UTT TECHNOLOGIES REG02-UTT Wireless Router User Manual
SHANGHAI UTT TECHNOLOGIES CO., LTD. Wireless Router
User Manual
| Download: |  |
| Mirror Download [FCC.gov] | |
| Document ID | 2386128 |
| Application ID | DkND5iYCnz4RystGr8gqxw== |
| Document Description | User Manual |
| Short Term Confidential | No |
| Permanent Confidential | No |
| Supercede | No |
| Document Type | User Manual |
| Display Format | Adobe Acrobat PDF - pdf |
| Filesize | 236.93kB (2961682 bits) |
| Date Submitted | 2014-09-12 00:00:00 |
| Date Available | 2014-09-15 00:00:00 |
| Creation Date | 2014-07-15 16:01:52 |
| Producing Software | Acrobat Distiller 7.0.5 (Windows) |
| Document Lastmod | 2014-09-10 11:04:51 |
| Document Title | C:\Documents and Settings\yi.jian\æ¡Œé¢\新建文件夹\英文资料\AC750W Wireless Router Advanced Configuration Guide_V1.0.docx |
| Document Creator | PScript5.dll Version 5.2.2 |
AC750W Wireless Router Advanced Configuration Guide V1.0 UTT Technologies Table of Contents UTT Technologies Co., Ltd. http://www.uttglobal.com http://www.uttglobal.com Page 2 Copyright Notice Copyright © 2000-2011. UTT Technologies Co., Ltd. All rights reserved. Information in this document, including URL and other Internet Web site references, is subject to change without further notice. Unless otherwise noted, the companies, organizations, people and events described in the examples of this document are fictitious, which have no relationship with any real company, organization, people and event. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or used for any commercial and profit purposes, without the express prior written permission of UTT Technologies Co., Ltd. UTT Technologies Co., Ltd. has the patents, patent applications, trademarks, trademark applications, copyrights and other intellectual property rights that are mentioned in this document. You have no license to use these patents, trademarks, copyrights or other intellectual property rights, without the express prior written permission of UTT Technologies Co., Ltd. 艾泰® and UTT® are the registered trademarks of Technologies Co., Ltd. HiPER ® is the registered trademark of UTT Technologies Co., Ltd. Unless otherwise announced, the products, trademarks and patents of other companies, organizations or people mentioned herein are the properties of their respective owners. Product Number (PN): 0904-0003-008 Document Number (DN): PR-PMMU-1150.50-PPR-EN-1.0A UTT Technologies Table of Contents Table of Contents About This Manual............................................................................................................................... 1 0.1 Scope....................................................................................................................................... 1 0.2 Web UI Style........................................................................................................................... 1 0.3 Documents Conventions.......................................................................................................2 0.3.1 Symbol Conventions..................................................................................................... 2 0.3.2 Other Conventions.........................................................................................................2 0.3.3 Common Button Descriptions...................................................................................... 2 0.3.4 Detailed Description of List.......................................................................................... 3 0.4 Factory Default Settings........................................................................................................5 0.5 Document Organization........................................................................................................ 5 0.6 Contact Information................................................................................................................9 Chapter 1 Product Overview..................................................................................................10 1.1 Product Brief......................................................................................................................... 10 1.2 Key Features.........................................................................................................................11 1.3 Physical Specification..........................................................................................................12 Chapter 2 2.1 Hardware Installation........................................................................................... 13 Physical Characteristics......................................................................................................13 2.1.1 Front Panel................................................................................................................... 13 2.1.2 Rear Panel....................................................................................................................14 2.2 Installation Procedure..........................................................................................................15 Chapter 3 Quick Setup............................................................................................................ 18 3.1 Configuring Your Computer................................................................................................ 18 3.2 Logging in to the Wireless Router..................................................................................... 20 3.3 Setup Wizard........................................................................................................................ 22 3.3.1 Running the Setup Wizard......................................................................................... 22 3.3.2 Setup Wizard - Internet Access Mode......................................................................23 3.3.3 Setup Wizard - Internet Connection Settings..........................................................24 3.3.4 Setup Wizard - Wireless Settings............................................................................. 32 Chapter 4 Start Menu............................................................................................................... 34 4.1 Setup Wizard........................................................................................................................ 34 4.2 System Status...................................................................................................................... 34 4.2.1 Wired Status................................................................................................................. 34 4.2.2 Wireless Status............................................................................................................ 35 http://www.uttglobal.com Page I UTT Technologies Table of Contents 4.3 Interface Traffic.....................................................................................................................37 4.4 Restart................................................................................................................................... 39 Chapter 5 5.1 Network....................................................................................................................40 WAN Settings....................................................................................................................... 40 5.1.1 Internet Connection List..............................................................................................40 5.1.2 Internet Connection Settings..................................................................................... 44 5.1.3 MAC Address Clone....................................................................................................50 5.2 Load Balancing.....................................................................................................................51 5.2.1 Introduction to Load Balancing and Failover...........................................................51 5.2.2 Load Balancing Global Settings................................................................................ 53 5.2.3 Load Balancing List.....................................................................................................54 5.2.4 Connection Detection Settings.................................................................................. 55 5.2.5 How to Configure Connection Detection Settings.................................................. 57 5.3 LAN Settings.........................................................................................................................58 5.4 DHCP Server........................................................................................................................ 59 5.4.1 DHCP Server Settings................................................................................................ 59 5.4.2 Static DHCP................................................................................................................. 61 5.4.3 DHCP Client List..........................................................................................................63 5.4.4 Configuration Example for DHCP............................................................................. 65 5.5 DDNS.....................................................................................................................................68 5.5.1 Introduction to DDNS.................................................................................................. 68 5.5.2 Apply for a DDNS Account.........................................................................................68 5.5.3 DDNS Settings............................................................................................................. 69 5.5.4 DDNS Status................................................................................................................ 71 5.5.5 DDNS Verification........................................................................................................72 5.6 UPnP......................................................................................................................................73 5.6.1 Enable UPnP................................................................................................................73 5.6.2 UPnP Port Forwarding List.........................................................................................73 Chapter 6 6.1 Wireless................................................................................................................... 75 Basic Wireless Settings...................................................................................................... 75 6.1.1 AP Mode....................................................................................................................... 75 6.1.2 APClient Mode............................................................................................................. 77 6.1.3 WDS.............................................................................................................................. 79 6.1.4 Configuration Example for WDS............................................................................... 84 6.2 Wireless Security Settings..................................................................................................88 6.2.1 Disabling Wireless Security....................................................................................... 88 6.2.2 Wireless Security Settings – WEP............................................................................88 6.2.3 Wireless Security Settings - WPA/WPA2.................................................................90 6.2.4 Wireless Security Settings - WPA-PSK/WPA2-PSK.............................................. 91 6.3 Wireless MAC Address Filtering........................................................................................ 93 6.3.1 MAC Address Filtering Global Settings....................................................................93 6.3.2 MAC Address Filtering List.........................................................................................94 http://www.uttglobal.com Page II UTT Technologies Table of Contents 6.3.3 MAC Address Filtering Settings................................................................................ 94 6.3.4 How to Configure MAC Address Filtering................................................................ 95 6.3.5 Configuration Example for MAC Address Filtering.................................................95 6.4 Advanced Wireless Settings.............................................................................................. 97 6.5 Wireless Client List.............................................................................................................. 99 Chapter 7 7.1 Advanced.............................................................................................................. 100 NAT and DMZ.....................................................................................................................100 7.1.1 Introduction to NAT Features...................................................................................100 7.1.2 Port Forwarding......................................................................................................... 103 7.1.3 NAT Rule.....................................................................................................................106 7.1.4 DMZ............................................................................................................................. 112 7.2 IP/MAC Binding.................................................................................................................. 114 7.2.1 Introduction to IP/MAC Binding............................................................................... 114 7.2.2 IP/MAC Binding Global Settings............................................................................. 115 7.2.3 IP/MAC Binding List.................................................................................................. 116 7.2.4 IP/MAC Binding Settings.......................................................................................... 117 7.2.5 How to Add IP/MAC Bindings.................................................................................. 118 7.2.6 Internet Whitelist and Blacklist.................................................................................119 7.3 Static Route........................................................................................................................ 122 7.3.1 Introduction to Static Route..................................................................................... 122 7.3.2 Static Route List........................................................................................................ 122 7.3.3 Static Route Settings................................................................................................ 123 7.3.4 How to Add Static Routes........................................................................................ 124 7.4 PPPoE Server.................................................................................................................... 126 7.4.1 PPPoE Overview.......................................................................................................126 7.4.2 PPPoE Server Global Settings................................................................................128 7.4.3 PPPoE Account List.................................................................................................. 129 7.4.4 PPPoE Account Settings..........................................................................................129 7.4.5 PPPoE User Status...................................................................................................130 Chapter 8 User Management...............................................................................................132 8.1 Global Management.......................................................................................................... 132 8.1.1 Global Management Policy Settings...................................................................... 132 8.1.2 An Example for Global Management Policy......................................................... 134 8.2 Group Management.......................................................................................................... 135 8.2.1 Group Management Policy List...............................................................................135 8.2.2 Group Management Policy Settings.......................................................................136 8.2.3 Execution Order of Group Management Policies.................................................138 8.2.4 Priorities of Global and Group Management Policies and Access Rules.........138 8.2.5 An Example for Group Management Policy..........................................................138 Chapter 9 Firewall.................................................................................................................. 143 9.1 Access Control................................................................................................................... 143 http://www.uttglobal.com Page III UTT Technologies Table of Contents 9.1.1 Introduction to Access Control................................................................................ 143 9.1.2 Access Rule List........................................................................................................ 145 9.1.3 Access Rule Settings................................................................................................146 9.1.4 Configuration Examples for Access Rule.............................................................. 151 9.2 Domain Filtering.................................................................................................................157 9.2.1 Domain Filtering Global Settings............................................................................ 157 9.2.2 Domain Filtering Settings.........................................................................................157 9.3 Attack Prevention...............................................................................................................159 Chapter 10 10.1 VPN......................................................................................................................... 160 Introduction to PPTP Implementation.............................................................................160 10.1.1 Protocol Overview..................................................................................................... 161 10.1.2 Packet Flow - PPTP Client.......................................................................................162 10.1.3 User Authentication...................................................................................................163 10.1.4 Data Confidentiality...................................................................................................163 10.1.5 MTU and Fragmentation.......................................................................................... 163 10.1.6 PPTP Sessions Limit................................................................................................ 165 10.2 PPTP Client Settings.........................................................................................................165 10.3 PPTP Client List.................................................................................................................166 10.4 Configuration Example for PPTP Client.........................................................................167 Chapter 11 11.1 System Administration...................................................................................... 169 Administrator...................................................................................................................... 169 11.1.1 Administrator List.......................................................................................................169 11.1.2 Administrator Settings.............................................................................................. 170 11.2 System Time.......................................................................................................................171 11.3 Configuration...................................................................................................................... 