TRENDnet TEW-311BRP Wireless Broadband Router + Access Point Owner's Manual

Wireless Router

User’s Manual

V. 1.2

Copyright

This publication, including all photographs, illustrations and software, is protected under international copyright laws, with all rights reserved. Neither this manual, nor any of the material contained herein, may be reproduced without written consent of the author.

Disclaimer

The information in this document is subject to change without notice. The manufacturer makes no representations or warranties with respect to the contents hereof and specifically disclaims any implied warranties of merchantability or fitness for any particular purpose. The manufacturer reserves the right to revise this publication and to make changes from time to time in the content hereof without obligation of the manufacturer to notify any person of such revision or changes.

Trademark Recognition

Microsoft, MS-DOS and Windows are registered trademarks of Microsoft Corp.

Other product names used in this manual are the properties of their respective owners and are acknowledged.

Wireless Router user’s manual

Regulatory compliance

This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the

FCC Rules. This equipment also complies with CE EN55022 Class B and VCCI V3 Class B specifications. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.

This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

Changes or modifications not expressly approved by the parties responsible for compliance could void the user’s authority to operate the equipment.

FCC Statement

This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part

15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications.

However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which is found by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna

Increase the separation between the equipment or devices

Connect the equipment to an outlet other than the receiver’s

Consult a dealer or an experienced radio/TV technician for assistance

FCC Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator and your body.

– ii –

Preface

Safety Information

Before installing and using the Wireless Router, take note of the following precautions:

Read all instructions carefully.

Do not place the unit on an unstable surface, cart, or stand.

Only use the supplied power adapter.

Do not place anything on the power cord. Place the power cord where it will not be in the way of foot traffic.

Follow all warnings and cautions in this manual and on the unit case.

Avoid using the system near water, in direct sunlight, or near a heating device.

About this manual

This user’s manual describes how to install and operate your Wireless Router. Please read this manual before you install the product.

This manual includes the following topics:

Product description, features and specifications

Hardware installation procedure

Software configuration information

Technical Specifications

Troubleshooting procedures

– iii –

Wireless Router user’s manual

Table of contents

WIRELESS ROUTER

USER’S MANUAL

V. 1.2 I

CHAPTER 1

Packing Checklist

System and Setup Requirements

1

2

3

Applications 3

Features 4

Identifying Components 5

Front View...........................................................................................................5

Rear View ............................................................................................................7

About Wireless LAN

Networking Modes

7

8

CHAPTER 2

Setup Considerations

Connecting the Router to the WAN

Connecting the Router to the LAN

Connecting the Router to the WLAN

CHAPTER 3

TCP/IP Configuration Windows and Mac

13

13

Windows ME/9X................................................................................................14

Windows 2000 ...................................................................................................17

Windows NT4.0 .................................................................................................18

Windows XP ......................................................................................................20

Starting the Web Browser Interface

Setup Wizard

22

23

10

10

11

11

12

I

I

CHAPTER 4

Main Screen

25

25

LAN & DHCP Server........................................................................................26

WAN...................................................................................................................27

Password ...........................................................................................................29

Time ...................................................................................................................29

Wireless 31

Basic ..................................................................................................................31

WEP...................................................................................................................31

Advanced ...........................................................................................................32

802.1x ................................................................................................................33

Status 34

Device Information............................................................................................34

Log.....................................................................................................................35

Log Settings .......................................................................................................36

Statistic ..............................................................................................................36

Wireless .............................................................................................................37

Routing 38

Static ..................................................................................................................38

Dynamic.............................................................................................................39

Routing Table ....................................................................................................40

Access 40

Protocol Filter...................................................................................................41

IP Filter .............................................................................................................42

Virtual Server ....................................................................................................44

Special AP .........................................................................................................45

DMZ...................................................................................................................46

Firewall Rule.....................................................................................................46

Management 48

SNMP.................................................................................................................48

Remote Management.........................................................................................48

Tools 49

Restart ...............................................................................................................50

Settings ..............................................................................................................51

Firmware ...........................................................................................................51

Ping Test............................................................................................................52

Setup Wizard .....................................................................................................52

APPENDIX A: GLOSSARY

APPENDIX B: TROUBLESHOOTING

Q&A for Windows environments

Common problems and solutions

55

60

60

60

– iv –

APPENDIX C: NETWORKING BASIS

APPENDIX D: 802.1X AUTHENTICATION SETUP

802.1x Authentication Infrastructure

Supplicant: Wireless Network PC Card

Authenticator: Wireless Network Router

Radius Server: Window2000 Server

APPENDIX E: TECHNICAL SPECIFICATIONS

62

77

77

78

96

97

119

Preface

– v –

C

HAPTER

1

Introduction

Thank you for purchasing the Wireless Router. The Wireless Router is an ideal broadband sharing solution for

SOHO and home networks, featuring a wireless LAN function that reduces the necessity of connecting stations via a wired LAN.

The Wireless Router manages all IP address assignments by DHCP, relieving users of the necessity of manually configuring clients for inter-client communication and access to the Internet. A built-in firewall provides extra security from malicious attack.

The intuitive Web browser interface enables users to configure all aspects of the router, including making LAN,

WAN, and WLAN settings, making access restrictions, setting administrative and user passwords, and creating status logs.

The router is fully compatible with the IEEE 802.11b wireless standard and supports IEEE 802.3 10 BaseT and

100 BaseTX ports for easy interfacing to a wired Ethernet. Based on direct sequence spread spectrum (DSSS) technology and operating in the 2.4 GHz band, the router accommodates the IEEE 802.11b standard supporting data communications rates of 1/2/5.5/11/22Mbps.

– 1 –

Wireless Router user’s manual

Packing Checklist

Carefully unpack the Wireless Router and check that the following items are included:

Wireless Router

Power adapter

One category-5 UTP Ethernet cable with RJ-45 connectors

User’s manual or CD-ROM

Contact your dealer immediately if any items appear damaged or if the unit does not work.

– 2 –

System and Setup Requirements

To ensure smooth operation of the Router, the following minimum system and setup requirements should be met:

•

WindowsMe/NT4/2000/98/95

•

Mac OS

•

Netscape Navigator 4.7 or Microsoft Internet Explorer 5.0

•

DSL/Cable Modem Broadband Internet connection and ISP account

•

PCs equipped with 10Mbps or 10/100Mbps Ethernet connection to support TCP/IP protocol

Applications

•

Home SOHO networking for device sharing and wireless multimedia

•

Wireless office provides a wider range for home and SOHO Ethernet

•

Enables wireless building-to-building data communication

•

Built-in infrastructure mode

•

Router provides ideal solution for:

- Difficult-to-wire environments

- Temporary LANs for scenarios such as trade-exhibitions and meetings

- Enables LAN adaptability to frequently changing environments

- Enables remote access to corporate network information, for example e-mail and the company home page

– 3 –

Wireless Router user’s manual

Features

•

Wireless Features

- Compatible with IEEE 802.11b Direct Sequence high data rate specifications

- Supports high-speed wireless connections up to 22 Mbps

- Advanced Power Management mode for workstations

- Auto fallback data rate for long distance communications and noisy environments

- WEP 64/128/256-bit encryption function

- Two fixed dipole antennas provide flexible station configuration

- Plug-and-Play installation

•

Security Features

- Firewall support provides security against unauthorized access and malicious attack

- Finger Print Identification Authorization (Option)

•

Web-based browser configuration for simplified management

•

Convenient initial configuration via LAN port

•

Connect to cable or ADSL modem through the Ethernet RJ-45 port

•

Supports DHCP client and server

•

Features Network Address Port Translation (NAPT)

•

Web-based firmware upgradeable

– 4 –

Identifying Components

Refer to the following illustrations to familiarize yourself with the Router’s front-panel LEDs and rear-panel ports.

Front View

•

Rear WAN

Rear LAN ports 1 ~ 4

– 5 –

Wireless Router user’s manual

Refer to the table below for the LED meanings.

LED Color State

On

MEANING

Indicates WLAN link status

WLAN Act

Green

Blinking Indicates WLAN traffic

WLAN Link

Green On

Indicates that the device is connected to the WLAN.

Power

On

Off

Green The unit is receiving power.

— The unit is not receiving power

LINK/ACT

On

Flashing

Green

Packet transmit or receive activity

Full/Col

100

Diag

On

Flashing

Orange

Collision has occurred

On Green Indicates link speed (100 Mbps)

Indicates a connection error.

When starting up or resetting the router, and updating the firmware this LED flashes indicating that the system is going through a series of self-diagnostics. When the LED turns off, the router is ready.

– 6 –

Rear View

The following illustration shows the router’s rear-panel ports:

5

WAN

1

2 3 4

Power

Reset

1 2 3 4

Item Function

2 WAN port set the Wireless Router to the factory default settings.

Connect the Wireless Router to the Internet via your cable or ADSL modem and this RJ-45 port. ports The four RJ-45 Ethernet ports allow you to connect client PCs or LAN hubs to the Wireless

Router.

4 Power port Plug the AC adapter into this port.

5 Antenna Two antennas provide wireless LAN functionality and ensure optimal signal strength.

About Wireless LAN

Wireless Local Area Network (WLAN) systems offer a great number of advantages over traditional wired systems. WLANs are flexible, easy to set up and manage, and more economical than wired LAN systems.

WLANs use radio frequency (RF) technology to transmit and receive data through the air using the unlicensed

2.4 GHz frequency band. WLANs combine data connectivity with user mobility. For example, users can roam from a conference room to their office without being disconnected from the LAN.

Using WLANs, users can conveniently access shared information, while network administrators can configure and augment networks without installing or moving network cables.

WLAN technology provides users with many convenient and cost saving features:

Mobility

WLANs provide LAN users with access to realtime information anywhere in their organization, providing service opportunities that are impossible with wired networks.

