP client. If set to Disabled, the DHCP server will be disabled. If set to Relay, the Router acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients. Enter the IP address of the actual, remote DHCP server in the Remote DHCP Server field in this case. When DHCP is used, the following items need to be set. Start IP: This field specifies the first of the contiguous addresses in the IP address pool. IP Pool Count: This field specifies the count of the IP address pool. Lease Time: The current lease time of client. Physical Ports: Select to determine if the DHCPv4 server is applicable to the specific port or ports. By default, all ports can obtain local IP from DHCPv4 server. DNS Relay Select Automatically obtained or Manually set (if selected. Please set the exactly information). Primary DNS Server: Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask. Secondary DNS Server: Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask. Fixed Host In this field, users can map the specific IP (must in the DHCP IP pool) for some specific MAC, and this information can be listed in the following table. IP Address: Enter the specific IP. For example: 192.168.1.110. MAC Address: Enter the responding MAC. For example: 00:0A:F7:45:6D:ED When added, you can see the ones listed as showed below: IPv6 parameters Interface Address / Prefix Length: enter the static LAN IPv6 address, we suggest leave the field empty because when setted wrong, it will result in LAN devices not being able to access other IPv6 device through internet. Router will take the same WAN’s prefix to LAN side if the field is empty. MLD Snooping: Similar to IGMP Snooping, but applicable for IPv6. DHCPv6 Server DHCPv6 Server: Check whether to enable DHCPv6 server. DHCPv6 Server Type: Select Stateless or Stateful. When DHCPv6 is enabled, this parameter is available. Stateless: If selected, the PCs in LAN are configured through RA mode, thus, the PCs in LAN are configured through RA mode, to obtain the prefix message and generate an address using a combination of locally available information (MAC address) and information (prefix) advertised by routers, but they can obtain such information like DNS from DHCPv6 Server. Stateful: If selected, the PCs in LAN will be configured like in IPv4 mode, thus obtain addresses and DNS information from DHCPv6 server. Start interface ID: enter the start interface ID. The IPv6 address composed of two parts, thus, the prefix and the interface ID. Interface is like the Host ID compared to IPv4. End interface ID: enter the end interface ID. Leased Time (hour): the leased time, similar to leased time in DHCPv4, is a time limit assigned to clients, when expires, the assigned ID will be recycled and reassigned. 44 Issue Router Advertisement: Check whether to enable issue Router Advertisement feature. It is to send Router Advertisement messages periodically. Router will multicast the v6 Prefix information (similar to v4 network number 192.168.1.0) to all LAN devices if the field is enabled. We suggest enabling this field. 45 4.4.1.3 Wireless This section introduces the wireless LAN and some basic configurations. Wireless LANs can be as complex as a number of computers with wireless LAN cards communicating through access points which bridge network traffic to the wired LAN. Access Point Settings Access Point: Default setting is set to Activated. If you want to close the wireless interface, select Deactivated. AP MAC Address: The MAC address of wireless AP. Wireless Mode: The default setting is 802.11b+g+n (Mixed mode). If you do not know or have both 11g and 11b devices in your network, then keep the default in mixed mode. From the drop-down manual, you can select 46 802.11g if you have only 11g card. If you have only 11b card, then select 802.11b and if you only have 802.11n then select 802.11n. Channel: The range of radio frequencies used by IEEE 802.11b/g/n wireless devices is called a channel. There are Regulation Domains and Channel ID in this field. The Channel ID will be different based on Regulation Domains. Select a channel from the drop-down list box. Beacon interval: The Beacon Interval value indicates the frequency interval of the beacon. Enter a value between 20 and 1000. A beacon is a packet broadcast by the Router to synchronize the wireless network. RTS/CTS Threshold: The RTS (Request To Send) threshold (number of bytes) for enabling RTS/CTS handshake. Data with its frame size larger than this value will perform the RTS/CTS handshake. Enter a value between 1500 and 2347. Fragmentation Threshold: The threshold (number of bytes) for the fragmentation boundary for directed messages. It is the maximum data fragment size that can be sent. Enter a value between 256 and 2346, even number only. DTIM Interval: This value, between 1 and 255, indicates the interval of the Delivery Traffic Indication Message (DTIM). TX Power: The transmission power of the antennas, ranging from 1-100, the higher the more powerful of the transmission performance. IGMP Snooping: Enable or disable the IGMP Snooping function for wireless. Without IGMP snooping, multicast traffic is treated in the same manner as broadcast traffic - that is, it is forwarded to all ports. With IGMP snooping, multicast traffic of a group is only forwarded to ports that have members of that group.” 