CyberTAN Technology WR214C Wireless Broadband Router User Manual
CyberTAN Technology Inc. Wireless Broadband Router
User Manual
H
Hi
ig
gh
h-
-P
Pe
er
rf
fo
or
rm
ma
an
nc
ce
e
W
Wi
ir
re
el
le
es
ss
s
R
Ro
ou
ut
te
er
r
User’s Manual
2003/06/10
Broadband Security Router User Guide
- ii -
FCC Interference Statement
This device complies with Part 15 of FCC rule. Operation is subject to the following two conditions:
This device may not cause harmful interference.
This device must accept any interference received, including interference that may cause
undesired operation.
This High-Performance Wireless Router has been tested and found to comply with the limits for a Class
B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates, uses, and
can radiate radio frequency energy and, if not installed and used according to the instructions, may cause
harmful interference to radio communications. However, there is no guarantee that interference will not
occur in a particular installation.
If this equipment does cause harmful interference to radio or television reception, which is found by
turning the equipment off and on, the user is encouraged to try to correct the interference by one or more
of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment or device.
Connect the equipment to an outlet other than the receiver’s.
Consult a dealer or an experienced radio/TV technician for assistance.
CE Declaration of Conformity
This equipment complies with the specifications relating to electromagnetic compatibility, EN 55022/A1
Class B, and EN 50082-1. This meets the reasonable protection requirements set out in the European
Council Directive on the approximation of the laws of the member states relating to Electromagnetic
Compatibility Directive (89/336/EEC).
Manufacturer’s Disclaimer State
The information in this document is subject to change without notice and does not represent a
commitment on the part of vendor. No warranty or representation, either expressed or implied, is made
with respect to the quality, accuracy or fitness for any particular prupose of this document. The
manufacturer reserves the right to make change to the content of this document and/or the products
associated with it at any time without obligation to notify any person or organization. In no event will the
manufacturer be liable for direct, indirect, special, incidental or consequential damages arising out of the
use or inability to use this product or documentation, even if advised of the possibility of such damages.
This document contains materials protected by copyright. All rights are reserved. No part of this manual
may be reproduced or transmitted in any form, by any means or for any purpose without expressed
written consent of its authors. Product names appearing in this document are mentioned for identification
purchases only. All trademarks, product names or brand names appearing in this document are registered
property of their respective owners.
Broadband Security Router User Guide
- iii -
Table of Contents
Preface....................................................................................................................................... 1
Chapter 1: Introduction...........................................................................................................3
About The High-Performance Wireless Router......................................................... 3
Features ...................................................................................................................... 4
Package Contents ....................................................................................................... 5
Chapter 2: Installation............................................................................................................. 7
Front Panel ................................................................................................................. 7
Rear Panel & Connections ......................................................................................... 8
System Requirements................................................................................................. 8
Setting Up the TCP/IP Protocol ................................................................................. 9
Chapter 3: Internet Access....................................................................................................15
Prepare your network information ........................................................................... 15
Web-based User Interface........................................................................................15
Basic Configuration – Setup .................................................................................... 16
Wireless.................................................................................................................... 16
WAN Connection Type............................................................................................ 18
Chapter 4: Advanced Applications.......................................................................................23
DHCP Configuration................................................................................................ 23
Access Control ......................................................................................................... 24
Virtual Server Settings ............................................................................................. 27
Special Applications................................................................................................. 35
DMZ Host ................................................................................................................30
Dynamic Routing ..................................................................................................... 32
Static Routing........................................................................................................... 33
DDNS....................................................................................................................... 35
Chapter 5: Management........................................................................................................ 41
Device Administration Settings ............................................................................... 41
Status Monitor.......................................................................................................... 43
Log ...........................................................................................................................44
Backup & Restore .................................................................................................... 46
Upgrade Firmware.................................................................................................... 46
Diagnostic-Ping........................................................................................................ 47
Chapter 6: Macintosh Setup..................................................................................................49
Hardware Connections............................................................................................. 49
Computer Network Configuration ........................................................................... 49
High-Performance Wireless Router Configuration.................................................. 50
Adding High-Performance Wireless Router to Existing Network........................... 50
Broadband Security Router User Guide
- iv -
Chapter 7: Trouble Shooting ................................................................................................ 51
Hardware.................................................................................................................. 51
Client Side (Computers)........................................................................................... 52
Appendix A: Technical Specifications.................................................................................. 55
Appendix B: Glossary............................................................................................................57
Broadband Security Router User Guide
- 1 -
Preface
Congratulations on your purchase of this High-Performance Wireless Router. This
router is the perfect design product combining wireless and Ethernet network
technology together. Fully compatible with IEEE 802.11b wireless standard, this device
not only allows you to take advantage of mobility, but also to have fast Ethernet
connection with built-in four 10/100 auto-sensing switch Ethernet ports. Users on
wireless and Ethernet LAN can share files, printers, and other networking resource each
other at a blazing speed. Best of all, with NAT technology, all users can share single
account of Internet access by having this device connect to a DSL/Cable modem.
Integrated 802.11b wireless AP, it is quick and easy to deploy wireless LAN without
spending extra cost of a wireless access point. The wireless Router’s efficient antenna
offers a covered range up to 30 meters indoor (150 meters outdoor) and seamless
roaming throughout wireless LAN infrastructure. More over, the wireless operation
provides 64 bit key and 128 bit WEP data encryption for high-level security.
With built-in NAT, this device not only provides natural firewall, protecting your
network from access by outside users but also extends your LAN connection. Users on
the LAN can share a single account of Internet access by having this device connect to
a DSL/Cable modem. This Wireless Router allows up to 253 users on the Ethernet LAN
simultaneously but makes IP configuration simple and easy. Configured as a DHCP
server, the High-Performance Wireless Router assigns an IP Address to every connected
PC on Ethernet LAN automatically. Also, DHCP client helps WAN port obtain IP
address dynamically assigned by ISP.
With a web-based UI (User Interface), this High-Performance Wireless Router is easy
to setup and maintain. With this exclusive user friendly interface, all functions can be
configured easily via a web browser such as Netscape Communicator and Internet
Explorer.
About this Guide
This manual contains information about installing and configuring your
High-Performance Wireless Router. It is designed to guide users through the correct
setup procedures for appropriate hardware installation and basic configuration. Later, it
shows how to complete advanced configurations to get the best operating performance
from this High-Performance Wireless Router.
Chapter 1: Introduction
This chapter describes the package contents and provides a list of features and
Broadband Security Router User Guide
- 2 -
applications illustrations of the High-Performance Wireless Router.
Chapter 2: Hardware Installation & Setup
This chapter describes the steps for the hardware installation of the High-Performance
Wireless Router.
Chapter 3: Internet Access
This chapter describes the steps for the basic configuration and start up of the
High-Performance Wireless Router.
Chapter 4: Advanced Applications
This chapter describes how to configure advanced functions in order to get the most
from your High-Performance Wireless Router.
Chapter 5: Management Applications
This chapter describes how to configure Management functions for administration.
Chapter 6: Macintosh Setup
This chapter provides instructions on how to set up your Macintosh computers in your
network.
Chapter 7: Trouble Shooting
This chapter describes any potential problems you may encounter and the suggested
remedies.
Conventions
The following explains the conventions used throughout this document.
Italics New words, terms, or special emphasis. E.g. Getting to know your
High-Performance Wireless Router.
“Boldface” Buttons, checkboxes, or items that you can select from screens,
menus, or dialog boxes. E.g. Click “OK” to restart
Boldface Italics Items in Bold Italics are samples only and you should enter other
names, numbers, or words to substitute.
Broadband Security Router User Guide
- 3 -
Chapter 1: Introduction
This chapter describes the package contents and provides a list of features and
application illustrations of the High-Performance Wireless Router.
About The High-Performance Wireless Router
High-Performance Wireless Router is a hybrid design product which combines Ethernet
technology and wireless access into a single stand-alone unit. The device allows you
take advantages of both mobility and fast connection. All PCs whenever on wireless
LAN or Ethernet LAN can share files, printers and other network resource. Moreover,
all users can share single account of Internet access by having this device connect to a
DSL/Cable modem.
Ethernet / Fast Ethernet
Ethernet is the most widely-used network access method, especially in a Local Area
Network (LAN) and is defined by the IEEE as the 802.3 standard. Normally, Ethernet is
a shared media LAN. All stations on the segment share the total bandwidth, which
could be 10Mbps (Ethernet), 100Mbps (Fast Ethernet), or 1000Mbps (Gigabit Ethernet).
With a switched Ethernet, each sender and receiver has the full bandwidth.
Fast Ethernet is defined by the as the IEEE 802.3u standard, a high-speed version of
Ethernet with 100Mbps transmission rate.
Wireless LAN
Wireless Local Area Network systems (WLANs) transmit and receive data through the air by using radio
frequency (RF). This offers some advantages like mobility, ease of installation, and scalability over
traditional wired systems.
Mobility: WLANs combine data connectivity with user mobility. This provides users with
access to network anywhere in their organization. For example, users can roam from a
conference room to their office without being disconnected from the LAN. This is impossible
with wired networks.
Ease of Installation: Eliminating the need to deploy network cable in walls and ceilings,
Installing WLANs is easy for novice and expert users alike.
Scalability: WLAN topologies are easy to change in various ways from peer-to-peer networks
for a small group of users to full infrastructure networks for hundreds of users roaming over a
broad area.