Scalability

WLANs can be configured in a variety of topologies to adapt to specific applications and installations.

Easy

Installation

Installing is easy for novice and expert users alike, eliminating the need to install network cables in walls and ceilings.

– 7 –

Wireless Router user’s manual

Networking Modes

Wireless LANs can be configured in one of two ways:

Ad-hoc

Networking

Infrastructure

Networking

Also known as a peer-to-peer network, an ad-hoc network is one that allows all workstations and computers in the network to act as servers to all other users on the network.

Users on the network can share files, print to a shared printer, and access the Internet with a shared modem.

However, with ad-hoc networking, users can only communicate with other wireless LAN computers that are in the wireless LAN workgroup, and are within range.

Infrastructure networking differs from ad-hoc networking in that it includes an access point. Unlike the ad-hoc structure where users on the LAN contend the shared bandwidth, on an infrastructure network the access point can manage the bandwidth to maximize bandwidth utilization.

Additionally, the access point enables users on a wireless LAN to access an existing wired network, allowing wireless users to take advantage of the wired networks resources, such as Internet, email, file transfer, and printer sharing.

– 8 –

Infrastructure networking has the following advantages over ad-hoc networking:

•

Extended range

Each wireless LAN computer within the range of the access point can communicate with other wireless

LAN computers within range of the access point.

•

Roaming

The access point enables a wireless LAN computer to move through a building and still be connected to the LAN.

•

Wired to wireless LAN connectivity

The access point bridges the gap between wireless LANs and their wired counterparts.

This concludes the first chapter. The next chapter deals with the hardware installation of the Wireless Router.

– 9 –

C

HAPTER

2

Hardware installation

This chapter covers plugging in the Wireless Router, and connecting the router to a WAN, LAN, and wireless LAN

(WLAN).

Setup Considerations

When setting up the Router be sure to note the following points:

•

Optimize the performance of the Router by ensuring that the distance between access points is not too far. In most buildings, the Router operates within a range of 100 ~ 300 feet, depending on the thickness and structure of the walls.

•

Radio waves can pass through walls and glass but not metal. If there is interference in transmitting through a wall, it may be that the wall has reinforcing metal in its structure. Install another access point to circumvent this problem.

•

Floors usually have metal girders and metal reinforcing struts that interfere with transmission.

•

Do not place the Router near (within 4 feet) electrical devices that generate RF noise, such as microwave ovens, monitors, and electric motors.

– 10 –

Connecting the Router to the WAN

Follow the procedure below to connect the Wireless Router to the WAN.

1. Plug the supplied straight cable into the WAN RJ-45 jack:

2. Plug the other end of the cable into the RJ-45 jack on your ADSL or cable modem.

3. Plug the AC adapter jack into the connector on the rear of the router, and plug the adapter into a wall socket.

Note!

Insure that you only use the supplied AC adapter with the wireless router.

Connecting the Router to the LAN

Follow the procedure below to connect the Wireless Router to the LAN.

4. Plug a straight cable into a free LAN RJ-45 jack at the rear of the router:

5. Plug the other end of the cable into the RJ-45 jack on your computer.

– 11 –

Wireless Router user’s manual

Connecting the Router to the WLAN

Follow the procedure below to connect the Wireless Router to the WLAN.

1. Open the browser interface (refer to page 20).

2. Click to view the WLAN configuration page:

3. Click the radio button next to Enabled. For connection to a WLAN client, the client must configure its

WLAN interface so that the SSID and channel are the same as the Wireless Router’s.

Note!

For more information about the browser interface, refer to the online help.

This concludes Chapter 2. The next chapter covers operating system network configuration.

– 12 –

C

HAPTER

3

Network Configuration

The following sections cover setting up the network configuration of your operating system, connecting to the router via the Web browser interface, and running the interface setup wizard.

TCP/IP Configuration Windows and Mac

If you want to set up your router with a fixed IP address, you must manually configure your operating system network parameters. Refer to the following sections for instructions on configuring Windows ME/2000/9X and

Macintosh operating system TCP/IP networking for both static and fixed IP addresses.

•

If you are configuring the router using a static IP address, contact your ISP for the information you need in the following sections.

Notes!

•

Be sure to have your operating system installation

CD handy in case the configuration procedure requires you to install files.

– 13 –

Wireless Router user’s manual

Windows ME/9X

1. Click ,

Settings

, then click

Control Panel

. The Control Panel opens:

2. Double-click the

Network

icon to open the Network configuration dialog:

3. Go to step six if TCP/IP is shown in the network components installed list. Otherwise, click

Add

. The following screen appears prompting you to select the network component:

4. Select Protocol and click

Add

. The following screen appears:

– 14 –

5. Under “Manufacturers” select Microsoft. In the “Network Protocols” list, select TCP/IP. Click

OK

. You are returned to the Network Configuration screen, and TCP/IP is listed:

6. Select TCP/IP and click

Properties

. The TCP/IP properties dialog box opens:

7. Click the radio button next to “Obtain an IP address automatically” and go to step eight if you want the

DHCP server to assign the IP address.

If you want to assign a fixed IP address, follow these steps: a. In the TCP/IP Properties dialog box, click the radio button next to

Specify an IP address

: b. Enter an IP address in the IP field.

In the example shown, all IP addresses from 211.231.181.100 to 211.231.181.254 are available for dynamic IP address assignment, while 211.231.181.2 to 211.231.181.99 are available as static IP addresses.

– 15 –

Wireless Router user’s manual

c. Type a Subnet Mask value for the router. The default value is shown. Click the

Gateway

tab. The following screen appears: d. Type the router’s IP address in the “New gateway” field and click

Add

. The IP address appears under “Installed gateways.” e. Click and click the

DNS Configuration

tab to configure DNS settings:

Note!

f. Click the radio button next to

Enable DNS

. Type the computer name in Host.

You can find the computer name by clicking the Identification Tab in the Network Configuration dialog:

g. Type the ISP/BSP domain name in the Domain text box. Type the ISP/BSP domain name server IP address in DNS Server Search Order and click

Add

to add it to the list.

Contact your ISP/BSP for the information.

Note!

An ISP (Internet Service Provider) or BSP (Broadband

Service Provider) is an organization that provides users with Internet access via modem or cable/DSL modem.

h. Click . You are returned to the Network configuration dialog box.

8. Click . Windows copies files and configures the Network settings. If prompted, insert your Windows setup CD or specify the path to your Windows setup files. After Windows has finished setting up the network, you are prompted to restart the computer.

9. Restart the computer.

– 16 –

Windows 2000

1. Click ,

Settings

, then click

Control Panel

. The Control Panel opens: the icon and select Open to open the Network and Dialup configuration dialog.

3. Double-click Local Area Connection 2 to open the following dialog box:

4. Check the box next to Internet Protocol (TCP/IP) and click Properties:

5. If you are going to use DHCP to IP assign settings, click the radio buttons next to “Obtain an IP address automatically” and “Obtain DNS server address automatically and go to step 6.

If you want to assign a fixed IP address, follow these steps: a. In the TCP/IP Properties dialog box, click the radio button next to

Use the following IP address

: b. Enter an IP address in the IP field.

In the example shown, all IP addresses from 211.231.181.100 to 211.231.181.254 are available for dynamic IP address assignment, while 211.231.181.2 to 211.231.181.99 are available as static IP addresses. c. Type a Subnet Mask value for the router.

– 17 –

Wireless Router user’s manual

d. Type the router’s IP address in the “Default gateway” field. e. Check the radio button next to “Use the following DNS server addresses” and type the ISP/BSP domain name server IP address.

Note!

An ISP (Internet Service Provider) or BSP (Broadband

Service Provider) is an organization that provides users with Internet access via modem or cable/DSL modem.

f. Click . You are returned to the Network configuration dialog box.

6. Click to apply the settings and exit the Network configuration dialog box.

Windows NT4.0

1. Click ,

Settings

, then click

Control Panel

. The Control Panel opens: the icon to view the Network configuration dialog:

– 18 –

the tab:

4. Select TCP/IP Protocol, and click

Properties

:

5. If you are going to use DHCP to IP assign settings, click the radio buttons next to “Obtain an IP address from a DHCP server” and go to step 6.

If you want to assign a fixed IP address, follow these steps: a. In the TCP/IP Properties dialog box, click the radio button next to

Specify an IP address

: b. Enter an IP address in the IP field.

In the example shown, all IP addresses from 211.231.181.100 to 211.231.181.254 are available for dynamic IP address assignment, while 211.231.181.2 to 211.231.181.99 are available as static IP addresses. c. Type a Subnet Mask value for the router. The default value is shown. d. Type the router’s IP address in the “Default gateway” field. the tab and type the computer’s name in the Host name field.

– 19 –

Wireless Router user’s manual

You can find the computer name by clicking the Identification Tab in the Network Configuration dialog:

Note!

f. Type the ISP/BSP domain name server IP address in the Domain field.

Contact your ISP/BSP for the information.

Note!

An ISP (Internet Service Provider) or BSP (Broadband

Service Provider) is an organization that provides users with Internet access via modem or cable/DSL modem.

g. Click . You are returned to the Network configuration dialog box.

6. Click to apply the settings and exit the Network configuration dialog box. You are prompted to restart your computer.

7. Click to restart the computer and finish the installation.

Windows XP

1. Click ,

Settings

, then click

Control Panel

. The Control Panel opens: the icon and select Open to open the Network Connections dialog:

– 20 –

3. Right-click the appropriate LAN connection and click Properties to open the properties dialog for the connection:

4. Check the box next to Internet Protocol (TCP/IP) and click Properties:

5. If you are going to use DHCP to IP assign settings, click the radio buttons next to “Obtain an IP address automatically” and “Obtain DNS server address automatically and go to step 6.

If you want to assign a fixed IP address, follow these steps: h. In the TCP/IP Properties dialog box, click the radio button next to

Use the following IP address

: i. Enter an IP address in the IP field.

