NetComm Wireless N3G007W NetComm 3G Wireless Router User Manual WMQ136AM

NetComm Wireless Limited NetComm 3G Wireless Router WMQ136AM

Contents

User manual 2 of 2

Some applications require multiple connections, like Internet games, Video conferencing,
Internet telephony, etc. Because of the firewall function, these applications cannot work with a
pure NAT router. The Special Applications feature allows some of these applications to work
with this product. If the mechanism of Special Applications fails to make an application work,
try setting your computer as the DMZ host instead.
1. Trigger: the outbound port number issued by the application.
2. Incoming Ports: when the trigger packet is detected, the inbound packets sent to the
specified port numbers are allowed to pass through the firewall.
This product provides some predefined settings.
1. Select your application and
2. Click Copy to to add the predefined setting to your list.
Note! At any given time, only one PC can use each Special Application tunnel.
Click on “Save” to store what you just select or” Undo” to give up
Advanced Setup > Forwarding Rules > Miscellaneous
IP Address of DMZ Host
DMZ (Demilitarized Zone) Host is a host without the protection of firewall. It allows a
computer to be exposed to unrestricted 2-way communication for Internet games, Video
conferencing, Internet telephony and other special applications.
IPSec / PPTP Passthrough
The device also supports VPN Pass-through (IPSec/PPTP Pass-through). Once VPN
pass-through is enabled, multiple VPN connections can be made through the device. This
is useful when you have many VPN clients on the LAN.
Click on “Save” to store what you just select or “Undo” to give up
NOTE: This feature should be used only when needed.
Advanced Setup > Security Setting > Packet Filters
Packet Filter enables you to control what packets are allowed to pass the router. Outbound filter
applies on all outbound packets. However, inbound filter applies on packets that destined to
Virtual Servers or DMZ host only. You can select one of the two filtering policies:
1. Allow all to pass except those match the specified rules
2. Deny all to pass except those match the specified rules
You can specify 8 rules for each direction: inbound or outbound. For each rule, you can define
the following:
• Source IP address
• Source port
• Destination IP address
• Destination port
• Protocol: TCP or UDP or both.
• Use Rule#
For source or destination IP address, you can define a single IP address (4.3.2.1) or a range of
IP addresses (4.3.2.1-4.3.2.254). An empty implies all IP addresses.
For source or destination port, you can define a single port (80) or a range of
ports (1000-1999). Add prefix "T" or "U" to specify TCP or UDP protocol. For
example, T80, U53, U2000-2999, No prefix indicates both TCP and UDP are
defined. An empty implies all port addresses. Packet Filter can work with
Scheduling Rules, and give user more flexibility on Access control. For Detail,
please refer to Scheduling Rule. Each rule can be enabled or disabled
individually.
Click on “Save” to store what you just select or “Undo” to give up
Inbound Filter:
To enable Inbound Packet Filter click the check box next to Enable in the Inbound Packet
Filter field
Click on “Save” to store what you just select or “Undo” to give up
Advanced Setup > Security Setting > Domain Filters
Domain Filter
let you prevent users under this device from accessing specific URLs.
Domain Filter Enable
Check if you want to enable Domain Filter.
Log DNS Query
Check if you want to log the action when someone accesses the specific URLs.
Privilege IP Address Range
Setting a group of hosts and privilege these hosts to access network without restriction.
Domain Suffix
A suffix of URL to be restricted; For example, ".com", "xxx.com".
Action
When someone is accessing the URL met the domain-suffix, what kind of action you
want.
Check drop to block the access. Check log to log these access.
Enable
Check to enable each rule.
Click on “Save” to store what you just select or “Undo” to give up
Advanced Setup > Security Setting > URL Blocking
URL Blocking will block LAN computers to connect to pre-defined Websites.
The major difference between “Domain filter” and “URL Blocking” is Domain filter
require user to input suffix (like .com or .org, etc), while URL Blocking require user to
input a keyword only. In other words, Domain filter can block specific website, while
URL Blocking can block hundreds of websites by simply a keyword.
