Advance Multimedia Internet Technology TE1088 Networking Gateway User Manual TE1088 Manual 971106

Advance Multimedia Internet Technology Inc. Networking Gateway TE1088 Manual 971106

User manual

Networking Gateway System Manual S/W Version 2.0 August 2005 P/N 214196
About This Manual This manual contains the following chapters:Chapter 1 – Product Description: Describes the Networking Gatewayand its components.Chapter 2 – Installation: Describes how to install the system and its components.Chapter 3 – Operation and Administration: Describes how to use theweb-based management application for configuring parameters andmanaging the Networking Gateway.Appendix A – Print Server: Describes how to configure the printerserver.Appendix B – 802.1x Setting.
ContentsChapter 1 - Product Description .......................................................11.1 Introducing the Networking Gateway IDU ......................................................21.2 Functions and Features ...................................................................................31.2.1 Basic Functions....................................................................................................31.2.2 Wireless Functions...............................................................................................41.2.3 Security Functions ...............................................................................................41.2.4 Advanced Functions ............................................................................................51.3 Specifications....................................................................................................61.3.1 Radio Specifications ............................................................................................61.3.2 Regulatory Standards Compliance ......................................................................61.3.3 Environmental ......................................................................................................71.3.4 Mechanical ...........................................................................................................71.3.5 Electrical...............................................................................................................7Chapter 2 - Installation .....................................................................92.1 Installation Requirements ..............................................................................102.1.1 Packing List........................................................................................................102.1.2 Additional Installation Requirements .................................................................102.2 Panels Layout and Components ...................................................................112.2.1 Front Panel.........................................................................................................112.2.2 Rear Panel Components....................................................................................132.3 Installation.......................................................................................................14
ContentsChapter 3 - Using the Web Configuration Server............................173.1 Introduction .................................................................................................... 183.2 Accessing the Web Configuration Server.................................................... 193.3 Log in and Log out ......................................................................................... 203.3.1 The Main Menu..................................................................................................213.3.2 Control Buttons ..................................................................................................213.4 Status .............................................................................................................. 233.5 Wizard (Administrator only) .......................................................................... 253.6 Basic Setting................................................................................................... 333.6.1 WAN Setup ........................................................................................................333.6.2 LAN Setup..........................................................................................................423.6.3 Wireless Setting.................................................................................................483.6.4 Change Password .............................................................................................543.7 Security Setting .............................................................................................. 553.7.1 MAC Control ......................................................................................................553.7.2 Packet Filters (Administrator only).....................................................................553.7.3 URL Blocking (Administrator only).....................................................................603.7.4 Domain Filter (Administrator only) .....................................................................623.7.5 Firewall (Administrator only) ..............................................................................643.7.6 Miscellaneous Items (Administrator only)..........................................................653.8 NAT Setting (Administrator only).................................................................. 673.8.1 Virtual Server .....................................................................................................673.8.2 Special AP .........................................................................................................683.8.3 DMZ Host........................................................................................................... 693.8.4 VPN Pass Through ............................................................................................ 703.9 Advanced Settings (Administrator only)...................................................... 723.9.1 System Time ......................................................................................................72
Introducing the Networking Gateway IDU 3.9.2 System Log ........................................................................................................733.9.3 Dynamic DNS.....................................................................................................753.9.4 SNMP Setting.....................................................................................................763.9.5 Routing Table.....................................................................................................773.9.6 Schedule Rule....................................................................................................803.9.7 UPnP Setting......................................................................................................833.10 Toolbox............................................................................................................843.10.1 View Log ............................................................................................................843.10.2 Firmware Upgrade (Administrator only).............................................................853.10.3 Backup Setting...................................................................................................863.10.4 Reset to Default .................................................................................................873.10.5 Reboot................................................................................................................873.10.6 DRAP .................................................................................................................883.10.7 Miscellaneous Items ..........................................................................................893.11 Web Configuration Server’s Parameters Summary.....................................91Appendix A - Print Server..............................................................103A.1 Configuring on Windows 2000 and XP Platforms......................................104Appendix B - 802.1x Setting..........................................................111Glossary.........................................................................................119Manual Revisionvii
FiguresFigure 1: Front Panel .........................................................................................................................11Figure 2: Rear Panel (without antenna).............................................................................................13Figure 3: Log In Window....................................................................................................................20Figure 4: Networking Gateway Main Window....................................................................................21Figure 5: System Status ....................................................................................................................23Figure 6: Setup Wizard ......................................................................................................................25Figure 7: Setup Wizard - Select WAN Type ......................................................................................25Figure 8: Setup Wizard – WAN Type - Static IP Address..................................................................26Figure 9: Setup Wizard - Dynamic IP Address ..................................................................................27Figure 10: Setup Wizard - Dynamic IP Address with Road Runner Session Management..............28Figure 11: Setup Wizard – PPP over Ethernet ..................................................................................29Figure 12: Setup Wizard – PPTP.......................................................................................................30Figure 13: Setup Wizard - Configuration Completed.........................................................................32Figure 14: Basic Setting.....................................................................................................................33Figure 15: WAN Setup/Primary Setup...............................................................................................33Figure 16: Virtual Computers.............................................................................................................34Figure 17: Choose WAN Type...........................................................................................................35Figure 18: Primary Setup - Static IP Address....................................................................................36Figure 19: Primary Setup - Dynamic IP Address...............................................................................37Figure 20: Primary Setup - Dynamic IP Address with Road Runner Session Management.............38Figure 21: Primary Setup - PPPoE ....................................................................................................40Figure 22: Primary Setup - PPTP ......................................................................................................41Figure 23: LAN Setup ........................................................................................................................42Figure 24: LAN Setup - DHCP Server Enabled.................................................................................44
FiguresFigure 25: DHCP Clients List.............................................................................................................45Figure 26: MAC Address Control.......................................................................................................46Figure 27: DHCP Clients Combo Box ...............................................................................................48Figure 28: Wireless Setting ...............................................................................................................48Figure 29: Wireless Clients List.........................................................................................................51Figure 30: Advanced Wireless Setting ..............................................................................................52Figure 31: Change Password ............................................................................................................54Figure 32: Security Setting Window ..................................................................................................55Figure 33: Packet Filter Initial Window ..............................................................................................56Figure 34: Inbound Packet Filter – Example 1 ..................................................................................58Figure 35: Inbound Packet Filter - Example 2 ...................................................................................58Figure 36: Outbound Packet Filter - Example 1 ................................................................................59Figure 37: Outbound Packet Filter - Example 2 ................................................................................60Figure 38: URL Blocking....................................................................................................................60Figure 39: URL Blocking Example.....................................................................................................61Figure 40: Domain Filter ....................................................................................................................62Figure 41: Firewall .............................................................................................................................64Figure 42: Miscellaneous Items.........................................................................................................65Figure 43: NAT Setting ......................................................................................................................67Figure 44: Virtual Server....................................................................................................................67Figure 45: Special Applications .........................................................................................................69Figure 46: DMZ Host .........................................................................................................................70Figure 47: VPN Pass Through...........................................................................................................70Figure 48: Advanced Setting .............................................................................................................72Figure 49: System Time ....................................................................................................................72Figure 50: System Log ......................................................................................................................74Figure 51: Dynamic DNS...................................................................................................................75Figure 52: SNMP Setting...................................................................................................................76Figure 53: Routing Table ...................................................................................................................78