In the example shown, all IP addresses from 211.231.181.100 to 211.231.181.254 are available for dynamic IP address assignment, while 211.231.181.2 to 211.231.181.99 are available as static IP addresses. j. Type a Subnet Mask value for the router. k. Type the router’s IP address in the “Default gateway” field. l. Check the radio button next to “Use the following DNS server addresses” and type the ISP/BSP domain name server IP address.

Note!

An ISP (Internet Service Provider) or BSP (Broadband

Service Provider) is an organization that provides users with Internet access via modem or cable/DSL modem.

m. Click . You are returned to the Network configuration dialog box. n. Click to apply the settings and exit the Network configuration dialog box.

– 21 –

Wireless Router user’s manual

Starting the Web Browser Interface

•

Refer to the following instructions for starting the Web browser interface.

Note!

Before using the Web browser interface, be sure you have set up your computer’s network configuration.

Refer to page 13.

1. Open your Web browser and type the router IP address in the address bar, the default is 192.168.1.1

2. Press <Enter>. You are prompted for the user name and password.

3. Type the user name and password in the appropriate fields. The default user name and password is

“admin.”

4. Click . The router browser interface opens:

Using the browser interface, you can set network parameters, configure wireless LAN settings, view status reports and logs, create access restrictions, and use other tools and features.

Note!

For information on using the browser interface, refer to the browser interface online help.

– 22 –

Setup Wizard

The setup wizard enables you to configure the router quickly and conveniently. Follow these instructions:

1. Open the browser interface as described in the previous section.

2. In the Settings screen

Setup Wizard page, click Run Wizard. The screen shown to the right appears.

3. Click . You are prompted to select a password. Type a password in the text box, and then type it again for verification.

4. Click . Select your time zone from the drop-down list.

5. Click .

6. Type the LAN IP address in the text box.

The default IP address

192.168.1.1.

7. Type the subnet mask in the text box.

8. Enable DHCP Server if you want DHCP to automatically assign IP addresses. Type a beginning IP address and an end IP address for the DHCP server to use in assigning IP addresses.

– 23 –

Wireless Router user’s manual

9. Click . Select how the router will set up the

Internet connection. If you have enabled

DHCP server, choose

"Obtain IP automatically

(DHCP client)" to have the router assign IP addresses automatically.

10. Click to enable or disable wireless LAN. If you enable the wireless

LAN, type the SSID in the text box and select a communications channel. The SSID and channel must be the same as wireless devices attempting communication to the router.

11. Click

Next

. You are prompted to restart save the settings and restart the router interface. Click

Restart

to complete the wizard.

This completes Chapter 3.

– 24 –

C

HAPTER

4

Using the Interface

This chapter covers the router user interface functions, settings, and parameters.

Refer to the glossary in Appendix A for unfamiliar terms.

Main Screen

The main screen enables you to configure the LAN & DHCP Server, set WAN parameters, create Administrator and User passwords, and set the local time, time zone, and default NTP server.

The following functions are covered in this section:

•

LAN & DHCP Server

•

WAN

•

Password

•

Time

– 25 –

Wireless Router user’s manual

LAN & DHCP Server

This page enables you to set LAN and DHCP properties, such as the host name, IP address, subnet mask, and domain name. LAN and DHCP profiles are listed in the DHCP table at the bottom of the screen.

Host Name:

Type the host name in the text box. The host name is required by some ISPs. The default host name is ‘AP-Router.’

IP Address:

This is the IP address of the router. The default IP address is 192.168.1.1.

Subnet Mask:

Type the subnet mask for the router in the text box. The default subnet mask is 255.255.255.0

DHCP Server:

Enables the DHCP server to allow the router to automatically assign IP addresses to devices connecting to the LAN. DHCP is enabled by default.

All DHCP client computers are listed in the table at the bottom of the screen, providing the host name, IP address, and MAC address of the client.

Start IP:

Type an IP address to serve as the start of the IP range that DHCP will use to assign IP addresses to all LAN devices connected to the router.

End IP:

Type an IP address to serve as the end of the IP range that DHCP will use to assign IP addresses to all

LAN devices connected to the router.

Domain Name:

Type the local domain name of the network in the text box. This item is optional.

– 26 –

WAN

This screen enables you to set up the router WAN connection, specify the IP address for the WAN, add DNS numbers, enter the MAC address, and set the MTU.

Connection Type:

Select the connection type, either DHCP client/Fixed IP or PPPoE from the drop-down list.

When using DHCP client/Fixed IP, enter the following information in the fields (some information is provided by your ISP):

WAN IP:

Select whether you want to specify an IP address manually, or want DHCP to obtain an IP address automatically. When

Specify IP

is selected, type the IP address, subnet mask, and default gateway in the text boxes. Your ISP will provide you with this information.

DNS 1/2/3:

Type up to three DNS numbers in the text boxes. Your ISP will provide you with this information.

MAC Address:

If required by your ISP, type the MAC address of the router WAN interface in this field.

MTU:

Type the MTU value in the text box.

When using PPPoE, enter the following information in the fields (some information is provided by your ISP):

– 27 –

Wireless Router user’s manual

WAN IP:

Select whether you want the ISP to provide the IP address automatically, or whether you want to assign a static IP address to the router WAN. When

Specify IP

is selected, type the PPPoE IP address in the text box. Your ISP will provide you with this information.

DNS 1/2/3:

Type up to three DNS numbers in the text boxes. Your ISP will provide you with this information.

User Name:

Type your PPPoE user name.

Password:

Type your PPPoE password.

Connect on Demand:

Enables or disables the connect on demand function, which enables the the router to initiate a connection with your ISP when an Internet request is made to the router. When enabled, the router automatically connects to the Internet when you open your default browser.

Idle Time Out:

Specify the time that will elapse before the router times out of a connection.

MTU:

Type the MTU value in the text box.

– 28 –

Password

This screen enables you to set administrative and user passwords. These passwords are used to gain access to the router interface.

Administrator:

Type the password the Administrator will use to log in to the system. The password must be typed again for confirmation.

User:

Users can type a password to be used for logging in to the system. The password must be typed again for confirmation.

Note!

Users do not have permission to configure router options.

Time

This screen enables you to set the time and date for the router's realtime clock, select your time zone, specify an NTP server, and enable or disable daylight saving.

Local Time:

Displays the local time and date.

Time Zone:

Select your time zone from the drop-down list.

Default NTP Server:

Type the NTP server address in the text box to enable the router to automatically set the time from the Internet NTP server.

Set the Time:

Select the date and time from the drop-down lists, and click

Set Time

to set the router's internal clock to the correct date and time.

– 29 –

Wireless Router user’s manual

Daylight Saving:

Enables you to enable or disable daylight saving time. When enabled, select the start and end date for daylight saving time.

– 30 –

Wireless

This page enables you to set wireless communications parameters for the router's wireless LAN feature.

The following functions are covered in this section:

•

Basic

•

WEP

•

Advanced

Basic

This page enables you to enable and disable the wireless LAN function, enter a SSID, and set the channel for wireless communications.

Enable/Disable:

Enables and disables wireless LAN via the router.

SSID:

Type an SSID in the text box. The SSID of any wireless device must match the SSID typed here in order for the wireless device to access the LAN and WAN via the router.

Channel:

Select a transmission channel for wireless communications. The channel of any wireless device must match the channel selected here in order for the wireless device to access the LAN and WAN via the router.

WEP

This screen enables you to set WEP parameters for secure wireless communications.

Mode:

Select the level of encryption you want from the drop-down list. The router supports, 64-, 128-, and 256bit encryption.

WEP Key:

Select WEP Key, 64, 128 or 256 bit from the drop-down list.

– 31 –

Wireless Router user’s manual

Key 1 ~ Key 4:

Enables you to create an encryption scheme for Wireless LAN transmissions. Manually enter a set of values for each key. Select which key you want to use by clicking the radio button next to the key. Click

Clear

to erase key values.

Note!

256- and 128-bit encryption require more system resources than 64-bit encryption. Use 64-bit encryption for better performance.

Advanced

This screen enables you to configure advanced wireless functions.

Firmware Version:

Displays the wireless function firmware version. The wireless firmware is updated when you update the router firmware.

Beacon Interval:

Type the beacon interval in the text box. You can specify a value from 1 to 1000. The default beacon interval is 100.

RTS Threshold:

Type the RTS (Request-To-Send) threshold in the text box. This value stabilizes data flow. If data flow is irregular, choose values between 256 and 2432 until data flow is normalized.

Fragmentation Threshold:

Type the fragmentation threshold in the text box. If packet transfer error rates are high, choose values between 256 and 2432 until packet transfer rates are minimized.

Note!

Note:

Setting the fragmentation threshold value may diminish system performance.

DTIM Interval:

Type a DTIM (Delivery Traffic Indication Message) interval in the text box. You can specify a value between 1 and 65535. The default value is 3.

Basic Rates (MBps):

Select one of the wireless LAN receive rates, measured in megabytes per second.

TX Rates (MBps):

Select one of the wireless communications transfer rates, measured in megabytes per second, based upon the speed of wireless adapters connected to the WLAN.

Preamble Type:

Select either a short preamble or long preamble. Select a short preamble for WLANs with high network traffic; select a long preamble when the network traffic is low.

Authentication Type:

Select the authentication type. Open System allows public access to the router via wireless communications.

Shared Key requires the user to set a WEP key to exchange data with other wireless clients that have the same

WEP key.

– 32 –

802.1x

There are three essential components to the 802.1x infrastructure: (1) Supplicant, (2) Authenticator and (3)

Server. The Router serves as an Authenticator, and the EAP methods used must be supported by the backend

Radius Server. The 802.1x security supports both MD5 and TLS Extensive Authentication Protocol (EAP).

Please follow the steps below to configure 802.1x security.