URL Blocking Enable
Check if you want to enable URL Blocking.
URL
If any part of the Website's URL matches the pre-defined word, the connection will be
blocked.
For example, you can use pre-defined word "sex" to block all websites if their URLs
contain pre-defined word "sex".
Enable
Check to enable each rule.
Click on “Save” to store what you just select or “Undo” to give up
Advanced Setup > Security Setting > MAC Control
MAC Address Control allows you to assign different access right for different users and to
assign a specific IP address to a certain MAC address.
MAC Address Control Check “Enable” to enable the “MAC Address Control”. All of the
settings in this page will take effect only when “Enable” is
checked.
Connection control Check "Connection control" to enable the controlling of which
wired and wireless clients can connect to this device. If a client is
denied to connect to this device, it means the client can't access to
the Internet either. Choose "allow" or "deny" to allow or deny the
clients, whose MAC addresses are not in the "Control table"
(please see below), to connect to this device.
Association control Check "Association control" to enable the controlling of which
wireless client can associate to the wireless LAN. If a client is
denied to associate to the wireless LAN, it means the client can't
send or receive any data via this device. Choose "allow" or
"deny" to allow or deny the clients, whose MAC addresses are
not in the "Control table", to associate to the wireless LAN
1: Click on “Save” to store what you just select or “Undo” to give up
2: Click on “Next Page” to go down or “Previous page” back to last page
Advanced Setup > Security Setting > VPN-PPTP Client
VPN-PPTP: Enables or Disables the PPTP client.
Enable: Check to enable each rule.
Name: The name of Item.
Peer IP/Domain: The IP/Domain of PPTP server is.
PPTP Account and Password: The account and password your ISP assigned to you. If you don't
want to change the password, keep it empty.
Route: Which connection will use the PPTP section?
Connect: There are 3 modes to select:
On demand: The device will link up with ISP when the clients send outgoing packets.
Auto: The device will link with ISP until the connection is established.
Manually: The device will not make the link until someone clicks the connect-button in the
Status-page.
Option:
MPPE: The MPPE encryption supports.
NAT: The Nat Traversal supports.
Click on “Save” to store what you just select or” Undo” to give up
Advanced Setup > Security Setting > VPN-PPTP Server
The Router can behave as a PPTP server, and allows remote hosts to access LAN servers after establishing
PPTP connection with it. The device can support three authentication methods: PAP, CHAP, MSCHAP(v1)
and MSCHAP(v2). Users can also enable MPPE encryption when using MSCHAP.
VPN-PPTP:
Check this checkbox to enable function of PPTP server.
Server virtual IP:
The IP address of PPTP server. This IP address should be different from IP address of PPTP
server and LAN subnet of VPN gateway.
IP range:
The client IP range. IPs in this range are given clients trying to connect.
Authentication Protocol:
Users can choose authentication protocol as PAP, CHAP, or MS_CHAP(v1), MS_CHAP(v2).
MPPE Encryption Mode:
Check this checkbox to enable MPPE encryption. Please note that MPPE needs to work with
MSCHAP authentication method.
Encryption Length:
There are 3 kind of encryption for MPPE, 40bits, 56bits and 128bits.
User Account Setting
Users can input five different user accounts for PPTP server. The total accounts are 5.
1. Tunnel Name: Input the name for tunnel.
2. User Name: Input a user name that is allowed to establish PPTP connection with VPN gateway.
3. Password: Input the password for the user.
Click on “Save” to store what you just select or” Undo” to give up
Advanced Setup > Security Setting > Miscellaneous
Remote Administrator Host/Port
In general, only Intranet user can browse the built-in web pages to perform
administration task. This feature enables you to perform administration task from
remote host. If this feature is enabled, only the specified IP address can perform
remote administration. If the specified IP address is 0.0.0.0, any host can connect to
this product to perform administration task. You can use subnet mask bits "/nn"
notation to specified a group of trusted IP addresses for example, "10.1.2.0/24".