173 11.3.1 Backup Configuration............................................................................................... 173 11.3.2 Restore Configuration...............................................................................................173 11.3.3 Reset to Factory Defaults........................................................................................ 174 11.4 Firmware Upgrade.............................................................................................................175 11.5 Remote Access.................................................................................................................. 177 11.6 Scheduled Task..................................................................................................................178 11.6.1 Scheduled Task Settings..........................................................................................178 11.6.2 Scheduled Task List.................................................................................................. 179 Chapter 12 Status..................................................................................................................... 180 12.1 System Status.................................................................................................................... 180 12.2 Traffic Statistics.................................................................................................................. 182 12.3 System Information............................................................................................................183 Chapter 13 Support.................................................................................................................. 185 Appendix A How to Configure Your PC......................................................................................186 http://www.uttglobal.com Page IV UTT Technologies Table of Contents Appendix B FAQ............................................................................................................................... 190 1. How to connect the Wireless Router to the Internet using PPPoE?......................... 190 2. How to connect the Wireless Router to the Internet using Static IP?....................... 191 3. How to connect the Wireless Router to the Internet using DHCP?........................... 191 4. How to reset the Wireless Router to factory default settings?........................................ 193 Appendix C Common IP Protocols..............................................................................................194 Appendix D Common Service Ports........................................................................................... 195 Appendix E Figure Index................................................................................................................200 Appendix F Table Index.................................................................................................................. 205 http://www.uttglobal.com Page V UTT Technologies About This Manual About This Manual 0.1 Scope This guide mainly describes how to install and configure the AC750W Wireless Router offered by UTT Technologies Co., Ltd. For more information, please visit our website at www.uttglobal.com. 0.2 Web UI Style The Web UI style complies with the browser standard, which is as follows: Radio Button: It allows you to choose only one of a predefined set of options. Check Box: It allows you to choose one or more options. Button: It allows you to click to perform an action. Text Box: It allows you to enter text information. List Box: It allows you to select one or more items from a list contained within a static, multiple line text box. Drop-down List: It allows you to choose one item from a list. When a drop-down list is inactive, it displays a single item. When activated, it drops down a list of items, from which you may select one. http://www.uttglobal.com Page 1 UTT Technologies About This Manual 0.3 Documents Conventions 0.3.1 Symbol Conventions : It represents a configuration parameter. Parameters may be optional or required. Required parameters are indicated by a red asterisk (*). : It represents a button. : It represents one or more notes. 0.3.2 Other Conventions 0.3.2.1 Convention for a Page Path First Level Menu Item > Second Level Menu Item (bold font) means the menu path to open a page. For example, Wireless > MAC Filtering means that in the Web UI, click the first level menu item Wireless firstly, and then click the second level menu item MAC Filtering to open the corresponding page. 0.3.2.2 Convention for Clicking a Button Click the XXX button (XXX is the name of the button, bold font) means performing the corresponding operation. E.g., click the Delete button means performing the delete operation, the Delete button is shown as 0.3.3 Common Button Descriptions The following table describes the commonly-used buttons in the Web UI. Button Description Click to save your changes. http://www.uttglobal.com Page 2 UTT Technologies About This Manual Click to revert to the last saved settings. Click to delete the selected entry(s). Click to display the latest information on the page. Click to clear all the statistics on the page. Click to go back to the previous page. Table 0- 1 Common Button Descriptions 0.3.4 0.3.4.1 Detailed Description of List Basic Elements and Features The Web UI contains two kinds of lists: editable list and read-only list. ● An editable list is used to add, display, modify and delete the configuration entries. ● A read-only list is used to display the system status information which is not editable. Let’s take the editable MAC Address Filtering List (see Figure 0-1) as an example to explain the basic elements and features of the list. Note Only the editable lists support Add, Modify, and Delete operations. The read-only lists don’t support them. Figure 0- 1 MAC Address Filtering List The following table describes the basic elements and features of the list. http://www.uttglobal.com Page 3 UTT Technologies About This Manual Element Description Current page number/ total pages, the example means that the current page is the first page, and total one page. Click to jump to the first page. Click to jump to the previous page. Click to jump to the next page. Click to jump to the last page. Enter page number in text field, then click Go to or presskey to jump to that page. Enter the text string you want to search for in this text box, then press key to display all the matched entries. In addition, you can do the search within the displayed results. If you want to display all the entries, you only need clear the text box and then press key. Note that the matching rule is substring matching, that is, it will search for and display those entries that contain the specified text string. Configured number / maximum number, the example means that there are 2 configured MAC address filtering entries, and the maximum number of MAC address filtering allowed is 50. Click to go to the setup page to modify the corresponding entry. Click to delete the corresponding entry. Click (add the check mark) to select all the entries in the current page. Click again (remove the check mark) to unselect all the entries in the current page. Click to go to the setup page to add a new entry to the list. Click to delete all the entries in the list. To delete one or more entries, select the leftmost check boxes of them, and then click the Delete button. Table 0- 2 Basic Elements and Features of the List http://www.uttglobal.com Page 4 UTT Technologies 0.3.4.2 About This Manual Sorting Function All the lists in the Web UI support sorting function. The operation is as follows: You can click any column header to sort the entries in a list by that column. Click once to sort the entries in descending order, click again to sort them in ascending order. Click a third time to sort them in descending order, and so forth. After sorted, the list will be displayed from the first page. 0.4 Factory Default Settings The following table lists the default values of several important parameters. Parameter Default Value Description Administrator User Name admin You can use the administrator account to login to the Wireless Router’s Web UI. Administrator Password admin Note: Both the User Name and Password are case sensitive. LAN IP Address 192.168.1.1 They are the IP address and subnet mask of the Wireless Router’s LAN interface. You can LAN Subnet Mask 255.255.255.0 use this IP address to access and manage the Wireless Router. To connect to the Wireless Router, wireless clients must use the same SSID as the SSID UTT-HIPER_XXXXXX Wireless Router. Therein, “XXXXXX” is the Wireless Router’s serial number in hexadecimal format. Table 0- 3 Factory Default Settings 0.5 Document Organization This guide mainly describes the settings and applications of the AC750W Wireless Router, which include product overview, hardware installation, quick setup, start menu, network, wireless, advanced, user management, firewall, VPN, system administration, status and support. http://www.uttglobal.com Page 5 UTT Technologies About This Manual Chapter 1 Product Overview This chapter describes functions and features of the Wireless Router. Chapter 2 Hardware Installation This chapter describes how to install the Wireless Router. Chapter 3 Quick Setup This chapter describes the following contents: • How to install and configure TCP/IP properties on your PC. • How to login to the Wireless Router; and introduction to the WEB UI layout. • How to use the Setup Wizard to quickly configure the basic parameters for the Wireless Router to operate properly. Chapter 4 Start Menu This chapter describes how to quickly go to the following pages to configure the related features via the Start menu items: • Setup Wizard: How to configure the basic parameters for the Wireless Router to operate properly. • System Status: How to view wired and wireless status of the Wireless Router. • Interface Traffic: How to view the real-time traffic chart for each interface, and the ingress and egress traffic statistics for each interface. • Restart: How to restart the Wireless Router. Chapter 5 Network This chapter describes how to configure the basic network parameters of the Wireless Router, including: • WAN: How to configure Internet connections and view their configuration and status. • Load Balancing: How to configure the load balancing feature which includes detection and weight settings, global settings; and how to view the load balancing list. • LAN Settings: How to configure the parameters of the LAN interface, such as IP address, subnet mask, MAC address, and so on. • DHCP Server: How to configure DHCP server, DNS proxy, static DHCP; how to view the static DHCP list and DHCP client list. • DDNS: How to apply for DDNS account and configure DDNS service, and view DDNS status. • UPnP: How to enable or disable UPnP, and view the UPnP port forwarding list. Chapter 6 Wireless http://www.uttglobal.com Page 6 UTT Technologies About This Manual This chapter describes how to configure the wireless features of the Wireless Router, including: • Basic Wireless Settings: How to configure basic wireless settings. • Wireless Security Settings: How to configure wireless security settings. • Wireless MAC Address Filtering: How to filter the wireless clients based on their MAC addresses. • Advanced Wireless Settings: How to configure advanced wireless settings. • Wireless Client List: How to view the status of the wireless clients, and easily configure MAC address filtering entries via the list. Chapter 7 Advanced This chapter describes how to configure the advanced features of the Wireless Router, including: • NAT and DMZ: How to configure and view NAT rules, port forwarding entries and DMZ host. • IP/MAC Binding: How to configure IP/MAC bindings to prevent IP address spoofing. How to configure an Internet whitelist or blacklist for the LAN users. • Static Route: How to configure and view the static routes. • PPPoE Server: How to configure PPPoE server global settings and PPPoE account settings, and view PPPoE user status. Chapter 8 User Management This chapter describes how to control and manage the Internet behaviors of the LAN users based on schedule, including: • Global Management: How to allow or block the LAN users from using popular IM (e.g., QQ, MSN) and P2P applications (e.g., Bit Comet, Bit Spirit, Thunder Search) based on schedule. • Group Management: How to allow or block the LAN users from using popular IM and P2P applications based on user group and schedule. Chapter 9 Firewall This chapter describes how to configure firewall features, including: • Access Control: How to configure access control rules to assign Internet access privileges to the LAN users based on schedule, and to prevent external attacks. • Domain Filtering: How to configure domain filtering feature to block access to the specified websites. • Attack Prevention: How to configure attack prevention features. Chapter 10 VPN http://www.uttglobal.com Page 7 UTT Technologies About This Manual This chapter describes the PPTP implementation, and how to configure the Wireless Router as a PPTP client. Chapter 11 System Administration This chapter describes how to perform maintenance activities on the Wireless Router, including: • Administrator: How to add, view, modify and delete the administrator accounts. • System Time: How to set the system date and time manually or automatically. • Configuration: How to backup and restore the system configuration, and reset the Wireless Router to factory default settings. • Firmware upgrade: How to backup, download and upgrade firmware. • Remote Access: How to enable HTTP remote management feature to remotely configure and manage the Wireless Router via Internet. • Scheduled Task: How to create and view the scheduled tasks. Now the Wireless Router only supports one scheduled task: Restart. Chapter 12 Status This chapter describes how to view the system status information and statistics, including: • System Status: It displays wired and wireless status of the Wireless Router. • Traffic Statistics: It displays wired and wireless data traffic statistics of the Wireless Router. • System Information: It displays the current system time, system up time, system resources usage information, SN, firmware version, and system log messages. Chapter 13 Support This chapter describes how to link to the UTTCare, Forum, Knowledge and Reservation page of the UTT website, which can help you quickly learn the UTT Technologies service system and enjoy the most intimate and professional services. Appendix This guide provides six appendixes, including: • Appendix A How to Configure Your PC: How to configure TCP/IP settings on a Windows XP-based computer. • Appendix B FAQ: Frequent questions and answers. • Appendix C Common IP Protocols: Provides the list of common IP protocols and their protocol numbers. • Appendix D Common Service Ports: Provides the list of common services and their port numbers. http://www.uttglobal.com Page 8 UTT Technologies • Appendix E Figure Index: Provides a figure index directory. • Appendix F Table Index: Provides a table index directory. 0.6 About This Manual Contact Information If you have any questions regarding the operation or installation of the AC750W Wireless Router, please contact us in any of the following ways. • Technical Support Phone: +86-4006-120-780, +86-4006-880-780 • UTT Forum: http://www.uttglobal.com/forum/ • E-mail: uttglobal@utt.com.cn http://www.uttglobal.com Page 9 UTT Technologies Chapter 1 Product Overview Chapter 1 Product Overview Thanks for choosing the AC750W Wireless Router from UTT Technologies Co., Ltd. This chapter describes the functions and features of the AC750W Wireless Router in brief. 1.1 Product Brief The AC750W Wireless Router is designed for small-sized businesses and branch offices, integrating wired networks with 3G and 802.11 wireless networks. In addition, it adheres to the characteristics of UTT Technologies products: open, easy-to-use, safe, smooth, and so on. The AC750W is based on IEEE 802.11n standard and is compatible with IEEE 802.11b and IEEE 802.11g standards. It provides maximum wireless transfer rate up to 300Mbps, wide wireless coverage, and stable wireless data transmission. The AC750W supports multiple security modes which include WEP, WPA-Enterprise, WPA2-Enterprise, WPA-PSK and WPA2-PSK. What’s more, it provides simple and efficient wireless MAC address filtering to improve the security of your wireless network. The AC750W supports DHCP server, NAT, static route, DDNS, IP/MAC binding, PPPoE server and other advanced features. Furthermore, it provides feature-rich user management, which can help you control and manage the Internet behaviors of the LAN users based on schedule and address group, including QQ, MSN and P2P applications (e.g., Bit Comet, Bit Spirit, and Thunder Search) control, the maximum upload and download rate limiting. The AC750W supports flexible firewall features like access control and domain filtering to effectively prevent network attacks, and provide security for the LAN users. The AC750W provides a concise, intuitive, and feature-rich Web User Interface. The Setup Wizard can help you quickly configure the basic parameters for the Wireless Router to operate properly. The status information (System Status, Wireless Client List, Traffic Statistics, etc.) can help you identify and diagnose the source of current system problems, or predict potential system problems. In addition, the Support page provides links to the UTT website to help you quickly learn the UTT Technologies service system and enjoy the most intimate and professional services. http://www.uttglobal.com Page 10 UTT Technologies 1.2 Chapter 1 Product Overview Key Features • Supports multiple Internet connection types: 3G, PPPoE, Static IP, DHCP and Wi-Fi AP • Provides two wired WAN interfaces (WAN1 and WAN2), two wireless WAN interfaces (3G and APClient), and three 10M/100M LAN ports • Supports multiple Internet connections that provide intelligent load balancing and automatic failover • Supports 6kV lightning protection • Conforms to IEEE 802.11n (802.11g and 802.11b Compatible). • Provides maximum wireless transfer rate up to 300Mbps • Supports multiple wireless security modes which include WEP, WPA-Enterprise, WPA2-Enterprise, WPA-PSK and WPA2-PSK • Supports hidden SSID • Supports VPN pass-through (IPSec, PPTP and L2TP) • Supports PPTP client • Supports WMM (Wi-Fi Multimedia) • Supports wireless MAC address filtering feature, whitelist, blacklist, one-click filtering of MAC addresses • Supports DHCP server • Supports DNS proxy • Supports DDNS (Dynamic Domain Name System) • Supports IP/MAC binding • Supports feature-rich PPPoE server • Supports upload and download rate limiting for the LAN users • Supports Internet behavior management for the LAN users, such as block or allow QQ, MSN and P2P applications (e.g., Bit Comet, Bit Spirit, and Thunder Search) • Supports flexible and strong firewall features • Supports IP packet filtering based on IP address, protocol and TCP/UDP port • Supports URL and keyword filtering • Supports DNS request filtering • Supports HTTP remote management • Provides the Web User Interface (Web UI) for ease of use • Supports firmware upgrade via the Web UI • Supports configuration backup and restore http://www.uttglobal.com Page 11 UTT Technologies • Chapter 1 Product Overview Provides wireless client list and system status 1.3 Physical Specification ● Conforms to IEEE 802.11n, IEEE 802.11b and IEEE 802.11g standards ● Conforms to IEEE 802.3 Ethernet and IEEE 802.3u Fast Ethernet standards ● Supports TCP/IP, PPPoE, DHCP, ICMP, NAT, Static Route, etc. ● Each physical port supports auto-negotiation for the port speed and duplex mode ● Each physical port supports auto MDI/MDI-X ● Provides system and port LEDs ● Operating Environment: Temperature: 32° to 104° F (0° to 40° C) Relative Humidity: 10% to 90%, Non-condensing Height: 0m to 4000m http://www.uttglobal.com Page 12 UTT Technologies Chapter 2 Hardware Installation Chapter 2 Hardware Installation 2.1 Physical Characteristics 2.1.1 Front Panel As shown in Figure 2- 1, the LEDs are located on the front panel of the Wireless Router. The LEDs indicate the status of the system and each port. Table 2- 1 describes these LEDs. Figure 2- 1 Front Panel of the Wireless Router LED PWR Full Name State On The Wireless Router is powered on. Off The Wireless Router is powered off. Power LED Blinking SYS USB WLAN Description System LED 3G USB Modem Status LED The system is operating properly. On The system is not operating properly. Off The system is not operating properly. On A 3G USB modem is connected to the USB port. Off No 3G USB modem is connected. On The wireless function is enabled. Wireless LAN Status LED http://www.uttglobal.com Blinking The Wireless Router is sending or receiving data over the wireless network. Page 13 UTT Technologies Chapter 2 Hardware Installation WAN1/ WAN1/WAN2 WAN2 Port Status LED 1, 2, 3 LAN Port Status LED Off The wireless function is disabled. On A valid link is established on the corresponding port. Blinking The corresponding port is sending or receiving data. Off No link is established on the corresponding port. On A valid link is established on the corresponding port. Blinking The corresponding port is sending or receiving data. Off No link is established on the corresponding port. Note: The Wireless Router doesn’t support WPS feature at present. Table 2- 1 Description of LEDs on the Front Panel 2.1.2 Rear Panel As shown in Figure 2- 2, the rear panel of the Wireless Router contains a POWER connector, a RESET button, a USB port, two wired WAN ports (WAN1 and WAN2), three LAN ports, a WPS button, and two Antenna ports. Note that the Wireless Router doesn’t support WPS feature at present. Figure 2- 2 Back Panel of the Wireless Router 1. RESET Button If you forget the administrator password, you need to use the RESET button to reset the Wireless Router to factory default settings. The operation is as follows: While the Wireless Router is powered on, use a pin or paper clip to press and hold the RESET button for more than 5 seconds, and then release the button. After that, the Wireless Router will restart with factory default settings. http://www.uttglobal.com Page 14 UTT Technologies Chapter 2 Hardware Installation Note This operation will clear all the custom settings on the Wireless Router. If you remember the administrator account, it is strongly recommended that you go to Administration > Configuration page to backup the current configuration firstly, and then reset the Wireless Router to factory default settings. 