11n Settings Channel Bandwidth: Select either 20 MHz, 20 MHz or 20/40 MHz for the channel bandwidth. The wider the Channel bandwidth the better the performance will be. Guard Interval: Select either 400nsec or 800nsec for the guard interval. The guard interval is here to ensure that data transmission do not interfere with each other. It also prevents propagation delays, echoing and reflections. The shorter the Guard Interval, the better the performance will be. We recommend users to select Auto. MCS: There are options 0~15 and AUTO to select for the Modulation and Coding Scheme. We recommend users selecting AUTO. SSID Settings Available SSID: User can determine how many virtual SSIDs to be used. Default is 1, maximum is 4. SSID Index: Select how many SSIDs you want to lay out. A total of 4 is in list. By default 4 SSIDs are in use. SSID: The SSID is the unique name of a wireless access point (AP) to be distinguished from another. For security propose, change the default to a unique ID name to the AP which is already built-in to the router’s wireless interface. Make sure your wireless clients have exactly the SSID as the device, in order to get connected to your network. Broadcast SSID: Select Yes to make the SSID visible so a station can obtain the SSID through passive scanning. Select No to hide the SSID in so a station cannot obtain the SSID through passive scanning. SSID Activated: Select the time period during which the SSID is active. Default is always which means the SSID will be active all the time without time control. See 4.4.2.8 Time Schedule to set the time-slot to flexibly control when the SSID functions. WPS Settings WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. This feature greatly simplifies the steps needed to create a Wi-Fi networks for a residential or an office setting. WPS supports 2 types of configuration methods which are commonly known among consumers: PIN Method & PBC Method. WPS State: Display whether the WPS is configured or unconfigured. WPS Mode: Select the mode which to start WPS, choose between PIN Code and PBC (Push Button). 47 Selecting Pin Code mode will require you to know the enrollee PIN code. To future understand the two modes of configuration; please refer to the following Wi-Fi Protected Setup. Wi-Fi Protected Setup PIN Method: Configure AP as Registrar 1. Jot down the client’s Pin (eg. 04640776). 2. Enter the Enrollee(Client) PIN code and then press Start WPS. 48 3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Config Mode as Enrollee, press the WPS button on the top bar, select the AP from the WPS AP List column. Then press the PIN button located on the middle left of the page to run the scan. 49 4. The client’s SSID and security setting will now be configured to match the SSID and security setting of the registrar (router). 50 PIN Method: Configure AP as Enrollee 1. Jot down the WPS PIN (eg. 03454435).Press Start WPS. 51 2. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Config Mode as Registrar. Enter the PIN number in the PIN Code column then choose the correct AP from the WPS AP List before pressing the PIN button to run the scan. 52 3. The router’s (AP’s) SSID and security setting will now be configured to match the SSID and security setting of the registrar (client). 4. Now to make sure that the setup is correctly done, cross check to see if the SSID and the security setting of the registrar setting match with the parameters found on both Wireless Configuration and Wireless Security Configuration page. 53 PBC Method: 1. Press the PBC radio button, Then Start WPS. 2. Launch the wireless client’s WPS Utility (eg. Ralink Utility). Set the Config Mode as Enrollee. Then press the WPS button and choose the correct AP from the WPS AP List section before pressing the PBC button to run the scan. 54 3. When the PBC button is pushed, a wireless communication will be established between your router and the PC. The client’s SSID and security setting will now be configured to match the SSID and security setting of the router. 55 Security Settings Security Type: You can disable or enable wireless security for protecting wireless network. The default type of wireless security is OPEN and to allow all wireless stations to communicate with the access points without any data encryption. To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers secure data encryption, known as WEP and WPA. There are five alternatives to select from: WEP 64-bit, WEP 128-bit, WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK. If you require high security for transmissions, please select WPA-PSK, WPA2-PSK or WPA/WPA2-PSK. WEP WEP Authentication Method: WEP authentication method, there are two methods of authentication used, Open System authentication (OPENWEB) and Share Key authentication (SHAREDWEB). We suggest you select OPENWEB. Key 1 to Key 4: Enter the key to encrypt wireless data. To allow encrypted data transmission, the WEP Encryption Key values on all wireless stations must be the same as the router. There are four keys for your selection. The input format is in HEX style, 5 and 13 HEX codes are required for 64-bitWEP and 128-bitWEP respectively. If you chose WEP 64-bit, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). If you chose WEP 128-bit, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9", "A-F"). You must configure all four keys, but only one key can be activated at any one time. The default key is key 1. Note: When you enable WPS function, this WEP function will be invalid. And if you select one of WEP-64Bits/ WEP-128Bits, the following prompt box will appear to notice you. WPA-PSK / WPA2-PSK WPA Algorithms: TKIP (Temporal Key Integrity Protocol) or AES (Advanced Encryption System) utilizes a stronger encryption method and incorporates Message Integrity Code (MIC) to provide protection against hackers. Pre-Shared key: The key for network authentication. The input format should be 8-63 ASKII characters or 64 hexadecimal characters Key Renewal Interval: The time interval for changing the security key automatically between wireless client and AP. WDS Settings WDS (Wireless distributed system) is a wireless access point mode that enables wireless link and communication with other access point. It is easy to be installed, just define the peer’s MAC of the connected AP. WDS Mode: select Activated to enable WDS feature and Deactivated to disable this feature. MAC Address: Enter the AP MAC addresses (in XX:XX:XX:XX:XX:XX format) of the peer connected AP. 56 4.4.1.4 Wireless MAC Filter The MAC filter screen allows you to configure the router to give exclusive access to up to 8 devices (Allow Association) or exclude up to 8 devices from accessing the router (Deny Association). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:AA:BB:00:00:02. You need to know the MAC address of the devices to configure this screen. SSID Index: Select the targeted SSID you want the MAC filter rules to apply to. Active: Select Activated to enable MAC address filtering. Action: Define the filter action for the list of MAC addresses in the MAC address filter table. Select Deny to block access to the AP, MAC addresses not listed will be allowed to access the router. Select Allow to permit access to the router, MAC addresses not listed will be denied access to the router. MAC Address: Enter the MAC addresses (in XX:XX:XX:XX:XX:XX format) of the wireless station that are allowed or denied access to the specified in these address fields. 57 4.4.2 Advanced Setup Advanced Step provides some advanced features including Firewall, Routing, NAT, Static DNS, ADSL, QoS, Internet Grouping, Time Schedule and Remote System Log for all advanced users. Please move on to have a picture of what the exact feature is about and how to use it. 58 4.4.2.1 Firewall Your router includes a firewall for helping to prevent attacks from hackers. In addition to this, when using NAT (Network Address Translation) the router acts as a “natural” Internet firewall, since all PCs on your LAN use private IP addresses that cannot be directly accessed from the Internet. Firewall: To automatically detect and block Denial of Service (DoS) attacks, such as Ping of Death, SYN Flood, Port Scan and Land Attack. Enabled: It activates your firewall function. Disabled: It disables the firewall function. SPI: If you enabled SPI, all traffics initiated from WAN would be blocked, including DMZ, Virtual Server, and ACL WAN side. Enabled: It activates your SPI function. Disabled: It disables the SPI function. 59 4.4.2.2 Routing This is static route feature. You are equipped with the capability to control the routing of all the traffic across your network. With each routing rule created, user can specifically assign the destination where the traffic will be routed to. #: Item number Destination IP Address: IP address of the destination network Subnet Mask: The subnet mask of destination network. Gateway IP Address: IP address of the gateway or existing interface that this route uses. Metric: It represents the cost of transmission for routing purposes. The number need not be precise, but it must be between 1 and 15. Interface: Media/channel selected to append the route. Edit: Edit the route; this icon is not shown for system default route. Drop: Drop the route; this icon is not shown for system default route. 60 ADD Route Destination IP Address: This is the destination subnet IP address. Destination Subnet Mask: The subnet mask of destination network. Gateway IP Address/Interface:This is the gateway IP address or existing interface to which packets are to be forwarded. Metric:It represents the cost of transmission for routing purposes. The number need not be precise, but it must be between 1 and 15. 61 4.4.2.3 NAT The NAT (Network Address Translation) feature transforms a private IP into a public IP, allowing multiple users to access the internet through a single IP account, sharing the single IP address. NAT break the originally envisioned model of IP end-to-end connectivity across the internet so NAT can cause problems where IPSec/ PPTP encryption is applied or some application layer protocols such as SIP phones are located behind a NAT. And NAT makes it difficult for systems behind a NAT to accept incoming communications. In this session, there are “VPN Passthrough”, “DMZ/Virtual Server” provided to solve these nasty problems. NAT Status: Enabled. It depends on ISP Connection Type in Internet settings. VPN Passthrough: VPN pass-through is a feature of routers which allows VPN client on a private network to establish outbound VPNs unhindered. SIP ALG: Enable the SIP ALG when SIP phone needs ALG to pass through the NAT. Disable the SIP ALG when SIP phone includes NAT-Traversal algorithm. Interface: Select to set DMZ/Virtual Server for “ADSL(PVC0-PVC7)”. Click DMZ or Virtual Server which are represented in the following scenario. to move on to set the DMZ or Virtual Server parameters, 62 DMZ The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets will be checked by the Firewall and NAT algorithms then passed to the DMZ host, when a packet received does not use a port number used by any other Virtual Server entries. DMZ for: Indicate the related WAN interface which allows outside network to connect in and communicate. Note: Here you can see the Single IPs Account/PVC0. It is the interface set in the previous NAT page. DMZ: Enabled: It activates your DMZ function. Disabled: It disables the DMZ function. DMZ Host IP Address: Give a static IP address to the DMZ Host when Enabled radio button is checked. Be aware that this IP will be exposed to the WAN/Internet. Select the Save button to apply your changes. 63 Virtual Server In TCP/IP networks a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”. Servers follow the well-known port assignments so clients can locate them. If you wish to run a server on your network that can be accessed from the WAN (i.e. from other machines on the Internet that are outside your local network), or any application that can accept incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging applications and P2P file-sharing applications) and are using NAT (Network Address Translation), then you will usually need to configure your router to forward these incoming connection attempts using specific ports to the PC on your network running the application. You will also need to use port forwarding if you want to host an online game server. The reason for this is that when using NAT, your publicly accessible IP address will be used by and point to your router, which then needs to deliver all traffic to the private IP addresses used by your PCs. Please see the WAN configuration section of this manual for more information on NAT. The device can be configured as a virtual server so that remote users accessing services such as Web or FTP services via the public (WAN) IP address can be automatically redirected to local servers in the LAN network. Depending on the requested service (TCP/UDP port number), the device redirects the external service request to the appropriate server within the LAN network. Virtual Server for: Indicate the related WAN interface which allows outside network to connect in and communicate. Protocol: Choose the application protocol. 