NOTE: When Remote Administration is enabled, the web server port will be shifted to
80. You can change web server port to other port, too.
Administrator Time-out
The time of no activity to logout automatically, you may set it to zero to disable this
feature.
Discard PING from WAN side
When this feature is enabled, any host on the WAN cannot ping this product.
Disable UPNP:
The device can disable UPNP function. If your OS supports UPNP search function and
you enable UPNP, like Windows XP. You can get Device IP by UPNP.
Keep WAN in stealth mode:
If the port is not open, the device just to ignore incoming connection attempts, rather
than rejecting them.
Click on “Save” to store what you just select or” Undo” to give up
Advanced Setup > Advanced Setting > System Log
This page support two methods to export system logs to specific destination by means of
syslog (UDP) and SMTP(TCP). The items you have to setup including:
IP Address for Syslog
Host IP of destination where syslog will be sent to.
Check Enable to enable this function.
E-mail Alert Enable
Check if you want to enable Email alert (send syslog via email).
SMTP Server IP and Port
Input the SMTP server IP and port, which are concated with ':'. If you do not specify
port number, the default value is 25.
For example, "mail.your_url.com" or "192.168.1.100:26".
Send E-mail alert to
The recipients who will receive these logs, you can assign more than 1 recipient, using
';' or ',' to separate these email addresses.
E-mail Subject
The subject of email alert, this setting is optional.
Click on “Save” to store what you just select or “Undo” to give up
Advanced Setup > Advanced Setting > Dynamic DNS
To host your server on a changing IP address, you have to use dynamic domain name service
(DDNS).
So that anyone wishing to reach your host only needs to know the name of it. Dynamic DNS
will map the name of your host to your current IP address, which changes each time you
connect your Internet service provider.
Before you enable Dynamic DNS, you need to register an account on one of these Dynamic
DNS servers that we list in provider field.
To enable Dynamic DNS click the check box next to Enable in the DDNS field.
Next you can enter the appropriate information about your Dynamic DNS Server.
You have to define:
Provider
Host Name
Username/E-mail
Password/Key
You will get this information when you register an account on a Dynamic DNS
server.
Click on “Save” to store what you just select or “Undo” to give up
Advanced Setup > Advanced Setting > QOS
Provide different priority to different users or data flows, or guarantee a certain level of performance.
QoS Packet Filter
This Item enables QoS function or not.
Upstream Bandwidth
Set the limitation of upstream speed.
Downstream Bandwidth
Set the limitation of downstream speed.
Local: IP
Define the Local IP address of packets here.
Local: Ports
Define the Local port of the packets in this field.
Remote: IP
Define the Remote IP address of packets here.
Remote: Ports
Define the Remote port of the packets in this field.
QoS Priority
This defines the priority level of the current Policy Configuration. Packets associated with this
policy will be serviced based upon the priority level set. For critical applications High or Normal
levels are recommended. For non-critical applications select a Low level.
Enable
Check to enable each rule.
Click on “Save” to store what you just select or “Undo” to give up
Advanced Setup > Advanced Setting > SNMP
In brief, SNMP, the Simple Network Management Protocol, is a protocol designed to give a
user the capability to remotely manage a computer network by polling and setting terminal
values and monitoring network events.
Enable SNMP
You must check either Local or Remote or both to enable SNMP function. If Local is
checked, this device will response request from LAN. If Remote is checked, this device
will response request from WAN.
Get Community
Setting the community of GetRequest your device will response.
Set Community
Setting the community of SetRequest your device will accept.
IP 1,IP 2,IP 3,IP 4
Input your SNMP Management PC’s IP here. User has to configure to where this device
should send SNMP Trap message.
SNMP Version
Please select proper SNMP Version that your SNMP Management software supports.
Click on “Save” to store what you just select or “Undo” to give up.