Introducing the Networking Gateway IDU Figure 54: Schedule Rule ..................................................................................................................80Figure 55: Schedule rule Setting .......................................................................................................81Figure 56: Schedule Rule Setting – Example Step 1 ........................................................................81Figure 57: Schedule Rule Setting – Example Step 2 ........................................................................82Figure 58: Virtual Server - Schedule Rule#1 .....................................................................................82Figure 59: Packet Filter - Schedule Rule#1.......................................................................................83Figure 60: UPnP Setting ....................................................................................................................83Figure 61: Toolbox.............................................................................................................................84Figure 62: View System Log..............................................................................................................85Figure 63: Firmware Upgrade............................................................................................................86Figure 64: Backup..............................................................................................................................87Figure 65: Reset to Default................................................................................................................87Figure 66: Reboot ..............................................................................................................................88Figure 67: DRAP Protocol .................................................................................................................88Figure 68: Toolbox - Miscellaneous Items.........................................................................................89Manual Revisionxi
TablesTable 1: Radio Specifications ..............................................................................................................6Table 2: Regulatory Standards Compliance........................................................................................6Table 3: Environmental Specifications.................................................................................................7Table 4: Mechanical Specifications .....................................................................................................7Table 5: Electrical Specifications .........................................................................................................7Table 6: Front Panel LEDs ................................................................................................................11Table 7: Rear Panel Connectors .......................................................................................................13Table 8: Status Window Parameters .................................................................................................23Table 9: Setup Wizard – Static IP Address Parameters....................................................................27Table 10: Setup Wizard – Dynamic IP Address Parameters.............................................................28Table 11: Setup Wizard – Dynamic IP Address with Road Runner Session ManagementParameters ........................................................................................................................................29Table 12: Setup Wizard – PPPoE Parameters..................................................................................30Table 13: Setup Wizard – PPTP Parameters ....................................................................................31Table 14: Virtual Computers Parameters ..........................................................................................34Table 15: Static IP Address Parameters ...........................................................................................36Table 16: Dynamic IP Address Parameters ......................................................................................38Table 17: Dynamic IP Address with Road Runner Session Management Parameters ....................39Table 18: PPP over Ethernet Parameters .........................................................................................40Table 19: PPTP Parameters..............................................................................................................41Table 20: LAN Setup Parameters......................................................................................................43Table 21: DHCP Clients List Parameters ..........................................................................................45Table 22: DHCP Clients List Parameters ..........................................................................................46Table 23: Wireless Setting Parameters .............................................................................................49
TablesTable 24: Wireless Clients List Parameters ......................................................................................51Table 25: Advanced Wireless Setting Parameters............................................................................52Table 26: Advanced Wireless Setting Parameters............................................................................56Table 27: URL Blocking Parameters .................................................................................................61Table 28: Domain Filter Parameters..................................................................................................63Table 29: Firewall Parameters...........................................................................................................64Table 30: Miscellaneous Items Parameters ......................................................................................65Table 31: Virtual Server Parameters .................................................................................................68Table 32: Special Applications Parameters.......................................................................................69Table 33: VPN Pass Through Parameters ........................................................................................ 71Table 34: System Time Parameters ..................................................................................................73Table 35: System Log Parameters ....................................................................................................74Table 36: Dynamic DNS Parameters ................................................................................................76Table 37: SNMP Parameters.............................................................................................................77Table 38: Routing Table Parameters.................................................................................................78Table 39: Routing Table Parameters.................................................................................................80Table 40: DRAP Protocol Parameters...............................................................................................88Table 41: Miscellaneous Items Parameters ......................................................................................90Table 42: Web Configuration Server’s Parameters Summary ..........................................................91
11Chapter 1 - Product DescriptionIn This Chapter: Introducing the Networking Gateway IDU, page 2 Functions and Features, page 3 Specifications, page 6
Chapter 1 - Product Description1.1 Introducing the Networking Gateway IDUThe Networking Gateway Indoor Unit (IDU) enables operators and serviceproviders using a Broadband Wireless Access system to provide subscriberswith a number of broadband services transparently.The Networking Gateway IDU together with the SU-ODU comprises a Subscriber Unit that provides data connections to the Base Station. Thefour 10/100Base-T Ethernet ports connect to the user’s data equipment,providing comprehensive routing functionality and supporting varioussecurity features. User’s data equipment equipped with either IEEE802.11b (11M) or IEEE 802.11g (54M) compatible wireless adapters can connect to the unit via its built-in Wireless LAN port, functioning as an Access Point.The Networking Gateway IDU is powered from the mains. The NetworkingGateway IDU is connected to the ODU via a category 5E Ethernet cable.This cable carries the Ethernet data between the two units as well as power(54 VDC) and control signals to the ODU. It also carries status indicationsfrom the ODU.The Networking Gateway is designed for remote management andsupervision using either the built-in internal web server or SNMP.The Networking Gateway is easily updated and upgraded as it supportsremote software and configuration file download.Product Description2
Functions and Features1.2 Functions and Features 1.2.1 Basic FunctionsAuto-sensing Ethernet SwitchEquipped with a 4-port auto-sensing Ethernet switch.Printer sharing Embedded print server to allow all of the networked computers to shareone printer through the USB host port.WAN TypesSupport of several WAN types: Static, Dynamic, PPPoE, PPTP, and Dynamic IP with Road Runner Session Management (e.g., Telstra,BigPond).FirewallAll unwanted packets from outside intruders can be blocked to protectthe Intranet.DHCP Server SupportAll of the networked computers can retrieve TCP/IP settingsautomatically from the Networking Gateway.Web-based configuringConfigurable through any networked computer’s web browser usingNetscape or Internet Explorer.Virtual Server Support Enables to expose WWW, FTP and other services on your LAN to otherInternet users.User-Definable Application Sensing TunnelUsers can define the attributes to support special applications requiringmultiple connections, such as Internet gaming, video conferencing,Internet telephony and so on. The Networking Gateway can sense theapplication type port as a trigger and open a multi-port tunnel for it.DMZ Host SupportLets one specific networked computer be fully exposed to the Internet.This function is used when special application sensing tunnel feature is insufficient to allow an application to function correctly. Use with caution.NG System Manual3
Chapter 1 - Product DescriptionStatistics of WAN SupportEnables to monitor inbound and outbound packets.1.2.2 Wireless FunctionsHigh speed for wireless LAN connectionUp to 54 Mbps data rate by incorporating Orthogonal FrequencyDivision Multiplexing (OFDM).IEEE 802.11b compatible (11M)Allowing inter-operation among multiple vendors.IEEE 802.11g compatible (54M)Allowing inter-operation among multiple vendors.Auto fallback54M, 48M, 36M, 24M, 18M, 12M, 6M data rates with auto fallback in 802.11g mode.11M, 5.5M, 2M, 1M data rates with auto fallback in 802.11b mode.1.2.3 Security FunctionsPacket FilterPacket Filter allows controlling access to a network by analyzing theincoming and outgoing packets and letting them pass or blocking them based on the source and destination IP addresses and ports.Domain Filter SupportEnables preventing users from accessing specific domains.URL Blocking SupportURL Blocking uses keywords to block hundreds of applicable websitesconnections.VPN Pass-throughThe Networking Gateway can also support VPN pass-through.802.1X Support When the 802.1X function is enabled, the Wireless user must beauthenticated by the Networking Gateway before being allowed to usethe Network services.Product Description4
Functions and FeaturesSPI Mode SupportWhen SPI Mode is enabled, the Networking Gateway checks everyincoming packet and detects if this packet has changed its IP addresssince initial negotiation.DoS Attack Detection SupportWhen this feature is enabled, the Networking Gateway detects and logsDenial of Service (DoS) attack arriving from the Internet.1.2.4 Advanced FunctionsSystem TimeAllows synchronizing system time with a network time server, with thePC, or set the time manually.E-mail AlertThe Networking Gateway can be configured to send its log file by mail. Dynamic DNSAt present, the Networking Gateway supports 3 Dynamic DNSs:DynDNS.org, TZO.com and dhs.org.SNMP SupportThe Networking Gateway supports SNMP V1 and V2c.Routing Table The Networking Gateway supports static routing and two kinds ofdynamic routing: RIP1 and RIP2.Schedule RuleCustomers can control the schedule (when to allow and when to block)for several functions, such as virtual server and packet filters.NG System Manual5
Chapter 1 - Product Description1.3 Specifications1.3.1 Radio SpecificationsTable 1: Radio Specifications Item DescriptionFrequency 2400-2483.5 MHzWireless LAN Standards Compliant with IEEE 802.11b and IEEE 802.11gOutput Power (Average) 10, 12, 15, 17 dBmData Rates IEEE 802.11g mode: 54M, 48M, 36M, 24M, 18M, 12M, 6M with auto fallback in.  IEEE 802.11b mode: 11M, 5.5M, 2M, 1M with auto fallbackin.1.3.2 Regulatory Standards Compliance Table 2: Regulatory Standards ComplianceType StandardEMC ETS EN 301 489-17Safety EN 60950 (CE)IEC 60 950 US/C UL Radio ETSI 300 328 FCC Part 15 Immunity EN 55024:1998Product Description6
Specifications1.3.3 Environmental Table 3: Environmental SpecificationsItem DetailsOperating temperature 0 o C to 40 o COperating humidity 5%-95% non condensing1.3.4 Mechanical Table 4: Mechanical SpecificationsItem DetailsDimensions (W x H x D) 190.5 x 26.2 x 111 mm Weight 0.62 kg1.3.5 Electrical Table 5: Electrical SpecificationsItem DetailsPower Transformer 100-240 VAC, 50-60 Hz, 2A max.Supplies 5 VDC (for the Networking Gateway IDU) and 55 VDC (for the ODU via the RADIO connector)Power Consumption Networking Gateway IDU (5 VDC): 10W max ODU (55 VDC): 50W max.NG System Manual7
22Chapter 2 - InstallationIn This Chapter: Installation Requirements, page 10Panels Layout and Components, page 11Installation, page 14
Chapter 2 - Installation2.1 Installation Requirements 2.1.1 Packing ListNetworking Gateway IDUAntennaPower TransformerMains power cord2.1.2 Additional Installation Requirements Ethernet cable(s) for connecting to the end-user’s data equipment.Mains plug adapter or termination plug (if the power plug on thesupplied AC power cord does not fit local power outlets).PC with an Ethernet card and an Ethernet cable for configuring theNetworking Gateway IDU parameters using a web browser, and forconfiguring the SU-ODU parameters using Telnet.Other installation tools and materials (e.g., means for securing cables to walls, etc.)Installation10
Panels Layout and Components2.2 Panels Layout and Components 2.2.1 Front PanelFigure 1: Front Panel 2.2.1.1 Front Panel LEDsTable 6: Front Panel LEDs LED Function Status DescriptionPOWER Power Indication On Power is available.WLAN Wireless LAN Activity Blinking Sending or receiving data via wirelessLAN.On The USB port is linked.USB USB Port ActivityBlinking The USB port is sending or receivingdata.STATUS System Status Blinking The unit is functioning properly.On An active station is connected to the corresponding LAN port. LAN LINK/ACT1~4 LAN Status Blinking The corresponding LAN port is sending or receiving data.LAN SPEED 10/1001~4LAN Port Data Rate On Data rate is 100 Mbps on thecorresponding LAN port. NG System Manual11