64 Start Port Number: Enter a port number as the starting number of the range which you want to give access to internal server. End Port Number: Enter a port number as the end number of the range which you want to give access to internal server.. Local IP Address: Enter your server IP address in this field. Start Port Number (Local): Please enter the start port number of the local application (service). End Port Number (Local): Please enter the end port number of the local application (service). Examples of well-known and registered port numbers are shown below. For further information, please see IANA’s website at http://www.iana.org/assignments/port-numbers Well-known and Registered Ports Port Number 21 22 23 25 53 69 80 110 443 1503 1720 7070 Protocol TCP TCP & UDP TCP TCP TCP & UDP UDP TCP TCP TCP & UDP TCP TCP UDP Description FTP Control SSH Remote Login Protocol Telnet SMTP (Simple Mail Transfer Protocol) DNS (Domain Name Server) TFTP (Trivial File Transfer Protocol) World Wide Web HTTP POP3 (Post Office Protocol Version 3) HTTPS T.120 H.323 RealAudio If you have a FTP server in your LAN network, and want to be accessing through WAN, you can have it set as virtual server. 65 Some tips for using DMZ and Virtual Server: Using port forwarding does have security implications, as outside users will be able to connect to PCs on your network. For this reason you are advised to use specific Virtual Server entries just for the ports your application requires, instead of using DMZ. As doing so will result in all connections from the WAN attempt to access to your public IP of the DMZ PC specified. Attention If you have disabled the NAT option in the WAN-ISP section, the Virtual Server function will hence be invalid. If the DHCP server option is enabled, you have to be very careful in assigning the IP addresses of the virtual servers in order to avoid conflicts. The easiest way of configuring Virtual Servers is to manually assign static IP address to each virtual server PC, with an address that does not fall into the range of IP addresses that are to be issued by the DHCP server. You can configure the virtual server IP address manually, but it must still be in the same subnet as the router. 66 4.4.2.4 Static DNS The Domain Name System (DNS) is a hierarchical naming system built on a distributed database for computers, services, or any resource connected to the Internet or a private network associates various information with domain names assigned to each of the participating entities. Most importantly, it translates domain names meaningful to humans into the numerical identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. An often-used analogy to explain the Domain Name System is that it serves as the phone book for the Internet by translating human-friendly computer hostnames into IP addresses. For example, the domain name www.example.com can be translated into the addresses 192.0.32.10 (IPv4). Static DNS is a concept relative to Dynamic DNS, in static DNS system, the IP mapped is static without change. IP Address: The IP address you are going to give a specific domain name. Domain Name: The friendly domain name for the IP address. Press Save button to apply your settings. 67 4.4.2.5 ADSL This screen allows you to adjust DSL parameters. DSL knowledge is required to configure these settings. Contact your ISP to make sure that these parameters are correct. SRA: Seamless Rate Adaptation, is a technology used to adapt the rate seamlessly without any influence to the working system, to assure of the quality of the DSL system. ADSL Mode: The default setting is Auto Sync-Up. This mode will automatically detect your ADSL2+, ADSL2, G.DMT, G.lite, and T1.413. ADSL Type: There are five modes ”Annex A”, ”Annex I”, “Annex A/L”, ”Annex M” and “Annex A/I/J/L/M” that user can select for this connection. 68 4.4.2.6 QoS Quality of Service (QoS) helps to prioritize data as it enters your router. By attaching special identification marks or headers to incoming packets, QoS determines which queue the packets enter, based on priority. This is useful when there are certain types of data you want to give higher priority to, such as voice data packets given higher priority than Web data packets. The main goal of QoS is prioritizing incoming data, preventing data loss due to factors such as jitter, delay and dropping. Another important aspect of QoS is ensuring that prioritizing one data flow doesn’t interfere with other data flows. QoS can be toggled Activated and Deactivated. QoS must be activated before you can edit the following options. When you are done making changes, click on Add to save your changes. Click on QoS Settings Summary to view the list of QoS rules that have been added. 69 QoS: Select to activate QoS configuration.. QoS Schedulng: The Queue Scheduling Algorithm, here supporting WRR (Weighted Round Robin) and SP (Strict Priority). WRR: Weighted Round Robin, used to alternate each WRR queue to ensure that every queue can enjoy its due service time (resource) in accordance with its weight. SP: Strict Priority; it always sends the packets in queue with higher priority, and under this circumstance, the packets in lowest-priority queue may be delayed for quite a long time. WRR Weight: Available only when WRR is used in QoS Scheduling field. Scheduling Save: To save the strategy set above. Rule Summary: To view the rule & action setting details. Rule You can set 16 different QoS rules. Each QoS rule has its detail setting conditions like: Application, Physical Ports, MAC, IP, Port, Protocol etc, you can modify the default value to any new one you wish. Please notice that only when the packet fulfill every