Advanced Setup > Advanced Setting > Routing
Routing Tables
Allow you to determine which physical interface address to use for outgoing IP data grams.
If you have more than one routers and subnets, you will need to enable routing table to allow
packets to find proper routing path and allow different subnets to communicate with each
other.
Routing Table settings are settings used to setup the functions of static and dynamic routing.
Dynamic Routing
Routing Information Protocol (RIP) will exchange information about destinations for
computing routes throughout the network. Please select RIPv2 only if you have different
subnet in your network. Otherwise, please select RIPv1 if you need this protocol.
Static Routing
For static routing, you can specify up to 8 routing rules. You can enter the destination IP
address, subnet mask, gateway, hop for each routing rule, and then enable or disable the rule
by checking or un-checking the Enable checkbox.
Click on “Save” to store what you just select or “Undo” to give up.
Advanced Setup > Advanced Setting > System Time
Get Date and Time by NTP Protocol
Selected if you want to Get Date and Time by NTP Protocol.
Time Server
Select a NTP time server to consult UTC time
Time Zone
Select a time zone where this device locates.
Set Date and Time using PC’s Date and Time
Set the Date and Time from your PC
Set Date and Time manually
Selected if you want to Set Date and Time manually.
Daylight Saving
Click on “Save” to store what you just select or “Undo” to give up.
Advanced Setup > Advanced Setting > Scheduling
You can set the schedule time to decide which service will be turned on or off.
Advanced Setup > Tool Box > System Info
You can view the System log, Routing Table information in this page
Advanced Setup > Tool Box > Firmware Upgrade
You can upgrade firmware by clicking Firmware “Upgrade” button
Advanced Setup > Tool Box > Backup Setting
You can backup your settings by clicking the Backup Setting button and save it as a bin
file. Once you want to restore these settings, please click Firmware Upgrade button and
use the bin file you saved
Advanced Setup > Tool Box > Reset to Default
You can also reset this product to factory default by clicking the Reset to
default button
Advanced Setup > Tool Box > Reboot
You can also reboot this product by clicking the Reboot button
Advanced Setup > Tool Box > Miscellaneous
MAC Address for Wake-on-LAN
Wake-on-LAN is a technology that enables you to power up a networked device remotely.
In order to enjoy this feature, the target device must be Wake-on-LAN enabled and you
have to know the MAC address of this device, say 00-11-22-33-44-55. Clicking "Wake
up" button will make the router to send the wake-up frame to the target device
immediately.
Domain Name or IP address for Ping Test
You can key in URL or IP address, and then click the “Ping” button for test.
3. Troubleshooting
This section provides an overview of common issues, and possible solutions for the installation
and operation of the Wireless WAN Mobile Broadband Router.
1. Unable to access the Configuration Menu when I use my computer to configure the
router. Why?
Note: It is recommended that you use an Ethernet connection to configure the
Ensure that the Ethernet LED on the Wireless WAN Mobile Broadband Router is ON.
If the LED is NOT ON, check to see if the cable for the Ethernet connection is securely inserted.
Note: Ensure that the IP Address is in the same range and subnet as the Wireless WAN
Mobile Broadband Router. The IP Address of the Wireless WAN Mobile Broadband Router
is 192.168.123.254. All the computers on the network must have a unique IP Address within
the same range (e.g., 192.168.123.x). Any computers that have identical IP Addresses will
not be visible on the network. All computers must also have the same subnet mask (e.g.,
255.255.255.0).
Do a Ping test to make sure that the Wireless WAN Mobile Broadband Router is responding.
Go to Start > Run.
1:Type cmd.
2:Press Enter.
3:Type “ping 192.168.123.254”. A successful ping shows four replies.
Note: If you have changed the default IP Address, ensure you ping the correct IP
Address assigned to the Wireless WAN Mobile Broadband Router.
Ensure that your Ethernet Adapter is working properly, and that all network drivers are installed
properly.