Chapter 2 - InstallationLED Function Status DescriptionOff Data rate is 10 Mbps on the corresponding LAN port. On The ODU port is connected to the ODU. ODU LINK/ACT ODU Port Activity Blinking The ODU port is sending or receivingdata.On Data rate is 100 Mbps. ODU 10/100 ODU Port DataRate Off Data rate is 10 Mbps.ODU WLINK ODU Wireless Link Status On The ODU is connected with an AU. 2.2.1.2 RESET ROUTER Button Press momentarily the recessed RESET ROUTER button to reset theNetworking Gateway IDU.2.2.1.3 Resetting the IDU to Factory Defaults Press the RESET ROUTER button for at least 5 seconds, until the STATUSLED flashes 5 times. After releasing the button, the unit will resumeoperation with the factory default configuration.Installation12
Panels Layout and Components2.2.2 Rear Panel Components Figure 2: Rear Panel (without antenna)2.2.2.1 Rear Panel ConnectorsTable 7: Rear Panel ConnectorsConnector DescriptionPOWER DC Power Inlet from Power TransformerODU Connection to the ODU. Carries Ethernet, Power (55 VDC) and signaling.Port 1-4 LAN ports for networked computers and other devices. USB USB Host Port for a USB printer.Antenna (not marked) An SMA connector for the WLAN antennaCAUTIONDo not connect data equipment to the ODU port. The ODU port supplies high DC powerto the ODU, and this may harm other equipment connected to it.2.2.2.2 RESET ODU ButtonPress momentarily the recessed RESET ODU button to reset the ODU.NG System Manual13
Chapter 2 - Installation2.3 InstallationThe unit can be placed on a desktop or a shelf. Alternatively, it may be wall-mounted.For optimal performance, place the Networking Gateway in the center ofyour office (or your home), in a location that is away from any potentialsource of interference, such as a metal wall or microwave oven. Thislocation must be close to a mains outlet and network connections.To install the Networking Gateway IDU: 1Assemble an RJ-45 connector with a protective cover on the indoor endof the IDU-ODU cable. The length of the IDU-ODU cable should notexceed 100m. Refer to the relevant System Manual for instructions on preparing the cable and for information on the cable type.2Connect the IDU-ODU cable to the ODU connector located on the rear panel.3Connect the power cord of the transformer to the unit’s POWER socket,located on the rear panel. Connect the Mains power cord to the powertransformer and to the AC mains. NOTEThe color codes of the power cable are as follows:Brown Phase ~Blue Neutral 0 Yellow/Green Ground4When power is connected, the unit will automatically enter the self-testphase. When it is in the self-test phase, the STATUS LED will be lit ON for about 10 seconds, and will then blink 3 times, indicating that theself-test operation has ended. Finally, the STATUS LED will blink continuously one blink per second, indicating that the unit is functioning properly.5Connect a PC to one of the LAN ports using an Ethernet cable andconfigure the basic parameters of the SU-ODU. Align the antenna of the ODU. For more information refer to the applicable sections of therelevant System Manual.6Use a web browser to configure the parameters of the NetworkingGateway IDU. For details refer to Chapter 3.Installation14
Installation7If a printer is to be used, connect it to the USB port using a standardUSB cable. To configure the Print Server on your computer(s), refer to Appendix A - Print Server.8Configure the network settings of the computers for proper operationwith the Networking Gateway. The default IP address of the NetworkingGateway LAN is 192.168.254.253, and the default subnet mask is 255.255.255.0.9To verify data connectivity, from the end-user’s PC or from a portablePC connected to the unit, try to connect to the Internet.10 Verify proper operation using the LED indicators (see Table 6).NG System Manual15
33Chapter 3 - Using the Web ConfigurationServerIn This Chapter: Start-up and Log in on page 18Status on page 23Wizard on page 25Basic Setting on page 33Security Setting on page 55NAT Setting on page 67Advanced Settings on page 72Toolbox on page 84
Chapter 3 - Using the Web Configuration Server3.1 IntroductionThe Networking Gateway IDU can be configured using the following methods:The Web Configuration ServerA .cfg-file loaded into the unit from the web configuration server or TFTP.SNMPThis document describes the configuration using the Web ConfigurationServer.Using the Web Configuration Server18
Accessing the Web Configuration Server 3.2 Accessing the Web Configuration ServerFollow the steps below to access the Web Configuration Server:1Connect the unit to the AC mains.2Connect PC to LAN port 1.NOTEWhen connecting from WAN, make sure that a remote administrator is enabled (see section 3.7.6), and enter the WAN IP address specified in the System Status window (seesection 3.4) using TCP port 88. IMPORTANTWhen managing the NG via bwaNMS (using the cut through option), the RemoteAdministrator Port must be set to 8080. 3Open a web browser (Internet Explorer or Netscape Communicator).NOTEBe sure to disable the proxy on your Web browser or add the IP address of the productinto the proxy exceptions.4Type http://192.168.254.253 in the Address (IE) or Location (Netscape)field and click Enter.5If the Web Configuration Server is password protected, you will beprompted to enter your password in order to login to the system (see section 3.3).6The Web Configuration Server main view appears on the screen. NG System Manual19
Chapter 3 - Using the Web Configuration Server3.3 Log in and Log out After connection is established, the networking gateway web user interfaceappears. There are two entry levels: for general users and for systemadministrators. The menus and screens vary depending on entry level. Themenus and parameters specified hereinafter, refer to both entry levels,unless otherwise specified.To log in, enter the system password in the System Password field and click the Log in button.NOTEThe default passwords for the two access levels are: For Administrators: privateFor Users: publicFigure 3: Log In WindowUpon successful Log in, the Networking Gateway Main Window appears.Using the Web Configuration Server20
Log in and Log out Figure 4: Networking Gateway Main Window3.3.1 The Main Menu The Web Configuration Server view consists of a number of menu links (tothe left). Clicking on each of them expands the menu node and displays theselected page with the applicable content (configurable parameters/optionsor status information) in the main area.IMPORTANTMany pages include a "Save" button. Click on the Save button before selecting anotherpage/menu item, or before quitting the application. The Save functionality in many cases is per page. If you leave the page without clicking the Save button, all the changes in the page will be discarded.Changes to most of the settings are applied only after restarting the unit(refer to section 3.10.5).3.3.2 Control ButtonsA control button causes an immediate action. To activate a control button,click on it. Certain control buttons only appear in selected windows. Othersare common to most windows.NOTESome control buttons may be disabled for user entry level (public password).NG System Manual21
Chapter 3 - Using the Web Configuration ServerSave – Saves any changes made to the configuration. Most changesrequire rebooting the system for them to take effect.Undo – Recovers the original settings.Help – Displays a help screen for the specific window.Refresh – Refreshes the displayed information.Back – Reverts to a previous step/screen.<<Previous – In windows that are divided into several pages, use the<<Previous button to jump to the previous page.Next>> - In windows that are divided into several pages, use the Next>>button to jump to the next page.Cancel – Clears unsaved changes to the configuration.Reboot – Reboots the Networking Gateway.Using the Web Configuration Server22
Status3.4 StatusThe Status window appears in the main window upon successful log in. Thewindow can be accessed at any time by clicking on the Status menu on themenu list. Figure 5: System StatusThe Status window provides information for observing the product's workingstatus, as follows:Table 8: Status Window ParametersParameter DescriptionRemaining Lease Time A counter displaying the remaining time (in hh:mm:ss) in which unit will request a new IP. When the lease time expires,a new IP address will be automatically allocated, or the leasewill be automatically renewed, depending on the settings (seesections 3.6.1.2 and 3.6.1.3.This field is relevant only for Dynamic IP Address mode andwill not appear in any of the other modes.Renew (Administrator only) – In Dynamic IP Address mode, click to reset the Lease Time. The gateway willrequest an IP address from the DHCP server.In Static IP Address, PPPoE and PPTP modes, the WAN type is specified in the sidenote (Static IP, PPPoE, or PPTP, respectively).NG System Manual23
Chapter 3 - Using the Web Configuration ServerParameter DescriptionIP Address The WAN IP address. Release (Administrator only) – In Dynamic IP Address mode only, Click to release the WAN IP address. Subnet Mask The Subnet mask of the device. (The default is 255.255.255.0)Gateway The default Gateway IP address.Domain Name Server The DNS Server IP address(es).Connection Time (PPPoE and PPTP modes only)Connect/ Disconnect – When in PPPoE or PPTP mode, clickConnect to initiate a session, or Disconnect to terminate a session.Peripheral Status The USB Printer status: Not ready - no printer is availableOff-line or No Paper – the printer is off-line or the paper tray is emptyPrinting – the printer is currently printingReady - a printer is connected and ready to print.Device error – a general error occurred.Traffic Statistics Enables to monitor inbound and outbound packets for WAN,LAN and wireless beginning from last reset. In addition, the Status window includes the following buttons:View Log – opens the log file for viewing. See section 3.10.1.Clients List – opens the list of DHCP assigned clients. See section 3.6.2.1.Using the Web Configuration Server24
Wizard (Administrator only)3.5 Wizard (Administrator only) The Setup Wizard will guide you through the basic configuration procedure(recommended for most users).Figure 6: Setup Wizard1Click on Next. The Select WAN Type window appears. NOTEYou can click Back at any time to return to previous screens and change your settings. Figure 7: Setup Wizard - Select WAN Type2Select the WAN Type from the list: NG System Manual25
Chapter 3 - Using the Web Configuration ServerStatic IP Address – a static IP Address provided by the ISPDynamic IP Address – an IP Address automatically obtained from theISP (default)Dynamic IP Address with Road Runner Session Management (e.g.Telstra, BigPond)PPP over Ethernet – some ISPs require the use of PPPoE to connectto their servicesPPTP – Some ISPs require the use of PPTP to connect to theirservices.3Click Next. For each WAN type selected, a different WAN Type-specificwindow appears: Static IP AddressFigure 8: Setup Wizard – WAN Type - Static IP AddressUsing the Web Configuration Server26
Wizard (Administrator only)Set the following parameters provided by your ISP:Table 9: Setup Wizard – Static IP Address ParametersParameter DescriptionLAN IP Address Sets the local IP address of the device.Static IP Address The IP address of the WAN port. The default is 0.0.0.0. Static Subnet Mask The subnet mask of the WAN port.The default is 0.0.0.0. Static Gateway The Default Gateway IP address of the unit. The default is 0.0.0.0. Static Primary DNS The IP address of the primary Domain Name Server. The default is 0.0.0.0. Static Secondary DNS The IP address of the secondary Domain Name Server. The default is 0.0.0.0. Dynamic IP AddressFigure 9: Setup Wizard - Dynamic IP AddressNG System Manual27
Chapter 3 - Using the Web Configuration ServerSet the following parameters:Table 10: Setup Wizard – Dynamic IP Address ParametersParameter DescriptionLAN IP Address The local IP address of the device.The default IP address is 192.168.254.253. To change the IPaddress enter a new value.Host Name: Optional Some ISPs require a host name, for example, Home.A string of maximum 39 characters.The default is an empty field.WAN's MAC Address The gateway's pre-configured MAC Address.Clone MAC - Click to replace the Gateway's WAN MAC Address with the PC's MAC Address. Restore MAC - When Clone MAC is activated, the button changes to Restore MAC, to enable to restore the unit'sdefault MAC Address. Dynamic IP Address with Road Runner Session ManagementFigure 10: Setup Wizard - Dynamic IP Address with Road Runner Session ManagementUsing the Web Configuration Server28
Wizard (Administrator only)Set the following parameters:Table 11: Setup Wizard – Dynamic IP Address with Road Runner Session ManagementParametersParameter DescriptionLAN IP Address The local IP address of the device.The default IP address is 192.168.254.253. To change the IPaddress enter a new value.Account The account provided by the service provider. If you do not want to change the account, leave empty. At initial entry, youare required to enter an account.A string of up to 53 printable characters.The default is an empty field.Password The password provided by the service provider. If you do notwant to change the password, leave empty. At initial entry,you are required to enter a password.A string of up to 53 printable characters.Login Server The Login Server (optional). Leave empty if you want the default server. PPP over EthernetFigure 11: Setup Wizard – PPP over EthernetNG System Manual29
Chapter 3 - Using the Web Configuration ServerSet the following parameters:Table 12: Setup Wizard – PPPoE Parameters Parameter DescriptionLAN IP Address The local IP address of the device.The default IP address is 192.168.254.253. To change the IPaddress enter a new value.Account The account provided by the service provider.A string of up to 53 printable characters.The default is an empty field.Password The password provided by the service provider. If you do notwant to change the password, leave empty. At initial entry,you are required to enter a password.A string of up to 53 printable characters.Primary DNS The DNS provided by your ISP. To use a specific DNS, entera specific address. Leave the default 0.0.0.0 setting to automatically assign the parameter.Secondary DNS The backup DNS provided by the service provider. (optional)PPTPFigure 12: Setup Wizard – PPTP Using the Web Configuration Server30
Wizard (Administrator only)Set the following parameters:Table 13: Setup Wizard – PPTP Parameters Parameter DescriptionLAN IP Address The local IP address of the device.The default IP address is 192.168.254.253. . To change the IP address enter a new value.IP Mode select one of the following options:Dynamic IP Address (this is the default setting)Static IP Address My IP Address The private IP address assigned by the service provider after connection. When in Static Mode, the IP address must be configured manually.My Subnet Mask The private subnet mask assigned by the service providerafter connection. When in Static Mode, the subnet mask must be configured manually.WAN Gateway IP The WAN Gateway IP address after connection. When in Static Mode, the IP address must be configured manually.Server IP Address/Name The IP address/Name of the PPTP server. PPTP Account The user account assigned by the service provider.A string of up to 53 charactersPPTP Password The password assigned by the service provider. If you do notwant to change the password, leave this field empty. At initialentry, you are required to enter a password.A string of up to 53 characters4After setting the appropriate parameters, the following window appears:NG System Manual31