Wireless LAN is suitable for difficult-to-wire and frequently changing environments. It’s also an ideal
Broadband Security Router User Guide
- 4 -
solution for mobile workers to access network resource and for setting a temporary LAN when necessary
Wireless LANs can be set as “Aad-hoc” network and “Infrastructure” network. Unlike
the “Aad-hoc network”, where users on the LAN send data directly to each other, the
“Infrastructure” network includes an access point and users on the “Infrastructure”
network send data to that dedicated access point. Advanced Wireless 11g Router uses
“Infrastructure” network as Wireless LANs. Each wireless LAN PC within the range of
the access point can communicate with other wireless LAN PCs within the range.
Features
Your High-Performance Wireless Router contains the following features that make it
excellent for network connections.
¾ Allows multiple users to access the Internet at the same time by providing
maximum Internet utilization to multiple users, sharing a single public IP
Address.
¾ Integrates four 10/100BASE-T/TX auto-sensing switch ports.
¾ Uses NAT to allow all of your network’s PCs to connect to the Internet using
only one (purchased) IP address.
¾ Supports PPPoE that enable user to seamlessly connect to ISPs with the
familiar “dial-up” connection interface.
¾ Built-in web-based user interface for easy configuration and management
through common web browsers such as Netscape Communicator 6.0 or later
and Internet Explorer 5.0 or later.
¾ Built-in NAT firewall to protect your PCs from outside intruders.
¾ Supports DHCP client to receive both a dynamic IP Address and a fixed IP
Address from your ISP.
¾ Built-in DHCP server to automatically assign and manage LAN IP addresses.
¾ Allow administrators to block specific internal users from accessing specified
applications or services.
¾ Allows external Internet users to access information from the internal target
host by setting the Virtual Server.
¾ Provides unrestricted two-way communication between one PC on your LAN
and certain Internet services such as conferencing, video and gaming
applications.
¾ Enhances routing performance by using Dynamic and Static routing settings.
¾ Allow administrators to change WAN MAC address.
¾ Compatible with all popular Internet applications.
Broadband Security Router User Guide
- 5 -
Package Contents
After carefully unpacking the shipping carton, check the contents listed below.
Router Power Adapter User’s Manual
The High-Performance Wireless Router
Power Adapter
User’s Manual
Broadband Security Router User Guide
- 6 -
Broadband Security Router User Guide
- 7 -
Chapter 2: Installation
This chapter provides information about your High-Performance Wireless Router’s
physical features and gives step-by-step installation instructions for hardware
installation and software configuration.
Front Panel
The following figure shows the front view of the High-Performance Wireless Router.
The LEDs on the front panel indicate the status of the unit. You can easily view the
operation of your High-Performance Wireless Router from this panel.
Note: Please refer to the model on your hand to find proper description.
LED Status Description
Power: Green Steady on when the power is on.
Diag: Red Lights up during system checking connections and
internal operation when the power is first switched
on. If the device works properly, the light should
switch off automatically.
WLAN
Link/Act: Green ¾ Steady on when the wireless AP is enabled.
When the wireless AP is disabled (through the
web-based utility), the LED should remain off.
¾ Blinking when data is flowing through Wireless
AP.
WAN
Link/Act: Green ¾ Steady on when the Ethernet link exists.
¾ Blinking when data is flowing through this port.
LAN 1~4
Link/Act: Green ¾ Steady on when the Ethernet link exists.
¾ Blinking when data is flowing through this port.
Broadband Security Router User Guide
- 8 -
Rear Panel & Connections
The following figure shows the rear view of the High-Performance Wireless Router and
illustrates how the cables connect to the interfaces on the rear panel.
1. Plug one end of the UTP cable into the WAN port, the other into the RJ45 Ethernet
jack on your ADSL or Cable modem.
2. Connect a PC, which must has an Ethernet NIC (Network Interface Card) installed,
to one of the LAN Ports.
3. Connect the external power supply to the High-Performance Wireless Router.
4. The Reset button is used to reboot and re-initialize the device (press once quickly),
or for clearing configuration settings back to factory default values (press for
longer than 3 seconds).
Note: If you are Macintosh users, please refer to Chapter 6 Macintosh Setup for more
detailed information about configuring TCP/IP, hardware installation and so on..
System Requirements
To connect to the Internet, an external ADSL or Cable modem and an Internet access
account from an ISP is required. In order to operate with the High-Performance
Wireless Router, each PC that is to be connected to the High-Performance Wireless
Router should have the following things installed:
¾ Ethernet NIC (Network Interface Card: a 10Base-T or 10/100Base-T/TX Ethernet
card), or wireless client card for wireless connection
¾ Standard twisted-pair Ethernet cable (UTP network cable) with RJ-45 connectors
¾ System OS: Windows 95/98, Windows NT4.0, or Windows 2000/XP
¾ TCP/IP network protocol
¾ Web browser, such as Microsoft Internet Explorer 5.0 or later, or Netscape
Navigator 6.0 or later
Broadband Security Router User Guide
- 9 -
Setting Up the TCP/IP Protocol
If you are not sure whether the TCP/IP Protocol has been installed, follow these steps to
check, and if necessary, install TCP/IP onto your PCs.
1. Click the “Start” button. Choose “Settings”, then “Control Panel”. Double-click
the “Network” icon. Your Network window should appear as follows:
2. Select the “Configuration” tab.
Important:
For Windows 2000 & Windows XP Setting, you will find that they differs with
Windows 98/ME/NT slightly. See the following for reference.
Click the “Local Area Connection” icon on the lower right hand side of your
desktop screen.
Broadband Security Router User Guide
- 10 -
In the “Local Area Connection Status” window, click the “Properties” button
then your Network window will appear.
There is only one tab, “General”, in the Network window.
3. Check whether the TCP/IP Protocol has already been installed onto your
computer’s Ethernet card. Note that TCP/IP Protocol can be installed for a
computer’s Dial-Up Adapter as well as for the Ethernet card.
- If yes, go to step 7.
- If no, click the “Add” button.
4. Double-click “Protocol” in the Select Network Component Type or highlight
“Protocol” then click “Add”.
Broadband Security Router User Guide
- 11 -
5. Highlight “Microsoft” under the list of manufacturers.
Double-click “TCP/IP” from the list on the right or highlight “TCP/IP” then
click “OK” to install TCP/IP.
6. After a few seconds, you will be returned to the Network window. The TCP/IP
Protocol should now be on the list of installed network components (see 3 above).
7. Click the “Properties” button. The TCP/IP Properties window consists of several
tabs. Choose the “IP Address” tab.
8. Select “Obtain an IP address automatically”. Click “OK”. Restart your PC to
complete the TCP/IP installation.
Broadband Security Router User Guide
- 12 -
Fixed IP Addresses Configuration
Fixed IP addresses may be assigned to network devices for many reasons, such as the
server PCs or printers which are consistently accessed by multiple users. To set up
computers with fixed IP Addresses, go to the “IP Address” tab of the “TCP/IP
Properties” window as shown above.
Select “Specify an IP address” and enter “192.168.1.xxx” in the “IP Address”
location (where xxx is a number between 2 and 254 used by the High-Performance
Wireless Router to identify each computer), and the default “Subnet Mask”
255.255.255.0”. Note that no two computers on the same LAN can have the same IP
address.
Broadband Security Router User Guide
- 13 -
Click on the “DNS Configuration” tab and select “Enable DNS”. Enter the “DNS IP
Address” obtained from your ISP in the “Server Search Order” location. Then click
the “Add” button.
Click on the “Gateway” tab and enter the High-Performance Wireless Router’s default
gateway value 192.168.1.1 in the “New gateway” field, then click “Add” Button.
Broadband Security Router User Guide
- 14 -
Click “OK”. Restart your PC to complete the TCP/IP installation.
Broadband Security Router User Guide
- 15 -
Chapter 3: Internet Access
This chapter describes the procedures necessary to configure the basic functions and
begin using your High-Performance Wireless Router. If you follow these procedures
correctly, there should be no problem in accessing the Internet via your
High-Performance Wireless Router.
Prepare your network information
In order to allow quick referencing when setting up your High-Performance Wireless
Router, it is suggested you complete the table below with the necessary information. It
should be supplied by your ISP.
Provided by some ISPs Host Name:
Domain Name:
IP address given by ISP: | Obtain IP Address automatically
| Static IP
IP Address: ____.____.____.____
Subnet Mask: ____.____.____.____
Default Gateway: ____.____.____.____
DNS Server Primary: ____.____.____.____
DNS Server Secondary: ____.____.____.____
DNS Server Third: ____.____.____.____
PPP authentication: | PPPoE
| PPTP
Login Name:
Password: ________________
Web-based User Interface
Your High-Performance Wireless Router is designed to use a Web-based User Interface
for configuration. After connecting your router and your computer, please open your
web browser and type http://192.168.1.1 in the browser’s address box. This address is
the factory set IP Address of your High-Performance Wireless Router. Press “Enter”.
Broadband Security Router User Guide
- 16 -
The “Username and Password Required” prompt box will appear. Leave the
Username field empty and type “admin” (default password) in the Password field.
Click “OK”. The setup screen will then appear.
Basic Configuration – Setup
The “OnePage Setup” screen is the first screen you will see when you access the
Utility. If the router has already been successfully installed and set up, this screen’s
values will already be properly configured.