2. Ports The Wireless Router provides three LAN ports, two WAN ports, and a USB port. Table 2- 2 describes these ports. Port Description LAN (1, 2, 3) WAN1/WAN2 They are used to connect the wired computers, hubs, switches, and other Ethernet network devices on the LAN to the Wireless Router. They are used to connect the Wireless Router to the Internet. The Wireless Router provides a USB port for connecting a 3G USB Modem, which USB is used to connect the Wireless Router to the Internet. Table 2- 2 Description of Ports on the Rear Panel 3. Components Component Number Description Antenna They are used to receive and transmit wireless signals. Power It is used to connect the power adapter. Table 2- 3 Description of Components on the Rear Panel 2.2 Installation Procedure 1. Selecting a Proper Location Please make sure that the Wireless Router is powered off before installing it. Then you need to select a proper location to install the Wireless Router. In most cases, you can install it on a level surface such as a desktop or shelf. http://www.uttglobal.com Page 15 UTT Technologies Chapter 2 Hardware Installation Note Please ensure that the desktop or shelf is stable and the power outlet is grounded properly, and do not place heavy objects on the Wireless Router. 2. Attach the Antennas When shipped, the two antennas are not connected to the Wireless Router. To attach the antennas to the Wireless Router, follow these steps: 1) Remove one antenna from the box. 2) Locate one antenna port (threaded knob) on the back panel of the Wireless Router, see Figure 2- 2. 3) Screw the antenna in a clockwise direction to the threaded knob until firmly seated. Don’t over-tighten. 4) Repeat the above steps to attach the other antenna. Note Please make sure that you have attached the two antennas to the Wireless Router properly. The antennas will greatly enhance wireless communication capacity of the Wireless Router. 3. Connecting the Wireless Router to the LAN Connect a standard network cable from a PC or switch to a LAN port of the Wireless Router, or connect a PC to the Wireless Router wirelessly. The Wireless Router will automatically adapt to any network device operating at 10Mbps or 100Mbps. 4. Connecting the Wireless Router to the Internet Connect the network cable provided by the manufacturer from the DSL, cable or fiber optic modem to a WAN port of the Wireless Router, or insert your 3G USB modem to the USB port of the Wireless Router. 5. Powering On the Wireless Router Connect the supplied power cord to the power connector on the rear panel of the Wireless Router, and then plug the other end of the power cord to a grounded power outlet. The Wireless Router will start automatically. Note http://www.uttglobal.com Page 16 UTT Technologies Chapter 2 Hardware Installation To prevent the Wireless Router from working abnormally or being damaged, please make sure that the power supply and connectivity are normal, and the power outlet is grounded properly before powering on the Wireless Router. 6. Checking the LEDs Verify that the Wireless Router starts up properly and the network connections are operational by checking the LED states, as described in Table 2- 1. http://www.uttglobal.com Page 17 UTT Technologies Chapter 3 Quick Setup Chapter 3 Quick Setup This chapter describes how to properly configure TCP/IP settings on your computer, how to login to the Wireless Router, and how to configure the basic parameters to quickly connect the Wireless Router to the Internet via the Start > Setup Wizard. In addition, it also briefly describes the layout and style of the Wireless Router’s Web UI. 3.1 Configuring Your Computer Before configuring the Wireless Router via the Web UI, you should properly configure TCP/IP settings on the computer that you use to administer the Wireless Router. To do this, follow these steps: Step 1 Connect the computer to a LAN port of the Wireless Router. Step 2 Install TCP/IP protocol on your computer. If it has been installed, please ignore it. Step 3 Configure TCP/IP settings on your computer: set the computer’s IP address to an IP address in the range of 192.168.1.2 through 192.168.1.254, set its subnet mask to 255.255.255.0, set its default gateway to 192.168.16.1 (the Wireless Router’s default LAN IP address is 192.168.1.1 with a subnet mask of 255.255.255.0), and set its DNS server to an available IP address provided by your ISP. Step 4 To verify the network connection between your computer and the Wireless Router, you can use the ping command at the command prompt on the computer: Ping 192.168.1.1 • If the displayed page is similar to the screenshot below, the connection between your computer and the Wireless Router has been established. http://www.uttglobal.com Page 18 UTT Technologies • Chapter 3 Quick Setup If the displayed page is similar to the screenshot below, the connection between your computer and the Wireless Router hasn't been established yet. If the connection hasn't been established, please take the following steps to resolve the problem: 1. Is the physical link between your computer and the Wireless Router connected properly? Verify that the LED corresponding to the Wireless Router’s LAN port and the LED on your computer’s adapter are lit. 2. Is the TCP/IP configuration for your PC correct? Verify that your computer is on the same subnet as the Wireless Router’s LAN interface. For example, if the Wireless Router’s LAN IP address is 192.168.1.1/24 (default value), your computer’s IP address must be an IP address in the range of 192.168.1.2 through 192.168.1.254, which is not being used by another network device; and its default gateway must be 192.168.1.1. http://www.uttglobal.com Page 19 UTT Technologies 3.2 Chapter 3 Quick Setup Logging in to the Wireless Router This section describes how to login to the Wireless Router. No matter what operating system is installed on your computer, such as, MS Windows, Macintosh, UNIX, or Linux, and so on, you can login to and configure the Wireless Router through the Web browser (for example, Internet Explorer). To login to the Wireless Router, do the following: Open a Web browser, enter the Wireless Router’s LAN interface IP address (the default is 192.168.1.1) in the address bar, and then press key, see Figure 3- 1. Figure 3- 1 Entering IP address in the Address Bar A login screen prompts you for your user name and password, see Figure 3- 2. When you first login to the Wireless Router, please use the default administrator account: Enter admin in both the User name and Password boxes (the default user name and password both are admin), lastly click OK. Figure 3- 2 Login Screen If your user name and password are correct, it will display the homepage, see Figure 3- 3. http://www.uttglobal.com Page 20 UTT Technologies Chapter 3 Quick Setup Figure 3- 3 Homepage Each page of the Wireless Router’s Web UI consists of four panes: 1. Top Pane: It displays UTT logo, model and version, and three shortcut icons. 1) UTT Logo: Click to link to the homepage of the UTT website. 2) Model and Version: The product model and firmware version of the Wireless Router. 3) Short Icons: They are used for fast link to the corresponding pages on the website of UTT Technologies Co., Ltd. ● Product: Click to link to the products page of the UTT website to find more products. ● Forum: Click to link to the forum homepage of the UTT website to participate in product discussions. ● Feedback: Click to link to send us your feedback by E-mail. 2. Main Pane: It is the location where you can configure each feature of the Wireless Router, view configuration, status and statistics. 3. Side Pane: It displays the two-level main menu bar (i.e., navigation bar). The first level menu is always visible. The second level menu is hidden by default. You can click a first level menu item to reveal its submenu items, click again to hide them. 4. Bottom Pane: It displays copyright information. If this is the first time that you login to the Wireless Router, the first page of the Setup Wizard appears. In the next section we will describe how to use the Setup Wizard to configure the basic parameters for the Wireless Router to operate properly. http://www.uttglobal.com Page 21 UTT Technologies 3.3 Chapter 3 Quick Setup Setup Wizard This section describes the Start > Setup Wizard page. 3.3.1 Running the Setup Wizard As mentioned earlier, the first page of the Setup Wizard appears immediately after your first login, see the following figure. Figure 3- 4 Running the Setup Wizard Do Not Automatically Launch the Wizard Again: If you select this check box, the system don’t automatically launch the Setup Wizard the next time you login to the Wireless Router, instead directly open the Welcome page shown in Figure 3- 5. Else, the system will still launch the Setup Wizard automatically. Exit Wizard: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Next: Click to go to the next page of the Setup Wizard, that is, the Setup Wizard Internet Access Mode page shown in Figure 3- 6. http://www.uttglobal.com Page 22 UTT Technologies Chapter 3 Quick Setup Figure 3- 5 Welcome Page 3.3.2 Setup Wizard - Internet Access Mode In this page, you can choose one or more Internet connections that you want to configure via the Setup Wizard, see Figure 3- 6. Figure 3- 6 Setup Wizard - Internet Access Mode WAN1: If you want to configure a wired Internet connection on the WAN1 interface via the Setup Wizard, select this check box. WAN2: If you want to configure a wired Internet connection on the WAN2 interface http://www.uttglobal.com Page 23 UTT Technologies Chapter 3 Quick Setup via the Setup Wizard, select this check box. 3G Client: If you want to configure a 3G Internet connection via the Setup Wizard, select this check box. Here the Wireless Router acts as a 3G client. AP Client: If you want to configure a wireless Internet connection via the Setup Wizard, select this check box. Here the Wireless Router acts as an AP client. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit Wizard: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Next: Click to go to the next page of the Setup Wizard. 3.3.3 Setup Wizard - Internet Connection Settings In the Setup Wizard, you can configure each Internet connection respectively. For each Internet access mode, the Internet connection settings are different. 3.3.3.1 WAN1/WAN2 Internet Connection Settings For the WAN1 or WAN2 Internet connection, there are three connection types: PPPoE, Static IP and DHCP. 3.3.3.1.1 Static IP Internet Connection Settings If you are required to use a static IP address, please select Static IP from the Connection Type drop-down list. Then the following page will be shown. http://www.uttglobal.com Page 24 UTT Technologies Chapter 3 Quick Setup Figure 3- 7 Setup Wizard - WAN1/WAN2 Internet Connection Settings (Static IP) Connection Type: It specifies the type of the Internet connection. Here please select Static IP. You need to manually configure IP address, subnet mask, default gateway and DNS server addresses, which are provided by your ISP. IP Address: It specifies the IP address of the WAN interface, which is provided by your ISP. Subnet Mask: It specifies the subnet mask of the WAN interface, which is provided by your ISP. Default Gateway: It specifies the IP address of the default gateway, which is provided by your ISP. Primary DNS Server: It specifies the IP address of your ISP’s primary DNS server. Secondary DNS Server: It specifies the IP address of your ISP’s secondary DNS server. If it is available, you may set it. Else, please leave it blank. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. Note The WAN IP address and default gateway IP address must be on the same subnet. If not, please modify the Subnet Mask to make them be on the same subnet. If you don’t have the subnet related knowledge, please ask a professional or UTT customer engineer for help. 3.3.3.1.2 DHCP Internet Connection Settings If your ISP automatically assigns an IP address to the Wireless Router via DHCP, please select DHCP from the Connection Type drop-down list. Then the following page will be shown. http://www.uttglobal.com Page 25 UTT Technologies Chapter 3 Quick Setup Figure 3- 8 Setup Wizard - WAN1/WAN2 Settings (DHCP) Connection Type: It specifies the type of the Internet connection. Here please select DHCP. The Wireless Router will automatically obtain the WAN IP address, subnet mask and gateway and DNS server addresses from your ISP’s DHCP server. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. 3.3.3.1.3 PPPoE Internet Connection Settings Please select PPPoE from the Connection Type drop-down list if your ISP uses PPPoE to establish the Internet connection for you. Then the following page will be shown. Figure 3- 9 Setup Wizard - WAN1/WAN2 Settings (PPPoE) Connection Type: It specifies the type of the Internet connection. Here please select PPPoE. The Wireless Router will automatically obtain the WAN IP address, subnet mask and gateway IP address from your ISP’s PPPoE server. User Name and Password: They specify the PPPoE login user name and password provided by your ISP. Please ask your ISP if you have any questions. Back: Click to go back to the previous page of the Setup Wizard. http://www.uttglobal.com Page 26 UTT Technologies Chapter 3 Quick Setup Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. 3.3.3.2 3G Internet Connection Settings Figure 3- 10 Setup Wizard - 3G Internet Connection Settings 3G USB Modem: It specifies the model of the 3G USB modem. Now the Wireless Router supports five models: HUAWEI E169, HUEWEI E1750, HUAWEI EC1260, HUAWEI ET128, and ZTE MF637U. ISP: It is short for Internet Service Provider, a company that provides 3G wireless Internet access service for you. Now the Wireless Router supports three ISPs: China Mobile, China Unicom and China Telecom. Authentication Method: It specifies the authentication method used by your ISP. The options are SIM and Password. PIN Code: It specifies the PIN code of your 3G SIM card. PIN is short for Personal Identification Number. APN: It is short for Access Point Name, which is provided by your ISP. Dial Number: It specifies the dial number provided by your ISP. http://www.uttglobal.com Page 27 UTT Technologies Chapter 3 Quick Setup User Name: It specifies the user name used for PPP authentication. Password: It specifies the password used for PPP authentication. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. Note It is strongly recommended that you configure only the 3G USB Modem and ISP of the 3G Internet connection, and leave the other parameters at their default values. If necessary, please change them under the guidance of a professional. 3.3.3.3 APClient Internet Connection Settings In the Setup Wizard - APClient Connection Settings page, the security settings depend on the value of Security Mode. The following sections describe the APClient connection settings under each security mode respectively. 3.3.3.3.1 APClient Connection Settings - Disabling Wireless Security Figure 3- 11 Setup Wizard - APClient Connection Settings (Disabling Wireless Security) AP SSID: It specifies the SSID of the remote AP. It must be between 1 and 32 characters long, and it is case sensitive. AP MAC Address: It specifies the MAC address of the remote AP. http://www.uttglobal.com Page 28 UTT Technologies Chapter 3 Quick Setup Security Mode: It specifies the security mode to be used by the Wireless Router. Here please select None. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. 3.3.3.3.2 APClient Connection Settings - WEP Figure 3- 12 Setup Wizard - APClient Connection Settings (WEP) AP SSID: It specifies the SSID of the remote AP. It must be between 1 and 32 characters long, and it is case sensitive. AP MAC Address: It specifies the MAC address of the remote AP. Security Mode: It specifies the security mode to be used by the Wireless Router. Here please select WEP. WEP is the basic encryption mode which is not as secure as WPA. Authentication Type: It allows you to select the authentication type under WEP security mode. The options are Open System and Shared Key. http://www.uttglobal.com Page 29 UTT Technologies Chapter 3 Quick Setup ● Open System: It allows the Wireless Router regardless of its WEP keys to authenticate and attempt to associate with the remote AP. However, even if the Wireless Router can complete authentication and associate with the remote AP, the Wireless Router cannot send or receive data from the remote AP unless it has the correct WEP key. ● Shared Key: It requires that the Wireless Router and remote AP have the same WEP key to authenticate. Without the correct key, authentication will fail and the Wireless Router won’t be allowed to associate with the remote AP. Key Format: It specifies the format for entering the WEP keys. The options are Hex and ASCII. ● Hex: Select this option if you want to enter the WEP keys in hexadecimal format. Hexadecimal digits are a set of characters that includes numbers 0 through 9 and letters A through F (or a through f). Hex WEP keys are case insensitive. ● ASCII: Select this option if you want to enter the WEP keys in ASCII format. ASCII WEP keys are case sensitive. Default Tx Key: It allows you to select one of the WEP keys as the default transmit key to transmit data. All keys can be used to receive data. WEP Key: It allows you to enter a key in one of the WEP Key boxes. You can enter up to four WEP keys. You should enter a key according to the Key Format and Key Type selected. ● For 64-bit encryption, enter 10 hex characters or 5 ASCII characters. ● For 128-bit encryption, enter 26 hex characters or 13 ASCII characters. Key Type: It allows you to select the size of each key, and it also allows you to disable or enable each key. The options are Disabled, 64-bit and 128-bit. By default, Disabled is selected, which means the key is of no effect. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. http://www.uttglobal.com Page 30 UTT Technologies 3.3.3.3.3 Chapter 3 Quick Setup APClient Connection Settings - WPA-PSK/WAP2-PSK Figure 3- 13 Setup Wizard - APClient Connection Settings (WPA-PSK/WAP2-PSK) AP SSID: It specifies the SSID of the remote AP. It must be between 1 and 32 characters long, and it is case sensitive. AP MAC Address: It specifies the MAC address of the remote AP. Security Mode: It specifies the security mode to be used by the Wireless Router. Here please select WPA-PSK/WPA2-PSK to use WPA-PSK mode or WPA2-PSK mode. In WPA-PSK or WPA2-PSK mode, the Wireless Router uses the pre-shared key that is manulally entered to generate encryption keys. WPA Mode: It specifies the WPA mode to be used by the Wireless Router. The options are WPA-PSK and WPA2-PSK. ● WPA-PSK: It means that the Wireless Router will use WAP-PSK security mode. ● WPA2-PSK: It means that the Wireless Router will use WAP2-PSK security mode. Encrption Method: It specifies the encrytion method used for data encryption. The options are TKIP and AES. ● TKIP: It means that the Wireless Router will use TKIP for data encryption. ● AES: It means that the Wireless Router will use AES for data encryption. Pre-shared Key: This key serves as seed for generating encryption keys. It must be identical to the remote AP’s. It must be between 8 and 63 characters long. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). http://www.uttglobal.com Page 31 UTT Technologies Chapter 3 Quick Setup The changes made in the Setup Wizard will be discarded. Skip: Click to go directly to the next page of the Setup Wizard. The changes made on the current page will be discarded. Next: Click to go to the next page of the Setup Wizard. 3.3.4 Setup Wizard - Wireless Settings In this page, you can configure basic wireless settings of the Wireless Router. Figure 3- 14 Setup Wizard - Wireless Settings SSID: The SSID (Service Set Identification) is also known as the wireless network name, which is used to uniquely identify a wireless network. It must be between 1 and 32 characters long, and it is case sensitive. Wireless Mode: It specifies the wireless standards running on your wireless network. The options are 11g Only, 11n Only and 11b/g/n Mixed. ● 11g Only: In allows both 802.11g and 802.11n wireless clients to connect to the Wireless Router at 802.11g data rates with a maximum speed of 54Mbps. ● 11n Only: It only allows 802.11n wireless clients to connect to the Wireless Router at 802.11n data rates with a maximum speed of 300Mbps. ● 11b/g/n Mixed: It allows 802.11b, 802.11g and 802.11n wireless clients to connect to the Wireless Router at their respective data rates. The maximum speeds are 11Mbps, 54Mbps and 300Mbps respectively. Channel: It specifies the wireless channel used between the Wireless Router and wireless clients. The valid range is 1 through 11. You can also select Auto to let the Wireless Router automatically select the best channel. If there are multiple wireless routers in your area, please make sure that their channels don’t interfere with each http://www.uttglobal.com Page 32 UTT Technologies Chapter 3 Quick Setup other. Channel Width: It specifies the range of frequecies used by your wireless network. The options are 20/40M and 20M. Note that this parameter can only act on 802.11n wireless clients. 802.11b and 802.11g wireless clients can only use 20MHz channel. ● 20M/40M: If you select this option, 802.11n wireless clients will negotiate the channel width with the Wireless Router. ● 20M: It you select this option, 802.11n wireless clients will use 20MHz channel. Back: Click to go back to the previous page of the Setup Wizard. Cancel: Click to revert to the last saved settings. Exit: Click to exit the Setup Wizard and go to the Welcome page (see Figure 3- 5). The changes made in the Setup Wizard will be discarded. Finish: Click to save the changes you have made in the Setup Wizard and close the Setup Wizard. Note Do not forget to click the Finish button to save the changes you have made in the Setup Wizard, else these changes will be discarded. http://www.uttglobal.com Page 33 UTT Technologies Chapter 4 Start Menu Chapter 4 Start Menu The Start menu item is the first one under the top-level menu. It provides links to several commonly used pages including Setup Wizard, System Status, Interface Traffic and Restart, where you can quickly configure the basic parameters for the Wireless Router to operate properly, view system status, view interface traffic statistics, and restart the Wireless Router. 4.1 Setup Wizard The Start > Setup Wizard can help you configure the basic parameters for the Wireless Router to operate properly. Refer to Section 3.3 Setup Wizard for detailed information. 4.2 System Status This section describes the Start > System Status page, where you can view the current status information of the Wireless Router. 4.2.1 Wired Status This page displays the current status information of the wired interfaces, which include WAN1, WAN2 and LAN. http://www.uttglobal.com Page 34 UTT Technologies Chapter 4 Start Menu Figure 4- 1 System Status - Wired Status WAN1: It displays the current status and basic configuration of the WAN1 Internet connection, which include connection type, status, IP address, subnet mask, MAC address, default gateway and DNS server addresses, and up time. WAN2: It displays the current status and basic configuration of the WAN2 Internet connection, which are the same as those of the WAN1 Internet connection. LAN: It displays the basic configuration of the LAN inteface, which include IP address, subnet mask and MAC address. Refresh: Click to view the latest wired status information. 4.2.2 Wireless Status This page displays the current status information of the wireless interfaces, which include http://www.uttglobal.com Page 35 UTT Technologies Chapter 4 Start Menu 3G, APClient and Wireless LAN. Figure 4- 2 System Status - Wireless Status 3G: It displays the current status and basic configuration of the 3G Internet connection, which include connection type, status, IP address, subnet mask, MAC address, default gateway and DNS server addresses, and up time. APClient: It displays the current status and basic configuration of the APClient Internet connection, which are the same as those of the 3G Internection connection. Wireless LAN: It displays the current status and basic configuration of the Wireless LAN, which include status, operation mode, SSID, wireless mode, channel and MAC address. Refresh: Click to view the latest wireless status information. Note http://www.uttglobal.com Page 36 UTT Technologies Chapter 4 Start Menu The Wired Status page and Wireless Status page only display the status information of the interfaces that have been configured. 4.3 Interface Traffic This section describes the Start > Interface Traffic page. This page provides the real-time traffic chart for each interface that has been configured, which displays the real-time Rx/Tx rate, average Rx/Tx rate, maximum Rx/Tx rate and total Rx/Tx traffic of each interface. For example, as shown in Figure 4- 3, all of the Wireless Router’s interfaces (LAN, WAN1, WAN2, 3G and APClient) have been configured. Note If the SVG Viewer plug-in isn’t installed on your web browser, the port traffic chart cannot be displayed properly. Please click the (Please install SVG Viewer if the page cannot be displayed properly.) hyperlink to download and install the SVG Viewer to view the traffic chart. Figure 4- 3 Interface Traffic Chart Avg: 1x, 2x, 4x, 6x: It specifies the number of samples to average, or no averaging. Max: It determines that the charts are scaled uniformly to the max traffic value of all interfaces or individually per interface. http://www.uttglobal.com Page 37 UTT Technologies Chapter 4 Start Menu Display: It allows you to change the type of chart displayed. The options are Line and Solid. ● Line: Select this option to display a line chart. The chart includes two lines with different colors, which represent the real-time Rx rate and Tx rate resectively. ● Solid: Select this option to display an area chart. The area chart is like the line chart except that the area between the axis the plot line is solid. Color: It specifies the colors of the two lines (or filled areas), such as red, blue, black, etc. Reverse: Click to toggle the colors of the two lines (or filled areas). LAN, WAN1, WAN2, APClient and 3G: You can select an interface name at the top to view the traffic chart for that interface. View Traffic Statistics: Click to view the ingress and egress traffic statistics for the interfaces that have been configured, see Figure 4- 4. Figure 4- 4 Traffic Statistics WAN1, WAN2, 3G, APClient and LAN: You can view the traffic statistics for each interface, including the number of bytes received and transmitted, and the number of packets received and transmitted. http://www.uttglobal.com Page 38 UTT Technologies Chapter 4 Start Menu Clear: Click to clear all traffic statistics. Refresh: Click to view the latest traffic statistics. Back: Click to go back to the Start > Interface Traffic page. Note This page only displays the traffic statistics for the interfaces that have been configured. 4.4 Restart Figure 4- 5 Restart the Wireless Router Restart: Click to restart the Wireless Router. If you click the Restart button, the system will pop up a prompt dialog box (see Figure 4- 6). Then you can click OK to restart the Wireless Router, or click Cancel to cancel the operation. Figure 4- 6 Prompt Dialog Box - Restart the Wireless Router Note Restarting the Wireless Router will disconnect all the sessions, so please do it with caution. http://www.uttglobal.com Page 39 UTT Technologies Chapter 5 Network Chapter 5 Network This chapter describes how to configure the basic network parameters of the Wireless Router, which include WAN settings, load balancing, LAN settings, DHCP server, DDNS, and UPnP. 5.1 WAN Settings This section describes the Network > WAN page. If you have configured one or more Internet connections in the Start > Quick Wizard, you can view their configuration and status in this page, and modify or delete them if needed. You also can directly configure one or more Internet connections in this page. 5.1.1 Internet Connection List You can view the configuration and status of each Internet connection in the Internet Connection List, see Figure 5- 1. Figure 5- 1 Internet Connection List http://www.uttglobal.com Page 40 UTT Technologies Chapter 5 Network Figure 5- 2 Internet Connection List (Continue) 5.1.1.1 Parameter Definitions Interface: It displays the name of the WAN interface. The Wireless Router has four WAN interfaces: WAN1, WAN2, 3G, and APClient. Therein, WAN1 and WAN2 are wired interfaces, and 3G and APClient are wireless interfaces. Connection Type: It displays the type of the Internet connection. There are four connection types: Static IP, PPPoE, DHCP and 3G. Status: It displays current status of the connection. There are four cases: 1. PPPoE Connection Status For the PPPoE connection, there are two kinds of status, see Table 5- 1. When it is connected, it will also display the elapsed time (days: hours: minutes: seconds) since connected. Status Description The connection is disconnected due to that the interface is disabled or Disconnected not connected, or the Wireless Router doesn’t dial up yet, or wrong user name or password, etc. Authentication succeeded, and the connection is established and ready Connected for data transmission. Table 5- 1 Description of PPPoE Connection Status 2. Static IP Connection Status For the static IP connection, there are two kinds of status, see Table 5- 2. Status http://www.uttglobal.com Description Page 41 UTT Technologies Chapter 5 Network The connection is disconnected due to that the interface is disabled or Disconnected not connected, etc. The connection is established between the Wireless Router and peer Connected device. Table 5- 2 Description of Static IP Connection Status 3. DHCP Connection Status For the DHCP connection, there are two kinds of status, see Table 5- 3. When it is connected, it will also display the elapsed time (days: hours: minutes: seconds) since connected. Status Description The connection is disconnected due to that the interface is disabled or Disconnected not connected, or the Wireless Router has released the IP address but hasn’t obtained a new one yet, etc. The Wireless Router has obtained an IP address, and the connection is Connected established successfully. Table 5- 3 Description of DHCP Connection Status 4. 3G Connection Status For the 3G connection, there are two kinds of status, see Table 5- 4. When it is connected, it will also display the elapsed time (days: hours: minutes: seconds) since connected. Status Disconnected Connected Description The connection is disconnected due to that the 3G USB modem isn’t inserted properly, or wrong ISP, 3G USB modem settings, etc. The Wireless Router has obtained an IP address, and the connection is established successfully. Table 5- 4 Description of 3G Connection Status IP Address, Subnet Mask and Default Gateway: They display the current IP settings of the connection. There are two cases: ● For the PPPoE, DHCP or 3G Internet connection, it will show the current WAN IP address, subnet mask and gateway IP address which are assigned by your ISP. ● For the static IP Internet connection, it will show the information you have entered manually. http://www.uttglobal.com Page 42 UTT Technologies Chapter 5 Network Rx Rate: It displays the average download speed (in kilobytes per second) of the Internet connection during the time interval between two refresh operations. Tx Rate: It displays the average upload speed (in kilobytes per second) of the Internet connection during the time interval between two refresh operations. 5.1.1.2 How to Add, View, Modify and Delete Internet Connections Add an Internet Connection: To add a new Internet connection, first click its Interface hyperlink or icon, and then configure it, lastly click the Save button. View Internet Connection(s): When you have configured one or more Internet connections, you can view them in the Internet Connection List. Modify an Internet Connection: To modify a configured Internet connection, click its Interface hyperlink or icon, the related information will be displayed in the setup fields. Then modify it, and click the Save button. Delete an Internet Connection: To delete an Internet connection, click its Interface hyperlink or the list. icon to select the connection, and then click the Delete button below Refresh Internet Connection List: To view the latest status of the Internet connections, click the Refresh button below the list. 5.1.1.3 How to Connect and Disconnect a PPPoE/3G Connection If you click the Interface hyperlink or icon of a PPPoE or 3G connection, the Connect and Disconnect button will appear below the list, see Figure 5- 3. If the PPPoE connection’s Dial Type is set to Manual (see Section 5.1.2.1.3 PPPoE Internet Connection Settings), you need to click the Connect button to connect it, and click the Disconnect button to disconnect it. Connect: Click to connect the PPPoE or 3G Internet connection manually. Disconnect: Click to disconnect the PPPoE or 3G Internet connection manually. http://www.uttglobal.com Page 43 UTT Technologies Chapter 5 Network Figure 5- 3 Internet Connection List - PPPoE/3G Connection 5.1.1.4 How to Renew and Release DHCP Connection If you click the Interface hyperlink or icon of a DHCP connection, the Renew button and Release button will appear below the list, see Figure 5- 4. Figure 5- 4 Internet Connection List - DHCP Connection Renew: Click to re-obtain an IP address from the ISP’s DHCP server. The Wireless Router will automatically release the assigned IP address firstly, and then obtain a new IP address from the DHCP server. Release: Click to release the IP address obtained from the ISP’s DHCP server. 5.1.2 Internet Connection Settings If you want to configure an Internet connection, please click its Interface hyperlink or icon in the Internet Connection List. The setup page is shown in Figure 5- 5. http://www.uttglobal.com Page 44 UTT Technologies Chapter 5 Network Figure 5- 5 Network - WAN Settings Note 1. It allows you to choose the ISP Policy (i.e., route policy database) for each Internet connection. The system will automatically create the associated static routes according to your selection. Thus all traffic destined for one ISP’s servers will be forwarded through this ISP’s connection. 2. If you want to configure and use an APClient Internet connection, please choose APClient Mode as the Operation Mode in the Wireless > Basic page. 5.1.2.1 WAN1/WAN2/APClient Internet Connection Settings For the WAN1, WAN2 or APClient Internet connection, there are three connection types which include PPPoE, Static IP and DHCP. The following subsections describe how to configure the PPPoE, Static IP and DHCP Internet connection respectively. http://www.uttglobal.com Page 45 UTT Technologies 5.1.2.1.1 Chapter 5 Network Static IP Internet Connection Settings Figure 5- 6 Static IP Internet Connection Interface: It specifies the name of the WAN interface. Here please select WAN1, WAN2 or APClient. Connection Type: It specifies the type of the Internet connection. Here please select Static IP. You need to manually configure IP address, subnet mask, default gateway and DNS server addresses, which are provided by your ISP. ISP Policy: It specifies the route policy database used for the Interent connection. There are four options: None, Telecom, Unicom and Mobile. ● None: It means that no route policy database is used. This option is selected by default. ● Telecom: If your ISP is China Telecom, you may select this option. Then the traffic destined for China Telecom servers will be forwarded through the connection. ● Unicom: If your ISP is China Unicom, you may select this option. Then the traffic destined for China Unicom servers will be forwarded through the connection. ● Mobile: If your ISP is China Mobile, you may select this option. Then the traffic destined for China Mobile servers will be forwarded through the connection. Update Policy: Click to update the corresponding route policy database. IP Address, Subnet Mask, Default Gateway, Primary DNS Server and Secondary DNS Server: Refer to Section 3.3.3.1.1 Static IP Internet Connection Settings for detailed information. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 46 UTT Technologies 5.1.2.1.2 Chapter 5 Network DHCP Internet Connection Settings Figure 5- 7 DHCP Internet Connection Settings Interface: It specifies the name of the WAN interface. Here please select WAN1, WAN2 or APClient. Connection Type: It specifies the type of the Internet connection. Here please select DHCP. The Wireless Router will automatically obtain the WAN IP address, subnet mask and gateway and DNS server addresses from your ISP’s DHCP server. ISP Policy and Update Policy: Refer to Section 5.1.2.1.1 Static IP Internet Connection Settings for detailed information. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. 5.1.2.1.3 PPPoE Internet Connection Settings Figure 5- 8 PPPoE Internet Connection Settings Interface: It specifies the name of the WAN interface. Here please select WAN1, http://www.uttglobal.com Page 47 UTT Technologies Chapter 5 Network WAN2 or APClient. Connection Type: It specifies the type of the Internet connection. Here please select PPPoE. The Wireless Router will automatically obtain the WAN IP address, subnet mask and gateway IP address from your ISP’s PPPoE server. ISP Policy and Update Policy: Refer to Section 5.1.2.1.1 Static IP Internet Connection Settings for detailed information. User Name and Password: They specify the PPPoE login user name and password provided by your ISP. Please ask your ISP if you have any questions. PPP Authentication: It specifies the PPP authentication mode of the PPPoE connection. The available options are Either, PAP, CHAP and NONE. The default value is Either, which means that the Wireless Router will automatically negotiate it with the remote PPPoE Server. NONE means that no authentication is performed. Dial Type: It specifies the dial type of the PPPoE connection. The available options are Always On, Manual and On Demand. • Always On: If you want the Wireless Router to establish the PPPoE connection when starting up and to automatically re-establish the PPPoE connection once disconnected, please select this option. • Manual: If you want to connect and disconnect the PPPoE connection manually in the Internet connection List (see Section 5.1.1.3 How to Connect and Disconnect a PPPoE/3G Connection), please select this option. • On Demand: If you want the Wireless Router to establish the PPPoE connection only when it listens for packets destined for the Internet, please select this option. Dial Mode: It specifies the dial mode of the PPPoE Internet connection. The default value is Normal mode. If the PPPoE connection isn’t established successfully even using correct user name and password, you may try to use another mode. Idle Timeout: It specifies how long the PPPoE connection keeps connected since no Internet activity. The Wireless Router will automatically terminate the connection after it has been inactive for the specified period of time. The default value is zero, which means that the Wireless Router will not terminate it. MTU: It the maximum packet size that can be transmitted over a network. When dialing, the Wireless Router will automatically negotiate it with the peer device. Please leave the default value of 1480 bytes, unless you have a special application. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 48 UTT Technologies 5.1.2.2 Chapter 5 Network 3G Internet Connection Settings To configure a 3G Internet connection, select 3G from the Interface drop-down list. Then the following page will be shown. Figure 5- 9 3G Internet Connection Settings Interface: It specifies the name of the WAN interface. Here please select 3G. ISP Policy and Update Policy: Refer to Section 5.1.2.1.1 Static IP Internet Connection for detailed information. 3G USB Modem, ISP, Authentication Method, PIN Code, APN, Dial Number, User Name, and Password: Refer to Section 3.3.3.2 3G Internet Connection Settings for detailed information. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note It is strongly recommended that you configure only the 3G USB Modem and ISP of the 3G Internet connection, and leave the other parameters at their default values. If necessary, please follow your ISP’s instructions to change them. After you click the Save button, the Wireless Router will start to dial. It may take a minute or so, depending on the model of your 3G USB modem. Please click the Refresh button to view the 3G connection status. If it fails to dial, please try to pull out and insert the 3G USB modem again or restart the Wireless Router. http://www.uttglobal.com Page 49 UTT Technologies 5.1.3 Chapter 5 Network MAC Address Clone Some ISPs register the MAC address of your network device (usually a computer) when your account is first opened, and they will only accept traffic from that MAC address. With MAC address clone feature, you may assign the registered MAC address to the Wireless Router’s external interface if you don’t want to re-register the MAC address with your ISP. To configure MAC address clone, go to the Network > WAN page, and then select the MAC Address Clone tab to go to the setup page shown in Figure 5- 10 MAC Address CloneFigure 5- 10. In this page, you can change the MAC address of each external interface (WAN1, WAN2, or APClient interface) as required. Figure 5- 10 MAC Address Clone WAN1 MAC Address: It specifies the MAC address of the Wireless Router’s WAN1 interface. WAN2 MAC Address: It specifies the MAC address of the Wireless Router’s WAN2 interface. APClient MAC Address: It specifies the MAC address of the Wireless Router’s APClient interface. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 50 UTT Technologies 5.2 Chapter 5 Network Load Balancing This section describes the Network > Load Balancing page. In this page, you can configure load balancing global parameters, the connection detection parameters (including detection target IP, detection interval, retry times, etc.) for each Internet connection, and view the status and configuration of them. 5.2.1 Introduction to Load Balancing and Failover 5.2.1.1 Internet Connection Detection Mechanism When using multiple Internet connections, to ensure that the network will not be interrupted when a connection is faulty, the Wireless Router should have the ability of real-time monitoring each Internet connection. To this end, we design flexible automatic detection mechanism on the Wireless Router, and provide multiple detection methods to meet the actual requirements. For the sake of convenience, we firstly introduce several related parameters including Detection Target IP, Detection Interval, Retry Times, and Detection Period. ● Detection Target IP: It indicates the IP address of a target device. The Wireless Router will monitor an Internet connection by sending detection packets to the specified target IP address. ● Detection Interval: It indicates the time interval at which the Wireless Router periodically sends detection packets, one packet at a time. The default value is 0, which means that connection detection is disabled. ● Retry Times: It indicates the number of retries per detection period. ● Detection Period: It indicates a period of time during which the Wireless Router detects whether the Internet connection is available or not. Its value is the product of Detection Interval and Retry Times. For example, if the Detection Interval is set to 10 seconds and the Retry Times is set to 3, then the Detection Period is 30 (10 × 3 = 30) seconds. For a normal Internet connection and a faulty Internet connection, the detection mechanisms are different, the following describes them respectively. For a normal Internet connection, the detection mechanism is as follows: The Wireless Router periodically sends a detection packet at the specified time interval to the target IP address. Once no response packet received during a detection period, the Wireless Router will consider that the connection is faulty and shield it immediately. For example, http://www.uttglobal.com Page 51 UTT Technologies Chapter 5 Network when the Retry Times is set to 5, if the Wireless Router has sent five consecutive detection packets but not received any response packet during a detection period, it will consider that the connection is faulty. For a faulty Internet connection, the detection mechanism is as follows: Similarly, the Wireless Router also periodically sends a detection packet at the specified time interval to the target IP address. Once more than half of the response packets received during a detection period, the Wireless Router will consider that the connection is back to normal and enable it immediately. For example, when the Retry Times is set to 5, if the Wireless Router has sent five consecutive detection packets and received three or more packets during a detection period, it will consider that the connection is back to normal. On the Wireless Router, you can assign a preferential Internet connection to some local computers in advance by setting the connection’s Start Internal IP and End Internal IP, thus the computers in the specified address range will preferentially use the assigned Internet connection to access the Internet. If the assigned Internet connection is normal, those computers can only use it to access the Internet. Else, they will use other normal Internet connections to access the Internet. Note If you don’t want to monitor an Internet connection, please leave its Detection Interval at the default value of 0. 5.2.1.2 Load Balancing Mode The Wireless Router provides two connection groups: primary connection group and backup connection group. An Internet connection in the primary connection group is a primary connection, while an Internet connection in the backup connection group is a backup connection. By default, all the Internet connections are primary connections. You can move one or more connections into the backup connection group if needed. The Wireless Router provides two load balancing modes: Full Load Balancing and Partial Load Balancing. If you choose to use Full Load Balancing, all the Internet connections are used as primary connections. The working principle is as follows: 1. If all the Internet connections are normal, the LAN users will use these connections to access the Internet. 2. If an Internet connection is faulty, the Wireless Router will shield it immediately, and the traffic through the faulty connection will be distributed to other normal connections automatically. 3. Once the faulty connection is back to normal, the Wireless Router will enable it immediately, and the traffic will be redistributed automatically. http://www.uttglobal.com Page 52 UTT Technologies Chapter 5 Network If you choose to use Partial Load Balancing, some Internet connections are used as primary connections, and others are used as backup connections. The working principle is as follows: 1. As long as one or more primary connections are normal, the LAN users will use the primary connection(s) to access the Internet. 2. If all the primary connections are faulty, it will automatically switch to the backup connection(s) to let the LAN users use them to access the Internet. 3. Once one or more faulty primary connections are back to normal, it will automatically switch back to the primary connection. Note During connections switching, some user applications (such as some online games) may be interrupted unexpectedly due to the nature of TCP connection. 5.2.2 Load Balancing Global Settings The following sections describe the global settings related to Full Load Balancing and Partial Load Balancing respectively. For more information, please refer to Section 5.2.1.2 Load Balancing Mode. 5.2.2.1 Global Settings - Full Load Balancing Figure 5- 11 Global Settings - Full Load Balancing Mode: It specifies the mode of load balancing. Here please leave the default value of Full Load Balancing. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 53 UTT Technologies Chapter 5 Network 5.2.2.2 Global Settings - Partial Load Balancing Figure 5- 12 Global Settings - Partial Load Balancing Mode: It specifies the mode of load balancing. Here please select Partial Load Balancing. Primary: It specifies the primary connection group. An Internet connection in the Primary list box is a primary connection. Backup: It specifies the backup connection group. An Internet connection in the Backup list box is a backup connection. ==>: Select one or more Internet connections in the Primary list box, and then click ==> to move the selected connection(s) to the Backup list box. <==: Select one or more Internet connections in the Backup list box, and then click ==> to move the selected connection(s) to the Primary list box. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. 5.2.3 Load Balancing List http://www.uttglobal.com Page 54 UTT Technologies Chapter 5 Network Figure 5- 13 Load Balancing List Figure 5- 14 Load Balancing List (Continue) ¾ Edit an Internet Connection: To configure or modify the detection related icon, the parameters of an Internet connection, click its Interface hyperlink or related information will be displayed in the Connection Detection Settings page. Then configure or modify it, and click the Save button. ¾ View Load Balancing List: When you have configured load balancing global settings and connection detection settings, you can view the related configuration and status in the Load Balancing List. ¾ Refresh Load Balancing List: Click the Refresh button to view the latest information in the list. 5.2.4 Connection Detection Settings You can configure the connection detection related parameters for each Internet connection as required. The operation is as follows: Go to the Network > Load Balancing > Load Balancing List page, and click an Internet connection’s Interface hyperlink or icon to go the Connection Detection Settings page to configure them. http://www.uttglobal.com Page 55 UTT Technologies Chapter 5 Network Figure 5- 15 Connection Detection Settings Interface: It indicates the name of the WAN interface. It is non-editable. Detection Interval: It specifies the time interval at which the Wireless Router periodically sends detection packets, one packet at a time. It must be between 1 and 60 seconds, or 0. The default value is 0, which means that connection detection is disabled on the Internet connection. Retry Times: It specifies the number of retries per detection period. The default value is 3. Detection Target IP: It specifies the IP address of a detection target device. The Wireless Router will monitor the Internet connection by sending the detection packets to the detection target IP address. Bandwidth: It specifies the Internet connection’s bandwidth, which is provided by your ISP. Start Internal IP and End Internal IP: They specify a range of internal IP addresses. The local computers within the specified range will preferentially use the Internet connection. Refer to Section 5.2.1.1 Internet Connection Detection Mechanism for more information. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Load Balancing List page. Note The Detection Target IP, Detection Interval, and Retry Times are connection detection related parameters. Please refer to Section 5.2.1.1 Internet Connection Detection Mechanism for more information. http://www.uttglobal.com Page 56 UTT Technologies 5.2.5 Chapter 5 Network How to Configure Connection Detection Settings To configure connection detection settings, follow these steps: Step 1 Go to the Network > Load Balancing > Load Balancing List page. Step 2 Click an Internet connection’s Interface hyperlink or Connection Detection Settings page. Step 3 Configure detection related parameters (Detection Target IP, Detection Interval, Retry Times, etc.) for the selected Internet connection as required. Step 4 Click the Save button to save your changes. Step 5 To configure the detection settings for another Internet connection, please repeat the above steps. http://www.uttglobal.com icon to go the Page 57 UTT Technologies 5.3 Chapter 5 Network LAN Settings This section describes the Network > LAN page, where you can configure the IP address, subnet mask and MAC address of the Wireless Router’s LAN interface. Figure 5- 16 LAN Interface Settings IP Address: It specifies the IP address of the LAN interface. Subnet Mask: It specifies the subnet mask that defines the range of the LAN. MAC Address: It specifies the MAC address of the LAN interface. In most cases, please leave the default value. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note If you have changed the IP address of the LAN interface and saved the change, you must use the new IP address to re-login to the Wireless Router. http://www.uttglobal.com Page 58 UTT Technologies 5.4 Chapter 5 Network DHCP Server This section describes the Network > DHCP Server page, which includes DHCP server settings, static DHCP and DHCP client list. 5.4.1 DHCP Server Settings Figure 5- 17 DHCP Server Settings Enable DHCP Server: It allows you to enable or disable DHCP server. If you want to enable DHCP server on the Wireless Router, please select this check box. Start IP Address: It specifies the first IP address assigned by the DHCP server. In most cases, this address must be on the same subnet as the Wireless Router’s LAN IP address. End IP Address: It specifies the last IP address assigned by the DHCP server. In http://www.uttglobal.com Page 59 UTT Technologies Chapter 5 Network most cases, this address must be on the same subnet as the Wireless Router’s LAN IP address. Subnet Mask: It specifies the subnet mask of the IP addresses assigned by the DHCP server. In most cases, this subnet mask must be identical to the Wireless Router’s LAN subnet mask. Default Gateway: It specifies the IP address of the default gateway for a DHCP client. In most cases, this address must be identical to the Wireless Router’s LAN IP address, that is, the Wireless Router is used as the default gateway for the local computers. Lease Time: It specifies the length of time (in seconds) during which a DHCP client can use an assigned IP address. Primary DNS Server: It specifies the IP address of the primary DNS server that is available to a DHCP client. Secondary DNS Server: It specifies the IP address of the secondary DNS server that is available to a DHCP client. Enable DNS Proxy: It allows you to enable or disable DNS proxy. If you want to enable DNS proxy on the Wireless Router, please select this check box. When acting as a DNS proxy, the Wireless Router listens for incoming DNS requests on the LAN interface, relays the DNS requests to the current public DNS servers, and replies as a DNS resolver to the requesting local computers. ISP DNS Server 1 and ISP DNS Server 2: They specify the IP addresses of the ISP DNS servers. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note 1. If you want a local computer to obtain an IP address and other TCP/IP parameters from the Wireless Router’s built-in DHCP server, please configure the computer to obtain an IP address automatically. 2. If the DNS proxy is enabled on the Wireless Router, in order to use DNS proxy service normally, you need to set the local computers’ primary DNS server to the Wireless Router’s LAN IP address. In addition, if the DHCP server is also enabled on the Wireless Router, the Wireless Router will assign its LAN IP address as the primary DNS server address to the local computers automatically. 3. To ensure that the DNS proxy works well, you must at least specify the primary DNS server provided by your ISP on the Wireless Router. 4. The Wireless Router can act as a DNS proxy server to all local computers. This greatly simplifies configuration of your local computers. For example, there is a LAN http://www.uttglobal.com Page 60 UTT Technologies Chapter 5 Network DNS proxy server on which a DNS proxy software is installed (e.g., Wingate), and the local computers use this server as the primary DNS server. Now, the Wireless Router will be used as a new gateway for the local computers. In this case, in order to use DNS proxy service normally, the administrator only need to change the Wireless Router’s LAN IP address to the old proxy DNS server’s IP address, and enable DNS proxy on the Wireless Router, without having to change each computer. 5.4.2 Static DHCP The Wireless Router offers static DHCP feature which allows you to manually bind an IP address to a computer’s MAC address and thus that computer will always obtain the same IP address from the DHCP server. More specifically, each time the specified computer boots and requests its IP address from the Wireless Router’s DHCP server, the DHCP server will recognize the computer’s MAC address and always assign the reserved IP address to it. 5.4.2.1 Static DHCP Settings Figure 5- 18 Static DHCP Settings User Name: It specifies a unique user name of the DHCP client that wants to be assigned a static IP address. IP Address: It specifies the IP address that you want to reserve for the DHCP client. It must be a valid IP address within the range of IP addresses assigned by the DHCP server. MAC Address: It specifies the MAC address of the DHCP client. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Network > DHCP Server > Static DHCP page. http://www.uttglobal.com Page 61 UTT Technologies Chapter 5 Network Note 1. The reserved IP address must be a valid IP address within the range of IP addresses assigned by the DHCP server. 2. After you have added the static DHCP entry successfully, the Wireless Router will always assign the reserved IP address to the specified computer. 5.4.2.2 Static DHCP List Figure 5- 19 Static DHCP List Add a Static DHCP Entry: To add a new static DHCP entry, first click the Add button to go to the Static DHCP Settings page, next configure it, lastly click the Save button. View Static DHCP Entry(s): When you have configured one or more static DHCP entries, you can view them in the Static DHCP List. Modify a Static DHCP Entry: To modify a configured static DHCP entry, click its User Name hyperlink or icon, the related information will be displayed in the Static DHCP Settings page. Then modify it, and click the Save button. Delete Static DHCP Entry(s): There are three ways to delete static DHCP entry(s). 1. To delete a static DHCP entry, directly click its 2. To delete more than one static DHCP entry at a time, select the leftmost check boxes of the static DHCP entries that you want to delete, and then click the Delete button. 