Chapter 3 - Using the Web Configuration ServerFigure 13: Setup Wizard - Configuration Completed5The configurations will take effect only after rebooting your computer.Click on Reboot to restart your computer.For more advance configurations, see details on the specific windows,below.Using the Web Configuration Server32
Basic Setting 3.6 Basic Setting The Basic Setting window allows to configure the settings for WAN, LAN,and Wireless and to change the password.Figure 14: Basic Setting3.6.1 WAN SetupClick on WAN Setup from the Basic Setting menu on the menu list. ThePrimary Setup window appears. The parameters displayed may varydepending on the WAN Type selected. The default WAN Type is Dynamic IPAddress.Figure 15: WAN Setup/Primary Setup NG System Manual33
Chapter 3 - Using the Web Configuration ServerNOTEThe WAN setup window is read only for user level entry.From the WAN Setup window you can: Set the WAN type – allows to select the WAN connection type of yourISP.NAT – Enable/Disable - When disabled, the gateway functions as a regular router as opposed to a NAT router. This option is available in thePrimary Setup window for all WAN types.Set Virtual Computers (Administrators only) – Enabled when using NAT. In addition to the primary WAN address, enables to set up one-to-onemapping of up to five global IP address and local IP address (see Figure16 below).Figure 16: Virtual ComputersThe Virtual Computers window includes the following parameters:Table 14: Virtual Computers ParametersParameter DescriptionGlobal IP Enter the global IP address assigned by the service provider.Local IP Enter the local IP address of your LAN PC corresponding to the global IP address. Enable Check/Uncheck this item to enable/disable the VirtualComputer feature. Using the Web Configuration Server34
Basic Setting NOTEThe Reboot button is not available at first entry to the Primary Setup window and appearsonly after saving your changes.For user entry level (public password), the parameter fields in all WAN type screens aredisabled (for display only).IMPORTANTChanges to the Primary Setup window will take effect only after rebooting the system.The default WAN type is Dynamic IP Address. However, you can changethe WAN type as follows:To select a different WAN type:1Click Change. The Choose WAN Type window opens.Figure 17: Choose WAN Type2Select one of the following types: Static IP Address: The ISP provides you with a static IP address. Seesection 3.6.1.1.Dynamic IP Address: Automatically obtain an IP address from theISP. See section 3.6.1.2. This is the default setting.NG System Manual35
Chapter 3 - Using the Web Configuration ServerDynamic IP Address with Road Runner Session Management (e.g.Telstra BigPond). See section 3.6.1.3.PPP over Ethernet: Some ISPs require the use of PPPoE to connect totheir services. See section 3.6.1.4.PPTP: Some ISPs require the use of PPTP to connect to their services.See section 3.6.1.5.For each WAN type selected, a different Primary Setup window appears, as follows. You can change the WAN type by clicking on Change and selectinga different WAN type.3.6.1.1 Static IP AddressFigure 18: Primary Setup - Static IP Address The Setup page for Static IP Address includes the following parametersprovided by the service provider:Table 15: Static IP Address ParametersParameter DescriptionWAN IP Address The IP address of the WAN port. The default is 0.0.0.0. WAN Subnet Mask The IP subnet mask of the WAN port. The default is 255.255.255.0WAN Gateway The Default Gateway IP address of the unit. Using the Web Configuration Server36
Basic Setting Parameter DescriptionThe default is 0.0.0.0. Primary DNS The IP address of the primary Domain Name Server. The default is 0.0.0.0. Secondary DNS The IP address of the secondary Domain Name Server. The default is 0.0.0.0. NAT Enable/Disable. When disabled, the gateway functions as aregular router as opposed to a NAT router. This option is available in the Primary Setup window for all WAN types. The default is: Enable3.6.1.2 Dynamic IP Address Figure 19: Primary Setup - Dynamic IP AddressNG System Manual37
Chapter 3 - Using the Web Configuration ServerThe Setup page for Dynamic IP Address includes the following parameters:Table 16: Dynamic IP Address ParametersParameter DescriptionHost Name Optional - Some ISPs require a host name, for example,Home.A string of maximum 39 characters.WAN's MAC Address The gateway's pre-configured MAC Address.Clone MAC - Click to replace the Gateway's WAN MAC Address with the PC's MAC Address. Restore MAC - When Clone MAC is activated, the button changes to Restore MAC, to enable to restore the unit'spre-configured MAC Address.Renew IP Forever When enabled, this feature will automatically renew your IPaddress when the lease time expires, even if the system is idle.NAT Enable/Disable - When disabled, the gateway functions as aregular router as opposed to a NAT router. 3.6.1.3 Dynamic IP Address with Road Runner Session ManagementFigure 20: Primary Setup - Dynamic IP Address with Road Runner Session ManagementUsing the Web Configuration Server38
Basic Setting The Setup page for Dynamic IP Address with Road Runner SessionManagement provides authentication using dedicated DHCP server andincludes the following parameters:Table 17: Dynamic IP Address with Road Runner Session Management ParametersParameter DescriptionAccount The account provided by your ISPA string of maximum 53 characters.Password The password provided by your ISP. If you do not want to change the password, leave empty.A string of maximum 53 characters.Login Server The Login Server (optional). Leave empty if you want the default server.A string of maximum 31 characters.Renew IP Forever Enable/Disable – when enabled, your IP address willautomatically be renewed when the lease time expires, evenif the system is idle. NAT Enable/Disable - When disabled, the gateway functions as aregular router as opposed to a NAT router. 3.6.1.4 PPP over Ethernet Some ISPs require the use of PPPoE to connect to their services. If this isthe case, click Change to select PPPoE as your WAN type. The PrimarySetup window display changes to reflect the parameters for PPPoE.NG System Manual39
Chapter 3 - Using the Web Configuration ServerFigure 21: Primary Setup - PPPoE The Setup page for PPPoE includes the following parameters:Table 18: PPP over Ethernet Parameters Parameter DescriptionPPPoE Account The account assigned to you by your ISP. PPPoE Password The password assigned to you by your ISP. This field alwaysappears blank. If you don't want to change the password,leave it empty.Primary DNS The DNS provided by your ISP. To use a specific DNS, entera specific address. Leave the default 0.0.0.0 setting to automatically assign the parameter.Secondary DNS The backup DNS provided by your ISP. (optional)Maximum Idle Time The amount of time of inactivity before disconnecting yourPPPoE session. To disable this feature, set this parameter to 0 seconds, or enable Auto-reconnect.The Maximum Idle Time is applicable only when ConnectionControl is set to Connect-on-demand or to Manually.Connection Control Authentication for IP allocation. Select one of the followingoptions:Connect-on-demand – An IP address is automaticallyallocated whenever the user attempts to make aconnection.Auto reconnect(Always-on) – The system automaticallyconnects to the ISP after restart or after connection is dropped.Manually – The user manually performs the connection.Maximum Transmission Unit (MTU)Most ISPs provide an MTU value to users. The maximum MTU value allowed is 1492 bytes.More >> Click to display the following parameters: PPPoE Service Name (optional) - Directs to a PPPoE server.Assigned IP Address (optional) – The fixed IP assignedby the ISP. Using the Web Configuration Server40
Basic Setting 3.6.1.5 PPTP Some ISPs require the use of PPTP to connect to their services.Figure 22: Primary Setup - PPTP The Setup page for PPTP includes the following parameters:Table 19: PPTP Parameters Parameter DescriptionIP Mode Select one of the following options:Dynamic IP Address (this is the default setting)Static IP Address My IP Address The private IP address assigned by your ISP. This parameteris enabled only for Static IP Address mode.My Subnet Mask The private subnet mask assigned by your ISP. Thisparameter is enabled only for Static IP Address mode. WAN Gateway IP The WAN Gateway IP address. This parameter is enabledonly for Static IP Address mode.Address/Name The IP address/Name of the PPTP server. PPTP Account The user account assigned by your ISP. A string of maximum 53 characters.Connection ID Enter the connection ID if your ISP requires it (optional).NG System Manual41
Chapter 3 - Using the Web Configuration ServerParameter DescriptionMaximum Idle Time The amount of time of inactivity before disconnecting yourPPTP session. To disable this feature, set this parameter to 0seconds, or enable Auto-reconnect.Connection Control Authentication for IP allocation. Select one of the followingoptions:Connect-on-demand – An IP address is automaticallyallocated whenever the user attempts to make aconnection.Auto reconnect(Always-on) – The system automaticallyconnects to the ISP after restart or after connection is dropped.Manually – The user manually performs the connection.3.6.2 LAN SetupSelect Basic Setting > LAN Setup submenu on the menu list. The LAN Setupwindow opens.Figure 23: LAN SetupUsing the Web Configuration Server42
Basic Setting The LAN Setup page includes the following parameters:Table 20: LAN Setup ParametersParameter DescriptionLAN IP Address Sets the local IP address of the device. The users on yournetwork must use this LAN IP address as their default gateway. You can change it as necessary.LAN Subnet Mask Sets the subnet mask to the LAN IP address.DHCP Server Enable/Disable to turn off this service. When enabled, the LAN Setup window display changes (indicated by the red icon), and the following parameters are displayed (see Figure24):Range of IP addresses Pool – Specify the starting andending address for DHCP clients. The IP addresses areallocated from this pool according to calculations basedon the client’s MAC address.Domain suffix – Specify the domain suffix for DHCP clients.Primary DNS – Specify the primary DNS for DHCP clients.Secondary DNS – Specify the secondary DNS for DHCP clients.Primary WINS – Specify the primary WINS address for DHCP clients.Secondary WINS – Specify the secondary WINS address for DHCP clients.Lease Time – The time set (in minutes) for IP allocation.DHCP Proxy This parameter is available only when DHCP Server is disabled.NG System Manual43
Chapter 3 - Using the Web Configuration ServerFigure 24: LAN Setup - DHCP Server Enabled The LAN PC receives a DHCP IP address from the Networking Gateway. To receive the DHCP IP address from the DHCP server, perform the followingprocedure:3Set the DHCP Server parameter to Disable.4Set the DHCP Proxy parameter to Enable.5In the Proxy IP field, enter the IP of the DHCP server.In addition, the LAN Setup window includes the following control buttons:Clients List – Opens a list of the current mapping of the IP and MAC address for each DHCP client (see section 3.6.2.1)Fixed Mapping – Opens the MAC Address Control window for assigning a specific IP address to the specified MAC address for DHCP clients (seeMAC Address Control on page 52 for further details).Using the Web Configuration Server44
Basic Setting 3.6.2.1 DHCP Clients List Figure 25: DHCP Clients ListThe DHCP Clients List displays the following parameters for each DHCP client:Table 21: DHCP Clients List ParametersParameter DescriptionIP Address The IP address of the DHCP client. Host Name The host name of the DHCP client. MAC Address The MAC address of the DHCP client. From the DHCP Clients List window you can do the following for the selectedclients:Wake up – Sends Ethernet packets to turn on the PC, relevant hardwareand configuration is required on NIC and PCDelete – Delete the selected clients from the list.NG System Manual45
Chapter 3 - Using the Web Configuration Server3.6.2.2 Fixed MappingOpens the MAC Address Control window. MAC Address Control allows toassign different access rights for different users and to assign a fixed IPaddress to a specific MAC address.NOTEAll the settings in this page will take effect only when MAC Address Control is set to "Enable".Figure 26: MAC Address ControlThe MAC Address Control window includes the following parameters:Table 22: DHCP Clients List ParametersParameter DescriptionMAC Address Control Check "Enable" to enable the MAC Address Control feature.Connection control Check the "Connection control" check box to enablecontrolling which wired and wireless clients can connect to this device. If a client is denied the connection to this device,he will not be able to access the Internet either. Select allow/deny to allow or deny clients whose MAC addressesare not in the "Control table" (see below) to connect to this device. ("deny" is the default setting.) A wired client who is allowed to connect to the device has full access to the Internet and to network resources. Whendenied the connection to the device, he can communicatewith other clients on the wired LAN, but cannot connect to the Internet, use the Print Server function, communicate withUsing the Web Configuration Server46
Basic Setting Parameter Descriptionclients on the wireless LAN, or use the Web configuration.Association control "Association" refers to the exchanging of information betweenwireless clients and the device to establish a link betweenthem. A wireless client is able to transmit and receive data tothe device only after successful association. Check "Association control" check box to control which wirelessclients can associate to the wireless LAN. If a client is deniedthe association to the wireless LAN, he will not be able to send or receive any data via this device. Select allow/deny to allow or deny clients whose MAC addresses are not in the"Control table" to associate to the wireless LAN.A wireless client who is allowed both to associate to the wireless LAN and to connect to the device has full access tothe Internet and to network resources.When allowed to associate to the wireless LAN, but denied toconnect to the device, he can communicate with other clientson the LAN (wired and wireless), but cannot connect to the Internet, use the Print Server function, or use the Webconfiguration.When denied to associate to the wireless LAN, the client cannot communicate with other clients on the LAN (wired orwireless), connect to the internet, use the Print Server function, or use the Web configuration.NOTE: Association control does not affect wired clients.Control Table: Each row in the control table indicates the MAC address and the mapped IPaddress of a single client.MAC Address The MAC address of a specific client. IP Address The expected IP address of the corresponding client. Leave empty if you do not want to specify an IP address for the corresponding client. C When "Connection control" is checked, checking "C" willallow/deny (depending on the connection control setting) thecorresponding client to connect to this device. A When "Association control" is checked, checking "A" willallow/deny (depending on the association control setting) thecorresponding client to associate to the wireless LAN. NG System Manual47
