NEXXT SOLUTIONS 350U1 2.4GHz High Power Wireless Outdoor Access Point User Manual AELPLDR4U1 P41 80 REV5
NEXXT SOLUTIONS 2.4GHz High Power Wireless Outdoor Access Point AELPLDR4U1 P41 80 REV5
Contents
- 1. AELPLDR4U1_User Manual(P1-40)-rev5
- 2. AELPLDR4U1_User Manual(P41-80)_REV5
AELPLDR4U1_User Manual(P41-80)_REV5
Nexxt Solutions - NetGate Wireless Access Point • Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols supported by the router). • Status - This field displays either Enabled or Disabled, as the current status for the device. • Modify - Click the Modify button next to in the entry you want to change. If you want to erase that entry, click on Delete. To setup a virtual server entry, follow the steps described below: 1.Click the Add New… button on the virtual servers page. (Figure 4-29) 2.Select the service you want to use from the Common Service Port list. If the Common Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port field. 3.Type the IP Address of the computer in the Server IP Address field. 4.Select the protocol used for this application. 5.Select the Enable option to activate the virtual server. 6.Click the Save button. Figure 4-29 Add or Modify a Virtual Server Entry • Common Service Port - Some common services are already available from the pull-down list. Note: If your computer or server has more than one type of service available, please select a different service, and enter the same IP Address for that computer or server. To modify or delete an existing entry: 1.Click the Modify button next to the entry you want to modify. If you want to erase this entry, click on the Delete button. 2.Proceed with the changes you want to make. 3.Click the Save button when you are done. Click the Enable All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries. Click the Next button to go to the following page. Click the Previous button to return to the last page. Note: If you set the virtual server of service port as 80, you must configure the Web management port on System Tools –> Remote Management page to be any value other than 80, such as 8080. Otherwise, there will be a conflict to disable the virtual server. 41 Nexxt Solutions - NetGate Wireless Access Point 4.9.2 Port triggering Go to Forwarding > Port Triggering in order to configure the Port Triggering parameters on this menu, as shown in Figure 4-30. Figure 4-30 Port triggering Once configured, the operation is as follows: 1.A local host makes an outgoing connection to an external host using a destination port number defined in the Trigger Port field. 2.The router records this connection, opens the incoming port or ports associated with this entry in the Port Triggering table, and associates them with the local host. 3.When necessary, the external host will be able to connect to the local host using one of the ports defined in the Incoming Ports field. • Trigger Port - The port for outgoing traffic. An outgoing connection using this port will “Trigger” this rule. • Trigger Protocol - The protocol used for Trigger Ports, either TCP, UDP, or All (all protocols supported by the router). • Incoming Ports Range - The port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports will be forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port section). Every group of ports must be separated by commas “,”. For example, 2000-2038, 2050-2051, 2085, 3010-3030. • Incoming Protocol - The protocol used for Incoming Ports Range, either TCP , UDP, or ALL (all protocols supported by the router). • Status - This field displays either Enabled or Disabled, as the current status for the device. To add a new rule, follow the steps below: 1.Click the Add New… button o the Port Triggering page. (Figure 4-31) 2.Select a common application from the Common Applications drop-down list, then the port parameters will be automatically filled in the corresponding field. If the Common Applications list does not have the application you want, enter the port parameters manually. 3.Select the protocol used for Trigger Port and Incoming Ports from the corresponding pull-down list. 4.Click on Enable on the Status field. 5.Click the Save button to save the new rule. 42 Nexxt Solutions - NetGate Wireless Access Point Figure 4-31 Add or Modify a Triggering Entry To modify or delete an existing entry, please complete the steps below: 1.Click the Modify button next to the entry you want to change. If you want to delete that entry, click the Delete in this stage. 2.Proceed with the changes you want to make. 3.Click the Save button when you are done. Click the Enable All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries. Note: 1.When the trigger connection is released, will cause the closing of the corresponding opened ports. 2.Each rule can only be used by one host on the LAN at a time. The trigger connection of other hosts on the LAN will be refused. 3.Incoming Port Range enabled cannot overlap each other at the same time. 4.9.3 DMZ (Demilitarized Zone) Go to Forwarding > DMZ in order to set up an DMZ host on this page, as shown in Figure 4-32. Figure 4-32 DMZ 43 Nexxt Solutions - NetGate Wireless Access Point To assign a computer or server to be a DMZ server: 1.Click the Enable radio button. 2.Enter the IP address in the DMZ Host IP Address field of the local PC that you want to set as the DMZ host. 3.Click the Save button when done. Note: Once you set the DMZ host, the firewall protection for that host will be disabled. 4.9.4 UPnP Go to Forwarding > UPnP in order to configure the UPnP function on this page, as shown in Figure 4-33: Figure 4-33 UPnP Settings • Current UPnP Status - UPnP can be enabled or disabled by clicking the corresponding button. As enabling UPnP may present a risk to security, this feature is disabled by default. • Current UPnP Settings List - This table displays the current UPnP information. • App Description - The description provided by the application in the UPnP request. • External Port - The external port that the router opened for the application. • Protocol - Shows which type of protocol is opened. • Internal Port – The Internal port that the router opened as a local host. • IP Address - The IP address of the local host that initiates the UPnP request. • Status - The port status is displayed in this field. “Enabled” means that the port is still Otherwise, the port will be inactive. Click Enable to activate the UPnP feature. Click Disable to cancel the UPnP feature. Click Refresh to update the Current UPnP Settings List. 44 active. Nexxt Solutions - NetGate Wireless Access Point 4.10 Security This menu offers an enhanced level of protection for your network. IP address Filtering allows you to control the Internet Access of specific users on your LAN based on their IP addresses. Domain Filtering allows you to control access to certain websites