Host Name: This entry is required by certain ISPs.
Domain Name: This entry is required by certain ISPs.
Time Zone: Select the time zone of your location from the drop down list.
Private IP Address: The “Device IP Address” and “Subnet Mask” of the router are
used for the internal LAN. The default values are 192.168.1.1
for the IP Address and 255.255.255.0 for the Subnet Mask.
Wireless
Check “Enable” or “Disable” to make the wireless LAN function active or inactive.
SSID: As the acronym for Extend Service Set Identifier,
ESSID is the unique name shared among all clients and
Wireless Broadband Router in a same wireless network.
The ESSID must be identical for all points and must not
Broadband Security Router User Guide
- 17 -
exceed 32 characters.
Channel: Select the appropriate channel number from the
drop-down. The permissible channels are different from
Regulatory Domains. Make sure that all nodes in the same
wireless LAN network use the same channel, or the
channel usage is automatic when a connection between
client and access point are made.
WEP: As the acronym for Wired Equivalent Privacy, WEP is
an encryption mechanism used to protect your wireless
data communications. WEP uses a combination of
64-bit/128-bit keys to encrypt data that is transmitted
between all points in a wireless network to insure data
security. To code/decode the data transmission, all points
must use the identical key. To make the WEP encryption
active or inactive, select “Mandatory” or “Disable”.
WEP Key Setting: As the WEP is active, click the button of “WEP Key
Setting” to go to the setting page. Select “64Bit” or
“128Bit” encryption algorithm from the drop-down list.
There are two ways to generate WEP key:
Passphrase Enter a alphanumeric text string in this
column then click “Generate” button, and four 64-bit
encryption key will be created automatically. Note that
only one 128-bit key will be generated in 128-bit
encryption mode.
Manually You may need to enter the WEP key manually
in case to join the existing wireless network. However, if
not, the Pass phrase method is recommended. If you are
not sure which way to use, check with your network
Broadband Security Router User Guide
- 18 -
administrator.
Default TX Key Select one of the four keys to be the
encryption key you are going to use in the wireless
network. To be sure that all the points in a same wireless
network have to have the same encryption key.
WAN Connection Type
There are four options for WAN connection types, Obtain IP automatically, Static IP,
PPPoE, and PPTP.
The connection type you need to choose is dependent upon the settings assigned by
your ISP. Which connection type you need to choose may differ from ISPs as well as
the service you applied for. It depends on your ISP’s assignment. If you are unsure
which connection type you currently use, contact your ISP to obtain the correct
information.
Obtain IP automatically
It is the default option for the router. If your ISP automatically assigns an IP address
and other values to the High-Performance Wireless Router, leave them there without
making any changes.
Static IP
The WAN IP Address and Subnet Mask of the router entered here are used by external
users of the Internet (including your ISP). If your ISP assigned a fixed IP address, select
this item and enter the IP Address and Subnet Mask provided by your ISP.
Specify WAN IP Address: Enter the IP address provided by your ISP.
Subnet Mask: Enter the subnet mask values provided by your ISP.
Default Gateway IP Your ISP will provide you with the Default Gateway IP
Broadband Security Router User Guide
- 19 -
Address: Address.
Domain Name Server
(DNS): Your ISP will provide you with at least one DNS IP
Address. Multiple DNS IP settings are common. The first
available DNS entry is used in most cases.
PPPoE
PPPoE is a dial-up connection type provided by some ISPs. It is a cost–effective way
for a user to access this connection type. If your ISP provides PPPoE connectivity, you
should choose this item from the drop-down list. Note that if you select PPPoE, please
remove any existing PPPoE application on any PCs on your LAN.
User Name: Enter the user name your ISP provides you.
Password: Enter the password your ISP provides you.
Connect-on-demand: It is a utility used to trigger the PPPoE session when
there is a packet being sent through the WAN port while
it is on disconnected situation. Check the radio button to
make this function active, and then you must enter the
number of minutes you wish the network to remain idle
before disconnection occurs in the “Max Idle Time”
location.
Keep Alive: This function keeps your PPPoE connection enable even
if it remains idle. However, in some situation, PPPoE
session cannot be established immediately after
disconnection. This is because the system on the ISP’s
site may need a little time to restore itself. You may need
to check with your ISP to obtain detail of how long you
need to wait before re-establish the PPPoE session. Enter
this information in the “Redial Period” field.
Broadband Security Router User Guide
- 20 -
RAS(for SingTel)
If your ISP uses RAS to establish the connection, you should select this item and follow
the steps below.
User Name: Enter the user name your ISP provides you.
Password: Enter the password your ISP provides you.
RAS Plan: Choose the connection method that you want to use.
Connect-on-demand: It is a utility used to trigger the RAS session when there
is a packet being sent through the WAN port while it is
on disconnected situation. Check the radio button to
make this function active, and then you must enter the
number of minutes you wish the network to remain idle
before disconnection occurs in the “Max Idle Time”
location.
Keep Alive: This function keeps your RAS connection enable even if
it remains idle. However, in some situation, RAS session
cannot be established immediately after disconnection.
This is because the system on the ISP’s site may need a
little time to restore itself. You may need to check with
your ISP to obtain detail of how long you need to wait
before re-establish the RAS session. Enter this
information in the “Redial Period” field.
Broadband Security Router User Guide
- 21 -
PPTP
PPTP is the acronym of Point to Point Tunneling Protocol. Usually, it is used to
encapsulate other protocols’ packets for transmission over IP network. Some ISPs use
this protocol as way to establish the initial connection between the CPE (end-user side)
and DSLAM (ISP side). If your ISP uses PPTP to establish the connection, you should
select this item and follow the steps below.
Specify WAN IP Address: Enter the IP address provided by your ISP. If your ISP
provides you an Alcatel Speed TouchTM modem, it is
suggested that you enter 10.0.0.150 in this column.
Subnet Mask: Enter the subnet mask values provided by your ISP.
Default Gateway IP
Address: Your ISP will provide you with the Default Gateway IP
Address. If your ISP provides you an Alcatel Speed
TouchTM modem, it is suggested that you enter the
10.0.0.138 in this column.
User Name: Enter the user name provided by your ISP.
Password: Enter the password provided by your ISP.
Connect-on-demand: It is a utility used to trigger the PPTP session when there
is packet being sent through the WAN port while it is on
disconnected situation. Check the radio button to make
this function active, and then you must enter the number
of minutes you wish the network to remain idle before
disconnection occurs in the “Max Idle Time” location.
Keep Alive: This function keeps your PPTP connection enable even
if it remains idle. However, in some situation, PPTP
session cannot be established immediately after
disconnection. This is because the system on the ISP’s
site may need a little time to restore itself. You may need
to check with your ISP to obtain detail of how long you
need to wait before re-establish the PPTP session. Enter
Broadband Security Router User Guide
- 22 -
this information in the “Redial Period” field.
HBS
If your ISP uses HBS to establish the connection, you should select this item and follow
the steps below.
User Name: Enter the user name provided by your ISP.
Password: Enter the password provided by your ISP.
Heart Beat Server: Enter the IP address provided by your ISP. This setting is
available only for some areas. Check your ISP for more
detailed information.
Connect-on-demand: It is a utility used to trigger the HBS session when there
is packet being sent through the WAN port while it is on
disconnected situation. Check the radio button to make
this function active, and then you must enter the number
of minutes you wish the network to remain idle before
disconnection occurs in the “Max Idle Time” location.
Keep Alive: This function keeps your HBS connection enable even if
it remains idle. However, in some situation, HBS session
cannot be established immediately after disconnection.
This is because the system on the ISP’s site may need a
little time to restore itself. You may need to check with
your ISP to obtain detail of how long you need to wait
before re-establish the HBS session. Enter this
information in the “Redial Period” field.
When you have properly configured the Setup page, click “Apply”. You can now test to
see if the settings are all correct by attempting to connect to the Internet.
Broadband Security Router User Guide
- 23 -
Chapter 4: Advanced Applications
In general, after finishing the steps listed in chapter 3, you can connect to Internet with
ease. Yet, you might want to have advanced configuration for some reasons. This
chapter provides information on how to set up and use the advanced functions of your
High-Performance Wireless Router.
DHCP Configuration
A DHCP (Dynamic Host Configuration Protocol) Server can automatically assign IP
Addresses to each computer in your network. Unless you already have one in you LAN,
it is highly recommended that you set your router to act as a DHCP server.
Dynamic IP Address: Select “Enable” to use the DHCP server option of the router.
If you already have a DHCP server in your network, set the
router's DHCP option to “Disable”.
Starting IP Address: Enter a numerical value, from 2 to 254, for the DHCP server
to start at when assigning IP Addresses.
Number of Users Enter the maximum number of PCs that you want the DHCP
server to assign IP Addresses to, with the absolute maximum
being 253.
Client Lease Time: Enter the number of time that DHCP clients (The PCs on
Broadband Security Router User Guide
- 24 -
LAN side) can use the IP Addresses assigned by Router’s
DHCP server. Before the time is up, DHCP clients have to
request to renew the DHCP information.
DNS: The IP Address of the Domain Name Server, which is
currently used. Multiple DNS IP settings are common. The
first DNS entry will be use in most cases.
WINS: Windows Internet Naming Service converts NETBIOS name
to IP address. The Windows based PCs are assigned
NETBIOS names, which have to be transfer into IP addresses
if the network transport is TCP/IP. For example, through
WINS the two PCs that belong to different subnet can locate
each other by name. Enter the IP address of WINS server and
it will be assigned to DHCP clients.