Chapter 3 - Using the Web Configuration ServerTo enter the MAC address:Use the DHCP clients combo box.Figure 27: DHCP Clients Combo Box1Select a specific client in the "DHCP clients" Combo box and click on Copy to to copy the MAC address of the selected client to the selectedID in the "ID" Combo boxNOTEWhen the unit has a list of clients connected through DHCP, and the unit is reset, the list will show empty. In this case renew the PC IP address from DHCP on LAN.2The control table is divided into several pages. Use the << Previouspage and Next Page >> buttons to jump to a different page.3.6.3 Wireless SettingWireless settings allow you to set the wireless configuration items.CAUTIONChanging any of the parameters may cause loss of wireless link connectivity to the unit if the settings do not match the settings on the WLL subscriber in the User's PC. Figure 28: Wireless Setting Using the Web Configuration Server48
Basic Setting The Wireless Setting window includes the following parameters:Table 23: Wireless Setting ParametersParameter DescriptionWireless Enable/Disable – Check the Enable box to enable this service.The default setting is "Enable".Network ID (SSID) Network ID is used for identifying the Wireless LAN (WLAN).Client stations can roam freely over this product and otherAccess Points that have the same Network ID.The factory setting is "default".Channel The radio channel number. The permissible channels dependon the Regulatory Domain.Security Select the data privacy algorithm you want to protect yourdata when being transferred from one station to another. Theavailable security protocols are:None – No encryption is applied. (default)WEP (Wired Equivalent Privacy) – Encrypts framestransmitted through a wireless module using a pre-entered WEP key. You can configure 4 key sets and select one to apply as follows: WEP 64 bit - 10 hexadecimal digits WEP 128 bit – 26 hexadecimal digits  WEP 256 bit – 58 hexadecimal digits 802.1x – When enabled, the wireless user must be authenticated before it is allowed to use the networkservices. One implementation of 802.1x (the mostcommon one) is through a RADIUS server on your LAN, containing an authentication database. Encryption Key Length – Select either 64 or 128 bitsfor the encryption key. RADIUS Server IP – The 802.1x server's IP address. RADIUS Port – The 802.1x server's service port.WPA-PSK - Accepts WPA clients only. Manually enter a pre-share key (encryption key) as follows:NG System Manual49
Chapter 3 - Using the Web Configuration ServerParameter Description Pre-share key mode: ASCII or HEX can be selected. Pre share key: 32 ASCII characters or 64 hexadecimal digits pre-share key (encryption key).WPA (Wi-Fi Protected Access) – improves data protectionand implements access control to Wireless LAN systems.Frames transmitted through a wireless module are encrypted using a Pre-share key (PSK) or a key receivedfrom the RADIUS server.  RADIUS Server IP – The 802.1x server's IP address. RADIUS Port – The 802.1x server's service port. RADIUS Shared Key – Key value shared by theRADIUS server and the networking gateway. The keyvalue is consistent with the one in the RADIUS server. IMPORTANTIf you enable the 802.1x or WPA feature, you must have a RADIUS server available.Using the Web Configuration Server50
Basic Setting 3.6.3.1 Wireless Clients List Clicking on the Wireless Clients List button that appears in the WirelessSetting window opens the Wireless Clients List window.Figure 29: Wireless Clients List The Wireless Clients List displays the following parameters for each wirelessclient:Table 24: Wireless Clients List ParametersParameter DescriptionConnected Time The connection time. MAC Address The MAC address of the wireless client.3.6.3.2 Advanced Wireless SettingClicking the Advanced Wireless Setting button that appears in theWireless Setting window opens the Advanced Wireless Setting window.NG System Manual51
Chapter 3 - Using the Web Configuration ServerFigure 30: Advanced Wireless SettingThe Advanced Wireless Setting window includes the following parameters:Table 25: Advanced Wireless Setting Parameters Parameter DescriptionBeacon Interval Specify the intervals (in milliseconds) between the packetssent by the access point to synchronize the wireless network(beacons).The range is 1~1000 millisecondsThe default is 100 milliseconds.RTS Threshold Specify the packet size above which a Request To Send willbe performed. Used to determine whether CSMA/CD or CSMA/CA will be used.The range is 256~2432 bytesThe default is 2432 bytes.Fragmentation Threshold Specify the packet size above which fragmentation will beperformed.The range is 256~2346 bytes, even numbers onlyThe default is 2346 bytes.Using the Web Configuration Server52
Basic Setting Parameter DescriptionDTIM Interval Delivery Traffic Indication Message (DTIM) is a countdowninforming clients of the next window for listening to broadcastand multicast messages.The range is: 1~65535 seconds.The default value is 3 seconds.Wireless Mode The wireless mode supported: 802.11b, 802.11g, or both.The default is both. TX Rates Select the wireless transfer rate from the dropdown list,based on the speed of wireless adapters on the WLAN.The default is auto rate. Preamble Type Defines the length of the Cyclic Redundancy Check (CRC)block for communication between the Access Point and roaming wireless adapters. A long transmit preamble mayprovide a more reliable connection or slightly longer range. A short transmit preamble provides better performance. Selectshort/long or automatic preamble to be assigned to each packet.The default is auto mode.Authentication Type Used for wireless authentication when associated with an AProuter.Open SystemShared KeyBothThe default is auto mode.SSID Broadcast Enable/Disable broadcasting the network's ID. The default is Enable.Antenna Transmit Power Select the antenna's transmission power from the dropdownlist.The default is 100% TX power (17 dBm). NG System Manual53
Chapter 3 - Using the Web Configuration Server3.6.3.3 MAC Address ControlMAC Address Control allows to assign different access rights for differentusers and to assign a fixed IP address to a specific MAC address. For further details, see section 3.6.2.2.3.6.4 Change PasswordThe Change Password window allows to change the system password. For security reasons, it is strongly recommended that you do so.To access change password:1Select Basic Setting > Change Password submenu on the menu list. TheChange Password window opens.Figure 31: Change Password2Type in the old password in the Old Password box.3Type in the new password in the New Password box.4Re-type the new password in the Reconfirm box. The password shouldbe identical to the one entered in the New Password field.5Click Save to save the new password(s).Follow this procedure for the Administrator Password level, for the UserPassword level, or for both password levels.NOTEThe Administrator Password is visible to the Administrator entry level only.Using the Web Configuration Server54
Security Setting 3.7 Security Setting Click on the Security Setting menu on the menu list to display thesubmenus and the Security Setting window.Figure 32: Security Setting Window3.7.1 MAC ControlMAC Address Control allows to assign different access rights for differentusers and to assign a fixed IP address to a specific MAC address. For further details, see section 3.6.2.2.3.7.2 Packet Filters (Administrator only) Packet Filter enables to control which packets are allowed to pass throughthe networking gateway. When selecting the Packet Filters submenu on themenu list, the Outbound Packet Filter window opens.NOTEThe Inbound Filter… button at the bottom of the window toggles between theOutbound and Inbound Packet Filter windows. The button's text will change from Inbound Filter… to Outbound Filter… accordingly.NG System Manual55
Chapter 3 - Using the Web Configuration ServerFigure 33: Packet Filter Initial WindowThe Outbound filter applies on all outbound packets. The Inbound filter applies only on packets that are destined to Virtual Servers or DMZ host.You can select one of the following filtering policies:Allow all to pass except those match the specified rulesDeny all to pass except those match the specified rulesUp to 8 rules can be specified for each direction, inbound and outbound.For each rule, you can define the following:Table 26: Advanced Wireless Setting Parameters Parameter DescriptionSource IP address You can define a single IP address (for example, 4.3.2.1) or a range of IP addresses (for example, 4.3.2.1-4.3.2.254).An empty field denotes all IP addresses.Source Ports address You can define a single port (for example, 80) or a range of ports (for example, 1000-1999).Add a prefix "T" or "U" to specify a TCP or UDP protocol. Forexample, T80, U53, U2000-2999. No prefix indicates both TCP and UDP protocols.An empty field denotes all port addresses. Using the Web Configuration Server56
Security Setting Parameter DescriptionDestination IP address You can define a single IP address (for example, 4.3.2.1) or a range of IP addresses (for example, 4.3.2.1-4.3.2.254).An empty field denotes all IP addresses.Destination port address You can define a single port (for example, 80) or a range of ports (for example, 1000-1999).Add prefix "T" or "U" to specify a TCP or UDP protocol. Forexample, T80, U53, U2000-2999. No prefix indicates both TCP and UDP protocols.An empty field denotes all port addresses. Enable Check to enable the rule. Each rule can be enabled ordisabled individually.Use Rule# Packet Filter can work with Scheduling Rules. For details, please refer to Schedule Rule on page 80.The Schedule Rule option facilitates the process of selecting a schedulingrule for each Filter ID. Select a specific Schedule Rule from the ScheduleRule Combo box. Select the Filter ID to which the schedule rule will applyfrom the ID Combo box and click Copy to to copy the Schedule Rulenumber to the selected Filter ID.Click Save to save your Inbound/Outbound Packet Filter settings.The following paragraphs provide examples for using theInbound/Outbound Packet Filter option.3.7.2.1 Inbound FilterTo enable Inbound Packet Filter click on the Inbound Filter button andcheck the Enable box in the Inbound Packet Filter window.In the following examples, the SMTP Server (port 25), POP Server (port 110),Web Server (port 80), FTP Server (port 21), and News Server (port 119) aredefined in the Virtual Server or DMZ Host.NG System Manual57
Chapter 3 - Using the Web Configuration ServerExample 1:Figure 34: Inbound Packet Filter – Example 1 In this example, IPs (1.2.3.100-1.2.3.149) are allowed to send mail (port 25), receive mail (port 110), and browse the Internet (port 80).IPs (1.2.3.10-1.2.3.20) are allowed to perform all operations.All other IPs are all blocked from performing any operation.Example 2:Figure 35: Inbound Packet Filter - Example 2 Using the Web Configuration Server58
Security Setting In this example, IPs (1.2.3.100-1.2.3.119) are allowed to do everythingexcept read net news (port 119) and transfer files via FTP (port 21).All other IPs are all allowed to perform all operations.3.7.2.2 Outbound FilterTo enable Outbound Packet Filter, click on the Outbound Filter button andcheck the Enable box in the Outbound Packet Filter window.Example 1:Figure 36: Outbound Packet Filter - Example 1 In this example, IP (192.168.123.149) is restricted from sending mail (port 25), receiving mail (port 110), and browsing the Internet (port 80). It is allowed to perform all other operations.IP (192.168.123.20) is blocked from performing any operation.All other IPs are allowed to perform all operations.NG System Manual59
Chapter 3 - Using the Web Configuration ServerExample 2:Figure 37: Outbound Packet Filter - Example 2 In this example, IPs (192.168.123.100) and (192.168.123.119) can only read net news (port 119) and send mail (port 25). They are blocked from performing any other operation.All other IPs are blocked from performing any operation.3.7.3 URL Blocking (Administrator only) When enabled, this feature blocks LAN computers from connecting to pre-defined Web sites.Figure 38: URL BlockingUsing the Web Configuration Server60
Security Setting The URL Blocking window includes the following parameters:Table 27: URL Blocking ParametersParameter DescriptionURL Blocking Enable/Disable - Check to enable the URL Blocking feature.URL If any part of the Web site's URL matches the pre-definedword specified in this field, the connection will be blocked.For example, you can use a pre-defined word "sex" to blockall Web sites whose URLs contain the word "sex".Enable Check to enable the rule. Each rule can be enabled ordisabled individually.Use Rule# URL Blocking can work with Scheduling Rules. For details,please refer to Schedule Rule on page 80.The Schedule Rule option facilitates the process of selecting a schedulingrule for each Filter ID. Select a specific Schedule Rule from the ScheduleRule Combo box. Select the Filter ID to which the schedule rule will applyfrom the ID Combo box and click Copy to to copy the Schedule Rulenumber to the selected Filter ID.Click Save to save your settings.The following section provides an example for using the URL Blocking option.3.7.3.1 URL Blocking - Example Figure 39: URL Blocking Example NG System Manual61
Chapter 3 - Using the Web Configuration ServerIn this example:1All URLs which include the string "msn" will be blocked, and the actionwill be recorded in the log file.2All URLs which include the string "sina" will be blocked, and the actionwill be recorded in the log file.3All URLs which include the string "cnnsi" will be blocked, and the action will be recorded in the log file.4All URLs which include the string "espn" will be blocked, and the actionwill be recorded in the log file.If the Enable box is not checked for a specific rule, the rule will not beapplied and the matching URLs will not be blocked.3.7.4 Domain Filter (Administrator only) When enabled, the Domain Filter feature blocks LAN computers fromconnecting to pre-defined Web sites.NOTEWhile URL Blocking uses keywords to block all Web sites whose URL includes the pre-specified keyword, Domain Filter blocks a single or multiple domains by specifying the suffix (such as xxx.com, .org, etc.). Figure 40: Domain Filter Up to 9 Domain Suffixes can be defined, and for each rule you can specifythe desired action to be taken when a user attempts to access that domain. For each rule you can define the following:Using the Web Configuration Server62