detail setting conditions here, then this packet will be remarked as the priority queue of each rule. The non-selected setting part will be treated as “don’t care” and the system will not handle this setting part. If the original packet does not have 802.1q tagged header, system will not add header for this packet even the detail setting condition has adding 802.1p priority ability. Rule Index: Select 16 different rules, each rule’s detail can be set and saved. Active: Select QoS is activated or deactivated. Application: Select the different applications: IGMP, SIP, H.323, MGCP, SNMP, DNS, DHCP, RIP, RSTP, RTCP, RTP. Physical Ports: This option is to allow you to decide which physical port you want to configure as condition for packets filtering; user can choose to specify the specific physical port for accurate filtering or skip this option if no .accurate settings needed. Destination MAC Address: Set the Ethernet MAC value that you want to filter on destination side. Destination IPv4/IPv6 Address: Set the IP address value that you want to filter on destination side in IPv4 or IPv6. Destination Subnet Mask/Prefix: Specify the Subnet Mask for IPv4 or prefix for IPv6. Destination Port Range: Set the port range value that you want to filter on destination side. Source MAC Address: Set the Ethernet MAC value that you want to filter on source side. Source IPv4/IPv6 Address: Set the IP address value that you want to filter on source side in IPv4 or IPv6. Source Subnet Mask/IPv6 Prefix: Specify the Subnet Mask for IPv4 or prefix for IPv6 on source side. Source Port Range: Set the port range value that you want to filter on source side. Protocol ID: Set the protocol ID type (TCP, UDP, ICMP, IGMP) that you want to filter. Vlan ID Range: Set the Vlan value that you want to filter. IPP/DS Field: Select IP QoS format. IP Precedence Range: Select the IP precedence range. Type of Service : Select from the 5 different types of service . DSCP: Set the DSCP value that you want to filter. 802.1p: Set the remarked new 802.1p priority value on the packet that fulfill every detail setting condition of each rule. 70 Action After finishing all rules detail condition setting, select the rule you want to execute and action here. IPP/DS Field: Select IP QoS format. IP Precedence Remarking: Select the value to remark IP precedence. Type of Service Remarking: Select the value to remark Type of Service. DSCP Remarking: Set the value to remark DSCP. 802.1p Remarking: Select the value to remark 802.1p. Queue #: The four types of Queue - Low, Medium, High, Highest – which you want to put in if the packet meets the condition. 71 4.4.2.7 Interface Grouping Interface grouping is a function to group interfaces, known as VLAN. A Virtual LAN, commonly known as a VLAN, is a group of hosts with the common set of requirements that communicate as if they were attached to the same broadcast domain, regardless of the physical location. A VLAN has the same attributes as a physical LAN, but it allows for end stations to be grouped together even if they are not located on the same network switch. Similarly, they may also have been split into two different groups, even if they are on the same switch. Each group will perform as an independent network. To support this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the Save button. Interface Grouping: Select Yes to enable Interface Grouping feature. Group Index: The index number indicating the current group ranging from 0 to 15. ATM PVCs (Virtual Circuit): The available ADSL PVCs. Move to 4.4.1 Interface Setup to add other ADSL .service Ethernet LAN: The available Ethernet ports. Wireless LAN: The available wireless ports. Group Summary: Press Group Summary to check the current group information. For example, you can create two ADSL services, Service0(PPPoE) and Service1(Bridge). 72 You are going to group the ports and services into two working group, as shown below. Group Index Group Port 0 PVC0,LAN1, LAN2, WLAN1 1 PVC2, LAN3, LAN4 Click Group Summary to show the configuration results. 73 4.4.2.8 Time Schedule The Time Schedule supports up to 16 timeslots which helps you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allowing the usage of the Internet by users or applications. This Time Schedule correlates closely with router’s time, since router does not have a real time clock on board; it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server from the Internet. Time Index: The rule index (0-15) for identifying each timeslot. Name: User-defined identification for each time period. Day of Week: Mon. to Sun. Specify the time interval for each timeslot from “Day of Week”. For example, user can add a timeslot named “TimeSlot1” which features a period from 9:00 of Saturday to 18:00 of Sunday. 74 4.4.2.9 Remote System Log Remote System Log is designed to keep remote administrators informed of the system-operating information. Administrator can set up a remote system log server for receiving and monitoring the system information by enabling remote system log feature on the router. Remote System Log: Select whether to activate “Remote System Log”. Server IP Address: Enter the remote syslog server IP address. Server UDP Port: Enter the UDP port of the remote syslog server. 75 4.4.3 Access Management 76 4.4.3.1 Device Management Device management offers users a way to change the embeded web server accessing port, default 80. User can change the http port to 8080 or something else here. 77 4.4.3.2 SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Router serves as a SNMP agent which allows a manager station to manage and monitor the router through the network. SNMP: Select to enable SNMP feature. Get Community: Type the Get Community, which is the password for the incoming Get-and-GetNext requests from the management station. Set Community: Type the Set Community, which is the password for incoming Set requests from the management station. Trap Manager IP: Enter the IP of the server receiving the trap message(when some exception occurs) sent by this SNMP agent. SNMPv3: Enable to activate the SNMPv3. User Name: Enter the name allowed to access the SNMP agent. Access Permissions: Set the access permissions for the user; RO--read only and RW--read and writer. Authentication Protocol: Select the authentication protocol, MD5 and SHA. SNMP agent can communicate with the manager station through authentication and encryption to secure the message exchange. Set the authentication and encryption information here and below. Authentication Key: Set the authentication key, 8-31 characters. Privacy Protocol: Select the privacy mode, DES and AES. Privacy Key: Set the privacy key, 8-31 characters. 