DHCP Clients Table Click the DHCP Clients Table button to show current DHCP
client information.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
Access Control
The Access Control feature allows administrators to block certain users from accessing
the Internet or specific applications. Before using this function, the network PCs which
you want to control the access limitation should be assigned fixed IP Addresses.
Broadband Security Router User Guide
- 25 -
IP Access Setting
This function allows network administrators to restrict up to five groups of specified
network users/computers from accessing the certain applications
Protocol: Select the protocol type as “TCP” or “UDP” from the drop
down list. If you are not sure which one to choose, select
“Both”.
Filter Group/LAN IP
Range: Enter the range of IP addresses which you want them to be a
controlled group to have the same access limitation.
Block Port Range: Enter the range of port numbers which are used by the
applications you wish to be blocked.
Here is an example for the IP Access Setting. Enter the range of 51~80 in the Filter
Group column and 20~80 in the Block port Range column, then click “Apply” button.
As the result, the user’s computers which have IP Addresses in the range of
192.168.1.51 to 192.168.1.80 will not be able to use the applications which use port
numbers from 20 to 80, such as FTP, Telnet and web browsing.
URL Access Setting
To shift to URL Access Setting, click on the bold type word to hyperlink to the setting
page.
This function allows network administrators to restrict or allow all LAN users to access
the web sites that the addresses have been enter to the columns.
Broadband Security Router User Guide
- 26 -
URL Access Limit: Check “Enable” or “Disable” to make this function active
or inactive.
Website Access: Check “Allow” to allow users on the network to access
specific website listed on the location only. In contrast, to
restrict users on the network to access the website listed on
the location, check “Block” in this item.
Block Access Website: Enter the website addresses to be accessed/blocked on the
locations. Up to twenty website addresses can be entered into
the locations.
Show URL Log: URL Log allows network administrators to check the URL
access records. Click the button of “Show URL Log” to go
to the URL Filter Log table. This table lists the
users/computers by their IP Addresses, the access status, and
their URL Access destinations.
Private MAC Filter
This function allows network administrators to use the MAC addresses of PCs to
restrict users/computers from accessing the Internet.
Filtered MAC Address: There are fifty sets divided into five groups in this function.
You can choose each group by selecting from the pop-down
list. Enter the MAC addresses of the computers you wish to
block in the columns, and then those users/computers cannot
access Internet at all.
Broadband Security Router User Guide
- 27 -
Virtual Server Settings
The Virtual Server Settings application allows you to set up a maximum of ten public
services that can be accessed by external users of the Internet, such as a Web Address,
Email, FTP etc.. Each service is provided by a dedicated network computer (server)
configured with a fixed IP Address. Although the internal service addresses are not
directly accessible to the external user, the High-Performance Wireless Router is able to
identify the service requested by the service port number and redirects the request to the
appropriate internal IP Address/server. To use this application, it is recommended you
use a fixed Public IP Address from your ISP. Note that your High-Performance Wireless
Router supports only one server of any particular type.
This router also supports UPnP Forwarding. You can use either Virtual Server Settings
or UPnP Forwarding by clicking the button to change setting page. Please note that do
not set the same function server to different IP Address in different setting pages.
Set up individual network computers to act as servers and configure each with a fixed
IP Address.
Note: In the “One Page Setup” screen, ensure the “Private IP Address” is set to the
High-Performance Wireless Router’s default setting of 192.168.1.1. If a fixed Public IP
Address is to be used, select “Specify an IP address” and enter the IP Address and
other necessary information provided by your ISP.
Broadband Security Router User Guide
- 28 -
Ports: Enter the desired service port numbers in the “Ports” fields.
You can specify the protocol type as “TCP” or “UDP” from
the drop-down list. If you are not sure which one to select,
choose “Both”. A selection of well-known service port
numbers is provided on this screen.
Redirect IP Address: Enter the appropriate IP Addresses of the service computers
in the “Redirect IP Address” locations.
Passive FTP Virtual
Server: When there is firewall filtering in your network, the Internet
user may not be able to access FTP server you set in the LAN
side. Setting FTP server at passive mode will be necessary.
Enable/Disable - Click to enable/disable passive FTP
function.
FTP Port - Enter the port number (> 1024) that the FTP
server will use as data connection port number. The client
side should select passive mode and use the same port
number entered here.
Server IP Address - Enter the appropriate IP Addresses of
the service computers.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
Example:
If the service port number 80~80 (representing an HTTP web address) is entered in
“Ports” and 192.168.1.100 is entered in “Redirect IP Address”, then all HTTP
requests from external Internet users will be directed to the PC/server with the
192.168.1.100 fixed IP Address.
Below is a list of the protocol and port ranges that are used by some common
applications.
Application Protocol Port Range
FTP Server TCP 21
Half Life UDP 6003, 7002, 27010, 27015, 27025
MSN Messenger TCP
TCP
UDP
UDP
UDP
TCP
6891-6900 (File-send)
1863
1863
5190
6901 (Voice)
6901 (Voice)
PC Anywhere host TCP
UDP 5631
5632
Quake 2 UDP 27910
Broadband Security Router User Guide
- 29 -
Quake III UDP 27660 (first player)
"C:\Program Files\Quake III Arena\quake3.exe" +set
net_port 27660
27661 (second player)
Telnet Server TCP 23
Web Server TCP 80
UPnP Forwarding
UPnP (Universal Plug and Play) is a standard introduced from Microsoft and UPnP
Forum for interoperability. Currently, this function supported by this device allows you
to set virtual server from Windows OS that supports UPnP, such as Windows XP.
UPnP Function: Check “Enable” will allow LAN side PCs that support UPnP
to set virtual server.
Before you enable the UPnP Forwarding, you have to set up
individual network computers to act as servers and configure
each with a fixed IP Address.
In the “One Page Setup” screen, ensure the “Private IP
Address” is set to the Router’s default setting of
Broadband Security Router User Guide
- 30 -
192.168.1.1. If a fixed Public IP Address is to be used, select
“Specify an IP address” and enter the IP Address and other
necessary information provided by your ISP.
Application Name: UPnP has ten pre-setting forwarding rules, which are
well-known applications. You can enter any name to present
the additional settings beside those pre-setting rules.
Ext. Port: Most of applications usually use their individual port number
for its incoming and outgoing data packets. However, some
of the application may use different port number for
incoming and outgoing data packets. In this case, you have to
enter the port number used by incoming data packets here.
Protocol: Specify the protocol type as “TCP” or “UDP” which is used
by specific service.
Int. Ports: Most of applications usually use their individual port number
for its incoming and outgoing data packets. However, some
of the application may use different port number for
incoming and outgoing data packets. In this case, you have to
enter the port number used by outgoing data packets here.
IP Address: Enter the appropriate IP Addresses of the service computers
in the “Redirect IP Address” locations.
Enable: Check to make this forwarding setting active.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
Example: If the service port number 80~80 (representing an HTTP web address) is
entered in “Ports” and 192.168.1.100 is entered in “Redirect IP Address”, then all
HTTP requests from external Internet users will be directed to the PC/server with the
192.168.1.100 fixed IP Address.
DMZ Host
The DMZ Host application allows unrestricted 2-way communication between a single
LAN PC and other Internet users or servers. This application is useful for supporting
special-purpose services such as video-conferencing and gaming that require
proprietary client software and/or 2-way user communication.
To use this application, you must first obtain a fixed Public IP Address from your ISP.
Note that in order to provide unrestricted access, the Firewall provided by the
High-Performance Wireless Router to protect this port is disabled, thus creating a
potentially serious security risk.
It is recommended that this application is disabled when it is not in use by entering “0”
Broadband Security Router User Guide
- 31 -
in the “DMZ Host”field.
The Multi DMZ allows you to map the public IP addresses to your LAN PCs, should
you get more than one public IP address from your ISP. This function is useful to set up
your servers, such as an FTP server, web server, and so on, with public IP addresses, but
still keep them within your LAN group.
With the public IP addresses, Internet users will access your servers more easily and
those servers can still communicate with other PCs in you LAN by using Network
Neighborhood.
Before setting up a LAN PC to act as a DMZ Host, you should configure it using a
fixed IP Address.
Note: In the “One Page Setup” screen, ensure the Private IP Address is set to the
High-Performance Wireless Router’s default setting of 192.168.1.1. In the Public IP
Address area, select “Specify an IP Address”, and then enter the IP Address and other
necessary information provided by your ISP.
Click the “DMZ Host” option in the Advanced Menu and enter the fixed IP Address of
the Exposed Host PC in the “DMZ Host” IP Address location. Remember, entering “0”
will disable this application.
Multi DMZ
1. Enter the valid public IP address in “WAN IP” column. Next, enter the private IP
address of the PC that you wish to map to in “LAN IP” field. Up to five public IP
addresses can be entered.
Broadband Security Router User Guide
- 32 -
2. Click the “Apply” button after making any changes, or click the “Cancel” button to
exit the screen without saving any changes.
Dynamic Routing
The Dynamic Routing feature allows your High-Performance Wireless Router to
exchange routing information with other routers in the network. Enabling this feature is
likely to enhance performance of your High-Performance Wireless Router.