Security Setting Table 28: Domain Filter Parameters Parameter DescriptionDomain Filter Check to enable the Domain Filter feature to prevent users from accessing specific URLs.Log DNS Query Check to enable logging users' attempts to enter the specifiedURLs.Privilege IP AddressesRangeSets a group of hosts and allows them to access the networkwithout restriction.The range is: From: 1~254, To: 1~254Domain Suffix A suffix of URL to be restricted.For example, ".com", "xxx.com".Action You can specify the type of action you want performed whensomeone attempts to access the specific URL that meets the domain-suffix:Drop – Check to block access.Log – Check to log the access attempt. Enable Check to enable the rule. Each rule can be enabled/disabledindividually.In the example above (Figure 40):1The URL "www.msn.com" will be blocked, and the action will berecorded in the log file.2The URL "www.sina.com" will not be blocked, but any attempt to enterthe Web site will be recorded in the log file.3The URL "www.google.com" will be blocked, but the action will not berecorded in the log file.4IP address X.X.X.1~ X.X.X.20 can access network without restriction.Click Save to save your settings.NG System Manual63
Chapter 3 - Using the Web Configuration Server3.7.5 Firewall (Administrator only) Firewall rules deny/allow traffic from passing through the device.Figure 41: FirewallUp to 8 rules can be specified for each direction of traffic: inbound and outbound. For each rule, you can define the following:Table 29: Firewall ParametersParameter DescriptionSource IP address From LAN or WANDestination IP address From LAN or WANDestination Protocol TCP, UDP or ICMP Destination Destination port numberAction Allow/DenyThe default is AllowEnable Check to enable the rule. Each rule can be enabled/disabledindividuallyClick Save to save your settings.Using the Web Configuration Server64
Security Setting 3.7.6 Miscellaneous Items (Administrator only) Figure 42: Miscellaneous Items From the Miscellaneous Items window you can set the following parameters:Table 30: Miscellaneous Items ParametersParameter DescriptionRemote AdministratorHost/PortEnables the user to perform administration tasks from a remote host. When enabled, only the specified IP address can perform remote administration. If the specified IP addressis 0.0.0.0, any host can connect to this device in order to perform administration tasks. You can use subnet mask bits "/nn" notation to specify a group of trusted IP addresses.For example, "10.1.2.0/24".NOTE - When Remote Administration is enabled, the webserver port will automatically change to 88. You can changethe web server port to another port. IMPORTANT – When managing the NG via bwaNMS (usingthe cut through option), the Remote Administrator Port must be set to 8080.Administrator Time-out The time of no activity to logout automatically. Set it to zero to disable automatic time-out TFTP Access Client/Port When enabled, the specified IP address can access the device through the TFTP client utility.Discard PING from WAN When enabled, any ping packet from WAN will be discarded.NG System Manual65
Chapter 3 - Using the Web Configuration ServerParameter DescriptionsideSPI Mode When enabled, the router records the information, such as IP address, port address, ACK, SEQ number and so on, of thepackets that pass through the WAN, and the NetworkingGateway checks every incoming packet to detect whether it is valid.DoS Attack Detection When enabled, the router detects and logs the Denial of Service (DoS) attack that comes from the Internet. Currently,the Networking Gateway can detect the following DoS attack:SYN Attack, WinNuke, Port Scan, Ping of Death, and LandAttack etc. Using the Web Configuration Server66
NAT Setting (Administrator only)3.8 NAT Setting (Administrator only) The NAT Setting page provides access to configuring the virtual server,special AP, DMZ host and VPN pass through. Figure 43: NAT Setting 3.8.1 Virtual ServerVirtual Server enables WWW, FTP and other services on your LAN to beaccessible to Internet users.Figure 44: Virtual ServerNG System Manual67
Chapter 3 - Using the Web Configuration ServerSpecify the following parameters for each ID:Table 31: Virtual Server Parameters Parameter DescriptionProtocol Select from TCP, UDP, * (all).The default setting is *. Service Ports Enter a port number, or a range of ports. Server IP Enter the server IP on the LAN interface.The range is 1~254.Enable Check to enable the rule. Each rule can be enabled/disabledindividually.Use Rule# Virtual Server can work with Scheduling Rules. For details,please refer to Schedule Rule on page 80.In addition, the Virtual Server page allows to easily select services from apre-defined list, and to assign to them a pre-defined rule.Well known services – Select a service from the list of pre-definedservices.The Schedule Rule option facilitates the process of selecting ascheduling rule for each Virtual Server ID. Select a specific ScheduleRule from the Schedule Rule Combo box. Select the Virtual Server ID to which the schedule rule will apply from the ID Combo box and click Copy to to copy the Schedule Rule number to the selected VirtualServer ID. 3.8.2 Special APSome applications, such as Internet games, Video conferencing, Internettelephony etc., require multiple connections. Because of the firewallfunction, these applications cannot work with a pure NAT router. TheSpecial Applications window makes some of these applications work withNAT router.NOTEOnly one PC at a time can use each Special Application.Using the Web Configuration Server68
NAT Setting (Administrator only)Figure 45: Special ApplicationsThe Special Applications window includes the following parameters:Table 32: Special Applications ParametersParameter DescriptionTrigger The outbound destination port number issued by theapplication.Incoming Ports When the trigger packet is detected using the destinationport, the inbound packets to the specified port numbers are allowed to pass through the networking gateway.Enable Check to enable the rule. Each rule can be enabled/disabledindividually.Some predefined settings are provided. Select an application from the pre-defined list, select the ID number (1-10) and click Copy to, to add thepredefined setting to your list.NOTEIf Special Applications fails to make an application work, try DMZ host instead.3.8.3 DMZ HostDemilitarized Zone (DMZ) Host is a host without the firewall protection. Itallows a computer to be exposed to unrestricted 2-way communication for NG System Manual69
Chapter 3 - Using the Web Configuration ServerInternet games, Video conferencing, Internet telephony (H.323 or SIP), andother special applications.CAUTIONThis feature exposes your computer and may cause security issues. Make sure your PC is updated with the last security updates.Figure 46: DMZ HostCheck the Enable box to enable this feature. One IP address should be seton the subnet of LAN.3.8.4 VPN Pass Through Figure 47: VPN Pass ThroughUsing the Web Configuration Server70
NAT Setting (Administrator only)The VPN Pass Through window includes the following parameters:Table 33: VPN Pass Through ParametersParameter DescriptionVPN PPTP Pass-Through Check to enable PPTP connection to pass through the device. The device can handle up to 8 concurrent sessions.VPN IPSec Pass-Through Check to enable IPSec connection to pass through the device. The device can handle up to 16 concurrent sessions.NG System Manual71
Chapter 3 - Using the Web Configuration Server3.9 Advanced Settings (Administrator only)The Advanced Settings menu provides access to configuring additionalfeatures, such as System Time, Log, Dynamic DNS, SNMP, Routing,Scheduling Rules and enabling Universal Plug and Play protocol.Figure 48: Advanced Setting 3.9.1 System TimeThe System Time window enables to set the device time.Figure 49: System Time Using the Web Configuration Server72
Advanced Settings (Administrator only)From the System Time window, you can select one of the following ways toset the date and time of the device:Table 34: System Time Parameters Parameter DescriptionGet Date and Time by NTPProtocolSelect if you want to set the device's internal clock using the Network Time Protocol (NTP) from a specific server locatedon the internet.Time Server - Select an NTP time server to consult UTCtime.Time Zone - Select a time zone where this device is located.Sync Now! - Synchronize system time with network time server (alternatively, synchronization will be performedautomatically from every 10 hours).Set Date and Time usingPC's Date and TimeSelect if you want the device's internal clock to synchronizewith the PC's clock. Set Date and Time manually Select if you want to manually set the device's internal clock.You need to specify:Date: Year, Month, DayTime: Hours (0-23), Minutes (0-59), Seconds (0-59). The clock is set upon clicking Save.NOTEThe device time is displayed at the bottom of the Status window.In addition, you can specify daylight saving time as follows:Daylight Saving - Enable/disable Daylight Saving and set start and endtime of daylight saving time range.3.9.2 System LogSystem Log enables to set parameters for exporting system logs to a specified destination. Two exporting methods are supported: syslog (UDP)and SMTP (TCP).NG System Manual73
Chapter 3 - Using the Web Configuration ServerFigure 50: System Log The System Log window includes the following parameters:Table 35: System Log ParametersParameter DescriptionIP Address for Syslog Server Enter the IP address of the syslog server. It is valid only on your subnet LAN. Check to Enable this function. E-mail Alert Enable Check if you want to enable Email alert (send syslog viaemail).SMTP Server IP and Port - Enter the SMTP server IP and port, which are concatenate with ':'.For example,"mail.your_url.com" or "192.168.1.100:26". If you do notspecify port number, the default value is 25.E-mail addresses - The listed recipients will receive these logs. You can assign more than 1 recipient, using a semi-colon (;) or a comma (,) to separate the addresses.E-mail Subject - The subject of email alert. This setting is optional.Username and Password - To fill some SMTP server's authentication requirement, you may need to enter the Username and Password provided by your ISP.Log Type Select the activities to be logged.Using the Web Configuration Server74
Advanced Settings (Administrator only)NOTEThe changes made in the System Log page become effective upon clicking Save.Rebooting the system is not required.To view the system log:Click on the View Log… button at the bottom of the screen. The System Logopens (see View Log on page 84, Figure 62)3.9.3 Dynamic DNSTo host your server on a changing IP address, you need to use a DynamicDomain Name Service (DDNS).To reach your host, one needs to know its name. Dynamic DNS will map the name of your host to your current IP address, which changes each timeyou connect to your Internet service provider.Figure 51: Dynamic DNS Before enabling Dynamic DNS, you need to register an account on of theDynamic DNS servers listed here under Provider: DnyDNS.org(Dynamic),DnyDNS.org(Custom), TZO.com and dhs.org. Upon registration, you will receive your account details.NG System Manual75
Chapter 3 - Using the Web Configuration ServerThe Dynamic DNS window includes the following parameters:Table 36: Dynamic DNS ParametersParameter DescriptionDDNS Click Enable or Disable to enable/disable Dynamic DNS.Provider Select from the list of Dynamic DNS servers on which youhave an account.Host Name Enter to register a domain name to the DDNS provider. Thefull domain name is concatenated with the specified Host Name and a suffix, specified by the DDNS provider.Username/E-mail Enter your Username or E-mail address according to the DDNS provider you selected.Password/Key Enter your password or key according to the DDNS provideryou selected.After Dynamic DNS setting is configured, click Save.3.9.4 SNMP SettingThe Simple Network Management Protocol (SNMP) provides the user withthe capability to remotely manage a computer network by polling and setting terminal values and monitoring network events.Figure 52: SNMP SettingUsing the Web Configuration Server76
Advanced Settings (Administrator only)The SNMP Setting window includes the following parameters:Table 37: SNMP Parameters Parameter DescriptionEnable SNMP You must check either Local or Remote or both to enable theSNMP function. Local - The device will respond to requests from LAN.Remote – The device will respond to requests from WAN.Get Community Set the password for GetRequest access rights to yourdevice.Set Community Setting the password for SetRequest access rights to yourdevice.IP 1,IP 2,IP 3,IP 4 Enter your IP addresses for allowed managers. SNMP Trapmessages will be sent to this IP address as well. If no IP is defined, the unit cannot be managed by any PC, from either LAN or WAN.SNMP Version Select the proper SNMP Version supported by your SNMP Management software.In the above figure:The device will respond to requests from both LAN and WAN. The device will respond to SNMP clients whose get community is set as "public" and coming from IP 192.168.123.33.The device will respond to SNMP clients whose set community is set as "private" and coming from IP 192.168.123.33.This device will send SNMP Trap messages to 192.168.123.33 (Using SNMP Version V2c). 3.9.5 Routing TableRouting allows to determine which physical interface address to use foroutgoing IP data grams. If you have more than one gateway and subnet,you will need to enable Routing Table to allow packets to find the properrouting path and allow different subnets to communicate with each other.NG System Manual77
Chapter 3 - Using the Web Configuration ServerFigure 53: Routing TableRouting Table settings are used to setup the functions of static anddynamic routing. The Routing Table window includes the followingparameters:Table 38: Routing Table ParametersParameter DescriptionDynamic Routing Routing Information Protocol (RIP) will exchange informationon destinations for computing routes throughout the network.Select RIPv2 only if you have a different subnet on yournetwork. Otherwise, select RIPv1 if you need this protocol.Static Routing For static routing, you can specify up to 8 routing rules. Youcan enter the destination IP address, subnet mask, and gateway, hop for each routing rule, and enable/disable the individual rule.Default Route Sets the default route interface as WAN or LAN. For LAN, one IP for routing must be set.Using the Web Configuration Server78
Advanced Settings (Administrator only)Example:Configuration on NAT RouterDestination Subnet Mask Gateway Hop Enabled192.168.1.0 255.255.255.0 192.168.123.216 1 ˇ192.168.0.0 255.255.255.0 192.168.123.103 1 ˇIf, for example, Client3 wanted to send an IP datagram to 192.168.0.2(Client2), he would use the above table to determine that he had to go via192.168.123.103 (Gateway2).And if he sends Packets to 192.168.1.11 he will go via 192.168.123.216(Gateway1).Each rule can be enabled or disabled individually.After the Routing Table setting is configured, click Save.NG System Manual79
Chapter 3 - Using the Web Configuration Server3.9.6 Schedule RuleSchedule Rule allows to set the schedule time for which a service will beturned on or off.Figure 54: Schedule RuleThe Schedule Rule window includes the following parameters:Table 39: Routing Table ParametersParameter DescriptionSchedule Click the checkbox to Enable the Scheduler.Rule # The rule number. Rules are numbered sequentially from the first rule set to the last. When a rule is deleted, the rules areautomatically renumbered for all unit configurations.Rule Name The name of the rule.Action Edit and Delete - Every rule can be edited or deletedindividually.To add a new rule:1Click Add New Rule to add a rule to the list. The Schedule Rule Settingwindow opens.Using the Web Configuration Server80