1. Enable 802.1x security by selecting “

Enable

”.

2. Select

Encryption Key Length Size

ranging from 64 to 256 Bits that you would like to use.

Select the

Lifetime of the Encryption Key

from 5 Minutes to 1 Day. As soon as the lifetime of the Encryption

Key is over, the Encryption Key will be renewed by the Radius server. the of and the

Port

used by the

Primary

Radius Server

Enter the

Shared Secret

, which is used by the Radius Server. the of,

Port

and

Shared Secret

used by the

Secondary

Radius Server.

Click “

Help

” to get interpretation for Encryption Key and Radius Server

5. Click ” button for the 802.1x settings to take effect after Access Point reboots itself.

Note!

As soon as 802.1x security is enabled, all the wireless client stations that are connected to the Router currently will be disconnected. The wireless clients must be configured manually to authenticate themselves with the Radius server to be reconnected.

– 33 –

Wireless Router user’s manual

Status

This screen enables you to view the status of the router LAN, WAN and wireless LAN connections, and view logs and statistics pertaining to connections and packet transfers.

The following functions are covered in this section:

•

Device Information

•

Log

•

Log Settings

•

Statistics

•

Wireless

Device Information

This screen enables you to view the router LAN, wireless LAN, and WAN configuration.

Firmware Version:

Displays the latest build of the wireless router firmware interface. After updating the firmware in Tools - Firmware, check this to ensure that your firmware was successfully updated.

LAN:

This field displays the router's LAN interface MAC address, IP address, subnet mask, and DHCP server status. Click

DHCP Table

to view a list of client stations currently connected to the router LAN interface.

Wireless:

Displays the router's wireless connection information, including the router's wireless interface MAC address, the connection status, the SSID status, which channel is being used, and whether WEP is enabled or not.

WAN:

This field displays the router's WAN interface MAC address, DHCP client status, IP address, subnet mask, default gateway, and DNS.

Click

DHCP Release

to release all IP addresses assigned to client stations connected to the WAN via the router. Click

DHCP Renew

to reassign IP addresses to client stations connected to the WAN.

– 34 –

Log

This screen enables you to view a running log of router system statistics, events, and activities. The log displays up to 200 entries. Older entries are overwritten by new entries. You can save logs via the Log Settings screen

(Send to). The Log screen commands are as follows:

•

Click

First Page

to view the first page of the log

•

Click

Last Page

to view the final page of the log

•

Click

Previous Page

to view the page just before the current page

•

Click

Next Page

to view the page just after the current page

•

Click

Clear Log

to delete the contents of the log and begin a new log

•

Click

Refresh

to renew log statistics

Time:

Displays the time and date that the log entry was created.

Message:

Displays summary information about the log entry.

Source:

Displays the source of the communication.

Destination:

Displays the destination of the communication.

Note:

Displays the IP address of the communication.

– 35 –

Wireless Router user’s manual

Log Settings

This screen enables you to set router logging parameters.

SMTP Server:

Type the SMTP server address for the email that the log will be sent to in the next field.

Send to:

Type an email address for the log to be sent to. Click

Email Log Now

to immediately send the current log.

Syslog Server:

Type the IP address of the Syslog Server if you want the router to listen and receive incoming

SysLog messages.

Log Type:

Enables you to select what items will be included in the log:

•

System Activity:

Displays information related to router operation.

•

Debug Information:

Displays information related to errors and system malfunction.

•

Attacks:

Displays information about any malicious activity on the network.

•

Dropped Packets:

Displays information about packets that have not been transferred successfully.

•

Notice:

Displays important notices by the system administrator.

Statistic

This screen displays a table that shows the rate of packet transmission via the router LAN, wireless LAN, and

WAN ports (in bytes per second).

Click

Reset

to erase all statistics and begin logging statistics again.

Utilization:

Separates packet transmission statistics into send and receive categories. Peak indicates the maximum packet transmission recorded since logging began, while Average indicates the average of the total packet transmission since recording began.

– 36 –

Wireless

This screen enables you to view information about wireless devices that are connected to the router wireless interface.

Connected Time:

Displays how long the wireless device has been connected to the LAN via the router.

MAC Address:

Displays the devices wireless LAN interface MAC address.

– 37 –

Wireless Router user’s manual

Routing

This page enables you to set how the router forwards data.

The following functions are covered in this section:

•

Static

•

Dynamic

•

Routing Table

Static

This screen enables you to set parameters by which the router forwards data to its destination if your network has a static IP address.

Network Address:

Type the static IP address your network uses to access the Internet. Your ISP or network administrator provides you with this information.

Network Mask:

Type the network (subnet) mask for your network. If you do not type a value here, the network mask defaults to 255.255.255.255. Your ISP or network administrator provides you with this information.

Gateway Address:

Type the gateway address for your network. Your ISP or network administrator provides you with this information.

Interface:

Select which interface, WAN or LAN, you use to connect to the Internet.

Metric:

Select which metric you want to apply to this configuration.

Add:

Click to add the configuration to the static IP address table at the bottom of the page.

Update:

Select one of the entries in the static IP address table at the bottom of the page and, after changing parameters, click

Update

to confirm the changes.

Delete:

Select one of the entries in the static IP address table at the bottom of the page and click

Delete

to remove the entry.

New:

Click

New

to clear the text boxes and add required information to create a new entry.

– 38 –

Dynamic

This screen enables you to set up NAT parameters.

NAT:

Click the radio buttons to enable or disable NAT.

Transmit:

Click the radio buttons to set the desired transmit parameters, disabled, RIP 1 or RIP 2.

Receive:

Click the radio buttons to set the desired transmit parameters, disabled, RIP 1 or RIP 2.

– 39 –

Wireless Router user’s manual

Routing Table

This screen enables you to view the routing table for the router. The routing table is a database created by the router that displays the network interconnection topology.

Network Address:

Displays the network IP address of the connected node.

Network Mask:

Displays the network (subnet) mask of the connected node.

Gateway Address:

Displays the gateway address of the connected node.

Interface:

Displays whether the node is connected via a WAN or LAN.

Metric:

Displays the metric of the connected node.

Type:

Displays whether the node has a static or dynamic IP address.

Access

This page enables you to define access restrictions, set up protocol and IP filters, create virtual servers, define access for special applications such as games, and set firewall rules.

The following functions are covered in this section:

•

MAC Filter

•

Protocol Filter

•

IP Filter

•

Virtual Server

•

Special AP

•

DMZ

•

Firewall Rule

– 40 –

MAC Filter:

Enables you to allow or deny Internet access to users within the LAN based upon the MAC address of their network interface. Click the radio button next to

Disabled

to disable the MAC filter.

•

Enable:

All users are allowed Internet access except those users you have assigned to groups 1 to 4 in the User Table are allowed Internet access.

•

Disable:

All users in all groups except for those you have assigned to Deny in the User Table are allowed Internet access.

MAC Table:

Use this section to create a user profile to which Internet access is denied or allowed.

The user profiles are listed in the table at the bottom of the page.

When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit:

Note!

•

Name:

Type the name of the user to be permitted/denied access.

•

MAC Address:

Type the MAC address of the user's network interface.

•

Connection Type:

Select whether the user's access is via a wired Ethernet, or a wireless LAN connection.

•

Group:

Select a group from the drop-down list to apply this user to.

•

Add:

Click to add the user to the list at the bottom of the page.

•

Update:

Click to update information for the user, if you have changed any of the fields.

•

Delete:

Select a user from the table at the bottom of the list and click

Delete

to remove the user profile.

•

New:

Click

New

to erase all fields and enter new information.

Protocol Filter

This screen enables you to allow and deny access based upon a communications protocol list you create.

– 41 –

Wireless Router user’s manual

The protocol filter profiles are listed in the table at the bottom of the page.

When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit:

Note!

Click anywhere in the line to select it.

Protocol Filter:

Enables you to allow or deny Internet access to users based upon the communications protocol of the origin. Click the radio button next to

Disabled

to disable the protocol filter.

•

Allow:

All protocols in the list are allowed to connect to the Internet via the LAN. (Create list items in section under 'Add Protocol Filter.)

•

Deny:

All protocols in the list are not allowed to connect to the Internet via the LAN. (Create list items in section under 'Add Protocol Filter.)

Add Protocol Filter:

Use this section to create a profile for the protocol you want to permit or deny Internet access.

•

Enable:

Click to enable or disable the protocol filter.

•

Name:

Type a descriptive name for the protocol filter.

•

Protocol:

Select the protocol (TCP, UDP, or ICMP) you want to allow/deny Internet access to from the drop-down list.

•

Port Range:

If you are creating a profile for ICMP, type a minimum and maximum port range in the two text boxes.

•

Apply to Group:

Select which user group you want to apply the profile to. You define the user groups in the User Group screen.

•

Add:

Click to add the protocol filter to the list at the bottom of the page.

•

Update:

Click to update information for the protocol filter, if you have changed any of the fields.

•

Delete:

Select a filter profile from the table at the bottom of the list and click

Delete

to remove the profile.

•

New:

Click

New

to erase all fields and enter new information.

IP Filter

This screen enables you to define a minimum and maximum IP address range filter; all IP addresses falling in the range are not allowed Internet access.

– 42 –

The IP filter profiles are listed in the table at the bottom of the page.

When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit:

Note!

Click anywhere in the line to select it.

Enable:

Click to enable or disable the IP address filter.

Range Start:

Type the minimum address for the IP range. IP addresses falling between this value and the

Range End are not allowed to access the Internet.

Range End:

Type the minimum address for the IP range. IP addresses falling between this value and the

Range Start are not allowed to access the Internet.

Add:

Click to add the IP range to the table at the bottom of the screen.

Update:

Click to update information for the range if you have selected a list item and have made changes.

Delete:

Select a list item and click

Delete

to remove the item from the list.

Clear:

Click Clear to erase all fields and enter new information.