on the Internet by specifying their domains or key words. Like IP Address Filtering, MAC Address Filtering allows you to control access to the Internet of users on your local network based on their MAC Addresses. Advanced Security helps to protect the router from cyber attacks. Remote Management allows you to manage your Router from a remote location via the Internet. There are six submenus under the Security menu (shown in Figure 4-34): Firewall, IP Address Filtering, Domain Filtering, MAC Address Filtering, Remote Management and Advanced Security. Click any of them in order to configure the corresponding function. A detailed description of each submenu is provided below. Figure 4-34 The Security menu 45 Nexxt Solutions - NetGate Wireless Access Point 4.10.1 Firewall Go to Security > Firewall in order to enable the main firewall screen, as shown in Figure 4-35. The default setting for the switch is off. Turning the general firewall switch to off will disable IP Filtering, Domain Filtering and MAC Filtering even if their individual settings are enabled. Figure 4-35 Firewall Settings • Enable • Enable Firewall - Check this box to activate the Firewall. IP Address Filtering - Check this box to activate IP Address Filtering on the AP. There are two default filtering rules for IP Address Filtering: Allow or Deny the packets specified to pass through the router. • Enable Domain Filtering - Check this box to enable Domain Filtering. • Enable MAC Filtering - Check this box to activate MAC Address Filtering on the AP. There are two default filtering rules for MAC Address Filtering: Allow or Deny the packets specified to pass through the router. 46 Nexxt Solutions - NetGate Wireless Access Point 4.10.2 IP address filtering Go to Security > IP Address Filtering in order to configure the IP address filtering entry on the current page, as shown in Figure 4-36. Figure 4-36 IP address Filtering Do not change the default setting if you want to keep the IP Address Filtering feature disabled. To set up an IP Address Filtering entry, you should first enable the Firewall, followed by the IP Address Filtering on the Firewall page, as shown in Figure 4-35, and then click the Add New… button, as illustrated in Figure 4-36. This will cause the page Add or Modify an IP Address Filtering entry to be displayed, just like the one shown in Figure 4-37 below. Figure 4-37 Add or Modify an IP Address Filtering Entry To create or modify an IP Address Filtering entry, follow these instructions below: 1.Effective Time - Enter a time range using the HHMM format. It represents the period within which the entry shall remain active. For example 0803 - 1705, means that the command will be effective from 08:03 to 17:05. 2.LAN IP Address - Enter a LAN IP Address or a range of LAN IP addresses in this field, in dotted-decimal notation format. For example, 192.168.0.20 192.168.0.30. Leave the field blank if you want all LAN IP Addresses to be used. 47 Nexxt Solutions - NetGate Wireless Access Point 3.LAN Port - Enter a LAN Port or a range of LAN ports in this field. For example, 1030 2000. Leave the field blank if you want all LAN ports to be used. 4.WAN IP Address - Enter a WAN IP Address or a range of WAN IP Addresses in this field, in dotted-decimal notation format. For example, 61.145.238.6 - 61.145.238.47. Leave the field blank if you want all WAN IP Addresses to be used. 5.WAN Port - Enter a WAN Port or a range of WAN Ports in this field. For example, 25 110. Leave the field blank if you want all WAN to be used. 6.Protocol - Select the protocol to be used, either TCP, UDP, or All (all protocols supported by the router). 7.Action - Select either Allow or Deny through the router. 8.Status - Select Enabled or Disabled for this entry from the Status pull-down list. Click the Save button to confirm this entry. To add another entry, repeat steps 1-9. When finished, click the Back button. To modify or delete an existing entry: 1.Click the Modify next the entry you want to change. If you want to erase the entry, click the Delete button. 2.Proceed with the changes you want to make. 3.Click the Save button. Click the Enable All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries. You can change the entry’s order as desired. Fore entries are before hind entries. Enter the ID number in the first box you want to move and another ID number in second box you want to move to, and then click the Move button to change the entry’s order. Click the Next button to move to the following page and click the Previous button to return to the last page. For example: If you wish to block e-mail received and sent by the IP Address 192.168.0.7 on your local network, and to make the PC with IP Address 192.168.0.8 unable to visit the website of IP Address 202.96.134.12, while imposing no limitations on other PC(s), you should specify the following IP address filtering list: 48 Nexxt Solutions - NetGate Wireless Access Point 4.10.3 Domain Filtering Go to Security > Domain Filtering in order to configure the domain filtering feature, as shown in Figure 4-38. Figure 4-38 Domain Filtering Before adding a Domain Filtering entry, you must ensure that Enable Firewall and Enable Domain Filtering have been selected on the Firewall page, as shown in Figure 4-35. To Add a Domain filtering entry, click the Add New… button, as it appears in Figure 4-38. This will open the Add or Modify a Domain Filtering entry page, as in Figure 4-39. Figure 4-39 Add or Modify a Domain Filtering entry To add or modify a Domain Filtering entry, follow these instructions: 1.Effective Time - Enter a time range using the HHMM format. It represents the period within which the entry shall remain active. For example 0803 - 1705, means that the command will be effective from 08:03 to 17:05. 2.Domain Name - Type the domain or key word as desired in the field. Leave the field blank if you want all websites on the Internet to be used. For example: www.xxyy.com.cn, .net. 3.Status - Select Enabled or Disabled for this entry on the Status pull-down list. 4.Click the Save button to confirm this entry. To add or modify a Domain Filtering entry, follow these instructions: 49 Nexxt Solutions - NetGate Wireless Access Point 1.Click the Modify button next the entry you want to change. If you want to erase the entry, click the Delete button. 2.Proceed with the changes you want to make. 3.Click the Save button when done. Click the Enabled All button to activate all entries . Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries Click the Next button to go to the following page and the Previous button to return to the last page. For example, if you want to block the PC(s) on your LAN to access websites www.xxyy.com.cn, www.aabbcc.com and websites ending in .net on the Internet, while imposing no limitations on other websites, you should specify the following Domain filtering list. 4.10.4 MAC address filtering Go to Security > Domain Filtering in order to configure the MAC address filtering feature on the current page, as shown in Figure 4-40. Figure 4-40 MAC address Filtering Before setting up MAC Filtering entries, you must first ensure that Enable Firewall and Enable MAC Filtering have been selected on the Firewall page, as shown in Figure 4-35. To Add a MAC Address filtering entry, click the Add New… button in Figure 4-40. Then the Add or Modify a MAC Address Filtering entry page will be displayed, as shown in Figure 4-41: 50 Nexxt Solutions - NetGate Wireless Access Point Figure 4-41 Add or Modify a MAC Address Filtering entry To add or modify a MAC Address Filtering entry, follow these instructions: 1.Enter the appropriate MAC Address into the MAC Address field. The format of the MAC Address is XX-XX-XX-XX-XX-XX (X represents any hexadecimal digit). For example: 00-0E-AE-B0-00-0B. 2.Enter a short description of the PC in the Description field. Fox example: John’s PC. 3.Status - Select Enabled or Disabled for this entry, from the Status pull-down list. 4.Click the Save button to confirm this entry. To add additional entries, repeat steps 1-4. When finished, click the Return button to go back to the MAC Address Filtering page. To modify or delete an existing entry: 1.Click the Modify button next to the entry you want to change. If you want to erase the entry, click the Delete button. 2.Proceed with the changes you want to make. 3.Click the Save button once you are done. Click the Enabled All button to activate all entries . Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries Click the Next button to go to the following page and click the Previous button to return to the last page. Fox example: If you want to block the PC with MAC addresses 00-0A-EB-00-07-BE and 00-0A-EB-00-07-5F from accessing the Internet, first, enable the Firewall and MAC Address Filtering on the Firewall page. Then, you should specify the Default MAC Address Filtering Rule Deny these PC(s) with effective rules to access the Internet on the Firewall page, and include the following MAC address filtering list on this page: 51 Nexxt Solutions - NetGate Wireless Access Point 4.10.5 Remote management Go to Security > Remote Management in order to configure the Remote Management function on this screen, as shown in Figure 4-42. This feature allows you to manage your Router from a remote location via the Internet. Figure 4-42 Remote Management • Web Management Port – The web browser normally uses the standard HTTP service port 80 for access.. This Router’s default remote management web port number is 80. For greater security, you can change the remote management web port to a custom port by entering that number in the box provided. Choose a number between 1 and 65534 but do not use the number of any common service port. • Remote Management IP Address - This is the current address you will use when accessing your Router from the Internet. This function is disabled when the IP address is set to the default value of 0.0.0.0. To enable this function, change 0.0.0.0 to a valid IP address. If set to 255.255.255.255, then all the hosts will be able to access the Router from the internet. Note: 1.To access the Router, you should type your Router’s WAN IP address into your browser’s address (in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example, if your Router’s WAN address is 202.96.12.8, and the port number used is 8080, please enter http://202.96.12.8:8080 in your browser. Later, you may be asked for the Router’s password. After successfully entering the username and password, you will be able to access the Router’s web-based utility. 2.Be sure to change the Router’s default password to a more secure password. 52 Nexxt Solutions - NetGate Wireless Access Point 4.10.6 Advanced security Go to Security > Advanced Security in the menu in order to prevent the router from being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood from LAN, as shown in Figure 4-43. Figure 4-43 Advanced Security settings • Packets Statistic interval (5 ~ 60) - The default value is 10. Select a value between 5 and 60 seconds from the pull-down list. The Packets Statistic interval value indicates the time section of the packets statistic. The result of the statistic is used for analysis by SYN Flood, UDP Flood and ICMP-Flood. • DoS protection - Enable or Disable the DoS protection function. Only when enabled, flood filters will be effective. • Enable ICMP-FLOOD Attack Filtering – Check this box to Enable or Disable the ICMP-FLOOD Attack Filtering. 53 Nexxt Solutions - NetGate Wireless Access Point • ICMP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current ICMP-FLOOD Packets number is beyond the set value, the router will start up the blocking function immediately. • Enable UDP-FLOOD Filtering - Enable or Disable the UDP-FLOOD Filtering. • UDP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Select the desired setting between 5 ~ 3600 packets. When the current UPD-FLOOD Packets numbers exceeds the set value, the router will immediately start up the blocking feature. • Enable TCP-SYN-FLOOD Attack Filtering - Check this box to Enable or Disable the TCP-SYN- FLOOD Attack Filtering. • TCP-SYN-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Select the desired setting between 5 ~ 3600 packets. When the current TCP-SYN-FLOOD Packets numbers exceeds the set value, the router will immediately start up the blocking feature. • Ignore Ping Packet from WAN Port - Check this box to Enable or Disable this option. The default setting is disabled. If enabled, the ping packet from the Internet will be denied access to the router. • Forbid Ping Packet from LAN Port - Check this box to Enable or Disable Ping Packet access to the router from the LAN port. The default value is disabled. If enabled, the ping packet from the LAN port will be denied access to the router. (This can be used to defend the network against some viruses) Click the Save button to store the settings. Click the Blocked DoS Host Table button to display the DoS host list with the items excluded. 4.11 Static routing A static route is a pre-determined path that network information must travel to reach a specific host or network. To add or delete a route, use the parameters under the Static Routing page, as shown in Figure 4-44. Figure 4-44 Static Routing To add static routing entries: 1.Click the Add New button. The screen,! as shown in Figure 4-45 will open. 2.Enter the following parameters. • Destination IP Address - The Destination IP Address is the address of the network or host that you want to assign a static route to. • Subnet Mask - The Subnet Mask determines which portion of an IP Address is the network portion, and which portion is the host portion. • Default Gateway - This is the IP Address of the gateway device that allows for contact between the router and the network or host. 54 Nexxt Solutions - NetGate Wireless Access Point 3.Select Enabled or Disabled for this entry from the Status pull-down list. 4.Click the Save button to keep your settings. Figure 4-45 Add or Modify a Static Route Entry To modify or delete an existing entry: 1.Click the Modify button next to the entry you want to change. If you want to erase the entry, click the Delete button. 