78 4.4.3.3 Universal Plug & Play UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with control and data transfer between devices. UPnP offers many advantages for users running NAT routers through UPnP NAT Traversal, and on supported systems makes tasks such as port forwarding much easier by letting the application control the required settings, removing the need for the user to control advanced configuration of their device. UPnP: Select this checkbox to activate UPnP. Be aware that anyone could use a UPnP application to open the web configuration’s login screen without entering the Router IP address Auto-configured: Select this check box to allow UPnP-enabled applications to automatically configure the Router so that they can communicate through the Router, for example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually configure port forwarding for the UPnP enabled application. 79 4.4.3.4 Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your internet connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time. This dynamic IP address is the WAN IP address of the router, which is assigned to you by your ISP. Here users can register different WAN interfaces with different DNS(es). But note that first users have to go to the Dynamic DNS registration service provider to register an account. Dynamic DNS: Select this check box to activate Dynamic DNS. Service Provider: Select from drop-down menu for the appropriate service provider, for example: www.dyndns.org. My Host Name: Type the domain name assigned to your Router by your Dynamic DNS provider. Username: Type your user name. Password: Type the password. Wildcard support: Select this check box to enable DYNDNS Wildcard. Period: Set the time period between updates, for the Router to exchange information with the DDNS server. In addition to updating periodically as per your settings, the router will perform an update when your dynamic IP address changes. 80 User can register a DDNS Examples: Note first users have to go to the Dynamic DNS registration service provider to register an account. User test1 register a Dynamic Domain Names in DDNS provider http://www.dyndns.org/ . DDNS: myhome.dyndns.org using username/password myhome-123/myhome-456 81 4.4.3.5 Access Control Access Control Listing allows you to determine which services/protocols can access Router interface from which computers. It is a management tool aimed to allow IPs(set in secure IP address) to access specified embedded applications (Web, etc, user can set) through some specified interface (LAN, WAN or both). User can have an elaborate understanding in the examples below. The maximum number of entries is 16. Access Control: Select whether to make Access Control function available. Rule Index: This is item number Active: Select to activate the rule. Secure IP Address: The default 0.0.0.0 allows any client to use this service to manage the Router. Type an IP address range to restrict access to the client(s) without a matching IP address. Application: Choose a service that you want to all access to all the secure IP clients. The drop-down menu lists all the common used applications. Interface: Select the access interface. Choices are LAN, WAN and Both. 82 By default, the “Access Control” has two default rules. 1. Rule 1(Index 1), a rule to allow only clients from LAN to have access to all embedded applications (Web, FTP, etc). Under this situation, clients from WAN can not access the router even from Ping. 2, Rule 2(Index 2), a ACL rule to open Ping to WAN side. 83 4.4.3.6 Packet Filter You can filter the packages by MAC address, IP address, Protocol, Port number and Application or URL. IP & MAC Filter Packet Filter Filter Type: There are three types “IP & MAC Filter”, “Application Filter”, and “URL Filter” that user can select for this filter rule. Here we set IP & MAC Filter. IP & MAC Filter Editing Rule Index: This is item number Individual Active: Select Yes to activate the rule. Action: This is how to deal with the packets matching the rule. Allow please select White List or block selecting Black List. Interface: Select to determine which interface the rule will be applied to. Direction: Select to determine whether the rule applies to outgoing packets, incoming packets or packets of both directions. Type: Choose type of field you want to specify to monitor. Select “IPv4” for IPv4 address, port number and 84 protocol. Select “IPv6” for IPv6 address, port number and protocol. Select “MAC” for MAC address. Source IP Address: The source IP address of packets to be monitored. 0.0.0.0 means “Don’t care”. Source Subnet Mask: Enter the subnet mask of the source network. Source Port Number: The source port number of packets to be monitored. 0 means “Don’t care”. Destination IP Address: The destination IP address of packets to be monitored. 