Note: Network adapter names will vary depending on your specific adapter. The installation
steps listed below are applicable for all network adapters.
1. Go to Start > My Computer > Properties.
2. Select the Hardware Tab.
3. Click Device Manager.
4. Double-click on “Network Adapters”.
5. Right-click on Wireless Cardbus Adapter, or your specific network adapter.
6. Select Properties to ensure that all drivers are installed properly.
7. Look under Device Status to see if the device is working properly.
8. Click “OK”.
2: Why my wireless client can NOT access the Internet?
Note: Establish WiFi Connection. As long as you select either WEP or WPA-PSK encryption,
ensure encryption settings match your WiFi settings. Please refer to your WiFi adapter
documentation for additional information.
Ensure that the wireless client is associated and joined with the correct Access Point.
To check this connection, follow the steps below:
1. Right-click on the Local Area Connection icon in the taskbar.
2. Select View Available Wireless Networks in Wireless Configure. The Connect to
Wireless Network screen appears. Ensure you have selected the correct available network.
Ensure the IP Address assigned to the wireless adapter is within the same subnet as the Access
Point and gateway. The Wireless WAN Mobile Broadband Router has an IP Address of
192.168.123.254. Wireless adapters must have an IP Address in the same range (e.g.,
192.168.123.x). Although the subnet mask must be the same for all the computers on
the network, no two devices may have the same IP Address. Therefore, each device must have
a unique IP Address.
To check the IP Address assigned to the wireless adapter, follow the steps below:
1.Enter ipconfig /all in command mode
2.Enter ping 192.168.123.254.to check if you can access the Wireless WAN Mobile Broadband
Router
3. Why does my wireless connection keep dropping?
You may try following steps to solve.
• Antenna Orientation.
1: Try different antenna orientations for the Wireless WAN Mobile Broadband Router.
2: Try to keep the antenna at least 6 inches away from the wall or other objects.
• Try changing the channel on the Wireless WAN Mobile Broadband Router, and your
Access Point and Wireless adapter to a different channel to avoid interference.
• Keep your product away (at least 3-6 feet) from electrical devices that generate RF noise,
like microwaves, monitors, electric motors, etc.
4. Why I am unable to achieve a wireless connection?
Note: An Ethernet connection is required to troubleshoot the Wireless WAN Mobile
Broadband Router.
If you have enabled Encryption on the Wireless WAN Mobile Broadband Router, you must
also enable encryption on all wireless clients in order to establish a wireless connection.
• For 802.11g, the encryption settings are: 64 or 128 bit. Ensure that the encryption bit level
is the same for both the Wireless WAN Mobile Broadband Router, and your Wireless
Client.
• Ensure that the SSID (Service Set Identifier) on the Wireless WAN Mobile Broadband
Router and the Wireless Client are exactly the same.
If they are not, your wireless connection will not be established.
• Move the Wireless WAN Mobile Broadband Router and the wireless client into the same
room, and then test the wireless connection.
• Disable all security settings such as WEP, and MAC Address Control.
• Turn off the Wireless WAN Mobile Broadband Router and the client.
Turn the Wireless WAN Mobile Broadband Router back on again, and then turn on the
client.
• Ensure that all devices are set to Infrastructure mode.
• Ensure that the LED indicators are indicating normal activity. If not, ensure that the AC
power and Ethernet cables are firmly connected.
• Ensure that the IP Address, subnet mask, gateway and DNS settings are correctly entered
for the network.
• If you are using 2.4GHz cordless phones, X-10 equipment, or other home security systems,
ceiling fans, or lights, your wireless connection may degrade dramatically, or drop
altogether.
To avoid interference, change the Channel on the Wireless WAN Mobile Broadband Router,
and all devices in your network.
• Keep your product at least 3-6 feet away from electrical devices that generate RF noise.
Examples include: microwaves, monitors, electric motors, and so forth.
5. I just do not remember my encryption key. What should I do?
• If you forgot your encryption key, the WiFi card will be unable to establish a proper connection.