TX: From the drop-down list, select one of the routing
information types, “RIP-1”, “RIP-1 Compatible”, or
“RIP-2”, to enable the “TX” (transmit) function. “RIP-1” is
the protocol used by older routers. Newer routers should use
“RIP-2”. “RIP-1 Compatible” servers to broadcast RIP-1
and multicast RIP-2.
RX: From the drop-down list, select one of the routing
information types, “RIP-1” or “RIP-2”, to enable the “RX”
(receive) function.
Show Routing Table: Click this button after clicking Apply to see current routing
information.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
Below is Routing Table Entry List. This table shows the status for routing information.
You can click Refresh to update the table information.
Broadband Security Router User Guide
- 33 -
Static Routing
The Static Routing feature allows PCs that are connected to the High-Performance
Wireless Router, either directly or through a hub/switch (in the immediate LAN), to
communicate with other PCs in the respective LAN segment which are connected to the
High-Performance Wireless Router through another router (destination LAN). Up to 20
route entries may be input into the High-Performance Wireless Router. The diagram
below gives an example of the physical connections required to use Static Routing.
In the above diagram, PC2 in LAN#2 is connected to the High-Performance Wireless
Router via another router while PC1 in LAN#1 is connected to the High-Performance
Wireless Router directly. Without configuring the Static Routing function, the two PCs
would not be able to communicate with each other.
Broadband Security Router User Guide
- 34 -
Select Route entry: Select the route entry number from 1 to 20 that you wish to
configure.
Delete this entry Delete the selected route entry information.
Destination LAN IP and
Subnet Mask: Enter the IP Address and Subnet Mask of the destination
LAN that the immediate LAN is to communicate with.
Taking the above diagram as an example, enter 192.168.2.0
in the “Destination LAN IP” field and 255.255.255.0 in the
“Subnet Mask” field.
Default Gateway: Enter the IP Address of the router that forwards data packets
to the destination LAN. For the above example, enter
192.168.1.2 in the “Default Gateway” field.
Hop Count: Enter the number of hops required between the LANs to be
connected. The Hop Count represents the “cost” of the
routing transmission. The default value is 1.
Interface Choose LAN if the Destination LAN is on your Router’s
LAN side and choose WAN if the Destination LAN is on the
Router’s WAN side.
Show Routing Table: Click this button after clicking Apply to see current routing
information.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
Referring back to the above diagram, with the proper settings, PC1 would be able to
access LAN 1, LAN 2 and the Internet while PC2 can only access LAN 2, LAN1.
Broadband Security Router User Guide
- 35 -
Special Applications
Some applications use multiple TCP/UDP ports to transmit data. Due to the NAT, these
applications cannot work with the High-Performance Wireless Router. Port Triggering
allows some of these applications to work properly. Note that only one PC can use each
Port Triggering setting at any time.
Application name: Enter the name of application you wish to configure in the
Name column to identify this setting.
Outgoing Port Range: Enter the port number or range numbers this application uses
when it sends packets outbound. The Outgoing Control Port
Numbers act as the trigger. When the High-Performance
Wireless Router detects the outgoing packets with these port
numbers, it will allow the inbound packets with the Incoming
Port Numbers that you set in the next column to pass through
the High-Performance Wireless Router.
Incoming Port Range: Enter the port number or range numbers the inbound packets
carry.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
The following is a list of port numbers used on some popular applications:
Application Outgoing Control Incoming Data
Battle.net 6112 6112
DialPad 7175 51200, 51201,51210
ICU II 2019 2000-2038, 2050-2051
Broadband Security Router User Guide
- 36 -
2069, 2085,3010-3030
MSN Gaming Zone 47624 2300-2400, 28800-29000
PC to Phone 12053 12120,12122, 24150-24220
Quick Time4 554 6970-6999
wowcall 8000 4000-4020
Wireless
This setting page allows you to configure advanced wireless functions. To set those
items needs more technology background. Unless you really understand those technical
terms, it would be better to leave them as default setting.
Beacon Interval: It’s the signal sent periodically by wireless access point to
provide synchronization among the stations in wireless LAN.
RTS Threshold: RTS packet is use to account for potential hidden stations.
This feature allows you to set the size of RTS packet.
Fragmentation
Threshold: If the length of data frame needing transmission exceeds the
fragmentation threshold you set in the column, the data frame
will be fragmented. If there is significant interference or high
utilization in your wireless network, the smaller
fragmentation value can increase the reliability transmission.
However, it is more efficient to set the large fragment size.
DTIM Interval: DTIM is the acronym of delivery traffic indication message.
It determines how often the MAC Layer forward multicast
traffic.
Broadband Security Router User Guide
- 37 -
Basic Rates: Select either 1~2 Mbps or 1~2~5.5~11Mbps auto fallback.
TX Rates: Select either 1~2 Mbps or 1~2~5.5~11Mbps auto fallback.
Preamble Type: Preamble is used in the frames to provide time for the
receiving station to synchronize to the incoming data stream.
Authentication Type: Select either Open System or Share Key as authentication
type. If you are not sure, select both.
MAC Filter: This function allows you to restrict wireless users to access
Internet.
Click the “Active MAC Table” button will display all MAC
addresses of wireless nodes on your WLAN.
The Wireless Active MAC Table shows the MAC addresses
of wireless clients, which have the same SSID and WEP key
with Wireless Router. When the MAC Filter function is
disabled, the background color is gray. You can add the MAC
addresses showing in this table to the Wireless MAC Filter
List table by checking the box beside these MAC addresses.
If the MAC Filter function is enabled:
Green Background When the wireless client MAC
addresses showing in this table have been entered into the
“Wireless MAC Filter List” table, the background color of
these MAC addresses will be green.
Red Background When the wireless client MAC addresses
showing in this table have not been entered into the
“Wireless MAC Filter List” table, the background color of
these MAC addresses should be red.
Yellow Background If the MAC addresses showing in this
table have been blocked (check the Filter field beside the
MAC address in Edit MAC Filter table), the background
color will be yellow.
Click “Update Filter List” button to open the edit table.
Broadband Security Router User Guide
- 38 -
Wireless MAC Entry There are 32 sets divided into four
groups in this function. You can choose each group by
selecting from the pop-down list.
Enter the MAC addresses of the wireless clients, which you
wish to block in the columns and click the Filter field beside
the MAC address, and then those wireless clients will be
blocked to access Internet. If the Filter field isn´t checked,
that MAC address won’t be blocked.
The MAC address entered here should be 12 continue
alphanumeric digits without “-“ in between.
DDNS
“DDNS” is an acronym for Dynamic Domain Name Service. Whenerver you set up the
web servers, mail servers, or sometimes ftp servers, you need “Domain Name” to help
Internet users reach your servers easily.
Internet actually runs on IP Addresses which are numerical order, for example
“66.37.215.53”. These IP Address identify the location of each device connected to
Internet. However, the human brain does not easily remember this numbering system,
so a system that allocate domain name such as “www.dyndns.org” provides an easier
method. If you type “66.37.215.53” or “www.dyndns.org” in the web browser’s address
bar, the browser will show the same web page. This is because both methods relate to
the same web server. The “Domain Name Servers” used to manage the Internet will
translate “www.dyndns.org” into the IP Address “66.37.215.53” in order to allow your
browser to find the web server and display the correct web page in your browser.
If your “WAN Connection Type”, as shown in One Page Setup section, is “Obtain IP
Address Automatically”, “PPPoE”, or “PPTP” with dynamic IP address assigned by
ISP, it will cause an error when you set up the public computer servers in your LAN
Broadband Security Router User Guide
- 39 -
side PCs. Internet users may not be able to reach your servers because your WAN side
IP address may change each time you initiate the connection to your ISP. The DDNS
function will help to map your IP address to your domain name when your ISP assigns
a new dynamic IP Address.
Note that this DDNS function acts as the client appliance of DDNS service and is only
able to be use in conjunction with the service provided by DynDNS.org. Before you
begin using this function, you will need to apply to DynDNS.org to be able to use the
service. Please visit www.dyndns.org for further information.
DDNS Service: Check the “Enable” option if you wish to activate this
function.
Username: After you have applied for the DDNS service from
DynDNS.org, you will be issued with a Username. Enter this
username in the “Username” field.
Password: DynDNS.org, will also issue you with a password. Enter the
detail in the “Password” field.
Host Name: DynDNS.org, will provide you with a Host Name. Enter this
name in the “Host Name” field.
Your IP Address It displays the IP Address currently assigned by your ISP.
Status: This displays the current status of the DDNS function.
Apply: Click this button after making any changes for activating the
Broadband Security Router User Guide
- 40 -
settings.
Update: After clicking Apply to invoke the DDNS settings, you have
to click this button to refresh the settings..
Broadband Security Router User Guide
- 41 -
Chapter 5: Management
This chapter allows administrator to manage the router such as upgrading the firmware,
backup & restore settings, setting log information and so on.
Device Administration Settings
This feature allows the administrator to manage the High-Performance Wireless Router
by setting certain parameters. For security reasons, it is strongly recommended that you
set Passwords and so that only authorized persons are able to magage this
High-Performance Wireless Router. If the Password is left blank, all users on your
network can access this router simply by entering the unit’s IP Address into their web
browser’s location window.
Broadband Security Router User Guide
- 42 -
Administrator
Password: Enter the password you want to use into the “Password
Change” field and re-enter it into the “Password Confirm”
field for confirmation. Be sure that the password is less than
64 characters long and without any special characters or
spaces..