– 43 –

Wireless Router user’s manual

Virtual Server

This screen enables you to create a virtual server via the router. If the router is set as a virtual server, remote users requesting Web or FTP services through the WAN are directed to local servers in the LAN. The router redirects the request via the protocol and port numbers to the correct LAN server.

The Virtual Sever profiles are listed in the table at the bottom of the page.

When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit:

Note!

Click anywhere in the line to select it.

Enable:

Click to enable or disable the virtual server.

Name:

Type a descriptive name for the virtual server.

Protocol:

Select the protocol (TCP or UDP) you want to use for the virtual server.

Private Port:

Type the port number of the computer on the LAN that is being used to act as a virtual server.

Public Port:

Type the port number on the WAN that will be used to provide access to the virtual server.

LAN Server:

Type the LAN IP address that will be assigned to the virtual server.

Add:

Click to add the virtual server to the table at the bottom of the screen.

Update:

Click to update information for the virtual server if you have selected a list item and have made changes.

Delete:

Select a list item and click

Delete

to remove the item from the list.

Clear:

Click Clear to erase all fields and enter new information.

– 44 –

Special AP

This screen enables you to specify special applications, such as games that require multiple connections that are inhibited by NAT.

The special applications profiles are listed in the table at the bottom of the page.

When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit:

Note!

Click anywhere in the line to select it.

Enable:

Click to enable or disable the application profile. When enabled, users will be able to connect to the application via the router WAN connection. Click Disabled on a profile to prevent users from accessing the application on the WAN.

Name:

Type a descriptive name for the application.

Trigger:

Defines the outgoing communication that determines whether the user has legitimate access to the application.

•

Protocol:

Select the protocol (TCP, UDP, or ICMP) that can be used to access the application.

•

Port Range:

Type the port range that can be used to access the application in the text boxes.

Incoming:

Defines which incoming communications users are permitted to connect with.

•

Protocol:

Select the protocol (TCP, UDP, or ICMP) that can be used by the incoming communication.

•

Port:

Type the port number that can be used for the incoming communication.

Add:

Click to add the special application profile to the table at the bottom of the screen.

Update:

Click to update information for the special application if you have selected a list item and have made changes.

Delete:

Select a list item and click

Delete

to remove the item from the list.

Clear:

Click Clear to erase all fields and enter new information.

– 45 –

Wireless Router user’s manual

DMZ

This screen enables you to create a DMZ for those computers that cannot access Internet applications properly through the router and associated security settings.

Enable:

Click to enable or disable the DMZ.

DMZ Host IP:

Type a host IP address for the DMZ. The computer with this IP address acts as a DMZ host with unlimited Internet access.

Note!

Any clients added to the DMZ exposes the clients to security risks such as viruses and unauthorized access.

Apply:

Click to save the settings.

Firewall Rule

This screen enables you to set up the firewall. The router provides basic firewall functions, by filtering all the packets that enter the router using a set of rules. The rules are in an order sequence list--the lower the rule number, the higher the priority the rule has.

– 46 –

The rule profiles are listed in the table at the bottom of the page.

When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit:

Note!

Click anywhere in the line to select it.

Enable:

Click to enable or disable the firewall rule profile.

Name:

Type a descriptive name for the firewall rule profile.

Action:

Select whether to allow or deny packets that conform to the rule.

Inactive Timeout:

Type the number of seconds of network inactivity that elapse before the router refuses the incoming packet.

Source:

Defines the source of the incoming packet that the rule is applied to.

•

Interface:

Select which interface (WAN or LAN) the rule is applied to.

•

IP Range Start:

Type the start IP address that the rule is applied to.

•

IP Range End:

Type the end IP address that the rule is applied to.

Destination:

Defines the destination of the incoming packet that the rule is applied to.

•

Interface:

Select which interface (WAN or LAN) the rule is applied to.

•

IP Range Start:

Type the start IP address that the rule is applied to.

•

IP Range End:

Type the end IP address that the rule is applied to.

•

Protocol:

Select the protocol (TCP, UDP, or ICMP) of the destination.

•

Port Range:

Select the port range.

Add:

Click to add the rule profile to the table at the bottom of the screen.

Update:

Click to update information for the rule if you have selected a list item and have made changes.

Delete:

Select a list item and click

Delete

to remove the item from the list.

New:

Click

New

to erase all fields and enter new information.

Priority Up:

Select a rule from the list and click

Priority Up

to increase the priority of the rule.

Priority Down:

Select a rule from the list and click

Priority Down

to decrease the priority of the rule.

Update Priority:

After increasing or decreasing the priority of a rule, click

Update Priority

to save the changes.

– 47 –

Wireless Router user’s manual

Management

This screen enables you to set up SNMP and remote management features.

The following functions are covered in this section:

•

SNMP

•

Remote Management

SNMP

This screen enables you to configure SNMP.

Enabled/Disabled:

Click to enable or disable SNMP.

System Name:

Displays the name given to the router.

System Location:

Displays the location of the router (normally, the DNS name).

System Contact:

Displays the contact information for the person responsible for the router.

Community:

SNMP system name for exchanging SNMP community messages. The name can be used to limit

SNMP messages passing through the network. The default name is 'public.'

Trap Receiver:

Type the name of the destination PC that will receive trap messages.

Remote Management

This screen enables you to set up remote management. Using remote management, the router can be configured through the WAN via a Web browser. A user name and password are required to perform remote management.

HTTP:

Enables you to set up HTTP access for remote management.

•

Enable:

Click to enable or disable HTTP access for remote management.

•

Remote IP Range:

Type the range of IP addresses that can be used for remote access.

– 48 –

Telnet:

Enables you to set up Telnet access for remote management.

•

Enable:

Click to enable or disable Telnet access for remote management.

•

Remote IP Range:

Type the range of IP addresses that can be used for remote access.

Allow to Ping WAN Port:

Type a range of router IP addresses that can be pinged from remote locations.

UPNP Enable:

Click to enable or disable UPNP.

Gaming mode:

Click to enable or disable Game mode.

Tools

This page enables you to restart the system, save and load different settings as profiles, restore factory default settings, run a setup wizard to configure router settings, upgrade the firmware, and ping remote IP addresses.

The following functions are covered in this section:

•

Restart

•

Settings

•

Firmware

•

Ping Test

•

Setup Wizard

– 49 –

Wireless Router user’s manual

Restart

Click

Restart

to restart the system in the event the system is not performing correctly.

– 50 –

Settings

This screen enables you to save your settings as a profile and load profiles for different circumstances. You can also load the factory default settings, and run a setup wizard to configure the router and router interface.

Save Settings:

Click to save the current configuration as a profile that you can load when necessary.

Load Settings:

Click

Browse

and go to the location of a stored profile. Click

Load

to load the profile's settings.

Restore Factory Default Settings:

Click to restore the default settings. All configuration changes you have made will be lost.

Firmware

This screen enables you to keep the router firmware up to date.

Follow these instructions:

1. Download the latest firmware from the manufacturer's Web site, and save it to your disk.

2. Click and go to the location of the downloaded firmware file.

3. Select the file and click Upgrade to update the firmware to the latest release.

– 51 –

Wireless Router user’s manual

Ping Test

The ping test enables you to determine whether an IP address or host is present on the Internet.

Type the host name or IP address in the text box and click

Ping. If the ping is successful, you see a screen similar to the one shown here:

If the ping is unsuccessful, you see a screen like the the one shown:

Setup Wizard

The setup wizard enables you to configure the router quickly and conveniently. Follow these instructions:

1. In the Settings screen Setup Wizard section, click Run

Wizard. The screen shown to the right appears.

2. Click . You are prompted to select a password. Type a password in the text box, and then type it again for verification.

– 52 –

3. Click . Select your time zone from the drop-down list.

4. Click .

5. Type the LAN IP address in the text box.

The default IP address 192.168.1.1.

6. Type the subnet mask in the text box.

DHCP

Server if you want

DHCP to automatically assign IP addresses. Type a beginning IP address and an end IP address for the DHCP server to use in assigning IP addresses.

Next

. Select how the router will set up the Internet connection. If you have enabled DHCP server, choose "Obtain IP automatically

(DHCP client)" to have the router assign IP addresses automatically.

9. Click to enable or disable wireless

LAN. If you enable the wireless LAN, type the SSID in the text box and select a communications channel. The SSID and channel must be the same as wireless devices attempting communication to the router.

10. Click

Next

. You are prompted to restart save the settings and restart the router interface. Click restart to complete the wizard.

– 53 –

Wireless Router user’s manual

— This page left blank intentionally —

– 54 –

A

PPENDIX

A: G

LOSSARY

The following glossary of networking terms is provided for your convenience.

Access Point

Access points are way stations in a wireless LAN that are connected to an Ethernet hub or server. Users can roam within the range of access points and their wireless device connections are passed from one access point to the next.

Authentication

Authentication refers to the verification of a transmitted message's integrity.

DMZ

DMZ (DeMilitarized Zone) is a part of an network that is located between a secure LAN and an insecure WAN.

DMZs provide a way for some clients to have unrestricted access to the Internet.

Beacon

Interval

DHCP

Refers to the interval between packets sent sent by access points for the purposes of synchronizing wireless LANs.

DHCP (Dynamic Host Configuration Protocol) software automatically assigns IP addresses to client stations logging onto a TCP/IP network, which eliminates the need to manually assign permanent IP addresses.

DNS

DNS stands for Domain Name System. DNS converts machine names to the IP addresses that all machines on the net have. It translates from name to address and from address to name.

Domain Name

The domain name typically refers to an Internet site address.

DTIM

DTIM (Delivery Traffic Indication Message) provides client stations with information on the next opportunity to monitor for broadcast or multicast messages.

Filter

Firewall

Firmware

Fragmentation

Refers to the breaking up of data packets during transmission.