2.Proceed with the changes you want to make. 3.Click the Save button when done. Click the Enabled All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries. 4.12 IP & MAC binding ARP Binding is useful for controlling access of specific computers in the LAN. This page displays the IP & MAC Binding Setting table; which you can configure based on your particular needs. There are two submenus under the IP & MAC Binding menu (shown in Figure 4-46): Binding Setting and ARP List. Click any of them in order to configure the corresponding function. Detailed descriptions for each submenu are provided below. Figure 4-46 the IP & MAC Binding menu 55 Nexxt Solutions - NetGate Wireless Access Point 4.12.1 Binding setting Go to IP & MAC Binding > Binding Setting in order to configure the binding parameters, as shown in Figure 4-47. Figure 4-47 Binding Setting • MAC Address - The MAC address of the monitored computer in the LAN. • IP Address - The assigned IP address of the monitored computer in the LAN. • Bind - Check this option to enable ARP binding for a specific device. • Modify - Use this link to edit or delete an existing entry. When you want to add or modify an IP & MAC Binding entry, you can click the Add New button or Modify button, and then you will be directed to the next page. This page is used for adding or modifying an IP & MAC Binding entry (shown in Figure 4-48). Figure 4-48 IP & MAC Binding Setting (Add & Modify) To add IP & MAC Binding entries, follow the steps below. 1.Click the Add New... button, as shown in Figure 4-48. 2.Enter the MAC Address and IP Address. 3.Select the Bind checkbox. 4.Click the Save button to accept your changes. To modify or delete an existing entry, follow the steps below. 1.Find the desired entry in the table. 2.Click Modify or Delete as desired, on the Modify column. 56 Nexxt Solutions - NetGate Wireless Access Point To find an existing entry, follow the steps below. 1.Click the Find button, to open the window. 2.Enter the MAC Address or IP Address. 3.Click the Bind button on the page, as shown in Figure 4-49. Figure 4-49 Find IP & MAC Binding Entry Click the Enabled All button to activate all entries . Click the Delete All button to erase all entries. 4.12.2 ARP list Go to IP & MAC Binding > ARP List in order to see the IP addresses on the LAN and their associated MAC addresses included in the ARP list. You can also use the list to configure the corresponding parameters from there. (Figure 4-50). Figure 4-50 ARP List • MAC Address - The MAC address of the monitored computer in the LAN. • IP Address - The assigned IP address of the controlled computer in the LAN. • Status - Indicates whether or not the MAC and IP addresses are bound. • Configure – To load or delete an item. • Load - To load the item into • Delete - To erase the item. the IP & MAC Binding list. Click the Bind All button to bind all the current items. This option is only available when the ARP binding is enabled. Click the Load All button to include all items in the IP & MAC Binding list. Click the Refresh button to update all items. 57 Nexxt Solutions - NetGate Wireless Access Point Note: An item cannot be entered into the IP & MAC Binding list if the IP address of the item has been loaded before. An error warning will be displayed as well. Likewise, The Load All command will only load the items without interfering with the IP & MAC Binding list. 4.13 Dynamic DNS The router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP Address. It is useful when you are hosting your own website, FTP server, or other server behind the router. Before using this feature, you need to sign up for DDNS service providers such as www.dyndns.org, www.oray.net or www.comexe. cn. The Dynamic DNS client service provider will give you a password or key. 4.13.1 Dyndns.org DDNS If your selected dynamic DNS Service Provider is www.dyndns.org, the page will appear as shown in Figure 4-51. Figure 4-51 Dyndns.org DDNS Settings To set up DDNS, follow these instructions: 1.Enter the User Name for your DDNS account. 2.Enter the Password for your DDNS account. 3.Enter the Domain Name you received from the dynamic DNS service provider 4.Click the Login button to log into the DDNS service. • Connection Status - The status of the DDNS service connection is displayed in this field. Click Logout to exit the DDNS service. 58 Nexxt Solutions - NetGate Wireless Access Point 4.13.2 Oray.net DDNS If your selected dynamic DNS Service Provider is www.oray.net, the following page will appear, as shown in Figure 4-52. Figure 4-52 Oray.net DDNS Settings To set up DDNS, follow these instructions: 1.Enter the User Name for your DDNS account. 2.Enter the Password for your DDNS account. 3.Click the Login button to log in to the DDNS service. • Connection Status - The status of the DDNS service connection is displayed here. • Domain Name - The domain names are displayed in this field. Click Logout to log out the DDNS service. 59 Nexxt Solutions - NetGate Wireless Access Point 4.13.3 Comexe.cn DDNS If your selected dynamic DNS Service Provider is www.comexe.cn, the page will appear as shown in Figure 4-53. Figure 4-53 Comexe.cn DDNS Settings To set up for DDNS, follow these instructions: 1.Enter the domain names your dynamic DNS service provider gave. 2.Enter the User Name for your DDNS account. 3.Enter the Password for your DDNS account. 4.Click the Login button to log in to the DDNS service. • Connection Status -The status of the DDNS service connection is displayed here. Click Logout to log out the DDNS service. 60 Nexxt Solutions - NetGate Wireless Access Point 4.14 SNMP SNMP will allow the network management station to retrieve statistics and status from the SNMP agent in this device. Simple Network Management Protocol (SNMP) is a popular network monitoring and management tool, which encompasses a collection of specifications for network management that include the protocol itself. To use this function, select Enable and enter the following parameters in Figure 4-54. Figure 4-54 SNMP Settings 4.14.1 Community setting Go to SNMP > Community Setting in order to configure SNMP (Simple Network Management Protocol) communities, which are helpful for managing client access authority levels. Figure 4-55 Community Setting Num - It displays the number for which the SNMP community is defined. Community String - Enter the password used to authenticate the management station to the device. • Access Mode - This field allows you to specify the access privileges of the community. Read Only indicates that the community is only permitted to visualize the device configuration. Read & Write indicates that the community has been granted permission to read and change the device configuration. • Status - This field allows you to enable/disable the corresponding entry. • Modify - This field allows you to modify an entry. To modify a community setting entry: • • 1.Find the desired entry in the table. 