SNMP Function: As with the Password, SNMP community allows authorized
persons to access this router through the SNMP Management
tool. The Wireless Router provides three fields to enter these
communities. The default words Public and Private are
well-known communities that allow authorized persons who
know the IP Address of this router to access the read-only
information about this router or have the authority to change
the configuration. Also, the administrator can define any
specific community and configure its limits as Read-Only or
Read-Write from the right side drop-down box.
WAN MAC Change: The WAN MAC address can be changed from the original
values if necessary. Some ISPs require users to change the
WAN MAC address to a registered one when users change
their access equipment.
External Admin.: Check “Enable” to allow you to configure the
High-Performance Wireless Router from the WAN side. To
access the setting page from the external side, enter
“http://<WAN IP Address>:8080” into the web browser
address bar and press the “Enter” key.
MTU: Check Enable if you want to set a maximum limitation for
incoming and outgoing packet size. Enter the maximum
packet size you wish to set in the “Size” column.
Block WAN Request: To prevent hacker intruding your network, check the Enable
option to enable this function to reject all the unauthorized
requests from WAN side.
IPSec Pass Through: Check the Enable to allow the IPSec packets to pass through
the Wireless Router if there is LAN PC using IPSec for data
communication with other Internet device.
PPTP Pass Through: Check the Enable to allow the PPTP packets to pass through
the Wireless Router if there is LAN PC using PPTP for data
communication with other Internet device.
PPPoE Pass Through: Check the Enable to allow the PPPoE packets to pass
through the Wireless Router if there is LAN PC using PPPoE
for data communication with other Internet device.
Remote Upgrade: Check Enable if you want to allow the authorized remote
users to upgrade firmware from WAN side.
Broadband Security Router User Guide
- 43 -
Reset Device: Select “Yes” if you want to clear a connection, reboot, and
re-initialize the unit without affecting any of your
configuration setting.
Factory Defaults: Select “Yes” if you want to return all the router’s current
settings to their factory defaults. Note that do not restore the
factory defaults unless it is absolutely necessary.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking Apply.
Status Monitor
This screen shows the router’s current status. All of the information provided is
read-only.
Product Name: This field shows the name of this router.
Firmware Version: This field shows the installed version of the firmware.
Login: This column shows the login information of PPPoE or PPTP.
You can manually initiate the connection or make a
Broadband Security Router User Guide
- 44 -
disconnection by clicking the appropriate buttons. Be aware
that, if you make a disconnection here, “Connect-on-
demand” will not function until the connection button is
clicked. Note that “Login” won’t show any information if
you selected “Obtain IP automatically” or “Static IP” on
the OnePage Setup page.
Internet: This section shows the IP settings status of the router as seen
by external users of the Internet. If you selected “Get IP
Address Automatically”, “PPPoE”, or “PPTP” in the
OnePage Setup, the “ IP Address”, “Subnet Mask”,
“Default Gateway”, and “Domain Name Server” (DNS)
will show the information retrieved from the DHCP server or
ISP which is currently being used. If you selected “ Static
IP” in “One Page Setup: Public IP Address”, the information
will be the same as your input.
DHCP Release: Click this button to eliminate the IP address obtained from
DHCP server.
DHCP Renew: Click this button to refresh the IP address from DHCP server.
Note that the “DHCP Release” and “DHCP Renew” button
only show up when you select “Get IP Address
Automatically” in the OnePage Setup.
Intranet: This section displays the current “Private IP Address” and
“Subnet Mask” of the router, as seen by users of your
internal network.
DHCP Clients Table: If the router is setup to act as a DHCP server, the LAN side
IP Address distribution table will appear by clicking this
button.
Log
The Log application provides the administrator with the ability to trace Internet
connection. With viewing the Log information, an administrator can send the record to
a specific LAN PCs to have the real time monitor.
Broadband Security Router User Guide
- 45 -
Access Log: Check the “Enable” option if you want to activate this
function.
Send Log To: Enter the IP address of the PC that you wish to use to view
the Log information.
View Log: Click this button to view the log on-line.
Send Log via E-mail: The Firewall log can be sent via e-mail.
Denial of Service
Thresholds: The threshold is used to determine the attempt of establishing
connection is DoS attack or not.
SMTP Mail Server: The domain name of IP Address of your ISP’s outgoing
e-mail server. You may find this information when you apply
for e-mail service from your ISP.
E-mail Alert to: Enter the e-mail address you wish to send to.
Return Address: Enter the e-mail address you wish to send to if the alert
e-mail cannot be sent to the address above.
Log Schedule: Select from the drop down list that when you wish the alert
e-mail will be send:
When Log is Full - The alert e-mail will be sent when log
space is full. They are about 30 entries.
Hourly - The alert e-mail will be sent by each hour.
Daily - The alert e-mail will be sent by each day at midnight.
Weekly - The alert e-mail will be sent by each week. When
this item is select.
Day of Sending Alert: When “Weekly” is selected as Log Schedule, you can select
Broadband Security Router User Guide
- 46 -
which day in a week to send the alert e-mail.
Apply: Click this button after making any changes for activating the
settings.
Undo: Click this button if you are not satisfied with the settings in
this page before clicking “Apply”.
Backup & Restore
This function allows you to save router’s configuration as backup, or retrieve the
configuration file you saved before to turn the setting back.
Backup: Click “Backup” button save the current configuration as a
backup file in your hard disk.
Restore: Enter path of the configuration file you saved on the PC. You
can click “Browse” to view the folders and select the file.
Click “Restore” to retrieve it.
Upgrade Firmware
This setting page allows you to upgrade the latest version firmware to keep your router
up-to-date. Before you upgrade the firmware, you have to get the latest firmware from
your ISP and save it on the PC you use to configure the router. You have to upgrade the
file(s)one by one to your router and restart the router to active the settings.
Broadband Security Router User Guide
- 47 -
Browse..
Browse.. To select a file to upgrade, you have to enter path of the latest
firmware you saved on the PC. You can choose “Browse” to
view the folders and select the firmware.
Upgrade: After you enter or select the path, click “Upgrade” to proceed
firmware upgrade process. Please note that don’t power off
the router during the firmware upgrading.
Diagnostic-Ping
This function allows you to test the connection between router and LAN or between
router and Internet.
Ping
This page allows you to set configuration for diagnostic-ping. After filling in the
parameters for your requirement, click “Start” to begin the connection testing.
Source IP: You can chose to issue the ping test from the LAN side by
Broadband Security Router User Guide
- 48 -
selecting Router’s private IP Address or from the WAN side
by selecting Router’s WAN IP Address.
Destination IP: Enter the IP Address of destination device you want to ping.
If Router’s LAN IP address is selected as Source IP, you only
can ping LAN side device and vice versa.
Packet Number: Enter the packet numbers you wish to use to ping the
destination device. The maximum numbers are four.
Packet Size: Enter the numbers of packet size you wish to use to ping the
destination device. The maximum packet sizes are 1514.
Time Between Enter the numbers of time between two packets.
Time out: Enter the number of time regarding as no response after
starting to ping the destination device.
Start: Click this button to begin the ping test.
Ping Result: The result will show the numbers of sending packet, numbers
of packet receiving, and the average return time.
Tracert
To trace the route between the router and a certain device, you can type in the IP
address of that device on the box of Tracert host and click the “Tracert” button. The
status of the connection will be sown on the field of Trace Message.
Tracert Host: Enter the IP Address of destination device that you wish to
trace the route between Router and that device.
Trace Message: The result shows the routing information between Router and
destination device.
Tracert: Click “Tracert” to start this test.
Broadband Security Router User Guide
- 49 -
Chapter 6: Macintosh Setup
This chapter provides information on using Macintosh computers in your network. The
instructions given here are for system software version 8.0 or above, which comes with
the TCP/IP Protocol preloaded and supports DHCP Addressing.
Hardware Connections
Connect your Macintosh computer to your High-Performance Wireless Router. If you
have a newer computer, there will be an Ethernet port on the back. Older computers
will need to have an Ethernet card installed. See your computer’s User’s Manual for
instructions on Ethernet card installation.
Computer Network Configuration
It is assumed that your computer’s system software already has TCP/IP installed. You
may manually configure your computer with a fixed IP Address or have an IP Address
dynamically assigned to it by the High-Performance Wireless Router’s DHCP server.
Dynamic IP Addressing using DHCP Server.
1. From the “Apple” menu, select “Control Panel” and click on “TCP/IP”.
2. In the “TCP/IP (A New Name For Your Configuration)” window, select
“Ethernet” in the “Connect via” location from the drop-down list.
3. In the “Setup” area, select “Using DHCP Server” in the “Configure” location
from the drop-down list. No other data needs to be entered. Then, close the window.
4. Click “Save” from the File menu, then “Quit” TCP/IP.
5. Restart the computer.
Manual Configuration of Fixed IP Addresses
1. From the “Apple” menu, select “Control Panel” and click on “TCP/IP”.
2. In the “TCP/IP (A New Name For Your Configuration)” window, select
“Ethernet” in the “Connect via” location from the drop-down list.
3. In the “Setup” area, select “Manually” in the “Configure” location from the
drop-down list.
4. In the “IP Address” location, enter the IP Address that you want to assign to the
computer (refer to the notes on Fixed IP Addresses above). Enter “255.255.255.0”
in the “Subnet Mask” location. Enter “192.168.1.1” (the High-Performance
Broadband Security Router User Guide
- 50 -
Wireless Router’s default IP Address) in the “Router Address” location.