3. To delete all the static DHCP entries at a time, directly click the Delete All button. http://www.uttglobal.com icon. Page 62 UTT Technologies 5.4.2.3 Chapter 5 Network How to Add Static DHCP Entries To add one or more static DHCP entries, follow these steps: Step 1 Go to the Network > DHCP Server > Static DHCP page. Step 2 Click the Add button to go to the Static DHCP Settings page, and then specify the User Name, IP Address and MAC Address, lastly click the Save button. Step 3 Now you can view the static DHCP entry in the Static DHCP List. Step 4 To add another static DHCP entry, please repeat the above steps. Note If you want to delete static DHCP entry(s), please follow the ways described in Section 5.4.2.2 Static DHCP List. 5.4.3 DHCP Client List Figure 5- 20 DHCP Client List IP Address: It displays the IP address assigned to the DHCP client. Subnet Mask: It displays the subnet mask of the current IP address. MAC Address: It displays the MAC address of the DHCP client. Lease Left: It displays the time remaining (in seconds) until the current IP address lease expires. http://www.uttglobal.com Page 63 UTT Technologies Chapter 5 Network Refresh: Click to view the latest information in the list. Note The DHCP Client List only displays the DHCP clients with dynamically assigned IP addresses. It doesn’t display the DHCP clients specified by the static DHCP entries. http://www.uttglobal.com Page 64 UTT Technologies 5.4.4 Chapter 5 Network Configuration Example for DHCP 1. Requirements In this example, the Wireless Router acts as a DHCP server to dynamically assign the IP addresses to the clients that reside on the same subnet. The Wireless Router’s LAN IP address is 192.168.1.1/24. The start IP address of the DHCP address pool is 192.168.1.11, and the number of addresses is 100. Besides, there are two computers that must always have the same IP address: one’s MAC address is 00:21:85:9B:45:46 and IP address is 192.168.1.15, the other’s MAC address is 00:1f:3c:0f:07:f4 and IP address is 192.168.1.16. 2. Configuration Steps Step 1 Go to the Network > DHCP Server > DHCP Server Settings page. Step 2 As shown in the following figure, select the Enable DHCP Server check box, and enter 192.168.1.11 and 192.168.1.110 in the Start IP Address and End IP Address text boxes respectively. Leave the other parameters at their default values. Then click the Save button to save the settings. http://www.uttglobal.com Page 65 UTT Technologies Chapter 5 Network Figure 5- 21 DHCP Server Settings - Example Step 3 Go to the Network > DHCP Server > Static DHCP page. Step 4 Add the static DHCP entry 1: Click the Add button to go to the Static DHCP Settings page (see Figure 5- 22), enter Server1 in the User Name text box, 192.168.1.15 in the IP Address text box, and 0021859B4546 in the MAC Address text box, and then click the Save button. Figure 5- 22 Adding the Static DHCP Entry 1 - Example Step 5 Add the static DHCP entry 2: Click the Add button to go to the Static DHCP Settings page (see Figure 5- 23), enter Server2 in the User Name text box, http://www.uttglobal.com Page 66 UTT Technologies Chapter 5 Network 192.168.1.16 in the IP Address text box, and 001f3c0f07f4 in the MAC Address text box, and then click the Save button. Figure 5- 23 Adding the Static DHCP Entry 2 - Example Now you have configured the two static DHCP entries. You can view them in the Static DHCP List (see Figure 5- 24), and you can directly click the them if desired. icon to modify either of Figure 5- 24 Static DHCP List - Example http://www.uttglobal.com Page 67 UTT Technologies 5.5 Chapter 5 Network DDNS This section describes the Network > DDNS page. In this page, you can not only configure DDNS parameters, but also view and update DDNS status. 5.5.1 Introduction to DDNS Dynamic Domain Name Service (DDNS) is a service used to map a domain name which never changes to a dynamic IP address which can change quite often. For example, if you have applied for a PPPoE connection with a dynamically assigned IP address from the ISP’s PPPoE server, you can use DDNS to allow the external computers to access the Wireless Router by a constant domain name. In order to use DDNS service, you should apply for a DDNS account from a DDNS service provider. Each DDNS provider offers its own specific network services. The DDNS service provider reserves the right to change, suspend or terminate your use of some or all network services at any time for any reason. The DDNS service providers supported by UTT Technologies Co., Ltd. currently provide free DDNS services, but they may charge for the DDNS services in the future. In this case, UTT Technologies Co., Ltd. will notify you as soon as possible; if you refuse to pay for the services, you will no longer be able to use them. During the free phase, UTT Technologies Co., Ltd. does not guarantee that the DDNS services can meet your requirements and will be uninterrupted, and UTT does not guarantee the timeliness, security and accuracy of the services. So far, UTT Technologies Co., Ltd. supports only two DDNS service providers: iplink.com.cn and 3322.org. It will successively support other DDNS service providers in the future. 5.5.2 Apply for a DDNS Account Please login to http://www.3322.org or http://www.utt.com.cn/ddns to apply for a fully qualified domain name (FQDN). This section describes how to apply for a FQDN with suffix of 3322.org from http://www.3322.org. http://www.uttglobal.com Page 68 UTT Technologies Chapter 5 Network Figure 5- 25 Apply for a DDNS Account from 3322.org Host Name: It specifies a unique host name of the Wireless Router. The suffix of 3322.org will be appended to the host name to create a fully qualified domain name (FQDN) for the Wireless Router. For example, if the Wireless Router’s host name is test, then its FQDN is test.3322.org; and it allows you to use test.3322.org to access the Wireless Router. IP Address: It specifies the IP address mapped to the registered domain name of the Wireless Router. Register: Click to register the domain name. 5.5.3 DDNS Settings 5.5.3.1 Disabling DDNS Service If you want to disable DDNS service, please leave the Service Provider at its default value of None, see Figure 5- 26. Figure 5- 26 Disabling DDNS Service Service Provider: It specifies the DDNS service provider who offers services to the Wireless Router. Here please select None to disable DDNS service. Save: Click to save your changes. http://www.uttglobal.com Page 69 UTT Technologies Chapter 5 Network Cancel: Click to revert to the last saved settings. 5.5.3.2 DDNS Service Offered by 3322.org Figure 5- 27 DDNS Settings Related to 3322.org Service Provider: It specifies the DDNS service provider who offers services to the Wireless Router. Now the Wireless Router only supports two DDNS service providers: iplink.com.cn and 3322.org. Here please select 3322.org. Registry Website: It allows you to click http://www.3322.org to go to this website to register a DDNS account for the Wireless Router. Host Name: It specifies the host name of the Wireless Router. It must be identical to the host name that you entered when registering the DDNS account on the website http://www.3322.org. User Name: It specifies the user name that you entered when registering your user account on the website http://www.3322.org. Password: It specifies the password that you entered when registering your user account on the website http://www.3322.org. Interface: It specifies the interface on which DDNS service is applied. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 70 UTT Technologies Chapter 5 Network 5.5.3.3 DDNS Service Offered by IPLink Figure 5- 28 DDNS Settings Related to iplink.com.cn Service Provider: It specifies the DDNS service provider who offers services to the Wireless Router. Now the Wireless Router only supports two DDNS service providers: iplink.com.cn and 3322.org. Here please select iplink.com.cn. Registry Website: It allows you to click account for the Wireless Router. to go to this website to register a DDNS Registration Number: It specifies the registration number of the Wireless Router. Host Name: It specifies the host name of the Wireless Router. It must be identical to the host name that you entered when registering the DDNS account on the website http://www.utt.com.cn/ddns. Key: It specifies the key that you got when registering the DDNS account on the website http://www.utt.com.cn/ddns. Interface: It specifies the interface on which DDNS service is applied. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. 5.5.4 DDNS Status http://www.uttglobal.com Page 71 UTT Technologies Chapter 5 Network Figure 5- 29 DDNS Status Update: Click to update DDNS status. 5.5.5 DDNS Verification To verify whether DDNS is updated successfully, you can use the ping command at the command prompt on the PC, for example: ping avery12345.3322.org If the displayed page is similar to the screenshot below: the domain name is resolved to an IP address successfully (58.246.187.126 in this example), DDNS is updated successfully. Note 1. Only when the WAN interface IP address is a public IP address, the Internet users can use its mapped domain name to access the Wireless Router normally. 2. DDNS feature can help you implement VPN tunnels using dynamic IP addresses on the Wireless Router. http://www.uttglobal.com Page 72 UTT Technologies 5.6 Chapter 5 Network UPnP This section describes the Network > UPnP page. The Universal Plug and Play (UPnP) is architecture that implements zero configuration networking, that is, it provides automatic IP configuration and dynamic discovery of the UPnP compatible devices from various vendors. A UPnP compatible device can dynamically join a network and work properly. When you enable UPnP, the Wireless Router allows any local UPnP-enabled device to perform a variety of actions, including retrieving the public IP address, enumerating existing port mappings, and adding or removing port mappings. By adding a port mapping, a UPnP-enabled device opens the related service ports on the Wireless Router to allow outside computers to access. 5.6.1 Enable UPnP Figure 5- 30 Enable UPnP Enable UPnP: It allows you to enable or disable UPnP. If you want to enable UPnP, please select this check box. Save: Click to save your changes. 5.6.2 UPnP Port Forwarding List The UPnP Port Forwarding List lists all the port forwarding entries established using UPnP, see the following figure. http://www.uttglobal.com Page 73 UTT Technologies Chapter 5 Network Figure 5- 31 UPnP Port Forwarding List ID: It is used to identify each UPnP port forwarding entry in the list. Internal IP: It displays the IP address of the local computer. Internal Port: It displays the service port provided by the local computer. Protocol: It displays the transport protocol used by the service. Remote IP: It displays the IP address of the remote computer. External Port: It displays the external port of the UPnP port forwarding, which is opened for outside user to access. Description: It displays the description of the UPnP port forwarding entry. Refresh: Click to view the latest information in the list. http://www.uttglobal.com Page 74 UTT Technologies Chapter 6 Wireless Chapter 6 Wireless This chapter describes how to configure and use the wireless features of the Wireless Router, which include: basic wireless settings, wireless security settings, wireless MAC address filtering, and advanced wireless settings; and how to view the status of the wireless clients. 6.1 Basic Wireless Settings This section describes the Wireless > Basic page. In this page, you can configure the basic wireless settings of the Wireless Router, which include: enable or disable wireless function, operation mode, SSID, wireless mode, channel, channel width, enable or disable SSID broadcast, and so on. The Wireless Router supports multiple operation modes: AP mode, AP Client mode, and three WDS modes including Repeater mode, Bridge mode and Lazy mode. The following sections describe the basic wireless settings under each operation mode. Note 1. The Wireless Router functions differently under each operation mode. Please select the one that best meets your needs. 2. After you modify the wireless parameters and save the changes, the wireless module will automatically restart. This will disconnect all wireless connections, but won’t affect the wired connections. 6.1.1 AP Mode If you want the Wireless Router to operate in AP mode, please select AP Mode from the Opeartion Mode drop-down list, see Figure 6- 1. In this mode, the Wireless Router can connect to other wireless network devices in AP Client mode, and at at same time it can provide connectivity for wireless clients. http://www.uttglobal.com Page 75 UTT Technologies Chapter 6 Wireless Figure 6- 1 Basic Wireless Settings - AP Mode Enable Wireless: It allows you to enable or disable wireless function. If you select the check box to enable wireless function, wireless clients can connect to the Wireless Router to access the Internet, commnuicate with each other via the Wireless Router, and access the wired network connected to the Wireless Router. Else, the Wireless Router accepts only wired computers and other wired network devices. Operation Mode: Here please select AP Mode. SSID: The SSID (Service Set Identification) is also known as the wireless network name, which is used to uniquely identify a wireless network. It is case sensitive. It must be identical for all wireless devices in the wireless network. Wireless Mode: It specifies the wireless standards running on your wireless network. The options are 11g Only, 11n Only and 11b/g/n Mixed. ● 11g Only: In allows both 802.11g and 802.11n wireless clients to connect to the Wireless Router at 802.11g data rates with a maximum speed of 54Mbps. ● 11n Only: It only allows 802.11n wireless clients to connect to the Wireless Router at 802.11n data rates with a maximum speed of 300Mbps. ● 11b/g/n Mixed: It allows 802.11b, 802.11g and 802.11n wireless clients to connect to the Wireless Router at their respective data rates. The maximum speeds are 11Mbps, 54Mbps and 300Mbps respectively. Channel: It specifies the wireless channel used between the Wireless Router and wireless clients. The valid range is 1 through 11. You can also select Auto to let the http://www.uttglobal.com Page 76 UTT Technologies Chapter 6 Wireless Wireless Router automatically select the best channel. If there are multiple wireless routers in your area, please make sure that their channels don’t interfere with each other. Channel Width: It specifies the range of frequecies used by your wireless network. The options are 20/40M and 20M. Note that this parameter can only act on 802.11n wireless clients. 802.11b and 802.11g wireless clients can only use 20MHz channel. ● 20M/40M: If you select this option, 802.11n wireless clients will negotiate the channel width with the Wireless Router. ● 20M: It you select this option, 802.11n wireless clients will use 20MHz channel. Enable SSID Broadcast: It allows you to enable or disable SSID broadcast. If you select the check box to enable this feaute, the Wireless Router will periodically broadcast its SSID, so that wireless clients can automatically find it to connect to the Wireless Router and join the wireless network identified by the SSID. However, this feature also makes it easier for hackers to know your SSID and break into your WLAN. It is suggested that you disable this feature to improve security of your WLAN. In this case, you need to manually configure the right SSID for your wireless clients. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. 6.1.2 APClient Mode If you want the Wireless Router to operate in APClient mode, please select APClient Mode from the Opeartion Mode drop-down list, see Figure 6- 2. In this mode, the Wireless Router can connect to a remote network device in AP mode, and at same time it can provide connectivity for wireless clients. If you configure the APClient Internet connection in the Start > Setup Wizard, the system will automatically choose APClient Mode as the Operation Mode. http://www.uttglobal.com Page 77 UTT Technologies Chapter 6 Wireless Figure 6- 2 Basic Wireless Settings - APClient Mode Operation Mode: Here please select APClient Mode. Enable Wireless, SSID, Wireless Mode, Channel, Channel Width, and Enable SSID Broadcast: Refer to Section 6.1.1 AP Mode for detailed information. AP SSID, AP MAC Address and Security Mode: Refer to Section 3.3.3.3 APClient Internet Connection Settings for detailed information. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note In APClient Mode, the Securtiy Mode, Channel and Channel Width configured on the Wireless Router must match those on the remote AP. Otherwise, the Wirelesss Router is unable to connect to the remote AP. http://www.uttglobal.com Page 78 UTT Technologies 6.1.3 Chapter 6 Wireless WDS A Wireless Distribution System (WDS) is a method of interconnecting access points (AP) in a wireless local area network (WLAN) without requiring that they connect through a wired backbone. This feature is usually used to extend the range of the wireless network to reach remote clients. The Wireless Router can be configured to operate in a WDS mode (Repeater Mode, Bridge Mode or Lazy Mode) that allows it to forward traffic directly to other wireless access points, repeaters or routers. Note that the Securtiy Mode, Channel and Channel Width configured on the Wireless Router must match those on the remote AP, and their LAN IP addresses must be on the same subnet. 6.1.3.1 Repeater Mode If you want the Wireless Router to operate in repeater mode, please select Repeater Mode from the Opeartion Mode drop-down list, see Figure 6- 3. In this mode, the Wireless Router can connect to other wireless network devices in bridge mode, repeater mode or lazy mode, and at the same time it can provide connectivity for wireless clients. http://www.uttglobal.com Page 79 UTT Technologies Chapter 6 Wireless Figure 6- 3 Basic Wireless Settings - Repeater Mode Operation Mode: Here please select Repeater Mode. Enable Wireless, SSID, Wireless Mode, Channel, Channel Width, and Enable SSID Broadcast: Refer to Section 6.1.1 AP Mode for detailed information. AP MAC Address: It specifies the MAC address of the remote AP. Security Mode: It specifies the security mode to be used by the Wireless Router. There are four options: None, WEP, TKIP and AES. ● None: It means that no security mode will be used. ● WEP: It means that the Wireless Router will use WEP for data encryption, see Figure 6- 4. ● TKIP: It means that the Wireless Router will use TKIP for data encryption, see Figure 6- 6. ● AES: It means that the Wireless Router will use AES for data encryption, see Figure 6- 7. http://www.uttglobal.com Page 80 UTT Technologies Chapter 6 Wireless Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Figure 6- 4 Security Settings - WEP Mode Security Mode: It specifies the security mode to be used by the Wireless Router. Here please select WEP. Key Format: It specifies the format for entering the WEP keys. The options are Hex and ASCII. ● Hex: Select this option if you want to enter the WEP keys in hexadecimal format. Hexadecimal digits are a set of characters that includes numbers 0 through 9 and letters A through F (or a through f). Hex WEP keys are case insensitive. ● ASCII: Select this option if you want to enter the WEP keys in ASCII format. ASCII WEP keys are case sensitive. Default Tx Key: It allows you to select one of the WEP keys as the default transmit key to transmit data. All keys can be used to receive data. Key Type: It allows you to select the size of each key, and it also allows you to disable or enable each key. The options are Disabled, 64-bit and 128-bit. By default, Disabled is selected, which means the key is of no effect. WEP Key: It allows you to enter a key in one of the WEP Key boxes. You can enter up to four WEP keys. You should enter a key according to the Key Format and Key Type selected. ● For 64-bit encryption, enter 10 hex characters or 5 ASCII characters. ● For 128-bit encryption, enter 26 hex characters or 13 ASCII characters. Note 1. The WEP keys on the Wireless Router must match the WEP keys on the remote wireless device in the same order. That is, WEP Key 1 on the Wireless Router must http://www.uttglobal.com Page 81 UTT Technologies Chapter 6 Wireless match WEP Key 1 on the remote wireless device, and WEP Key 2, 3 and 4 must match in a similar fashion. However, the two devices can have different Default Tx Keys as long as the keys are in the same order. For example, the Wireless Router can use WEP Key 1 as its Default Tx Key, while the remote wireless device can use WEP Key 3 as its Default Tx Key. The two devices will communicate as long as the Wireless Router’s WEP Key 1 is identical to the remote wireless device’s WEP Key 1, and the Wireless Router’s WEP Key 3 is identical to the remote wireless device’s WEP Key 3. 