2.Click the Modify button in front of the community you wish to change 3.Modify the community access to the SNMP entity. 4.From the Access Mode pull-down list, select the Read Only or Read&Write option. 5.Select the Enabled option from the Status pull-down list. 6.Click the Save button to save your changes. Click the Enabled All button to activate all entries. Click the Disable All button cancel all entries. 61 Nexxt Solutions - NetGate Wireless Access Point 4.14.2 SNMP System Setting Go to SNMP > SNMP Setting in order to configure several system-related parameters (iso.org.dod.internet.mgmt.mib-2.system), as shown in Figure 4-56. Figure 4-56 SNMP System Setting • • • System Contact - The textual identification of the contact person for this managed node, together with information on how to contact this person. System Name - An administratively-assigned name for this managed node. By convention, this is the node’s fully-qualified domain name. System Location - The physical location of this node. Click the Save button to keep the configuration of the current page. 4.15 System tools System Tools option helps you to optimize the configuration of your device. You can upgrade the AP to the latest version of firmware, as well as backup or restore the AP’s configuration files. Ping Watch Dog is designed to constantly monitor a particular connection to a remote host using the Ping tool. Speed Test helps to test the connection speed to and from any reachable IP address on current network, especially when we are building wireless network between devices which are far away from each other. It’s suggested that you change the default password to a more secure one because it controls access to the device’s web-based management page. Besides, you can find out what happened to the system in System Log. There are ten submenus under the System Tools menu (shown as Figure 4-57): Time, Firmware, Factory Defaults, Backup & Restore, Ping Watch Dog, Reboot, Password, Syslog and Statistics. Clicking any of them will enable you to configure the corresponding function. The detailed explanations for each submenu are provided below. Figure 4-57 System Tools menu 62 Nexxt Solutions - NetGate Wireless Access Point 4.15.1 Time Go to System Tools > Time in order to set the time manually or get the GMT from the Internet for the router on the page as shown in Figure 4-58. Figure 4-58 Time settings • • • Time Zone - Select your local time zone from this drop-down list. Date - Enter your local date in MM/DD/YY into the blank fields. Time - Enter your local time in HH/MM/SS into the blank fields. To configure Time settings, please follow the steps below: 1.Select your local time zone. 2.Enter date and time in the corresponding blank fields. 3.Click Save. Click the Get GMT button to get GMT time from the Internet if you have an active internet connection. If you’re using Daylight saving time, please follow the steps below. 1. Select Using Daylight Saving Time. 2. Enter daylight saving start time and end time in the blanks. Note: 1.This setting will be used for some time-based functions such as firewall. You must specify your time zone once you log in to the router successfully, otherwise, none of these functions will work. 2.The time will be lost if the router is turned off. The router will obtain GMT automatically when it connects to Internet. 63 Nexxt Solutions - NetGate Wireless Access Point 4.15.2 Firmware Go to System Tools > Firmware in order to upgrade the latest version of firmware for the device, as seen on the screen shown in Figure 4-59. Figure 4-59 Firmware Upgrade New firmware versions are posted at http://www.tp-link.com and can be downloaded for free. There is no need to upgrade the firmware unless the new firmware has a new feature you want to use. However, when experiencing problems caused by the AP itself, you can try to upgrade the firmware. Note: Before upgrading the AP’s firmware, you should write down some of your customized settings to avoid losing important configuration settings of AP. To upgrade the AP’s firmware, please take the following steps: 1.Download a more recent firmware upgrade file from our website (http://www.nexxtsolutions.com). 2.Click Choose File to view the folders and select the downloaded file. 3.Click Upgrade. •Firmware Version - Displays the current firmware version. •Hardware Version - Displays the current hardware version. The upgrade file must match the current hardware version. Note: Do not turn off the AP or press the Reset button while the firmware is being upgraded. The AP will reboot after the Upgrading is complete. 64 Nexxt Solutions - NetGate Wireless Access Point 4.15.3 Factory defaults Go to System Tools > Factory Default in order to restore the router configuration to its factory default values, as seen on the following screen (Figure 4-60). Figure 4-60 Restore Factory Default Click Restore to reset all configuration settings to their default values. •The default User Name: admin •Default Password: admin •Default IP Address: 192.168.0.1 •Default Subnet Mask: 255.255.255.0 Note: Any settings you have saved will be lost after the default settings are restored. 4.15.4 Backup & restore Go to System Tools > Backup & Restore button to save all the configuration settings as a backup file in your local computer, as shown in Figure 4-61. Figure 4-61 Save or Restore the Configuration Click the Backup button to save all configuration settings as a backup file in your local computer. To restore the AP’s configuration, please take the following steps: Choose File to find the location of configuration file which you want to restore. Restore to update the configuration with the file using the path you have entered or selected in the blank field. •Click •Click Note: 1.The current configuration will be overwritten by the uploaded configuration file. 2.If the process is not done correctly, it could render the device unmanageable. 