Advanced Settings (Administrator only)Figure 55: Schedule rule Setting You can enter a rule name and set which day and what time to schedulefrom “Start Time” to “End Time”. In the following example, a rule named"FTP Time" is scheduled to operate every day between 14:10 and 16:20. Figure 56: Schedule Rule Setting – Example Step 1 2After configuring Rule 1, click on Save to save the rule and return to theSchedule Rule window. The new rule is now displayed on the list.NG System Manual81
Chapter 3 - Using the Web Configuration ServerFigure 57: Schedule Rule Setting – Example Step 2 When rules are set, you can:Edit – Click to edit the specific rule.Delete – Click to delete the specific rule. When the rule is deleted, allsubsequent rules are automatically renumbered.Schedule Rule can be applied to Virtual server and Packet Filter, forexample:Example1: Virtual Server – Apply Rule#1 using the scheduled rule #1 (ftp time: every day 14:10 to 16:20).Figure 58: Virtual Server - Schedule Rule#1Using the Web Configuration Server82
Advanced Settings (Administrator only)Example2: Packet Filter – Apply Rule#1 using scheduled rule #1 (ftp time:every day 14:10 to 16:20).Figure 59: Packet Filter - Schedule Rule#1 3.9.7 UPnP SettingUniversal Plug and Play (UPnP) is a protocol for connecting voice/videoapplications through the Networking Gateway when in NAT mode.Figure 60: UPnP SettingUPnP Setting - Enable/Disable – enables/disables the feature. NAT should be enabled.NG System Manual83
Chapter 3 - Using the Web Configuration Server3.10 ToolboxThe Toolbox menu provides access to viewing the system log, to firmwareupgrade, backup setting, resetting the system to the factory default values, to rebooting the system, implementing DRAP protocol, running Wake-on-LAN and performing Ping tests.Figure 61: Toolbox 3.10.1 View LogClicking on View Log opens the System Log file. The System Log file can also be accessed from the System Log window in the Advanced Settingmenu.The log file logs all the activities performed since the last reset.Using the Web Configuration Server84
ToolboxFigure 62: View System LogWhile in Log View, you can: Click Back to return to the System Log window.Click Refresh to manually update the Log.Click Download to download the Log file (system.log) and save it locally, on your PC.Click Clear to clear the log file of its content.3.10.2 Firmware Upgrade (Administrator only) The Firmware Upgrade window displays the currently installed firmwareversion.NG System Manual85
Chapter 3 - Using the Web Configuration ServerFigure 63: Firmware UpgradeTo upgrade the firmware:1Click on Browse to browse to the upgrade file's location. The upgradefile is a *.BIN file.2Click Upgrade to begin the upgrading process, or Cancel to terminatingit.When the upgrade process is complete, the unit will automatically restart.CAUTIONDo not turn off power to the unit during the upgrading process.3.10.3 Backup SettingTo backup your settings:1Click Backup Setting in the menu list. This automatically opens the FileDownload window.2Select the Save this file to disk option and click OK. Follow theinstructions on screen to save the file. The file is saved as a .bin file.Using the Web Configuration Server86
ToolboxFigure 64: Backup To restore your settings:Select Firmware Upgrade from the Menu list, browse to the .bin file you saved, and click Upgrade (see Firmware Upgrade on page 85).You can also upload the configuration file to the unit using TFTP client.3.10.4 Reset to DefaultTo reset the unit to factory defaults:1Click Reset to default in the menu list. The following message appears. Figure 65: Reset to Default2Click OK to reset the settings to default, or Cancel to keep the currentsettings.3.10.5 Reboot To reboot the system:1Click Reboot in the menu list. The following message appears.NG System Manual87
Chapter 3 - Using the Web Configuration ServerFigure 66: Reboot 2Click OK to reboot, or Cancel to continue working.NOTEMost of the configurations performed, require to reboot the system for them to take effect. 3.10.6 DRAP Dynamic Resource Allocation Protocol (DRAP) is used for registration to theBase Station to which the SU is connected (by performing "Discovery").Figure 67: DRAP ProtocolThe DRAP Protocol window includes the following parameters:Table 40: DRAP Protocol Parameters Parameter DescriptionDRAP Select Enable/Disable to enable/disable this feature. Whenenabled, a DRAP Server must be available.The default is Disable.DRAP Server IP Address The IP address of the DRAP Server. Leave empty for Auto Using the Web Configuration Server88
ToolboxParameter DescriptionDiscovery.The default is 0.0.0.0. Server Port The UDP port used for the DRAP server. For WMAX use port8171The default is 0.Discovery Time The Discovery Time is the timeout to be used when the AutoDiscovery process is used for finding a DRAP server. TheAuto Discovery process is based on sending emptybroadcast, and the Discovery Time is the time that the unit will wait for a response before sending a new request.The default is 0. Acknowledge Time The Acknowledge Time is the timeout to be used betweenmessages. If no confirmation is received within this time, a new message should be sent. The default is 0. 3.10.7 Miscellaneous ItemsFrom the Miscellaneous Items page, you can set the MAC Address for Wake-on-LAN, and the Domain name or IP address for performing ping tests to the device.Figure 68: Toolbox - Miscellaneous Items NG System Manual89
Chapter 3 - Using the Web Configuration ServerThe Miscellaneous Items window includes the following parameters:Table 41: Miscellaneous Items ParametersParameter DescriptionMAC Address for Wake-on-LANWake-on-LAN enables to remotely power up a networkeddevice. To use this feature, the target device must be Wake-on-LAN enabled and you need to know the device's MAC address, e.g., 00-11-22-33-44-55. Click on Wake up to have the gateway immediately send the wake-up frame to the target device.DHCP Client List – Select a client from the dropdown listfor which you want to perform Wake-on-LAN.Copy – Click to copy the DHCP client's MAC Address to the Wake-on-LAN.Domain Name or IP address for Ping TestAllows to configure an IP, and ping the device. You can pinga specific IP to test that it is up and running. The IP must allow receiving and returning ICMP packets Click on Save to save your settings.Using the Web Configuration Server90
Web Configuration Server’s Parameters Summary3.11 Web Configuration Server’s Parameters Summary Table 42: Web Configuration Server’s Parameters SummaryParameter Range/Options DefaultStatusPrinter (USB0) StatusNot ReadyOff-line or no paper PrintingReadyDevice error Primary SetupWAN Type Static IP Address Dynamic IP AddressDynamic IP Address with RRSM PPP over Ethernet PPTPDynamic IP AddressPrimary Setup - Static IP Address WAN IP Address x.x.x.x 0.0.0.0WAN Subnet Maskx.x.x.x 255.255.255.0WAN Gateway x.x.x.x 0.0.0.0Primary DNS x.x.x.x 0.0.0.0Secondary DNS x.x.x.x 0.0.0.0NAT Disable Check/Uncheck UncheckPrimary Setup - Dynamic IP Address Host Name A string of maximum 39 characters WAN's MAC AddressNG System Manual91
Chapter 3 - Using the Web Configuration ServerParameter Range/Options DefaultRenew IP Forever EnableCheck/Uncheck CheckNAT Disable Check/Uncheck UncheckPrimary Setup - Dynamic IP Address with Road Runner Session ManagementAccount A string of maximum 53 charactersPassword A string of maximum 53 charactersLogin Server A string of maximum 31 charactersRenew IP Forever Enable Check/Uncheck CheckNAT Disable Check/Uncheck UncheckPrimary Setup – PPP over Ethernet PPPoE Account A string of maximum 53 characters PPPoE Password A string of maximum 53 characters Primary DNS x.x.x.x 0.0.0.0Secondary DNS x.x.x.x 0.0.0.0Maximum Idle Time0~65535 300 secondsConnectionControlConnect-on-demandAuto Reconnect(always on) ManuallyAuto Reconnect(always on) MTU 0~9999 1492 bytesPrimary Setup - PPTPIP Mode Dynamic IP AddressStatic IP Address Dynamic IP AddressMy IP Address x.x.x.x 0.0.0.0My Subnet Mask x.x.x.x 0.0.0.0WAN Gateway IP x.x.x.x 0.0.0.0Server IP Address/NameUsing the Web Configuration Server92
Web Configuration Server’s Parameters SummaryParameter Range/Options DefaultPPTP Account A string of maximum 53 charactersPPTP Password A string of maximum 53 charactersConnection ID (Optional)Maximum Idle Time0~65535 300 secondsConnectionControlConnect-on-demandAuto Reconnect(always on) ManuallyAuto Reconnect(always on) LAN SetupLAN IP Address x.x.x.x 192.168.254.253LAN Subnet Mask x.x.x.x 255.255.255.0DHCP Server DisableEnableEnableDHCP Proxy DisableEnableProxy IP x.x.x.xDisable0.0.0.0LAN Setup – DHCP EnabledRange of IP addresses PoolStart: 1~254End: 1~254192.168.254.100192.168.254.199Domain suffix A string of maximum 31 characters Primary DNS x.x.x.x 0.0.0.0Secondary DNS x.x.x.x 0.0.0.0Primary WINS x.x.x.x 0.0.0.0Secondary WINS x.x.x.x 0.0.0.0Lease Time 0~99999 0 secondsMAC Address Control/Fixed MappingMAC Address Control EnableCheck/Uncheck UncheckNG System Manual93
Chapter 3 - Using the Web Configuration ServerParameter Range/Options DefaultConnectionControlCheck/UncheckAllow/DenyUncheckDenyConnectionControlCheck/UncheckAllow/DenyUncheckDenyMAC Address Rules 1-4 MAC Address A string of maximum 32 charactersIP Address 1~254C Check/Uncheck UncheckA Check/Uncheck UncheckWireless SettingWireless Enable Check/Uncheck CheckNetwork ID(SSID) A string of maximum 32 characters defaultChannel 1~13 1Security  None WEP 802.1X WPA-PSK WPANoneAdvanced Wireless Setting Beacon Interval 1~1000 msec 100 msec RTS Threshold 256~2432 bytes 2432 bytesFragmentationThreshold256~2346 bytes - even numbers only 2346 bytesDTIM Interval 1~65535 seconds 3 secondsWireless Mode 802.11b only802.11g onlymixedMixedTX Rates Dropdown List AutoUsing the Web Configuration Server94
Web Configuration Server’s Parameters SummaryParameter Range/Options DefaultPreamble Type Short PreambleLong PreambleAutoAutoAuthenticationTypeOpen SystemShared KeyBothBothSSID broadcast EnableDisableEnableAntenna TransmitPower100% 17dBM50% 15dBM25% 12dBM12.5% 10dBM100% 17dBMChange PasswordAdministratorPasswordA string of maximum 9 characters privateUser Password A string of maximum 9 characters publicOutbound Packet FilterOutbound FilterEnableCheck/Uncheck UncheckOutbound FilterModeAllow all…exceptDeny all…exceptAllow all…exceptOutbound Rules1-8Source IP: x.x.x.xSource Port: 065535Destination IP: x.x.x.xDestination Port: 0~65535Enable Check/UncheckUse Rule#: 1~100NG System Manual95
Chapter 3 - Using the Web Configuration ServerParameter Range/Options DefaultInBound Packet FilterInbound FilterEnableCheck/Uncheck UncheckInbound FilterModeAllow all…exceptDeny all…exceptAllow all…exceptInbound Rules 1-8 Source IP: x.x.x.xSource Port: 0~65535Destination IP: x.x.x.xDestination Port: 0~65535Enable Check/UncheckUse Rule#: 1~100URL Blocking URL Blocking EnableCheck/Uncheck UncheckURL Rules1-10URL: A string of maximum 50 charactersEnable Check/Uncheck UncheckUse Rule#: 1-10 0Domain FilterDomain Filter EnableCheck/UncheckLog DNS QueryEnableCheck/UncheckPrivilege IP Addresses RangeFrom:1~254To: 1~254Domain Filter Rules 1-10 Domain Suffix 1-9 Drop Check/UncheckLog Check/UncheckUncheckUncheckUsing the Web Configuration Server96
Web Configuration Server’s Parameters SummaryParameter Range/Options DefaultEnable Check/Uncheck UncheckFirewallFirewall Rules 1-8 Source Interface AllLANWANAllSource IP x.x.x.xDestination Interface AllLANWANAllDestination IP x.x.x.xProtocol AllTCPUDPICMPAllDestination Port 0~65535Action AllowDenyAllowEnable Check/Uncheck UncheckMiscellaneous Items RemoteAdministratorHostx.x.x.xor x.x.x.x/y0.0.0.0RemoteAdministrator Port 0~65535 88Enable RemoteAdministratorCheck/Uncheck CheckAdministratorTime-out0~9999 sec (0=never) 120TFTP Access Clientx.x.x.x 0.0.0.0NG System Manual97
Chapter 3 - Using the Web Configuration ServerParameter Range/Options DefaultTFTP Access Port 0~65535 69Enable TFTPAccessCheck/Uncheck UncheckDiscard PING from WAN side EnableCheck/Uncheck CheckSPI mode Enable Check/Uncheck UncheckDoS Attack Detection EnableCheck/Uncheck UncheckVirtual ServerVirtual ServerRules 1-20 Protocol AllTCPUDPAllService Ports 0~65535Server IP 1~254Enable Check/Uncheck UncheckUse Rule# 1~10 0Special ApplicationsRules 1-10 Trigger Port 0~65535Incoming Ports A string of max 119 charactersEnable Check/Uncheck UncheckDMZ Host IP Address of DMZ Host 1~254Enable: Check/Uncheck UncheckVPN Pass throughVPN PPTP Pass-Through EnableCheck/Uncheck CheckUsing the Web Configuration Server98
Web Configuration Server’s Parameters SummaryParameter Range/Options DefaultVPN IPSec Pass-Through EnableCheck/Uncheck CheckSystem TimeSystem TimeSourceGet Date and Time by NTP Protocol Set Date and Time using PC's Date and TimeSet Date and Time ManuallySet Date and Time ManuallyTime Server time.nist.govtime-nw.nist.govtime.windows.comutcnist.colorado.edutime.nist.govTime Zone From dropdown list GMT-08:00Date Year: 2002~2020Month: Jan~DecDay: 1~312004Aug1Time Hour: 0~23Minute: 0~59Second: 0~59000Daylight Saving EnableDisableDisableDaylight SavingStartMonth: Jan~DecDay: 1~31Hour: 0~23Jan10Daylight SavingEndMonth: Jan~DecDay: 1~31Hour: 0~23Jan10System Log IP Address of Syslog Server1~254NG System Manual99
Chapter 3 - Using the Web Configuration ServerParameter Range/Options DefaultEnable IP AddressCheck/Uncheck UncheckE-mail Alert EnableCheck/Uncheck UncheckSMTP Server IP/Portx.x.x.xE-mail addresses A string of maximum 127 charactersE-mail Subject A string of maximum 63 charactersUser name A string of maximum 25 charactersPassword A string of maximum 25 charactersLog Type System Activity: Check/Uncheck Debug Information: Check/UncheckAttacks: Check/Uncheck Dropped Packets: Check/UncheckNotice: Check/Uncheck UncheckUncheckUncheckUncheckUncheckDynamic DNSDDNS DisableEnableDisableProvider DnyDNS.org(Dynamic)DnyDNS.org(Custom)TZO.comdhs.orgDnyDNS.org(Dynamic)Host Name A string of maximum 63 characters Username/E-mail A string of maximum 63 characters Password/Key A string of maximum 63 charactersSNMP Setting Enable SNMP Local: Check/UncheckRemote: Check/UncheckUncheckCheckUsing the Web Configuration Server100
Web Configuration Server’s Parameters SummaryParameter Range/Options DefaultGet Community A string of maximum 27 characters PublicSet Community A string of maximum 27 characters PrivateIP 1-4 x.x.x.xSNMP Version V1V2cV2cRouting TableDynamic Routing DisableRIPv1RIPv2DisableStatic Routing DisableEnableDisableDefault route WANLAN IPWANRouting Rules 1-8 DestinationSubnet Mask GatewayHopEnable Check/UncheckUncheckSchedule RuleSchedule Enable Check/Uncheck UncheckSchedule Rule SettingName of Rule 1-10A string of maximum 31 charactersSunday-Saturday,Every DayStart Time: hh:mmEnd Time: hh:mm UPnP SettingUPnP Check/Uncheck UncheckFirmware UpgradeNG System Manual101
Chapter 3 - Using the Web Configuration ServerParameter Range/Options DefaultBrowseDRAP Protocol DRAP DisableEnableDisableDRAP Server IPAddressx.x.x.x 0.0.0.0Server Port 0Discovery Time 0AcknowledgeTime0Miscellaneous Items MAC Address forWake-on-LANDHCP Client List From dropdown list Domain Name or IP address for Ping TestUsing the Web Configuration Server102
AAAppendix A - Print ServerThis Networking Gateway provides the function of network print server forMS Windows 2000/XP and Unix based platforms. The device comes with a USB port for connecting the printer. This Appendix will guide you throughconfiguring the Print Server.