FTP

FTP (File Transfer Protocol) is used to transfer files over a

TCP/IP network, and is typically used for transferring large files or uploading the HTML pages for a Web site to the

Web server.

Gateway

Host Name

Gateways are computers that convert protocols enabling different networks, applications, and operating systems to exchange information.

The name given to a computer or client station that acts as a source for information on the network.

HTTP

ICMP

Filters are schemes which only allow specified data to be transmitted. For example, the router can filter specific IP addresses so that users cannot connect to those addresses.

Firewalls are methods used to keep networks secure from malicious intruders and unauthorized access. Firewalls use filters to prevent unwanted packets from being transmitted.

Firewalls are typically used to provide secure access to the

Internet while keeping an organization’s public Web server separate from the internal LAN.

Firmware refers to memory chips that retain their content without electrical power (for example, BIOS ROM). The router firmware stores settings made in the interface.

HTTP (HyperText Transport Protocol) is the communications protocol used to connect to servers on the World Wide

Web. HTTP establishes a connection with a Web server and transmits HTML pages to client browser (for example Windows IE). HTTP addresses all begin with the prefix ‘http://’ prefix (for example

, http://www.yahoo.com

).

ICMP (Internet Control Message Protocol) is a TCP/IP protocol used to send error and control messages over the LAN

(for example, it is used by the router to notify a message sender that the destination node is not available).

– 55 –

Wireless Router user’s manual

IP

IP Address

ISP

LAN

MAC Address

Metric

MTU

NAT

IP (Internet Protocol) is the protocol in the TCP/IP communications protocol suite that contains a network address and allows messages to be routed to a different network or subnet. However, IP does not ensure delivery of a complete message—TCP provides the function of ensuring delivery.

The IP (Internet Protocol) address refers to the address of a computer attached to a TCP/IP network. Every client and server station must have a unique IP address. Clients are assigned either a permanent address or have one dynamically assigned to them via DHCP. IP addresses are written as four sets of numbers separated by periods (for example,

211.23.181.189).

An ISP is an organization providing Internet access service via modems, ISDN (Integrated Services Digital Network), and private lines.

LANs (Local Area Networks) are networks that serve users within specific geographical areas, such as in a company building. LANs are comprised of servers, workstations, a network operating system, and communications links such as the router.

A MAC address is a unique serial number burned into hardware adapters, giving the adapter a unique identification.

A number that indicates how long a packet takes to get to its destination.

MTU (Maximum Transmission/Transfer Unit) is the largest packet size that can be sent over a network. Messages larger than the MTU are divided into smaller packets.

NAT (Network Address Translation - also known as IP masquerading) enables an organization to present itself to the

Internet with one address. NAT converts the address of each LAN node into one IP address for the Internet (and vice versa). NAT also provides a certain amount of security by acting as a firewall by keeping individual IP addresses hidden from the WAN.

(Network)

Administrator

NTP

Packet

Ping

Port

The network administrator is the person who manages the

LAN within an organization. The administrator's job includes ensuring network security, keeping software, hardware, and firmware up-to-date, and keeping track of network activity.

NTP (Network Time Protocol) is used to synchronize the realtime clock in a computer. Internet primary and secondary servers synchronize to Coordinated Universal Time

(UTC).

A packet is a portion of data that is transmitted in network communications. Packets are also sometimes called frames and datagrams. Packets contain not only data, but also the destination IP address.

Ping (Packet INternet Groper) is a utility used to find out if a particular IP address is present online, and is usually used by networks for debugging.

Ports are the communications pathways in and out of computers and network devices (routers and switches). Most

PCs have serial and parallel ports, which are external sockets for connecting devices such as printers, modems, and mice. All network adapters use ports to connect to the LAN.

Ports are typically numbered.

– 56 –

PPPoE

Preamble

Protocol

RIP

RTS

PPPoE (Point-to-Point Protocol Over Ethernet) is used for running PPP protocol (normally used for dial-up Internet connections) over an Ethernet.

Preamble refers to the length of a CRC (Cyclic Redundancy

Check) block that monitors communications between roaming wireless enabled devices and access points.

A protocol is a rule that governs the communication of data.

RIP (Routing Information Protocol) is a routing protocol that is integrated in the TCP/IP protocol. RIP finds a route that is based on the smallest number of hops between the source of a packet and its destination.

RTS (Request To Send) is a signal sent from the transmitting station to the receiving station requesting permission to transmit data.

Server

SMTP

SNMP

SSID

Subnet Mask

Servers are typically powerful and fast machines that store programs and data. The programs and data are shared by client machines (workstations) on the network.

SMTP (Simple Mail Transfer Protocol) is the standard Internet e-mail protocol. SMTP is a TCP/IP protocol defining message format and includes a message transfer agent that stores and forwards mail.

SNMP (Simple Network Management Protocol) is a widely used network monitoring and control protocol. SNMP hardware or software components transmit network device activity data to the workstation used to oversee the network.

SSID (Service Set Identifier) is a security measure used in

WLANs. The SSID is a unique identifier attached to packets sent over WLANs. This identifier emulates a password when a wireless device attempts communication on the WLAN.

Because an SSID distinguishes WLANS from each other, access points and wireless devices trying to connect to a

WLAN must use the same SSID.

Subnet Masks (SUBNETwork masks) are used by IP protocol to direct messages into a specified network segment

(i.e., subnet). A subnet mask is stored in the client machine, server or router and is compared with an incoming IP address to determine whether to accept or reject the packet.

SysLog Server

A SysLog server monitors incoming Syslog messages and decodes the messages for logging purposes.

TCP

(Transmission Control Protocol) is the transport protocol in

TCP/IP that ensures messages over the network are transmitted accurately and completely.

TCP/IP

TCP/IP (Transmission Control Protocol/Internet Protocol) is the main Internet communications protocol. The TCP part ensures that data is completely sent and received at the other end. Another part of the TCP/IP protocol set is UDP, which is used to send data when accuracy and guaranteed packet delivery are not as important (for example, in realtime video and audio transmission).

– 57 –

Wireless Router user’s manual

Telnet

Telnet is a terminal emulation protocol commonly used on the Internet and TCP- or IP-based networks:

Windows Telnet Client

Telnet is used for connecting to remote devices and running programs. Telnet is an integral component of the TCP/IP communications protocol.

UDP

Virtual Servers

Virtual servers are client servers (such as Web servers) that share resources with other virtual servers (i.e., it is not a dedicated server).

WEP

WEP (Wired Equivalent Privacy) is the de facto security protocol for wireless LANs, providing the "equivalent" security available in hardwired networks.

Wireless LAN

(User Datagram Protocol) is a protocol within TCP/IP that is used to transport information when accurate delivery isn't necessary (for example, realtime video and audio where packets can be dumped as there is no time for retransmitting the data).

Wireless LANs (WLANs) are local area networks that use wireless communications for transmitting data. Transmissions are usually in the 2.4 GHz band. WLAN devices do not need to be lined up for communications like infrared devices. WLAN devices use access points which are connected to the wired LAN and provide connectivity to the

LAN. The radio frequency of WLAN devices is strong enough to be transmitted through non-metal walls and objects, and can cover an area up to a thousand feet. Laptops and notebooks use wireless LAN PCMCIA cards while PCs use plug-in cards to access the WLAN.

WLAN

WAN

WLANs (Wireless LANs) are local area networks that use wireless communications for transmitting data. Transmissions are usually in the 2.4 GHz band. WLAN devices do not need to be lined up for communications like infrared devices. WLAN devices use access points which are connected to the wired LAN and provide connectivity to the

LAN. The radio frequency of WLAN devices is strong enough to be transmitted through non-metal walls and objects, and can cover an area up to a thousand feet. Laptops and notebooks use wireless LAN PCMCIA cards while PCs use plug-in cards to access the WLAN.

WAN (Wide Area Network) is a communications network that covers a wide geographic area such as a country (contrasted with a LAN, which covers a small area such as a company building).

– 58 –

— This page left blank intentionally —

– 59 –

A

PPENDIX

B: T

ROUBLESHOOTING

Q&A for Windows environments

These guidelines give you tips to deal with some problems you may encounter while using the Wireless Router.

If the problems remain unsolved, contact your dealer for assistance.

Common problems and solutions

These guidelines give you tips to deal with some problems you may encounter while using the Wireless Router.

If the problems remain unsolved, contact your dealer for assistance.

All LEDs are off

1.

Check that the power adapter is firmly seated.

2.

Use some other electrical device to confirm that the electrical outlet is working.

The power LED is on but the Link LEDs are off

1.

Check that all RJ-45 connectors are firmly seated.

2.

Check the RJ-45 cable with a source that you know is active to be sure the cable or connectors are not damaged.

– 60 –

Cannot connect to the Wireless Router

1.

Check that the IP address in the URL field is correct. The default IP address is 192.168.1.1.

2.

Check the TCP/IP settings in the Network Control Panel on the client computer.

3.

Check that you are within range for wireless operation. The maximum range is typically 200 meters, depending on ambient noise, thickness of walls and other environmental characteristics.

– 61 –

Click “

Next

” to continue

APPENDIX C: NETWORKING BASIS

This chapter will help you learn the basics of home networking.

Using the Windows XP Network Setup Wizard

Go to

Start menu

>

Control Panel

>

Network Connections

In the menu on the left side of the window, select “

Set up a home or small office network

”

Click “

Next

” to procced

– 62 –

Select the option that best describes how you connect your computer to the

Internet.

In the case of using router in the network, choose the second option.

Click “

Next

” to continue.

1. Enter a short description for your computer.

2. Enter a name for your computer to be recognized among the network.

3. Click “

Next

” to continue.

– 63 –

Wireless Router user’s manual

Click “

Next

” and wait for the wizard to apply the settings.

Enter “

Workgroup name

” for your home network.