5. Enter the ISP’s IP Address in the “Name Server” location if your ISP has provided
the information. And close the window.
6. Click “Save” from the file menu then “Quit” TCP/IP.
7. Restart the computer.
High-Performance Wireless Router Configuration
To configure your High-Performance Wireless Router, use your Web Browser and
follow the instructions given in Chapter 3: Internet Access, Basic Configuration. To
configure advanced settings, see Chapter 4: Advanced Applications.
Adding High-Performance Wireless Router to Existing Network
If the High-Performance Wireless Router is to be added to an existing Macintosh
computer network, the computers will have to be configured to connect to the Internet
via the High-Performance Wireless Router.
1. From the “Apple” menu, select “Control Panel” and click on “TCP/IP”.
2. From the “File” menu, select “Configurations” and select your existing network
configuration. Click “Duplicate”.
3. Rename your existing configuration. Click “OK”, and “Make Active”.
4. In the Setup area, select “Manually” in the “Configure” location from the
drop-down list.
5. In the “IP Address” location, enter the IP Address that you want to assign to the
computer. (see the note on fixed IP Addresses above). Enter “255.255.255.0” in the
“Subnet Mask” location. Enter “192.168.1.1” (the High-Performance Wireless
Router’s default IP Address) in the “Router Address” location.
6. Enter the ISP’s IP Address in the “Name Server” location if your ISP has provided
the information.
7. Close the window.
8. Click “Confirm”. TCP/IP is now configured for manual IP Addressing.
For configuration your High-Performance Wireless Router, refer to Chapter 5.
Broadband Security Router User Guide
- 51 -
Chapter 7: Trouble Shooting
This chapter provides solutions to problems you may encounter during installation and
operation of your High-Performance Wireless Router.
Hardware
Q: The Power LED is off.
A: Check that the power cable is properly connected to the High-Performance Wireless
Router, the power adapter and the socket.
Q: The LAN Link LED is off.
A: Please check the following:
9 Check if the computer, hub or switch is properly connected to the
High-Performance Wireless Router.
9 Check that the computer’s Ethernet card is properly installed.
9 Check that the High-Performance Wireless Router and the computer are on
the same network segment. If you are not sure, initiate the DHCP function
(4-1) and set your computer to obtain an IP address automatically (3-3).
9 Check that the computer is using an IP address in the range of 192.168.1.2 ~
192.168.1.254 and is therefore compatible with the High-Performance
Wireless Router’s default IP address of 192.168.1.1 (3-3). Check also the
Subnet Mask is set to 255.255.255.0
Q: The DIAG LED stays lit.
The DIAG LED should light up when the device is first powered up to indicate it is
checking for proper operation. After a few seconds, the LED should go off. If it stays lit,
the device is experiencing a problem. Please contact your dealer.
Q: Why can’t I configure the High-Performance Wireless Router?
A: First, check whether the High-Performance Wireless Router is properly installed or
not, including the LAN and WAN connections, and that all devices are switched on.
Next, check the IP configuration of your PC:
9 For Windows 95/98 users: run winipcfg.exe or winipcfg from Run on the
Start menu. If there are no IP addresses shown, click Release All and then
click Renew All to get the IP addresses.
9 For Windows NT 4.0 users: run ipconfig.exe or ipconfig from Run on the
Start menu and follow the instruction as above.
Ensure that your PC and the High-Performance Wireless Router are on the same
Broadband Security Router User Guide
- 52 -
network segment. If you are not sure, initiate the DHCP function and set you PC to
obtain an IP address automatically.
Ensure that your PC is using an IP Address within the range 192.168.1.2 to
192.168.1.254 and thus compatible with the High-Performance Wireless Router default
IP address of 192.168.1.1
Finally, use the Ping command in MS-DOS mode to verify the network connection:
Ping 127.0.0.1 to check the TCP/IP stack of your computer
Ping gateway IP (Default: 192.168.1.1) to check the internal link of network.
Note if you’re not able to view the web configuration screen for the High-Performance
Wireless Router, make sure that you remove any proxy setting within your Internet
browser, or remove the dial-up settings within your browser.
Q: What can I do if I have forgotten the password for High-Performance Wireless
Router?
A: You have to reset the Broadband Gateway back to the factory default setting by
pushing the Reset button for longer than 3 seconds. Refer to the user’s manual to
reconfigure the settings.
Q: I cannot access my ISP’s home page, why?
Some ISPs, such as @Home, require that their host name be specifically configured
into your computer before you can surf their local web pages. If you are unable to
access your ISP’s home page, enter your ISP’s Domain Name into the OnePage Setup
to enable all computers in your LAN access to it. If you only want to allow computers
to access these home pages, open the TCP/IP Properties window on these computers,
click the “DNS Configuration” tab and enter your ISP’s Domain Name in the
“Domain Name Search Suffix” location.
Client Side (Computers)
Q: I can’t browse in the Internet via the High-Performance Wireless Router
A: Check the following:
9 Check that the LAN Link/ACT LED on the front panel is lit to indicate proper
connection between the computer and the High-Performance Wireless Router.
9 Check if both ends of the network cable are properly connected.
9 Check that TCP/IP is installed on your computer.
For Windows 95/98, use a MS-Dos prompt to run “winipcfg” (“Ipconfig” for
Windows NT). Check that the computer’s IP Address is within the range of
192.168.1.2 ~ 192.168.1.254 and the Subnet Mask is 255.255.255.0. If you are
using a fixed IP address, also check the Default Gateway IP Address and DNS
address in “More”.
9 Check that the values as stated above are the same in Status Monitor).
Broadband Security Router User Guide
- 53 -
Q: I get a time out error when I enter a URL or IP address.
A: Check if other computers work. If they do, ensure the computer’s IP settings are
correct (IP Address, Subnet Mask, Gateway IP Address and DNS). Then, check if the
High-Performance Wireless Router’s settings are correct.
Q: What is the maximum number of IP Addresses the High-Performance Wireless
Router can support?
A: The High-Performance Wireless Router can support up to 253 IP Addresses in the
range of 192.168.1.2~192.168.1.254.
Q: Where should the High-Performance Wireless Router be installed on the
network?
A: In a typical environment, the High-Performance Wireless Router should be installed
between the ADSL/Cable modem and your LAN. Connect the High-Performance
Wireless Router to the Ethernet port of the ADSL/Cable modem, and connect your PCs
to the RJ45 jack on the LAN side.
Q: Does the High-Performance Wireless Router support IPX or AppleTalk?
A: No. The High-Performance Wireless Router was designed to provide a multiple user
LAN with shared Internet access and supports only the TCP/IP Protocol. If your Novell
or Apple system is configured with TCP/IP, the High-Performance Wireless Router can
support them.
Q: Does the High-Performance Wireless Router support 100Mb Ethernet?
A: Yes, the High-Performance Wireless Router supports both 10Mb & 100Mb Ethernet
on the LAN side.
Q: What is “NAT” and what is it used for?
A: The Network Address Translation (NAT) Protocol translates multiple IP Addresses
on a private LAN into a single public IP Address that is accessible to the Internet. NAT
not only provides the basis for multiple IP Address sharing but also adds to the LAN’s
security since the multiple IP Addresses of LAN computers are never transmitted
directly to the Internet.
Q: How can High-Performance Wireless Router share single user account to
multiple users?
A: High-Performance Wireless Router combines the following technologies to enable
this function.
Q: What operating systems does High-Performance Wireless Router series
support?
A: High-Performance Wireless Router uses standard TCP/IP protocol, it can be
operated as long as you have the TCP/IP protocol installed in your operating system
(For example: Windows 9x, Windows NT, Windows 2000, etc.)
Q: Can I use multiple E-mail accounts if I use High-Performance Wireless
Broadband Security Router User Guide
- 54 -
Router?
A: Yes, you can. Some people think having one Internet account mean that they can
only have one E-mail account. However, E-mail is set by mailbox accounts and is
different to the account you use to connect to your ISP. If you want more E-mail
accounts, you should contact your ISP or you can browse the Internet to apply for a free
E-mail account.
Q: Can Internet users access LAN computers?
A: High-Performance Wireless Router uses NAT to router all in/out packets. All
external users can only see the IP of the High-Performance Wireless Router but cannot
access LAN computers. The LAN computers are well protected with the
High-Performance Wireless Router’s natural firewall.
Q: When should I use DMZ host?
A: Enable DMZ host when you want to have unrestricted communication between your
PC and the Internet, for example, playing Internet games (i.e. Ages of Empire) or
having multimedia conferences (i.e. NetMeeting).
Q: Does the High-Performance Wireless Router support PPTP of VPN packets
pass through?
A: Yes. High-Performance Wireless Router supports single session PPTP pass through.
Q: Does the High-Performance Wireless Router series support IPsec?
Yes. High-Performance Wireless Router supports single session IPsec pass through.