Appendix A- Print Server A.1 Configuring on Windows 2000 and XP PlatformsWindows 2000 and XP have a built-in LPR client, that can be used for printing.Your Printer Driver must be installed in LPT1 or other ports before youproceed to the following procedure.1Open Printers and Faxes.2Select the printer. Right Click on it, a quick menu appears. SelectProperties from the menu.NG System Manual104
Web Configuration Server’s Parameters Summary3Select the Ports tab, Click “Add Port…”4Select “Standard TCP/IP Port”, and then click “New Port…” The TCP/IPPrinter Port Wizard appears. 5Click Next. The Add Port window is displayed.NG System Manual105
Appendix A- Print Server 6Enter the IP address of the Networking Gateway device:192.168.254.253 in the Printer Name or IP Address field. The Port Namefield is automatically filled in as you type. You can change it as required.7Click Next. The Additional Port Information Required window appears. NG System Manual106
Web Configuration Server’s Parameters Summary8Select Custom, and then click “Settings…” The Port Settings window isdisplayed.NG System Manual107
Appendix A- Print Server 9In the Protocol field, select “LPR”. Enter lp (lowercase letters) in the“Queue Name” field and check the “LPR Byte Counting Enabled” checkbox.10 Click OK to apply your settings. The Port Settings window closes and the Additional Port Information Required window reappears.11 Click Next. The following window is displayed.NG System Manual108
Web Configuration Server’s Parameters Summary12 Click Finish. The window closes.13 Close the Printer Ports window. The new printer port appears in thePorts tab.NG System Manual109
Appendix A- Print Server 14 Click Apply and then OK to close the window.NOTEPrint a test page to ensure that the printer is working properly.NG System Manual110
BBAppendix B - 802.1x Setting
Appendix B - 802.1x SettingTesting Environment (Use Windows 2000 Radius Server)Equipment DetailsPC1:Microsoft Windows XP Professional without Service Pack 1.D-Link DWL-650+ wireless LAN adapterDriver version: 3.0.5.0 (Driver date: 03.05.2003)PC2:Microsoft Windows XP Professional with Service Pack 1a. Z-Com XI-725 wireless LAN USB adapterDriver version: 1.7.29.0 (Driver date: 10.20.2001)Authentication Server: Windows 2000 RADIUS server with ServicePack 3 and HotFix Q313664.NOTEWindows 2000 RADIUS server only supports PEAP upgraded to service pack 3 and HotFix Q313664 (For additional information, seehttp://support.microsoft.com/default.aspx?scid=kb; en-us;313664)DUTConfiguration:¾Enable DHCP server.¾WAN setting: static IP address.¾LAN IP address: 192.168.123.254/24.NG System Manual112
Web Configuration Server’s Parameters Summary¾Set RADIUS server IP.¾Set RADIUS server shared key. ¾Configure WEP key and 802.1X setting.The following test uses the inbuilt 802.1X authentication method such as, EAP_TLS, PEAP_CHAPv2 (Windows XP with SP1 only), and PEAP_TLS(Windows XP with SP1 only) using the Smart Card or other Certificate of theWindows XP Professional.DUT and Windows 2000 Radius Server Setup Setup Windows 2000 RADIUS ServerChange authentication method to MD5_Challenge or using smartcard or other certificate on RADIUS server according to the testcondition. Setup DUT1Enable the 802.1X (check the “Enable checkbox“).2Enter the RADIUS server IP.3Enter the shared key. (The key shared by the RADIUS server and DUT).4Change 802.1X encryption key length to fit the variable testcondition.Setup Network adapter on PC1Select the IEEE802.1X as the authentication method.NG System Manual113
Appendix B - 802.1x SettingNOTEThe above figure shows a setting of Windows XP without service pack 1. If users upgrade to service pack 1, they will not see MD5-Challenge in the EAP type list, but they will receive a new Protected EAP (PEAP) option. 2Select MD5-Challenge or Smart Card or other Certificate as theEAP type 3If use smart card or the certificate is selected as the EAP type,select to use a certificate on this computer.NG System Manual114
Web Configuration Server’s Parameters Summary4Change EAP type to fit the variable test condition.Windows 2000 RADIUS server Authentication testing:DUT authenticate PC1 using certificate. (PC2 follows the same test procedures.)1Download and install the certificate on PC1. (Fig 4) 2PC1 choose the SSID of DUT as the Access Point.3Set authentication type of wireless client and RADIUS serverboth to EAP_TLS.4Disable the wireless connection and enable again.5The DUT will send the user's certificate to the RADIUS server,and then6send the message of authentication result to PC1. (Fig 5) 7Windows XP will prompt that the authentication process is success or fail and end the authentication procedure. (Fig 6)8Terminate the test steps when PC1 get dynamic IP and PINGremote host successfully.NG System Manual115
Appendix B - 802.1x SettingNG System Manual116
Web Configuration Server’s Parameters SummaryDUT authenticate PC2 using PEAP-TLS.1PC2 choose the SSID of DUT as the Access Point.2Set authentication type of wireless client and RADIUS serverboth to PEAP_TLS.3Disable the wireless connection and enable again.4The DUT will send the user's certificate to the RADIUS server,and then send the message of authentication result to PC2.5Windows XP will prompt that the authentication process is success or fail and end the authentication procedure.6Terminate the test steps when PC2 get dynamic IP and PINGremote host successfully.Support Type: The router supports the types of 802.1x Authentication:PEAP-CHAPv2 and PEAP-TLS.NOTEPC1 is on Windows XP platform without Service Pack 1. PC2 is on Windows XP platform with Service Pack 1a. PEAP is supported on Windows XP with Service Pack 1 only.Windows XP with Service Pack 1 allows 802.1x authentication only when dataencryption function is enable.NG System Manual117
GlossaryDHCP Dynamic Host Configuration Protocol. A protocol for dynamicallyassigning IP addresses from a pre-defined list to nodes on a network. Using DHCP to manage IP addresses simplifies clientconfiguration and efficiently utilizes IP addresses.DNS Domain Name System: The name resolution system that letsusers locate computers on the Internet (TCP/IP network) by domain name. The DNS server maintains a database of domainnames (host names) and their corresponding IP addresses.DRAP Dynamic Resource Allocation ProtocolIDU Indoor UnitIEEE Institute of Electrical and Electronics Engineers. IEEE(pronounced I-triple-E) is an organization composed of engineers,scientists, and students. The IEEE is best known for developingstandards for the computer and electronics industry. Inparticular, the IEEE 802 standards for local-area networks arewidely followed.IEEE 802.11b The standard applies to wireless LANs and provides data rate of 11 Mbps in the 2.4 GHz band.IEEE 802.11g The standard applies to wireless LANs and provides data rate of 54 Mbps in the 2.4 GHz band.IP Internet Protocol. The standard that defines how data is transmitted over the Internet. IP bundles data, including e-mail,faxes, voice calls and messages, and other types, into "packets",in order to transmit it over public and private networks.LAN Local area Network. A computer network limited to a small geographical area, such as a single building. The networktypically links PCs as well as shared resources such as printers.MAC Media Access Control. The lower of the two sub-layers of the datalink layer defined by the IEEE. The MAC sub-layer handlesaccess to shared media, such as whether token passing or contention will be used.
GlossaryMAC Address Standardized data link layer address that is required for everyport or device that connects to a LAN. Other devices in thenetwork use these addresses to locate specific ports in thenetwork and to create and update routing tables and datastructures. MAC addresses are 6bytes long and are controlled by the IEEE.NAT Network Address Translation: An IETF standard that allows an organization to present itself to the Internet with far fewer IP addresses than there are nodes on its internal network. The NATtechnology, which is typically implemented in a router, convertsprivate IP addresses (such as in the 192.168.0.0 range) of themachine on the internal private network to one or more public IPaddresses for the Internet. It changes the packet headers to thenew address and keeps track of each session. When packetscome back from the Internet, NAT performs the reverseconversion to the IP address of the client machine.ODU Outdoor unitPPPoE Point-to-Point Protocol over Ethernet. PPPoE relies on two widelyaccepted standards: PPP and Ethernet. PPPoE is a specificationfor connecting the users on an Ethernet to the Internet through acommon broadband medium, such as a single DSL line, wirelessdevice or cable modem. All the users over the Ethernet share acommon connection, so the Ethernet principles supportingmultiple users in a LAN combines with the principles of PPP,which apply to serial connections.SNMP Simple Network Management Protocol. A network managementprotocol that provides a means to monitor and control networkdevices, and to manage configurations, statistics collection,performance, and security. SNMP works by sending messages,called protocol data units (PDUs), to different parts of a network.SNMP-compliant devices, called agents, store data aboutthemselves in Management Information Bases (MIBs) and returnthis data to the SNMP requesters.SU Subscriber Unit TCP/IP Transmission Control Protocol/Internet Protocol. A set ofprotocols developed by the U.S. Department of Defense to allowcommunication between dissimilar networks and systems overlong distances. TCP/IP is the de facto standard for datatransmission over networks, including the Internet.NG System Manual120
GlossaryTFTP Trivial File Transfer Protocol. Simplified version of FTP that allows files to be transferred from one computer to another over a network, usually without the use of client authentication.UDP User Datagram Protocol. Connectionless transport layer protocolin the TCP/IP protocol stack. UDP is a simple protocol thatexchanges datagrams without acknowledgments or guaranteeddelivery, requiring that error processing and retransmission behandled by other protocols. UDP is defined in RFC 768.WAN Wide Area Network. A computer network that spans a relativelylarge geographical area. Wide area networks can be made up ofinterconnected smaller networks spread throughout a building, a state, or the entire globe. NG System Manual121

Navigation menu