Click “

Next

” to continue”

– 64 –

You may create a network setup disk which saves you the trouble of having to configure every PCs in your network.

Select the first choice, and insert a floppy disk into your disk drive

Click “ continue.

Next

” to

– 65 –

Wireless Router user’s manual

Click “

Format

Disk

” if you wish to format the disk.

Click “

Next

” to copy the necessary files to the disk.

– 66 –

Click “

Next

” to continue with the

Network Setup

Wizard

– 67 –

Wireless Router user’s manual

!

Note: Now you may use the Network Setup Disk you just created in any PCs in your network that you wish to setup. Simply insert the Network Setup Disk into the disk drive of a PC, and open to browse the content of the disk with “My Computer” or “Windows File Manager”. Double-click and run the file “netsetup” for the program to handle the rest.

Click “

Finish

” to complete the

Network Setup

Wizard.

System will now have to restart in order for the new settings to be effective.

Click “

Yes

” to restart the computer

– 68 –

Checking IP Address of Your Computer In Windows XP

Sometimes you will need to know the IP address of the computer that you are using. For example, when you want to make sure that your computer is in the same network domain as that of your Access Point for you can configure and access the AP.

Go to

Start

menu

>

Run

> type

“

command

”

Click “

OK

”

When the command prompt window appears, type command “ipconfig /all” and press Enter. This command will display the IP addresses of all the network adapters in your computer.

In this case, the IP address of your network adapter is 192.168.0.23, which means your Access Point must have an IP address of 192.168.0.xxx in order for you to be able to access it.

If the IP address is assigned by DHCP server on the network, there are chances you might have to release the

IP and acquire it from DHCP server again. Here is how you do it.

Go to

Start

menu

>

Run

> type

“

command

”

Click “

OK

”

– 69 –

Wireless Router user’s manual

Type command, “ipconfig /renew” in the command prompt window and press Enter. This command releases the current IP address and acquire it from the network, i.e. DHCP server, once more.

In this case, the IP address that we acquired is the same as previous one, 192.

168.0.23. However, it’s often that the acquired IP address of the network adapter might would not be the same.

!

Note: To renew IP under Windows 98 and Windows ME, you will have to go to the

Start

menu >

Run

> type

winipcfg

and click “

OK

”. The Windows IP Configuration Menu window would appear, where you first click “release” button to release the current IP address, followed by clicking of “Renew” to acquire a new IP address from network.

If the above methods for IP renew fail, you will have to try and restart the computer, which will reinitializes the network adapter settings during startup including renewing IP address. If you still have problems getting an IP address after computer restarts, you will have to consult with your MIS in your office or call computer and network technicians.

– 70 –

Dynamic IP Address V.S. Static IP Address

By definition Dynamic IP addresses are the IP addresses that are being automatically assigned to a network device on the network. These Dynamically assigned IP addresses will expire and may be changed over time.

Static IP addresses are the IP addresses that users manually enter for each of the network adapters.

Go to

Start

menu >

Control Panel

>

Network

Connections

> Right-click on the active

Local Area connection

> Select

“

Properties

”

– 71 –

Wireless Router user’s manual

!

Note: There might be two or more Local Area Connection to choose from. You must select the one that you will use to connect to the network.

The Local Area Connection

Properties would appear.

Select “

Internet Protocol

(TCP/IP)

” and Click “

Properties

” to continue.

Dynamically Assigned IP Address

The TCP/IP Properties window appears.

Select “

Obtain an IP address automatically

” if you are on a

DHCP enabled network.

Click “

OK

” to close the window with the changes made

– 72 –

Static IP Address

Select “

Use the following IP address

”

Enter the

IP address

and

subnet

mask fields.

Enter the IP address of the

Router in the

Default gateway

field.

Enter the IP address of the

Router in the

DNS server

field

Click “

Ok

” to close the window

!

Note: The IP address must be within the same range as the wireless route or Access Point.

Wireless Network in Windows 2000

Go to

Start

menu >

Settings

>

Network and Dial-up Connections

> Double-click on the

Local Area Connection

Select “

Internet Protocol

(TCP/IP)

” and click “

Properties

”

– 73 –

Wireless Router user’s manual

The TCP/IP Properties window appears.

Select “

Obtain an IP address automatically

” if you are on a

DHCP enabled network.

Click “

OK

” to close the window with the changes made

Select “

Use the following IP address

”

Enter the

IP address

and

subnet

mask fields.

Enter the IP address of the

Router in the

Default gateway

field.

Enter the IP address of the

Router in the

DNS server

field

Click “

Ok

” to close the window

– 74 –

Wireless Network In Windows 98 and Windows ME

Go to

Start

menu >

Settings

>

Control Panel

> Double-click on

Network

Select device

TCP/IP

of the network

Click “

Properties

” to continue

The TCP/IP Properties window appears.

Select “

Obtain an IP address automatically

” if you are on a

DHCP enabled network.

Click “ with the changes made

OK

” to close the window

– 75 –

Wireless Router user’s manual

Select “

Use the following IP address

”

Enter the

IP address

and

subnet

mask fields.

In the

DNS Configuration

Tab

Page, (1) enter the IP address of the Router in the

gateway

field.

Default

(2) Enter the IP address of the

Router in the

DNS server

field

– 76 –

APPENDIX D: 802.1X AUTHENTICATION SETUP

There are three essential components to the 802.1x infrastructure: (1) Supplicant, (2) Authenticator and (3)

Server. The 802.1x security supports both MD5 and TLS Extensive Authentication Protocol (EAP). The 802.1x

Authentication is a complement to the current WEP encryption used in wireless network. The current security weakness of WEP encryption is that there is no key management and no limitation for the duration of key lifetime. 802.1x Authentication offers key management, which includes key per user and key per session, and limits the lifetime of the keys to certain duration. Thus, key decryption by unauthorized attacker becomes extremely difficult, and the wireless network is safely secured. We will introduce the 802.1x Authentication infrastructure as a whole and going into details of the setup for each essential component in 802.1x authentication.

802.1x Authentication Infrastructure

802.11 Wireless

Access Points

Support 802.1X

Authentication Request

Public

802.11

Wireless

RADIUS

Server

Authentication Success

Networks

802.11 Wireless

Clients

Support 802.1X

Inter net/I ntrat

The Infrastructure diagram showing above illustrates that a group of 802.11 wireless clients is trying to form a

802.11 wireless network with the Access Point in order to have access to the Internet/Intranet. In 802.1x authentication infrastructure, each of these wireless clients would have to be authenticated by the Radius server, which would grant the authorized client and notified the Access Point to open up a communication port to be used for the granted client. There are 2 Extensive Authentication Protocol (EAP) methods supported: (1) MD5 and (2) TLS.

MD5 authentication is simply a validation of existing user account and password that is stored in the server with what are keyed in by the user. Therefore, wireless client user will be prompted for account/password validation every time when he/she is trying to get connected. TLS authentication is a more complicated authentication, which involves using certificate that is issued by the Radius server, for authentication. TLS authentication is a more secure authentication, since not only the Radius server authenticates the wireless client, but also the client can validate the Radius server by the certificate that it issues. The authentication request from wireless clients and reply by the Radius Server and Access Point process can be briefed as follows:

1. The client sends an EAP start message to the Access Point

2. The Access Point replies with an EAP Request ID message

3. The client sends its Network Access Identifier (NAI) – its user name – to the Access Point in an EAP Respond message.

4. The Access Point forwards the NAI to the RADIUS server with a RADIUS Access Request message.

– 77 –

Wireless Router user’s manual

5. The RADIUS server responds to the client with its digital certificate.

6. The client validates the digital certificate, and replies its own digital certificate to the RADIUS server.

7. The RADIUS server validates client’s digital certificate.

8. The client and RADIUS server derive encryption keys.

9. The RADIUS server sends the access point a RADIUS ACCEPT message, including the client’s WEP key.

10. The Access Point sends the client an EAP Success message along with the broadcast key and key length, all encrypted with the client’s WEP key.

Supplicant: Wireless Network PC Card

Here is the setup for the Wireless Network PC Card under Windows XP, which is the only Operating System that our driver supports for 802.1x. Microsoft is planning on supporting 802.1x security in all common Windows

Operating System including Win98SE/ME/2000 by releasing Service Pack in 2003.

Please note that the setup illustration is based on our 22Mbps wireless PC Card.

1. Go >

Control Panel

2.

3. double-click on “

Network Connections

” right-click on the Wireless Network Connection that you use with our 22Mbps wireless PC Card.

4. Click ” to open up the Properties setting window.

– 78 –

5. Click on the “

Wireless Network

” tab.

– 79 –

Wireless Router user’s manual

6. Click ” of the available wireless network, which you wish to connect or configure.

Please note that if you are going to change to a different 802.1x authentication EAP method, i.e. switch from using MD5 to TLS, , you must remove the current existing wireless network from your Preferred networks first, and add it in again.

To configure for using TLS authentication method, please follow steps 7 ~ 25.

Please follow steps 26 ~ for using MD5 authentication method.

– 80 –

TLS Authentication

7. Select ” option

– 81 –

Wireless Router user’s manual

9. Click ” tab

10. Select ” option to enable 802.1x authentication.

11. Select ” from the drop-down list box for EAP type.

The wireless client configuration in the zero-configuration utility provided in Windows XP is now completed for

TLS configuration. Before you can enable IEEE 802.1x authentication and have wireless client authenticated by the Radius server, you have to download the certificate to your local computer first.

– 82 –

TLS Authentication – Download Digital Certificate from Server

In most corporations, it requires internal IT or MIS staff’s help to have the certificated downloaded to your local computer. One of the main reasons is that each corporation uses its own server systems, and you will need the assistance from your IT or MIS for account/password, CA server location and etc. The following illustration is based on obtaining a certificate from Windows 2000 Server which can act as a CA server, assuming you have a valid account/password to access the server.