3.The upgrade process lasts around 20 seconds, after which the router will restart automatically. Keep the router on during the entire upgrading process to prevent any potential damage to the unit. 65 Nexxt Solutions - NetGate Wireless Access Point 4.15.5 Ping Watch Dog Go to System Tools > Ping Watch Dog in order to constantly monitor a particular connection to a remote host using the Ping tool. It makes this device continuously ping a user defined IP address (it can be the internet gateway, for example). If it is unable to ping under the user-defined constraints, this device will automatically reboot. Figure 4-62 Ping Watch Dog Utility •Enable - Check this box to Enable or Disable the Ping Watch Dog.. •IP Address - The IP address of the target host where the Ping Watch Dog Utility is sending ping packets. •Interval - Sets the time interval between two consecutive ping packets being sent.. •Delay - Sets the time delay before first ping packet is sent out when the device is restarted. •Fail Count - Upper limit of the ping packet the device can drop continuously. If this value is overrun, the device will restart automatically. Make sure to click the Save button to make your settings changes effective. 4.15.6 Speed test Go to Wireless > Speed in order to test the connection speed to and from any reachable IP address of the existing network, especially when establishing a wireless link between devices which are far away from each other. It should be used for the preliminary throughput reading between two network devices. This reading is a rough estimate. You can input the remote device’s administrator Username and Password to get a precise reading, provided the remote device do support the Speed Test Utility of our AP. 66 Nexxt Solutions - NetGate Wireless Access Point Figure 4-63 Speed Test •Destination IP - The Remote device’s IP address. •User - Administrator password of the remote device. It should be filled correctly if you want to get a precise reading. Otherwise, leave this field blank. •Advanced options - This command is used to display the advanced test options, when the precise reading is being selected. Note: If either User or Password is incorrect, only a basic test will be performed. In other words, none of the advanced options you set will take effect. •Direction - There are 3 options available for the traffic direction while estimating the throughput •transmit - Estimates the outgoing throughput (TX). •receive - Estimates the ingoing throughput (RX). •both - Estimates the incoming throughput (Rx) first, •Duration - Use •Data amount - followed by the outgoing (Tx) throughput. this box to specify how long the test should last. The maximum data amount to be sent out during the whole test. Note: If both Duration and Data amount are specified, the test will stop after any of them is met. Be sure to click the Run Test button to start a new test after you filled enough information. You can also stop a running test by clicking the Stop Test button at any time. 67 Nexxt Solutions - NetGate Wireless Access Point 4.15.7 Reboot Go to System Tools > Reboot in order to reset the device, as shown in the screen below. Figure 4-64 Reboot the AP Click Reboot to initialize the AP. Some device settings take effect only after the device is rebooted., which include: •Change LAN IP Address. (system will reboot automatically) •Upgrade the firmware of the AP (system will reboot automatically). •Restore the AP’s settings to factory default (system will reboot automatically). •DHCP service function. •Static address assignment of DHCP server. 4.15.8 Password Go to System Tools > Password in order to change the router’s factory default user name and password, using the screen shown in Figure 4-65. Figure 4-65 Password It is strongly recommended that you change the factory default user name and password of the AP to more secure ones because they control access to the AP’s web-based utility. All users who try to access the AP’s web-based utility or Quick Setup will be prompted to type the AP’s user name and password. Note: The new user name and password must not exceed 14 characters in length and must not include any space. Enter the new Password twice to confirm it. Click Save when finished. Click Clear All to delete all existing entries. 68 Nexxt Solutions - NetGate Wireless Access Point 4.15.9 Syslog Go to System Tools > System Log to query the logs in order to visualize the activity of the device, as shown in Figure 4-66. Figure 4-66 System Log The AP can keep logs of all traffic. You can query the logs to see the activity in the AP. Click Refresh to show the latest log lists Click Clear All to delete all the log entries. 4.15.10 Statistics The Statistics page (shown in Figure 4-67) displays the network traffic of each PC on the LAN, including total traffic and the traffic of the last Packets Statistic interval in seconds. Figure 4-67 Statistics •Current Statistics Status - Enabled or Disabled. The default value is disabled. To enable, click the Enable button. If disabled, the function of DoS protection in Security settings will be ineffective. •Packets Statistics Interval - The default value is 10. Select a value between 5 and 60 seconds from the pull-down list. This statistics interval defines the time between each transmission of data packets. •Sorted Rules - Select a rule from the pull-down list to display the corresponding statistics. 69 Nexxt Solutions - NetGate Wireless Access Point Statistics Table: IP Address The IP Address displayed with statistics Packets The total amount of packets received and transmitted by the router. Bytes The total amount of bytes received and transmitted by the router. Packets The total amount of packets received and transmitted in the last Packets Statistic interval seconds. Bytes The total amount of bytes received and transmitted in the last Packets Statistic interval seconds. ICMP Tx The total amount of the ICMP packets transmitted to WAN in the last Packets Statistic interval seconds. UDP Tx The total amount of the UDP packets transmitted to WAN in the last Packets Statistic interval seconds. TCP SYN Tx The total amount of the TCP SYN packets transmitted to WAN in the last Packets Statistic interval seconds. Total Current Click the Save button to store the Packets Statistic interval value. Click the Auto-refresh checkbox to update the page automatically. Click the Refresh button to refresh the page immediately. 70 Nexxt Solutions - NetGate Wireless Access Point Appendix A: FAQ Go to System Tools > System Log to query the logs in order to visualize the activity of the device, as shown in Figure 4-66. 1. How do I configure the router for ADSL users to access the Internet? 1.First, configure the ADSL Modem configured in RFC1483 bridge mode. 2.Connect the Ethernet cable from your ADSL Modem to the WAN port on the router. The telephone cord plugs into the Line port of the ADSL modem. 