2. You must configure at least one WEP key. Otherwise, the system will pop up a prompt dialog box after you click the Save button, see Figure 6- 5. Figure 6- 5 Key Settings Prompt Dialog Box Figure 6- 6 Security Settings - TKIP Mode Security Mode: It specifies the security mode to be used by the Wireless Router. Here please select TKIP. Pre-shared Key: This key serves as seed for generating encryption keys. It must be identical to the remote wireless network device’s. It must be between 8 and 63 characters long. Figure 6- 7 Security Settings - AES Mode Security Mode: It specifies the security mode to be used by the Wireless Router. Here please select AES. http://www.uttglobal.com Page 82 UTT Technologies Chapter 6 Wireless Pre-shared Key: This key serves as seed for generating encryption keys. It must be identical to the remote wireless network device’s. It must be between 8 and 63 characters long. 6.1.3.2 Bridge Mode If you want the Wireless Router to operate in bridge mode, please select Bridge Mode from the Opeartion Mode drop-down list, see Figure 6- 8. In this mode, the Wireless Router can connect to other wireless network devices in repeater mode or lazy mode. However, in this mode wireless clients are unable to connect to the Wireless Router directly. Figure 6- 8 Basic Wireless Settings - Bridge Mode Operation Mode: Here please select Bridge Mode. The other paramters are the same as those of Repeater Mode. Please refer to Section 6.1.3.1 Repeater Mode for detailed information. http://www.uttglobal.com Page 83 UTT Technologies 6.1.3.3 Chapter 6 Wireless Lazy Mode If you want the Wireless Router to operate in lazy mode, please select Lazy Mode from the Opeartion Mode drop-down list, see Figure 6- 9. In this mode, the Wireless Router can connect to other wireless network devices in bridge mode or repearter mode; and at the same time it can provide connectivity for wilreless clients. Figure 6- 9 Basic Wireless Settings - Lazy Mode Operation Mode: Here please select Laze Mode. The other paramters are the same as those of Repeater Mode. Please refer to Section 6.1.3.1 Repeater Mode for detailed information. 6.1.4 Configuration Example for WDS 1. Requirements In this example (see Figure 6- 10), there are two Wireless Routers: Router A and Router B. The Wireless Router A operates in Bridge Mode, its SSID is UTT123, security mode is TKIP, pre-shared key is 123456789 and LAN IP address is 192.168.1.1/25. The Wireless Router B’s IP address is 192.168.1.2/25. We want the two Routers to communicate with http://www.uttglobal.com Page 84 UTT Technologies Chapter 6 Wireless each other wirelessly. Figure 6- 10 Configuration Example for WDS - Network Topology 2. Configuration and Verification To connect the Wireless Router A to the Wireless Router B properly, the Wireless Router B’s operation mode may be Lazy Mode or Repeater Mode (here we take Lazy Mode for example), its SSID, security mode and pre-shared key must be the same as those of the Wireless Router A. Besides, we leave the other parameters at their default values on both Routers. 1） Configuring the Wireless Router A The following figure shows the detailed settings on the Wireless Router A. Note Please enter the Wireless Router B’s MAC address (c83a350057e0 in this example) in the first AP MAC Address text box on the Wireless Router A. http://www.uttglobal.com Page 85 UTT Technologies Chapter 6 Wireless Figure 6- 11 Configuration Example for WDS - Configuring the Wireless Router A 2） Configuring the Wireless Router B The following figure shows the detailed settings on the Wireless Router B. http://www.uttglobal.com Page 86 UTT Technologies Chapter 6 Wireless Figure 6- 12 Configuration Example for WDS - Configuring the Wireless Router B 3） Verifying Connectivity between the Two Routers To verify connectivity between the two Routers, you can use the ping command at the command prompt on the Wireless Router B: Ping 192.168.1.1 If the displayed page is similar to the screenshot below, the connection between the two Routers has been established. Figure 6- 13 Configuration Example for WDS - Verifying Connectivity http://www.uttglobal.com Page 87 UTT Technologies 6.2 Chapter 6 Wireless Wireless Security Settings This section describes the Wireless > Security page. The Wireless Router provides four security mode options including None, WEP, WPA/WPA2, and WPA-PSK/WPA2-PSK. If you want an open network without wireless security, keep the default value of None. 6.2.1 Disabling Wireless Security Figure 6- 14 Disabling Wireless Security Security Mode: It specifies the security mode that you want to use on your wireless network. Here please select None to disable wireless securtiy. Save: Click to save you changes. Cancel: Click to revert to the last saved settings. 6.2.2 Wireless Security Settings – WEP http://www.uttglobal.com Page 88 UTT Technologies Chapter 6 Wireless Figure 6- 15 Wireless Security Settings - WEP Security Mode: It specifies the security mode that you want to use on your wireless network. Here please select WEP. WEP is the basic encryption mode which is not as secure as WPA. Authentication Type: It allows you to select the authentication type under WEP security mode. The Wireless Router must authenticate a wireless client before the client can join the wireless network. There are three options: Auto, Open System and Shared Key. ● Auto: It allows either Open System or Shared Key authentication to be used. The Wireless Router will automatically choose the authentication type. ● Open System: It allows any wireless client regardless of its WEP keys to authenticate and attempt to associate with the Wireless Router. However, even if a client can complete authentication and associate with the Wireless Router, the client cannot send or receive data from the Wireless Router unless the client has the correct WEP key. ● Shared Key: It requires that the wireless client and the Wireless Router have the same WEP key to authenticate. Without the correct key, authentication will fail and the client won’t be allowed to associate with the Wireless Router. Key Format: It specifies the format for entering the WEP keys. The options are Hex and ASCII. ● Hex: Select this option if you want to enter the WEP keys in hexadecimal format. Hexadecimal digits are a set of characters that includes numbers 0 through 9 and letters A through F (or a through f). Hex WEP keys are case insensitive. ● ASCII: Select this option if you want to enter the WEP keys in ASCII format. ASCII WEP keys are case sensitive. Default Tx Key: It allows you to select one of the WEP keys as the default transmit key to transmit data. All keys can be used to receive data. WEP Key: It allows you to enter a key in one of the WEP Key boxes. You can enter up to four WEP keys. You should enter a key according to the Key Format and Key Type selected. ● For 64-bit encryption, enter 10 hex characters or 5 ASCII characters. ● For 128-bit encryption, enter 26 hex characters or 13 ASCII characters. Key Type: It allows you to select the size of each key, and it also allows you to disable or enable each key. The options are Disabled, 64-bit and 128-bit. By default, Disabled is selected, which means the key is of no effect. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 89 UTT Technologies 6.2.3 Chapter 6 Wireless Wireless Security Settings - WPA/WPA2 Figure 6- 16 Wireless Security Settings - WPA/WPA2 Security Mode: It specifies the security mode that you want to use on your wireless network. Here please select WPA/WPA2 to use WPA mode, WPA2 mode or both. In WPA or WPA2 mode, the Wireless Router uses an external RADIUS server to authenticate wireless clients. WPA Mode: It specifies the WPA mode that you want to use on your wireless network. The options are Auto, WPA and WPA2. ● Auto: It allows both WPA and WPA2 clients to connect to the Wireless Router. ● WPA: It only allows WPA clients to connect to the Wireless Router. ● WPA2: It only allows WPA2 clients to connect to the Wireless Router. Encrption Method: It specifies the encrytion method used for data encryption. The options are Auto, TKIP and AES. ● Auto: It means that the Wireless Router will automatically choose to use TKIP or AES for data encryption. ● TKIP: It means that the Wireless Router will use TKIP for data encryption. ● AES: It means that the Wireless Router will use AES for data encryption. RADIUS Server IP: It specifies the IP address of the RADIUS server, which is used to authenticate the wireless clients. RADIUS Server Port: It specifies the UPD port number of the RADIUS server. The vaild range is 1 to 65535, and the default value is 1812. Shared Secret: It specifies the shared secret key to be used for authentication between the Wireless Router and the RADIUS server. It must be the same on both the Wireless Router and the RADIUS server. http://www.uttglobal.com Page 90 UTT Technologies Chapter 6 Wireless Key Renewal Interval: It specifies how often the WPA group key changes. The valid range is 60-86400 or 0, and the default value is 3600 seconds. Enter 0 to disable automatic renewal. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. 6.2.4 Wireless Security Settings - WPA-PSK/WPA2-PSK Figure 6- 17 Wireless Security Settings - WPA-PSK/WPA2-PSK Security Mode: It specifies the security mode that you want to use on your wireless network. Here please select WPA-PSK/WPA2-PSK to use WPA-PSK mode, WPA2-PSK mode or both. This mode intends for the wireless network that doesn’t have a RADIUS server. In this mode, the Wireless Router uses the pre-shared key that is manulally entered to generate encryption keys. WPA Mode: It specifies the WPA mode that you want to use on your wireless network. The options are Auto, WPA-PSK and WPA2-PSK. ● Auto: It allows both WPA and WPA2 clients to connect to the Wireless Router. ● WPA-PSK: It only allows WPA clients to connect to the Wireless Router. ● WPA2-PSK: It only allows WPA2 clients to connect to the Wireless Router. Encrption Method: It specifies the encrytion method used for data encryption. The options are Auto, TKIP and AES. ● Auto: It means that the Wireless Router will automatically choose encryption method for each wireless client. ● TKIP: It means that the Wireless Router will use TKIP for data encryption. ● AES: It means that the Wireless Router will use AES for data encryption. Pre-shared Key: This key serves as seed for generating encryption keys. The http://www.uttglobal.com Page 91 UTT Technologies Chapter 6 Wireless wireless clients also need to be configurd with the same pre-shared key. It must be between 8 and 63 characters long. Key Renewal Interval: It specifies how often the WPA group key changes. The valid range is 60-86400 or 0, and the default value is 3600 seconds. Enter 0 to disable automatic renewal. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 92 UTT Technologies 6.3 Chapter 6 Wireless Wireless MAC Address Filtering This section describes the Wireless > MAC Filtering page. The MAC address filtering is used to filter the wireless clients based on their MAC addresses. With this feature, you can either allow or block specific wireless clients to connect to the Wireless Router. 6.3.1 MAC Address Filtering Global Settings Figure 6- 18 MAC Address Filtering Global Settings Enable MAC Address Filtering: It allows you to enable or disable MAC address filtering. If you want to enable MAC address filtering, please select the check box. Filtering Mode: It specifies the mode of MAC address filtering. ● Allow: Choose this option to allow the wireless clients with the MAC addresses listed in the MAC Address Filtering List to connect to the Wireless Router, but block all other wireless clients. ● Deny: Choose this option to block the wireless clients with the MAC addresses listed in the MAC Address Filtering List from connecting to the Wireless Router, but allow all other wireless clients. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 93 UTT Technologies 6.3.2 Chapter 6 Wireless MAC Address Filtering List Figure 6- 19 MAC Address Filtering List Add a MAC Address Filtering Entry: To add a new MAC address filtering entry, first click the Add button to go to the MAC Address Filtering Settings page, next configure it, lastly click the Save button. View MAC Address Filtering Entry(s): When you have configured one or more MAC address filtering entries, you can view them in the MAC Address Filtering List. Modify a MAC Address Filtering Entry: To modify a configured MAC address filtering entry, click its ID hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete MAC Address Filtering Entry(s): There are three ways to delete MAC address filtering entry(s). 1. To delete a MAC address filtering entry, directly click its 2. To delete more than one MAC address filtering entry at a time, select the leftmost check boxes of the entries that you want to delete, and then click the Delete button. 3. To delete all the MAC address filtering entries at a time, directly click the Delete All button. 6.3.3 icon. MAC Address Filtering Settings Figure 6- 20 MAC Address Filtering Settings http://www.uttglobal.com Page 94 UTT Technologies Chapter 6 Wireless MAC Address: It specifies the MAC address of the wireless client that you want to allow or block. Save: Click to save your changes. Back: Click to go back to the Wireless > MAC Filtering page. 6.3.4 How to Configure MAC Address Filtering To configure MAC address filtering, follow these steps: Step 1 Go to the Wireless > MAC Filtering page. Step 2 Click the Add button to go to MAC Address Filtering Settings page, next enter the MAC address of the wireless client that you want to control in the MAC Address text box. Step 3 Now you can view the MAC address filtering entry in the MAC Address Filtering List. Step 4 Continue to configure other MAC address filtering entries. Step 5 If you want to allow the wireless clients with the MAC addresses listed in the MAC Address Filtering List to connect to the Wireless Router, but block all other wireless clients, select the Enable MAC Address Filtering check box, and choose Allow as the Filtering Mode. If you want to block the specified wireless clients from connecting to the Wireless Router, but allow all other wireless clients, select the Enable MAC Address Filtering check box, and choose Block as the Filtering Mode. After you have configured MAC address filtering, the Wireless Router will allow or block wireless clients based on their MAC addresses. To temporarily disable MAC address filtering, clear the Enable MAC Address Filtering check box. 6.3.5 Configuration Example for MAC Address Filtering 1. Requirements In this example, we want to block the wireless clients with the MAC addresses 00b08c0517ed, 001f3c47f481 and 001f3c0f07f4 accessing the Wireless Router, and allow all other wireless clients to access the Wireless Router. http://www.uttglobal.com Page 95 UTT Technologies Chapter 6 Wireless 2. Configuration Steps Step 1 Go to the Wireless > MAC Filtering page. Step 2 Click the Add button to go to MAC Address Filtering Settings page (see Figure 6- 21), enter 00b08c0517ed in the MAC Address text box, and then click the Save button. Figure 6- 21 Adding a MAC Address Filtering Entry - Example Step 3 Continue to add the other two MAC addresses (001f3c47f481 and 001f3c0f07f4) to the MAC Address Filtering List. Step 4 Select the Enable MAC Address Filtering check box, choose Block as the Filtering Mode, and then click the Save button. Figure 6- 22 MAC Address Filtering Global Settings - Example Now the configuration is complete, and you can view the three MAC address filtering entries in the MAC Address Filtering List. If you have entered an incorrect MAC address, icon to go to the MAC Address Filtering Settings page to modify it, directly click its and click the Save button to save the change. Figure 6- 23 MAC Address Filtering List - Example http://www.uttglobal.com Page 96 UTT Technologies 6.4 Chapter 6 Wireless Advanced Wireless Settings This section describes the Wireless > Advanced Wireless Settings page. In this page, you can configure advanced wireless settings for your wireless connection. We suggest that you don’t adjust these settings unless you are an expert user. Incorrect settings will reduce the performance of your wireless network. Figure 6- 24 Advanced Wireless Settings RTS Threshold: It specifies the packet size above which an RTS/CTS handshake will be performed before sending the packet. It must be between 1 and 2347, and the default value is 2347 bytes. RTS/CTS handshake is used to reduce collisions introduced by hidden nodes in the WLAN. A low threshold causes RTS packts to be sent more frequently, which consume more available bandwidth and reduce the throughput of other network packets. However, frequent RTS packets can help the network to recover from interference or collisions. Fragmentation Threshold: It speicifies the maximum size of a packet that can be transmitted. The packets larger than the specified size will be fragmented before transmission. It must be between 256 and 2346, and the default value is 2346 bytes. Reducing this value will decrease network performance. In most cases, please leave the default value. However, to ensure data transmission, you may decrease this value in areas where communication is poor, or in areas where there is a great deal of radio interference. Beacon Interval: It specifies the time interval between beacons. The Wireless Router periodically broadcasts beacons at the specified interval to synchronize the wireless network. It must be between 20 and 999, and the default value is 100 milliseconds. DTIM Interval: It determines how often the beacon contains a Delivery Traffic http://www.uttglobal.com Page 97 UTT Technologies Chapter 6 Wireless Indication Message (DTIM). The DTIM notifies wireless clients in power-save mode that a packet is waiting for them. The DTIM interval is a multiple of the Beacon Interval. For example, if it is set to 4, a DTIM message will be sent with every fourth beacon. It must be between 1 and 255, and the default value is 1. Enable Short Preamble: It allows you to enable short preamble or long preamble. ● Select the check box to enable short preamble. The short preamble can improve network performance. ● Clear the check box to enable long preamble. The long preamble ensures compatibilities with some old 802.11b devices that require the long preamble, but it can slightly reduce throughout at high data rate. Enable WMM: It allows you to enable or disable WMM (Wi-Fi Multimedia). WMM is a subset of the 802.11e standard. Enable this feature to improve the quality of multimedia (video, audio, etc.) applications by prioritizing traffic for them. To use this feature, your wireless clients must also support WMM. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 98 UTT Technologies 6.5 Chapter 6 Wireless Wireless Client List This section describes the Wireless > Client List page. In the Wireless Client List, you can view the status of all wireless clients which are connected to the Wireless Router. In addition, you can also easily configure MAC address filtering entries via the list. Figure 6- 25 Wireless Client List ID: It is used to identify each wireless client entry in the list. MAC Address: It displays the MAC address of the wireless client. Filtered: It indicates whether the corresponding MAC address has been added to the MAC Address Filtering List in the Wireless > MAC Filtering page. If the MAC address has been added to the MAC Address Filtering List, the Filtered check box is checked. Else, the Filtered check box is cleared; and in this case, you can click the check box to add the MAC address to the MAC Address Filtering List. Channel Width: It displays the current channel width in MHz. Filter All: Click to select the Filtered check boxes of all MAC addresses and add them into the MAC Address Filtering List, except those already added. Refresh: Click to view the latest information in the list. http://www.uttglobal.com Page 99 UTT Technologies Chapter 7 Advanced Chapter 7 Advanced This chapter describes how to configure and use the advanced features of the Wireless Router, which include NAT and DMZ, IP/MAC binding, static route, and PPPoE server. 7.1 NAT and DMZ This section describes the Advanced > NAT&DMZ page. 7.1.1 Introduction to NAT Features 7.1.1.1 NAT Overview The NAT (Network Address Translation) is an Internet standard that is used to map one IP address space (i.e., Intranet) to another IP address space (i.e., Internet). The NAT is designed to alleviate the shortage of IP addresses, that is, it allows all the local computers to share a single or a small group of IP addresses: On the Internet, there is only a single network device using a single or a small group of public IP addresses; but the local computers can use any range of private IP addresses, and these IP addresses are not visible from the Internet. As the internal network can be effectively isolated from the outside world, the NAT can also provide the benefit of network security assurance. The Wireless Router provides flexible NAT features. The following sections describe them in detail. 