13. Connect to the server and ask for access, and the server will prompt you to enter your user name and password. your and

password

, then click “

OK

” to continue.

Please note that we use IP addresses for connection with the server for our illustration, and the IP of the server is 192.168.1.10.

15. After successful login, open up your Internet Browser, and type the following in the address field.

http://192.168.1.10/certsrv

This is how we connect to the Certificate Service installed in Windows 2000 server.

– 83 –

Wireless Router user’s manual

16. Now we are connected to the Certificate Service. Select “

Request a certificate

”, and click “

Next

” to continue.

– 84 –

17. Select ”, and click “

Next

” to continue.

– 85 –

Wireless Router user’s manual

18. Click ” to continue.

– 86 –

19. The Certificate Service is now processing the certificate request.

– 87 –

Wireless Router user’s manual

20. The certificate is issued by the server, click “Install this certificate” to download and store the certificate to your local computer.

21. Click ” to store the certificate to your local computer.

– 88 –

22. Certificate is now installed.

– 89 –

Wireless Router user’s manual

All the configuration and certificate download are now complete. Let’s try to connect to the Access Point using

802.1x TLS Authentication.

23. Windows XP will prompt you to select a certificate for wireless network connection. Click on the network connection icon in the system tray to continue.

– 90 –

24. Select the certificate that was issued by the server (WirelessCA), and click “

OK

” to continue.

25. Check the server to make sure that it’s the server that issues certificate, and click “

OK

” to complete the authentication process.

– 91 –

Wireless Router user’s manual

MD5 Authentication

26. Select )” option, but leave other option unselected.

27. Select that you want to use to key in your Network key.

ASCII

characters: 0~9, a~z and A~Z

HEX

characters: 0~9, a~f

28. Select that you wish to use

40 bits

(5 characters for ASCII, 10 characters for HEX)

104 bits

(13 characters for ASCII, 26 characters for HEX)

29. After deciding the key format and key length that you wish to use for network key. Enter the network key in

“

Network key

” text box.

Please note that that value of Network key entered, and key format/length used, must be the same as that used in the Access Point. Although there are 4 set of keys can be set in the Access Point WEP configuration, it’s the

first set

of key that must be the same as that we used by the supplicant wireless client.

– 92 –

31. Select ” tab.

32. Select ” to enable 802.1x authentication.

33. Select ” from the drop-down list box for EAP type.

– 93 –

Wireless Router user’s manual

Unlike TLS, which uses digital certificate for validation, the MD-5 Authentication is based on the user account/password. Therefore, you must have a valid account used by the server for validation.

35. WindowsXP will prompt you to enter your user name and password. Click on the network connection icon in the system tray to continue.

– 94 –

36. Enter the user name, password and the logon domain that your account belongs if you have one or more network domain exist in your network.

– 95 –

Wireless Router user’s manual

Authenticator: Wireless Network Router

This is the web page configuration in the Router that we use.

1. Enable 802.1x security by selecting “

Enable

”.

2. Select

Encryption Key Length Size

ranging from 64 to 256 Bits that you would like to use.Select the

Lifetime of the Encryption Key

from 5 Minutes to 1 Day. As soon as the lifetime of the Encryption Key is over, the Encryption Key will be renewed by the Radius server. the of and the

Port

used by the

Primary

Radius Server

Enter the

Shared Secret

, which is used by the Radius Server. the of,

Port

and

Shared Secret

used by the

Secondary

Radius Server.

Click “

Help

” to get interpretation for Encryption Key and Radius Server

7. Click ” button for the 802.1x settings to take effect after Access Point reboots itself.

Note!

As soon as 802.1x security is enabled, all the wireless client stations that are connected to the Router currently will be disconnected. The wireless clients must be configured manually to authenticate themselves with the Radius server to be reconnected.

– 96 –

Radius Server: Window2000 Server

This section to help those who has Windows 2000 Server installed and wants to setup Windows2000 Server for

802.1x authentication, which includes setting up Certificate Service for TLS Authentication, and enable EAPmethods.

1. Login into your Windows 2000 Server as Administrator, or account that has Administrator authority.

2. Go

Start

>

Control Panel

, and double-click “Add or Remove Programs”

3. Click on “

Add/Remove Windows components

”

4. Check ”, and click “Next” to continue.

– 97 –

Wireless Router user’s manual

5. Select ”, and click “

Next

” to continue.

6. Enter the information that you want for your Certificate Service, and click “

Next

” to continue.

– 98 –

7. Go to Start > Program > Administrative Tools >

Certificate Authority

8. Right-click on the “

Policy Setting

”, select “

new

”

9. Select ”

10. Select ” and “

Smartcard Logon

” by holding down to the Ctrl key, and click “

OK

” to continue.

– 99 –

Wireless Router user’s manual

11. Go to Start > Program > Administrative Tools >

Active Directory Users and Computers

.

12. Right-click on domain, and select ”

Properties

” to continue.

13. Select ” tab and click “

Properties

” to continue.

– 100 –

14. Go to “Computer Configuration” > “Security Settings” > “

Public Key Policies

”

15. Right-click ”, and select “

New

”

16. Click ”

– 101 –

Wireless Router user’s manual

17. The Automatic Certificate Request Setup Wizard will guide you through the Automatic Certificate Request setup, simply click “

Next

” through to the last step.

18. Click ” to complete the Automatic Certificate Request Setup

19. Go to Start >

Run

, and type “

command

” and click “

Enter

” to open Command Prompt.

20. Type “secedit/refreshpolicy machine_policy” to refresh policy.

Adding Internet Authentication Service

21. Go to Start > Control Panel >

Add or Remove Programs

– 102 –

22. Select ” from the panel on the left.

23. Select ”, and click “

OK

” to install.

– 103 –

Wireless Router user’s manual

Setting Internet Authentication Service

24. Go to Start > Program > Administrative Tools >

Internet Authentication Service

25. Right-click ”, and select “

New Client

”

– 104 –

26. Enter the IP address of the Access Point in the

Client address

text field, a memorable name for the Access Point in the

Client-Vendor

text field, the access password used by the Access Point in the

Shared secret

text field. Re-type the password in the

Confirmed shared secret

text field.

27. Click “Finish” to complete adding of the Access Point.

– 105 –

Wireless Router user’s manual

28. In the Internet Authentication Service, right-click “

Remote Access Policies

”

29. Select “New Remote Access Policy”.

30. Select ”, and click “

Add

” to continue.

– 106 –

31. Unless you want to specify the active duration for 802.1x authentication, click “

OK

” to accept to have

802.1x authentication enabled at all times.

32. Select ”, and click “

Next

” to continue.

– 107 –

Wireless Router user’s manual

33. Click “Edit Profile” to open up

– 108 –

For TLS Authentication Setup (Steps 34 ~ 38)

34. Select ” Tab

35. Enable ”, and select “

Smart Card or other Certificate

” for

TLS

authentication

– 109 –

Wireless Router user’s manual

36. Go to Start > Program > Administrative Tools >

Active Directory Users and Computers

37. Select ”, and double-click on the user that can be newly created or currently existing, who will be configured to have the right to obtain digital certificate remotely.

Please note that in this case, we have a user called,

test

, whose account/password are used to obtain the digital certificate from server.

– 110 –

38. Go to the “

Dial-in

” tab, and check “

Allow access

” option for Remote Access Permission and “

No Callback

” for Callback Options.

– 111 –

Wireless Router user’s manual

For MD5 Authentication (Steps 39 ~ 54)

39. Go to Start > Program > Administrative Tools >

Active Directory Users and Computers.

40. Right click on the domain, and select “

Properties

”

– 112 –

41. Select ” tab, and click “

Edit

” to edit the Group Policy.

– 113 –

Wireless Router user’s manual

42. Go to “Computer Configuration” > “Windows Settings” > “Security Settings” > “Account Policies” > “

Password Policies

”

43. Click ”, select “

Enabled

”, and click “

OK

” to continue.

– 114 –

44. Go to Start > Program > Administrative Tools >

Active Directory Users and Computers

. to . Right-click on the user that you are granting access, and select “

Properties

”

– 115 –

Wireless Router user’s manual

46. Go to “

Account

” tab, and enable “

Store password using reversible encryption

”

47. Click ” to continue.

– 116 –

48. Go to Start > Program > Administrative Tools >

Internet Authentication Service

.

49. Go

50. Make sure that

MD5

is moved up to Order 1

51. Right-click ”, and select “

Properties

”

– 117 –

Wireless Router user’s manual

52. Go to “

Authentication

” tab

53. Enable ”

54. Select ” for EAP type.

– 118 –

A

PPENDIX

E: T

ECHNICAL

S

PECIFICATIONS

General Specifications

Standards compliance

Regulations compliance

Data rate

Security

Dimensions

LED indicators

Network interface

Antenna

Power jack

RF Specifications

Emission type

RF frequency

IEEE802.11b

FCC Part 15 Class B, Sec. 15.247 and 15.109

ETS 300 328, ETS 300 826, EN60950 and CE-Mark

Telec (Japan)

Wi-Fi Compliant

1/2/5.5/11/22 Mbps

Wired Equivalent Privacy (WEP) 64/128/256 Bit

200 x 150 x 60 mm

Power/Status

Wireless activity

LAN activity

WAN activity

Four RJ-45 x 10/100 Base-T LAN ports (MDI/MDIX auto detect)

1 x 10/100 Base-T Broadband WAN port

2 ports

2.5 mm

Operating channel

Radio chipset

MAC with BBP

Antenna type

Direct Sequence Spread Spectrum (DSSS)

2412 MHz – 2484 MHz – Japan Band

2412 MHz – 2462 MHz – North America

2412 MHz – 2472 MHz – General Europe

11 channels (US, Canada)

13 channels (Europe, Spain)

14 channels (Japan)

RFMD

TI ACX100

Dual Dipole Antenna with Diversity

– 119 –