0.0.0.0 means “Don’t care”. Destination Subnet Mask: Enter the subnet mask of the destination network. Destination Port Number: This is the Port that defines the application. (E.g. HTTP port 80.) DSCP: DSCP: Differentiated Services Code Point, it is recommended that this option be configured by an advanced user or keep 0. (0 means Don’t care.) Protocol: Specify the packet type (TCP, UDP, ICMP, ICMPv6) that the rule applies to. IP/MAC Filter Listing #: Item number. Active: Whether the connection is currently active. Interface: show the interface the rule applied to. Direction: show the direction the rule applied to. Source IP(IPv6) Address/Mask(Prefix): The source IP address or range of packets to be monitored. Destination IP(IPv6) Address/Mask(Prefix): This is the destination subnet IP address. Source MAC Address: show the MAC address of the rule applied. Source Port: The source port number of packets to be monitored. Destination Port: This is the Port or Port Ranges that defines the application. DSCP: show the set DSCP. Protocol: It is the packet protocol type used by the application. Select either TCP or UDP or ICMP or ICMPv6 85 Application Filter Application Filter: Select this option to Activated/Deactivated the Application filter. ICQ: Select this option to Allow/Deny ICQ. MSN: Select this option to Allow/Deny MSN. YMSG: Select this option to Allow/Deny Yahoo messenger. Real Audio/Video(RTSP): Select this option to Allow/Deny Real Audio/Video (RTSP). 86 URL Filter URL Filter: Select Activated to enable URL Filter. URL Filter Rule Index: This is item number. Individual Active: To give control to the specific URL access individually, for example, you want to prohibit access to www.yahoo.com, please first press Activated in “URL Filter” field, and also Yes in “Individual Active” field; if some time you want to allow access to this URL, you simply select No in individual active field. In a word, the command serves as a switch to the access of some specific URL with the filter on. URL(Host): Specified URL which is prohibited from accessing. 87 4.4.3.7 CWMP (TR-069) CWMP, short for CPE WAN Management Protocol, also called TR069 is a Broadband Forum technical specification entitled CPE WAN Management Protocol (CWMP). It defines an application layer protocol for remote management of end-user devices. It defines an application layer protocol for remote management of end-user devices. As a bidirectional SOAP/HTTP based protocol it can provides the communication between customer premises equipment (CPE) and Auto Configuration Server (ACS). It includes both a safe configuration and the control of other CPE management functions within an integrated framework. In the course of the booming broadband market, the number of different internet access possibilities grew as well (e.g. modems, routers, gateways, set-top box, VoIP-phones).At the same time the configuration of this equipment became more complicated –too complicated for end-users. For this reason, TR-069 was developed. It provides the possibility of auto configuration of the access types. Using TR-069 the terminals can get in contact with the Auto Configuration Servers (ACS) and establish the configuration automatically and let ACS configure CPE automatically. CWMP: Select activated to enable CWMP. ACS Login Information URL: Enter the ACS server login URL. User Name: Specify the ACS User Name for ACS authentication to the connection from CPE. Password: Enter the ACS server login password. Connection Request Information Path: Local path in HTTP URL for an ACS to make a Connection Request notification to the CPE. Username: Username used to authenticate an ACS making a Connection Request to the CPE. Password: Password used to authenticate an ACS making a Connection Request to the CPE. Periodic Inform Config 88 Periodic Inform: Select activated to enable to let CPE be authorized to send Inform message to automatically connect to ACS. Interval(s): Specify the inform interval time (sec) which CPE used to periodically send inform message to automatically connect to ACS. When the inform interval time arrives, the CPE will send inform message to automatically connect to ACS. 89 4.4.3.8 Parental Control With this feature, router can reject to provide Internet services to the specified computer during some specified time interval. This can be very useful for parents to give control to children using computer without restraint. Parent Control: Select Activated to enable this feature. MAC Address: Type the MAC address(es) you want to block to access the internet (access to the router is sustained). The format of MAC address could be: xx:xx:xx:xx:xx:xx . If you want to set restriction to the Browser PC, you can directly check the checkbox of Browser’s MAC Address. Block Schedule: Select a timeslot throughout which the above set MAC is restricted to access internet. See Time Schedule to set the exact timeslot. 90 4.4.4 Maintenance Maintenance equipments the users with the ability of maintaining the device as well as examining the connectivity of the WAN connections, including User Management, Time Zone, Firmware & Configuration, System Restart, Diagnostic Tool. Usage of each feature is to be presented in the following scenarios. 91 4.4.4.1 User Management User Management controls the Router Web GUI permission to the specific account. In factory setting, the default accounts are admin/admin and user/user. The default root account admin has been authorized to full web access of router. user/user is equipment ed with limited access (specified by advanced users with admin account) to router web. A total of 6 other accounts can be created to grant access to specific web page like “user” account (need to be specified). “admin/admin” admin/admin is the root account provided by our router. User Setup Index: User account index, total is 8. User Name: Users can create account(s) to give it (them) access to router webpage. New Password: Type the password for the user account. Default user admin's password can be changed here and confirmed in the next field. Confirmed Password: Type password again for confirmation. Web GUI Permission Login using the Administrator account, you will have the full accessibility to manage & control your Router device and can also create user accounts for others to control some of the open configuration settings. 