Broadband Security Router User Guide
- 55 -
Appendix A: Technical Specifications
Standards Compliance
IEEE 802.3 10BASE-T
IEEE 802.3u 100BASE-TX
IEEE 802.11b Wireless
Interface
One 10/100Mbps Ethernet/Fast Ethernet RJ45 port on WAN
Four 10/100Mbps auto-sensing Ethernet RJ-45
One Wireless Access Point
Management
Web-based UI Management
LED Display
Power
DIAG
WLAN Enable/Activity
WAN and LAN port(s) Link/Activity
Environment
Operation Temperature: 0 ~ 40 degrees C (32 ~ 104 degrees F)
Storage Temperature: -20 ~ 60 degrees C (-4 ~ 140 degrees F)
Humidity: Operating 10 ~ 85% non-condensing
Storage 5% to 90% Non-Condensing
Dimension
87 (L) x 150 (W) x 30 (H) mm (3.4 x 5.9 x 1.18 in)
Power
External, DC 12V, 1A
Broadband Security Router User Guide
- 56 -
Mounting
Desktop
Wall-mounting
Broadband Security Router User Guide
- 57 -
Appendix B: Glossary
10Base-T / 100Base-T
The adaptation of the Ethernet standard for Local Area Networks (LANs). 10Base-T
uses a twisted pair cable with maximum lengths of 100 meters and transmits data at
10Mbps maximum. 100Base-T is similar, but uses two different twisted pair
configurations and transmits at 100Mbps maximun.
Ad-hoc Network
Also known as the peer-to-peer network, an ad-hoc network allows all PCs participating
in a wireless network and being within range, to communicate with each other. User’s
in the same ad-hoc network can share files, printers, and other network resources.
Adapter
A device that makes the connection to a network segment such as Ethernet, modem
cards and adapters.
ADSL
Asymmetric Digital Subscriber Line (ADSL), as it’s name indicates, is an asymmetrical
data trasmission technology with higher traffic rate downstream and lower traffic rate
upstream. ADSL technology satisfies the bandwidth requirements of applications which
demand “asymmetric” traffic, such as web surfing, file downloads and telecommuting.
Bandwidth
The amount of data that can be transmitted in a fixed amount of time.
Browser
A software application used to locate and display Web pages. Examples include
Netscape Navigator and Microsoft Internet Explorer.
BSS
BSS is the acronym of Basic Service Set that consists of a wireless access point and a
group of wireless client PCs.
Broadband Security Router User Guide
- 58 -
Communication Protocols
Communication between devices requires they agree on the format in which the data is
to be transmitted, sent and received. The communications protocols are a set of rules
that define the data format.
Cookie
A Cookie is a piece of data stored on your PC while a web server can retrieve late to
identify your machine. It is normally a text with ID number, but cab include other
information.
DHCP
DHCP, short for Dynamic Host Configuration Protocol, is a protocol for assigning
dynamic IP Addresses to devices on a network. Dynamic Addressing means that a
device can have a different IP Address each time it connects to the network. It can save
a lot of IP configuration. This protocol is supported by Windows 95/NT, Mac OS, and
many other popular OS.
Domain Name
A name that identifies one or more IP Addresses. For example, the domain name
microsoft.com represents about a dozen IP Addresses. Domain names are used in URLs
to identify particular Web pages. For example, in the URL
http://www.pcwebopedia.com/index.html, the domain name is pcwebopedia.com.
DoS
DoS is the abbreviation for Denial of Service. This occurs when a computer or network
is overwhelmed to the point that it can no longer function normally. For example, a
hacker may use fake IP addresses to accumulate numerious connections to flood the
server he wants to attack.
DDNS
DDNS is an acronym for Dynamic Domain Name Service. It helps map the domain
name of a host which has a dynamic public IP address to the IP address that in allocated
each time the ISP assigns a new IP address.
DNS
Short for Domain Name Server, DNS translates domain names into IP Addresses and
helps us recognize and remember domain names as they are alphabetic in form. The
Internet actually runs on numbered IP Addresses. DNS servers translate domain names
Broadband Security Router User Guide
- 59 -
into their respective IP Addresses. Addressing systems using Domain name, like
www.yahoo.com, is easier to use than an IP address, such as 204.71.177.70.
DSSS
Also known as Direct Sequence Spread Spectrum, it is a radio transmission method that
continuously changes frequencies.
Ethernet
One of the most common Local Area Network (LAN) protocols. Ethernet uses a bus
topology which supports a data transfer rate of 10 Mbps.
ESS
ESS is an acronym for Extend Service Set that consists of several BSS’s.
Firewall
A security system used to enforce an access control policy between an organisation’s
networks and the Internet.
IEEE
Short for Institute of Electrical and Electronics Engineers, an organization best known
for developing standards for the computer and electronics industry.
Internet
A global network connecting millions of computers for the exchange of data, news and
opinions.
Intranet
A network based on the TCP/IP Protocol (an internet) belonging to an organization, and
accessible only by that organization's members, employees, or others with
authorization.
Infrastructure Network
Unlike “Aad-hoc” network, where users on a wireless LAN send data to each other
directly, users’ on an “Infrastructure” network send data to the other point through a
dedicated access point. Additionally, the access point enables users on a wireless LAN
Broadband Security Router User Guide
- 60 -
to access an existing wired network to take advantage of sharing the wired networks
resources, such as files, printers, and Internet access.
IP Address
An identifier for a computer or device on a TCP/IP network. Networks using the
TCP/IP Protocol route messages based on the IP Address of the destination. The format
of an IP address is a 32-bit numeric address written as four numbers separated by
periods. Each number can be from zero to 255.
IPSec
Internet Protocol Security is a security standard for network transmission. It provides
authentication and packet encryption over the Internet.
ISP
Short for Internet Service Provider, a company that provides access to the Internet,
usually for a monthly fee. The ISP provides a software package, username, password
and access phone number allowing users to log on to the Internet, browse the World
Wide Web and send and receive e-mail.
Local Area Network (LAN)
A computer network that spans a relatively small area. Most LANs are confined to a
single building or group of buildings. However, one LAN can be connected to other
LANs over any distance via telephone lines and radio waves. A system of LANs
connected in this way is called a wide area network (WAN)
MAC Address
Short for Media Access Control Address and in a hardware address that uniquely
identifies each node of a network.
NAT
Short for Network Address Translation, a routing protocol that allows global IP
Addresses to be translated into multiple private IP Addresses for use on internal LAN
networks. The explosion in the use of the Internet has created a critical problem for the
Internet Assigned Numbers Authority (IANA) which is in charge of assigning IP
Addresses to Internet users, ISPs etc.. NAT is a technology that has been introduced to
help maximize the utilization of assigned IAN and global IP Addresses. Briefly, NAT is
a technology which can create a private network domain behind a public IP. It is usually
used as a firewall. It can also be used when there are not enough IP Address.
Broadband Security Router User Guide
- 61 -
Network Protocol
Network protocols encapsulate and forward data packets from one interface to another.
PAP/CHAP ISP
Short for Password Authentication Protocol and Challenge Handshake Authentication
Protocol. Most ISPs use either one for user identification. If your ISP doesn’t support
these two protocols, contact your ISP for an authentication script.
PPP
Short for Point-to-Point Protocol, a communications protocol for transmitting
information over standard telephone lines between devices from different
manufacturers.
PPPoE
Short for PPP over Ethernet, relying on two widely accepted standards, Ethernet and the
Point-to-Point Protocol. It’s a communications protocol for transmitting information
between devices from different manufacturers over an Ethernet.
PPTP
Short for Point to Point Tunneling Protocol, PPTP encapsulates the packet for
transmission over the Internet. It is similar to creating a private “tunnel” over a large
public network and has almost equal security to a private network without actually
leasing a private line.
Protocol
An agreed format for transmitting, sending and receiving data between two devices.
Roaming
The ability for a wireless device moving from one access poin’s range to another
without losing the connection.
Router
An Internet device that requests for information to other routers until the information’s
location is found and the data can be transmitted back to the origin of the request.
Broadband Security Router User Guide
- 62 -
SPI
SPI is an acronym for Stateful Packet Inspection. The SPI engine examines not just the
headers of the packet, but also the packet contents, it can then determine more about the
packet than just its source and destination information. Moreover, stateful inspection
firewalls also close off ports until a connection to the specific port is requested.
TCP/IP
Short for Transmission Control Protocol and Internet Protocol, the suite of
communications protocols that enable hosts on the Internet to connect and exchange
streams of data.
VPN
VPN is an acronym for Virtual Private Network. Via access control and encryption,
VPN brings the same security to data transmission through the Internet as if it being
transmitted through a private network. It not only takes advantage of economies of
scale but also ensures high level security while the packet is sent over the large public
network.
Wide Area Network (WAN)
A system of LANs being connected by telephone lines and radio waves. Although
someWANs may be privately owned, they are usually considered a means of public
access.
WEP
An acronym for Wired Equivalent Privacy. It is an encryption mechanism used to
protect your wireless data communications. WEP uses a combination of 64-bit/128-bit
keys to encrypt data that is transmitted between all points in a wireless network to
insure data security. It is described in the IEEE 802.11 standard.
FCC Caution
1. The device complies with Part 15 of the FCC rules. Operation is subject to
the following two conditions:
(1)This device may not cause harmful interference.
(2)This device must accept any interference received,
including interference that may cause undesired operation.
2. FCC RF Radiation Exposure Statement: The equipment complies with
FCC RF radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with a
minimum distance of 20 centimeters between the radiator and your body.
3. This Transmitter must not be co-located or operating in conjunction with
any other antenna or transmitter.
4. Changes or modifications to this unit not expressly approved by the party
responsible for compliance could void the user authority to operate the
equipment.