If an encryption key setting has been set for the Wireless WAN Mobile Broadband Router, it
must also be set for the WiFi card that will connect to the Wireless WAN Mobile Broadband
Router.
To reset the encryption key(s), login to the Wireless WAN Mobile Broadband Router using a
wired connection. (Please refer to “Basic > Wireless (Security–No Encryption)” on page 10, for
additional information).
7. How do I reset my Wireless WAN Mobile Broadband Router to its factory default
settings?
If other troubleshooting methods have failed, you may choose to Reset the Wireless WAN
Mobile Broadband Router to its factory default settings.
To hard-reset the Wireless WAN Mobile Broadband Router its factory default settings, follow
the steps listed below:
1. Ensure the Wireless WAN Mobile Broadband Router is powered on
2. Locate the Reset button on the back of the Wireless WAN Mobile Broadband Router.
3. Use a paper clip to press the Reset button.
4. Hold for 10 seconds and then release.
5. After the Wireless WAN Mobile Broadband Router reboots, it is reset to the factory default
settings.
Note: Please note that this process will take a few minutes.
8. What is VPN?
• VPN stands for “Virtual Private Networking.” VPNs create a "tunnel" through an existing
Internet connection using PPTP (Point-to-Point Tunneling Protocol) or IPSec (IP Security)
protocols with various encryption schemes including Microsoft Challenge Handshake
Authentication Protocol (MS-CHAP) .
• This feature allows you to use your existing Internet connection to connect to a remote site with
added security. If your VPN connection is not functional, verify that your VPN dial-up
configuration is correct.
Note: This information should be provided to you from your VPN provider.
Pressing the Reset Button restores to its original factory default settings.
9. What can I do if my Ethernet cable does not work properly?
• First, ensure that there is a solid cable connection between the Ethernet port on the Router, and
your NIC (Network Interface Card).
• Second, ensure that the settings on your NIC adapter are “Enabled,” and set to accept an IP
address from the DHCP.
• If settings appear to be correct, ensure that you are not using a crossover Ethernet cable.
Although the Wireless WAN Mobile Broadband Router is MDI/MDIX compatible, not all NICs
are. Therefore, it is recommended that you use a patch cable when possible.
Technical Support 45
4. Technical Specifications
3G Access 1*PC card Type II Slot
USB port
Standards IEEE 802.11b/g
Standard IEEE 802.11b\g Turbo
Data Rate 54, 48, 36, 24, 18, 12, 11, 9, 6, 5.5, 2, 1 Mbps per channel, Auto Fall-Back
Frequency 2.412 – 2.462 GHz, DSSS / OFDM modulation
Range Coverage Tx/Rx power 18dbm/Per Cell
indoors approx. 35-100 meters;
outdoors up to 100-300 meters
# of Channels 1-11 for N. America (FCC);1-11 for Canada (DOC)
1-13 Europe (Except Spain and France) (ETSI)
1-14 Japan (TELEC);
Security 64-bit and 128-bit WEP Encryption; WPA encryption
Antenna Dipole Antenna 2dBi
Firewall IP Filtering
NAT (Network Address Translation) with VPN Pass through
MAC Filtering
Supported WAN type 3G,Static IP, Dynamic IP, PPPoE,PPTP,L2TP
Connection Scheme Connect-on-demand, Auto-Disconnect
NAT function Class C ;One-to-Many; Max 253 Users; Virtual Server; DMZ Host
VPN PPTP, L2TP and IPSec Pass Through
Config.&
Management Web-Based IE, Nevigator browser and SNMP
DHCP Server and Client
Working
Environment Temperature: 0~40oC, Humidity 10%~90% non-condensing
OS supported Windows 95/98/ME/NT/2000/XP; Linux
Power Switching 5V 3.0A
Power IEEE 802.11b Mode : 19.69+-0.78dBm
IEEE 802.11g Mode : 21.41+-0.92dBm

Navigation menu