3.Login to the router, click the “Network” menu on the left of your browser, and click “WAN” submenu. On the WAN page, select “PPPoE” for WAN Connection Type. Type user name in the “User Name” field and password in the “Password” field, finish by clicking on the “Connect” button. Figure A-1 PPPoE Connection Type 4.If your ADSL lease is in “pay-according-time” mode, select “Connect on Demand” or “Connect Manually” as your Internet connection mode. Type an appropriate value for “Max Idle Time” to avoid wasting paid time. Otherwise, you can select “Auto-connecting” as your Internet connection mode. Figure A-2 PPPoE Connection Mode Note: 1.Sometimes the connection cannot be terminated despite your setting of the ”Max Idle Time” interval. This is due to some applications are continually linked to the internet in the background. 2.If you are a Cable user, please configure the router following the above steps. 71 Nexxt Solutions - NetGate Wireless Access Point 2. How do I configure the router for Ethernet users to access the Internet? 1.Login to the router. Go to the “Network” in the menu located on the left of your browser, and select “WAN” in the submenu. Once the WAN page opens, select “Dynamic IP” as the WAN Connection Type, and finish by clicking on the “Save” button. 2.Some ISPs require that you register the MAC Address of your adapter, which is connected to your cable/DSL Modem during installation. If your ISP requires MAC register, login to the router and click the “Network” menu link on the left of your browser, and then click “MAC Clone” submenu link. On the “MAC Clone” page, if your PC’s MAC address is proper MAC address, click the “Clone MAC Address” button and your PC’s MAC address will copied into the “WAN MAC Address” field. Or you may type the MAC Address directly into the “WAN MAC Address” field. The format for the MAC Address is XX-XX-XX-XX-XX-XX. Then click the “Save” button. It will take effect after rebooting. Figure A-3 MAC Clone 3. I want to use Netmeeting, what do I need to do? 1.If you start Netmeeting as a host, you don’t need to do anything with the router. 2.If you start as a response, you need to configure Virtual Server or DMZ Host. 3.How to configure Virtual Server: Login to the router, click the “Forwarding” menu on the left of your browser, and click “Virtual Servers” submenu. On the “Virtual Server” page, click Add New, then on the “Add or Modify a Virtual Server” page, enter “1720 in the “Service Port” blank field, and your IP address in the corresponding field, using 192.168.0.169 as an example. Remember to Enable and Save your settings at the end. Figure A-4 Virtual Servers 72 Nexxt Solutions - NetGate Wireless Access Point Figure A-5 Add or Modify a Virtual server Entry Note: The caller on the other end should call your WAN IP, which is displayed on the “Status” page. 4.How to enable DMZ Host: Login to the router, click the “Forwarding” menu on the left of your browser, and click “DMZ” submenu. On the “DMZ” page, click the “Enable” radio button and type your IP address into the “DMZ Host IP Address” field, using 192.168.0.169 as an example. Remember to click the Save button when you are done. Figure A-6 DMZ 4. I want to build a Web Server on the LAN, what should I do? 1.Because the Web Server port 80 will interfere with the Web management port 80 on the router, you must change the Web management port number to avoid it. 2.To change the Web management port number: Login to the router, click the “Security” menu on the left of your browser, and select “Remote Management” submenu. On the “Remote Management” page, type any port number other than 80, such as 88, into the “Web Management Port” field. Click “Save” and reboot the router. 73 Nexxt Solutions - NetGate Wireless Access Point Figure A-7 Remote Management Note: If the above configuration takes effect, type http://192.168.0.1:88/ to access the router in the address field of the Web browser (the router’s LAN IP address: Web Management Port). 3.Login to the router, click the “Forwarding” menu on the left of your browser, and click the “Virtual Servers” submenu. On the “Virtual Server” page, click Add New, then on the “Add or Modify a Virtual Server” page, enter “80” into the blank field next to “Service Port”, and your IP address next to the corresponding blank field, taking 192.068.0.188 as an example. Remember to Enable and Save your settings at the end. Figure A-8 Virtual Servers 5. The wireless stations cannot connect to the router. 1.Make sure the “Wireless Router Radio” is enabled. 2.Make sure that the wireless stations’ SSID matches the router’s SSID. 3.Make sure the wireless stations have chosen the right KEY for encryption when the router is encrypted. 4.If the wireless connection is ready, but you can’t access the router, check the IP Address of your wireless stations. A-9 Add or Modify a Virtual server Entry 74 Nexxt Solutions - NetGate Wireless Access Point Appendix B: Configuring the PC In this section, we will explain how to install and configure the TCP/IP correctly in Windows XP. First, make sure your Ethernet Adapter is working. Refer to the adapter’s manual for further information, if needed. 1. Configure TCP/IP component 1.On the Windows taskbar, click the Start button, and then click Control Panel. 2.After clicking the Network and Internet Connections icon, select the Network Connections tab in the new window. 3.Right click the icon displayed below, and select Properties on the popup menu. Figure B-1 4. In the page displayed below, double click on Internet Protocol (TCP/IP). 75 Nexxt Solutions - NetGate Wireless Access Point Figure B-2 5.The following TCP/IP Properties window will be displayed, with the IP Address tab open by default. Now you have two ways to configure the TCP/IP protocol below: • Setting IP address automatically Select Obtain an IP address automatically, and then choose Obtain DNS server automatically, as shown in the Figure below: 76 Nexxt Solutions - NetGate Wireless Access Point Figure B-3 Note: For Windows 98 OS or before, the PC and router may need to be restarted. • Setting IP address manually 1.Select Use the following IP address radio button. The following items will be available. 2.If the Router’s LAN IP address is 192.168.0.1, type IP address 192.168. 0.x (whereby x is any value from 1 to 253), and Subnet mask is 255.255.255.0. 3.Type the router’s LAN IP address (the default IP is 192.168.0.1) into the Default gateway field. 4.Select Use the following DNS server addresses. In the Preferred DNS Server field you can enter the same value as the Default gateway or type the local DNS server IP address. 77 Nexxt Solutions - NetGate Wireless Access Point Figure B-4 5. Click OK when done to save your settings. 