92 93 other additional users including “user/user” For example, adding an account called “user/user”, setting authorized feature access to the account User Setup Index: User account index, total is 8. User Name: Users can create account(s) to give it (them) access to router webpage. New Password: Type the password for the user account. Confirmed Password: Type password again for confirmation. Web GUI Permission Guest Account: A pre-set guest account setting granted with Interface Setup, Advanced Setup, Access Management access. Enable to have access to Interface Setup, Advanced Setup and Access Management or disable to set the specifics yourself. Interface Setup: Enable to allowing access to Interface Setup with this account. Advanced Setup: Enable to allowing access to Advanced Setup with this account. Access Management: Enable to allowing access to Access Management with this account. Maintenance: Enable to allowing access to Maintenance with this account. When customers use the “user” account to login to the router, they are offered with only configuration items set in Web GUI Permission. 94 95 4.4.4.2 Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server outside your network. Choose your local time zone. After a successful connection to the Internet, the router will retrieve the correct local time from the SNTP server you have specified. If you prefer to specify an SNTP server other than those default, simply enter its IP address as shown above. Your ISP may provide an SNTP server for you to use. Synchronize time with: Select the methods to synchronize the time. NTP Server automatically: To synchronize time with the NTP server. PC’s Clock: To synchronize time with the PC’s clock. Manually: Select this, user need to set the time yourself manually. Time Zone: Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). Daylight Saving: Select this option if you use daylight savings time. NTP Server Address: Enter the IP address of your time server. Check with your ISP/network administrator if you are unsure of this information. 96 4.4.4.3 Firmware & Configuraion Your router’s “firmware” is the software that allows it to operate and provides all its functionality. Think of your router as a dedicated computer, and the firmware as the software it runs. Over time this software may be improved and modified, and your router allows you to upgrade the software it runs to take advantage of these changes. To upgrade the firmware of Router, you should download or copy the firmware to your local environment first. Press the “Browse…” button to specify the path of the firmware file. Then, click “Upgrade” to start upgrading. When the procedure is completed, Router will reset automatically to make the new firmware work. Upgrade: Choose Firmware or Configuration you want to update. System Restart with: Current Settings: Restart the device with the current settings automatically when finishing upgrading. Factory Default Settings: Restart the device with factory default settings automatically when finishing upgrading. File: Type in the location of the file you want to upload in this field or click Browse to find it. Browse: Click Browse... to find the configuration file or firmware file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Backup Configuration: Click Backup button to back up the now running configuration file to your computer in the event that you need this configuration file to restore the device especially when you make some wrong configurations and you need to restore the original settings. 97 UPGRADE: Click UPGRADE to begin the upload process. This process may take up to two minutes. DO NOT power down the router or interrupt the firmware upgrading while it is still in process. Improper operation could damage the router. Warning 98 4.4.4.4 System Restart Click System Restart with option Current Settings to reboot your router. If you wish to restart the router using the factory default settings (for example, after a firmware upgrade or if you have saved an incorrect configuration), select Factory Default Settings to restore to factory default settings. You may also restore your router to factory settings by holding the small Reset pinhole button on the back of your router in about more than 6s seconds whilst the router is turned on. 99 4.4.4.5 Diagnostics Tool The Diagnostic Test page shows the test results for the connectivity of the physical layer and protocol layer for both LAN and WAN sides. Click Start to begin to diagnose the connection. 100 Chapter 5 Troubleshooting If the router is not functioning properly, you can refer first to this chapter for simple troubleshooting before contacting your service provider. This could save your time and effort but if the symptoms persist, then consult your service provider. Problems starting up the router Problem Corrective Action None of the LEDs are on when you turn on the router. Check the connection between the adapter and the router. If the error persists, you may have a hardware problem. In this case you should contact technical support. You have forgotten your router login username and/or password. Try the default username "Admin" and password "CalVxePV1!". If this fails, you can restore your router to its factory settings by holding the Reset button on the back of your router more than 6 seconds Problems with the WAN Interface Problem Corrective Action Obtaining WAN IP failure Check that your internet settings are the same as those provided by your ISP. Reboot the router if you still have problems, you may need to verify these settings with your ISP. Problems with the LAN Interface Problem Corrective Action Can’t ping any PCs on 1. Check the Ethernet LEDs on the front panel. The LED should be on for a port the LAN. that has a PC connected. If it is off, check the cables between your router and the PC. 2. Verify that the IP address and the subnet mask are consistent between the router and the PC. 101 APPENDIX Product Support and Contact Information Most problems can be solved by referring to the Troubleshooting section in the User’s Manual. If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product. MAC OS is a registered Trademark of Apple Inc. Windows 7/8, Windows Vista, Windows XP are registered Trademarks of Microsoft Corporation. 102
* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project
advertisement