78 Nexxt Solutions Appendix C: Speci NetGate Wireless Access Point cations General Standards and protocols IEEE 802.3, 802.3u, 802.11b and 802.11g, TCP/IP, DHCP Interface One 10/100M Auto-Sensing RJ45 Port(Auto MDI/MDIX), supporting Passive PoE Frequency range 2.412-2.462GHz Antenna 12dBi Dual-Polarized Aluminum Antenna 9dBi Derectional Outdoor Antenna Beamwidth Horizontal: 60° Vertical: 30° Ports One 10/100M Auto-Negotiation LAN RJ45 port, supporting passive PoE Cabling Type 10BASE-T: UTP category 3, 4, 5 cable (maximum 100m) EIA/TIA-568 100 Ω STP (maximum 100m) 100BASE-TX: UTP category 5, 5e cable (maximum 100m) EIA/TIA-568 100 Ω STP (maximum 100m) Modulation type IEEE 802.11b: DQPSK, DBPSK, DSSS, and CCK IEEE 802.11g: BPSK, QPSK, 16QAM, 64QAM, OFDM Receiver sensitivity 802.11g54M: -76dBm 48M: -78dBm 36M: -82dBm 12M: -91dBm 9M:-92dBm802.11b11M:-90dBm 5.5M:-92dBm 1M:-98dBm Enclosure Outdoor weatherproof ABS Lighting protection Grounding Terminal Power supply Output: 12VDC / 1A switching PSU Certifications FCC Wireless Wireless Data Rates 54/48/36/24/18/12/9/6Mbps or 11/5.5/3/2/1Mbps Wireless Encryptions 64/128/152-bit WEP, WPA/WPA2, WPA-PSK/WPA2-PSK Physical and Environment Dimensions 10.4 × 4.7 × 3.2 in. (265x120x83mm) Working Temperature -30 ºC~70 ºC Working Humidity 10% ~ 90% RH, Non-condensing Storage Temperature -40 ºC~70 ºC(-40ºF~158 ºF) Storage Humidity 5% ~ 90% RH, Non-condensing 79 Nexxt Solutions - NetGate Wireless Access Point Appendix D: Glossary 2x to 3x eXtended Range™ WLAN Transmission Technology - The WLAN device with 2x to 3x eXtended Range™ WLAN transmission technology is able to increase its sensitivity up to 105 dB, providing a robust, longer-range wireless connection in the coverage area. With this range-enhancing technology, a 2x to 3x eXtended Range™ based-client and access point can maintain up to three times the transmission distance of traditional 802.11b and 802.11g solutions. While the typical transmission distance of 802.11b and 802.11g devices is about 300m, a 2x to 3x eXtended Range™ based client and access point is able to maintain a much higher transmission range of nearly 830m. 802.11b - The 802.11b standard specifies a wireless networking at 11 Mbps using direct-sequence spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.4GHz, and WEP encryption for security. 802.11b networks are also referred to as Wi-Fi networks. 802.11g - specification for wireless networking at 54 Mbps using direct-sequence spread-spectrum (DSSS) technology, using OFDM modulation and operating in the unlicensed radio spectrum at 2.4GHz, and backward compatibility with IEEE 802.11b devices, and WEP encryption for security. DDNS (Dynamic Domain Name System) - The capability of assigning a fixed host and domain name to a dynamic Internet IP Address. DHCP (Dynamic Host Configuration Protocol) - A protocol that automatically configure the TCP/IP parameters for the all the PC(s) that are connected to a DHCP server. DMZ (Demilitarized Zone) - A Demilitarized Zone allows one local host to be exposed to the Internet for a special-purpose service such as Internet gaming or videoconferencing. DNS (Domain Name System) – An Internet Service that translates the names of websites into IP addresses. Domain Name - A descriptive name for an address or group of addresses on the Internet. DoS (Denial of Service) - A hacker attack designed to prevent your computer or network from operating or communicating. DSL (Digital Subscriber Line) - A technology that allows data to be sent or received over existing traditional phone lines. ISP (Internet Service Provider) - A company that provides access to the Internet. MTU (Maximum Transmission Unit) - The size in bytes of the largest packet that can be transmitted. NAT (Network Address Translation) - NAT technology translates IP addresses of a local area network to a different IP address for the Internet. PPPoE (Point to Point Protocol over Ethernet) - PPPoE is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection. SSID - A Service Set Identification is a thirty-two character (maximum) alphanumeric key identifying a wireless local area network. For the wireless devices in a network to communicate with each other, all devices must be configured with the same SSID. This is typically the configuration parameter for a wireless PC card. It corresponds to the ESSID in the wireless Access Point and to the wireless network name. WEP (Wired Equivalent Privacy) - A data privacy mechanism based on a 64-bit or 128-bit or 152-bit shared key algorithm, as described in the IEEE 802.11 standard. Wi-Fi - is a trademark of the Wi-Fi Alliance, founded in 1999 as Wireless Internet Compatibility Alliance (WICA), comprising more than 300 companies, whose products are certified by the Wi-Fi Alliance, based on the IEEE 802.11 standards (also called Wireless LAN (WLAN) and Wi-Fi). This certification warrants interoperability between different wireless devices. WISP - Wireless Internet Service Providers (WISPs) are Internet service providers with networks built around wireless networking. The technology used ranges from commonplace Wi-Fi mesh networking or proprietary equipment designed to operate over open 900MHz, 2.4GHz, 4.9, 5.2, 5.4, and 5.8GHz bands or licensed frequencies in the UHF or MMDS bands. WLAN (Wireless Local Area Network) - A group of computers and associated devices communicate with each other wirelessly, which network serving users are limited in a local area. 80
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.5 Linearized : No XMP Toolkit : Adobe XMP Core 4.1-c036 46.277092, Fri Feb 23 2007 14:17:08 Modify Date : 2013:04:23 10:21:08+08:00 Create Date : 2013:03:11 11:48:24+08:00 Metadata Date : 2013:04:23 10:21:08+08:00 Creator Tool : Adobe Illustrator CS3 Thumbnail Width : 200 Thumbnail Height : 256 Thumbnail Format : JPEG Thumbnail Image : (Binary data 15614 bytes, use -b option to extract) Format : application/pdf Document ID : uuid:910fa39c-6d58-468f-b7da-f573bcabc50c Instance ID : uuid:bc6df92c-82d3-4256-9036-2814ac6418bb Producer : Adobe PDF Library 9.9 N Pages : 1 Has Visible Transparency : False Has Visible Overprint : False Max Page Size W : 612.000000 Max Page Size H : 792.000000 Max Page Size Unit : Points Font Name : ArialMT, MyriadPro-Regular, AdobeSongStd-Light, Eurostile-Bold, Eurostile-Demi, Eurostile Font Family : Arial, Myriad Pro, Adobe 宋体 Std, Eurostile Bold, Eurostile Demi, Eurostile Font Face : Regular, Regular, L, Bold, Demi Font Type : Open Type, Open Type, Open Type, Unknown, Unknown, Unknown Font Version : Version 3.00, Version 2.037;PS 2.000;hotconv 1.0.51;makeotf.lib2.0.18671, Version 5.002;PS 5.002;hotconv 1.0.49;makeotf.lib2.0.15106, Version 3.03, Version 3.03, Version 3.03 Font Composite : False, False, False, False, False, False Font File Name : ARIAL.TTF, MyriadPro-Regular.otf, AdobeSongStd-Light.otf, simsun.ttc, simsun.ttc, simsun.ttc Plate Names : Black Swatch Groups Group Name : 默认色板组 Swatch Groups Group Type : 0 Page Count : 40 Creator : Adobe Illustrator CS3EXIF Metadata provided by EXIF.tools