7.1.1.2 NAT Address Space Definitions To ensure that NAT operates properly, the Wireless Router uses and maintains two address spaces: ● Internal IP address: It indicates the IP address assigned to a local computer by the administrator. It is usually a private IP address. ● External IP address: It indicates the IP address assigned to the Wireless Router’s Internet connection by the ISP. It is a legal public IP address that can represent one or more internal IP addresses to the outside world. http://www.uttglobal.com Page 100 UTT Technologies 7.1.1.3 Chapter 7 Advanced NAT Types The Wireless Router provides two types of NAT: One2One and EasyIP. ● One2One (One to One): It indicates static network address translation. It is always referred to as Basic NAT, which provides a one to one mapping between an internal and an external IP address. In this type of NAT, IP address needs to be changed, but port needn’t. One to One NAT can be used to allow the outside users to access a LAN server: In the local network, the LAN server still use the private IP address, which is provided to the local computers to access; and on the Internet, the Wireless Router will assign an external IP address to the local server, then the outside users can using this external IP address to access the server through the Wireless Router. ● EasyIP: It indicates network address and port translation (NAPT). Since it is the most common type of NAT, it is often simply referred to as NAT. NAPT provides many-to-one mappings between multiple internal IP addresses and a single external IP addresses, that is, these multiple internal IP addresses will be translated to the same external IP address. In this type of NAT, to avoid ambiguity in the handling of returned packets, it must dynamically assign a TCP/UDP port to an outgoing session and change the packets’ source port to the assigned port before forwarding them. Besides, the Wireless Router must maintain a translation table so that return packets can be correctly translated back. When you obtain multiple public IP addresses from your ISP, you can create more than one NAT rule for either type of NAT. In actual network environment, the two types of NAT rules are often used together. 7.1.1.4 Port Forwarding and DMZ Host When NAT is enabled on the Wireless Router, the Wireless Router will block all the requests initiated from outside users. However, in some cases, the outside users want to access the LAN internal servers through the Wireless Router. To achieve this purpose, you need to configure port forwarding entries or DMZ host on the Wireless Router. 1. Port Forwarding Port forwarding feature allows you to create the mapping between and , then all the requests from outside users to the specified external IP address: port on the Wireless Router will be forwarded to the mapped local server, so the outside users can access the service offered by the server. For example, if you want to allow the local SMTP server (IP address: 192.168.1.88) to be http://www.uttglobal.com Page 101 UTT Technologies Chapter 7 Advanced available to the outside users, you can create a port forwarding entry: external IP address is WAN1 IP address (200.200.201.88 in this example), external port is 2100, internal IP address is 192.168.1.88, and internal port is 25. Then all the requests to SMTP service from outside users to 200.200.201.88:2100 will be forwarded to 192.168.1.88:25. 2. DMZ Host The DMZ (Demilitarized Zone) feature allows one local computer to be exposed to the Internet for the use of a special service such as online game or video conferencing. When receiving the requests initiated from outside users, the Wireless Router will directly forward these requests to the specified DMZ host. Note When a local computer is designated as the DMZ host, it loses firewall protection provided by the Wireless Router. As the DMZ host is exposed to many exploits from the Internet, it may be used to attack your network. 3. The Priorities of Port Forwarding Entries and DMZ Host The port forwarding entries take priority over the DMZ host. When receiving a request packet initiated from an outside user, the Wireless Router will firstly search the Port Forwarding List to find out if there is a port forwarding entry matching the destination IP address and port of the packet. If a match is found, the Wireless Router will forward the packet to the mapped local computer. Else, the Wireless Router will try to find out if there is an available DMZ host. 7.1.2 Port Forwarding 7.1.2.1 Port Forwarding List Figure 7- 1 Port Forwarding List http://www.uttglobal.com Page 102 UTT Technologies Chapter 7 Advanced Add a Port Forwarding Entry: To add a new port forwarding entry, first click the Add button to go to the Port Forwarding Settings page, next configure it, lastly click the Save button. View Port Forwarding Entry(s): When you have configured one or more port forwarding entries, you can view them in the Port Forwarding List. Modify a Port Forwarding Entry: To modify a configured port forwarding entry, click its Name hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete Port Forwarding Entry(s): There are three ways to delete port forwarding entry(s). 1. To delete a port forwarding entry, directly click its 2. To delete more than one port forwarding entry at a time, select the leftmost check boxes of the entries that you want to delete, and then click the Delete button. 3. To delete all the port forwarding entries at a time, directly click the Delete All button. icon. Note After you enable HTTP remote management in the Administration > Remote Access page, the system will automatically create a port forwarding entry for it. You cannot modify or delete it in this page. 7.1.2.2 Port Forwarding Settings Figure 7- 2 Port Forwarding Settings http://www.uttglobal.com Page 103 UTT Technologies Chapter 7 Advanced Name: It specifies a unique name of the port forwarding entry. Enable: It allows you to enable or disable the port forwarding entry. The default value is checked, which means the port forwarding entry is in effect. If you want to disable the entry temporarily instead of deleting it, please clear the check box. Protocol: It specifies the transport protocol used by the service. The available options are TCP, UDP and TCP/UDP. If you are not sure, select TCP/UDP. Start External Port: It specifies the lowest port number provided by the Wireless Router. The external ports are opened for outside users to access. Internal IP Address: It specifies the IP address of the local computer that provides the service. Start Internal Port: It specifies the lowest port number of the service provided by the local computer. The Start External Port and Start Internal Port can be different. Port Count: It specifies the number of service ports provided by the local computer. If the service uses only one port number, enter 1. Change it if the service uses a range of consecutive ports. The maximum value is 20. For example, if the start internal port is 20, the start external port is 2000, and the port count is 2, then the internal port range is from 20 to 21, and the external port range is from 2000 to 2001. Bind to: It specifies the interface to which this port forwarding entry is bound. The port forwarding entry will use the selected interface’s IP address as its external IP address. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Port Forwarding List. 7.1.2.3 How to Add Port Forwarding Entries To add one or more static port forwarding entries, follow these steps: Step 1 Go to the Advanced > NAT > Port Forwarding page, and click the Add button to go to the Port Forwarding Settings page. Step 2 Specify the Name, and leave the Enable check box checked. Step 3 Specify the Protocol, Internal IP Address and Start Internal Port as required. Step 4 Specify the Start External Port as required. The Start External Port and Start Internal Port can be different. Step 5 If the open service uses a range of consecutive ports, you need to specify the Port Count. http://www.uttglobal.com Page 104 UTT Technologies Chapter 7 Advanced Step 6 Select an interface from the Bind to drop-down list as required. The port forwarding entry will use the selected interface’s IP address as its external IP address. Step 7 Click the Save button to save the settings. You can view the port forwarding entry in the Port Forwarding List. Step 8 If you want to add another new port forwarding entry, please repeat the above steps. 7.1.2.4 Configuration Example for Port Forwarding An organization wants a LAN server (IP Address: 192.168.1.99) to open Web service (Protocol: TCP; Port: 80) to the outside users. And the Wireless Router will use 10000 as the external port and the WAN2 IP address (200.200.200.88 in this example) as the external IP address. Then all the requests to Web service from outside users to 200.200.200.88:10000 will be forwarded to 192.168.1.99:80. The following figure shows the detailed settings. Figure 7- 3 Port Forwarding Settings - Example http://www.uttglobal.com Page 105 UTT Technologies 7.1.3 Chapter 7 Advanced NAT Rule 7.1.3.1 NAT Rule List Figure 7- 4 NAT Rule List Add a NAT Rule: To add a new NAT rule, first click the Add button to go to the NAT Rule Settings page, next configure it, lastly click the Save button. View NAT Rule(s): When you have configured one or more NAT rules, you can view them in the NAT Rule List. Modify a NAT Rule: To modify a configured NAT rule, click its Name hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete NAT Rule(s): There are three ways to delete NAT rules. 1. To delete a NAT rule, directly click its 2. To delete more than one NAT rule at a time, select the leftmost check boxes of the NAT rules that you want to delete, and then click the Delete button. 3. To delete all the NAT rules at a time, directly click the Delete All button. 7.1.3.2 icon. NAT Rule Settings The following sections describe the settings of the EasyIP NAT rule and One2One NAT rule respectively, see Figure 7- 5 and Figure 7- 6. http://www.uttglobal.com Page 106 UTT Technologies 7.1.3.2.1 Chapter 7 Advanced NAT Rule Settings - EasyIP Figure 7- 5 NAT Rule Settings - EasyIP Name: It specifies a unique name of the NAT rule. NAT Type: It specifies the type of the NAT rule. The available options are EasyIP and One2One. Here please select EasyIP. External IP: It specifies the external IP address to which the local computers’ IP addresses are mapped. Start Internal IP and End Internal IP: They specify a range of internal IP addresses. The local computers within the specified range will preferentially use the NAT rule. Bind to: It specifies the interface to which the NAT rule is bound. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the NAT Rule List. http://www.uttglobal.com Page 107 UTT Technologies 7.1.3.2.2 Chapter 7 Advanced NAT Rule Settings - One2One Figure 7- 6 NAT Rule Settings - One2One Name: It specifies a unique name of the NAT rule. NAT Type: It specifies the type of the NAT rule. The available options are EasyIP and One2One. Here please select One2One. Start External IP: It specifies the start external IP address to which the start internal IP address is mapped. Start Internal IP and End Internal IP: They specify the internal IP address range of the NAT rule. Bind to: It specifies the interface to which the NAT rule is bound. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the NAT Rule List. Note 1. 2. When creating a One2One NAT rule, you must set the Start External IP. The number of the external IP addresses is the same as the number of internal IP addresses, which is determined by the Start Internal IP and End Internal IP. For example, if the Start Internal IP is 192.168.16.6, End Internal IP is 192.168.16.8, and Start External IP is 200.200.200.116, then 192.168.16.6, 192.168.16.7, and 192.168.16.8 will be mapped to 200.200.200.116, 200.200.200.117, and 200.200.200.118 respectively. A One2One NAT rule can contain up to 20 external/internal IP addresses. http://www.uttglobal.com Page 108 UTT Technologies 7.1.3.3 Chapter 7 Advanced How to Add NAT Rules To add one or more NAT rules, follow these steps: Step 1 Please identify the type of the NAT rule that you want to add. Step 2 Go to the Advanced > NAT > NAT Rule page, and click the Add button to go to the NAT Rule Settings page. Step 3 Specify the Name for the NAT rule, and select a type from the NAT Type drop-down list as required. Step 4 There are two cases: 1) If the NAT rules’ type is EasyIP, please specify the External IP, Start Internal IP, and End Internal IP as required. 2) If the NAT rules’ type is One2One, please specify the Start External IP, Start Internal IP, and End Internal IP as required. Step 5 Select an interface from the Bind to drop-down list as required. Step 6 Click the Save button to save the settings. You can view the NAT rule in the NAT Rule List. Step 7 If you want to add another new NAT rule, please repeat the above steps. Note If you want to delete NAT rule(s), please follow the ways described in Section 7.1.3.1 NAT Rule List. 7.1.3.4 Configuration Examples for NAT Rule 7.1.3.4.1 An Example for Configuring an EasyIP NAT Rule 1. Requirements In this example, an Internet café has a single Internet connection, and obtains eight public IP addresses (from 218.1.21.0/29 to 218.1.21.7/29) from the ISP. Therein, 218.1.21.1/29 is used as the Internet connection’s gateway IP address, 218.1.21.2/29 is used as the Wireless Router’s WAN1 interface IP address. Note that 218.1.21.0/29 and 218.1.21.7/29 cannot be used as they are the subnet number and broadcast address respectively. The administrator want the local computers in the online game area (its address range is from 192.168.1.10/24 to 192.168.1.100/24) to use 218.1.21.3/29 to access the Internet. To http://www.uttglobal.com Page 109 UTT Technologies Chapter 7 Advanced achieve this purpose, he should create an EasyIP NAT rule for them. The rule’s External IP is 218.1.21.3, Start Internal IP is 192.168.1.10, End Internal IP is 192.168.1.100, and Bind to be WAN1. 2. Configuration Steps The configuration steps are the following: Step 1 Go to the Advanced > NAT > NAT Rule page, and click the Add button to go to the NAT Rule Settings page, see the following figure. Figure 7- 7 EasyIP NAT Rule Settings - Example Step 2 Enter Example1 in the Name text box. Step 3 Select EasyIP from the NAT Type drop-down list. Step 4 Enter 218.1.21.3 in the External IP text box; enter 192.168.1.10 and 192.168.1.100 in the Start Internal IP and End Internal IP text boxes respectively. Step 5 Select WAN1 from the Bind to drop-down list. Step 6 Click the Save button to save the settings. Till now you have finished configuring the NAT rule, and you can view it in the NAT Rule List. Note If an EasyIP NAT rule’s External IP is not on the same subnet as the IP address of the interface to which the rule is bound, the Wireless Router’s default gateway requires a subnet route for the network to which the External IP belongs, or a host route for the External IP pointing to the bound interface. http://www.uttglobal.com Page 110 UTT Technologies 7.1.3.4.2 Chapter 7 Advanced An Example for Configuring a One2One NAT Rule 1. Requirements In this example, a business has a single static IP Internet connection, and obtains eight public IP addresses (202.1.1.128/29 - 202.1.1.1.135/29) from the ISP. Therein, 202.1.1.129/29 is used as the Internet connection’s gateway IP address, 202.1.1.130/2 is used as the Wireless Router’s WAN1 IP address. Note that 202.1.1.128/29 and 202.1.1.1.135/29 cannot be used as they are the subnet number and broadcast address respectively. The business wants its employees to share a single public IP address of 202.1.1.130/29 to access the Internet; and it wants its four local servers to provide services for the outside users. The LAN subnet is 192.168.1.0/24. The four local servers IP addresses are from 192.168.1.200/24 to 192.168.1.203/24. 2. Analysis Firstly we need to configure a static IP Internet connection on the WAN1 interface in the Network > WAN page or through the Start > Setup Wizard. After you have configured the Internet connection, the Wireless Router will automatically create a related system reserved EasyIP NAT rule, and also enable NAT. Secondly, we need to create a One2One NAT rule for the four local servers. The IP addresses of the four local servers are mapped to 202.1.1.131/29, 202.1.1.132/29, 202.1.1.133/29, 202.1.1.134/29 respectively. Thus the outside users can use these public addresses to access the local servers through the Wireless Router. 3. Configuration Steps Here we only describe how to create the One2One NAT rule. Step 1 Go to the Advanced > NAT > NAT Rule page, and click the Add button to go to the NAT Rule Settings page, see the following figure. Step 2 Enter Example2 in the Name text box. http://www.uttglobal.com Page 111 UTT Technologies Chapter 7 Advanced Figure 7- 8 One2One NAT Rule Settings - Example Step 3 Select One2One from the NAT Type drop-down list. Step 4 Enter 202.1.1.131 in the Start External IP text box; enter 192.168.1.200 and 192.168.1.203 in the Start Internal IP and End Internal IP text boxes respectively. Step 5 Select WAN1 from the Bind to drop-down list. Step 6 Click the Save button to save the settings. Till now you have finished configuring the NAT rule, and you can view it in the NAT Rule List. 7.1.4 DMZ Figure 7- 9 DMZ Host Settings Enable DMZ: It allows you to enable or disable DMZ feature. If you want to enable DMZ feature on the Wireless Router, please select this check box. DMZ Host IP Address: It specifies the private IP address of the DMZ host. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 112 UTT Technologies Chapter 7 Advanced Note When a local computer is designated as the DMZ host, it loses firewall protection provided by the Wireless Router. The DMZ host can be accessed through all the WAN interfaces. http://www.uttglobal.com Page 113 UTT Technologies 7.2 Chapter 7 Advanced IP/MAC Binding This section describes the Security > IP/MAC Binding page. 7.2.1 Introduction to IP/MAC Binding 7.2.1.1 IP/MAC Binding Overview To achieve network security management, you should perform user identification before performing user authorization. In this section, we describe how to implement user identification. In Section 9.1 Firewall > Access Control, we will describe how to control the Internet behaviors of the LAN users in detail. The Wireless Router provides IP/MAC binding feature to implement user identification. Using the IP/MAC address pair as a unique user identity, you can protect the Wireless Router and your network against IP spoofing attacks. IP spoofing attack refers to that a computer attempts to use another trusted computer’s IP address to connect to or pass through the Wireless Router. The computer’s IP address can easily be changed to a trusted address, but MAC address cannot easily be changed as it is added to the Ethernet card at the factory. 7.2.1.2 The Operation Principle of IP/MAC Binding For the sake of convenience, we firstly introduce several related terms including legal user, illegal user and undefined user. ● Legal User: A legal user’s IP and MAC address pair matches an IP/MAC binding whose Allow check box is checked. ● Illegal User: An illegal user’s IP and MAC address pair matches an IP/MAC binding whose Allow check box is cleared; or the IP address or MAC address is the same as that of an IP/MAC binding, but not both. ● Undefined User: An undefined user’s IP address and MAC address both are different from any IP/MAC binding. The undefined users are all the users except legal and illegal users. It allows the legal users to access the Wireless Router or access the Internet through the Wireless Router, and denies the illegal users. And the parameter of Allow Undefined LAN PCs determines whether it allows the undefined users to access the Wireless Router http://www.uttglobal.com Page 114 UTT Technologies Chapter 7 Advanced or access the Internet through the Wireless Router, that is, it will allow them if they Allow Undefined LAN PCs check box is checked, else block them. IP/MAC binding feature can act on the packets initiated from the local computers to the Wireless Router or outside computers. When receiving a packet initiated from LAN, the Wireless Router will firstly determine the sender’s identity by comparing the packet with the bindings in the IP/MAC Binding List, and then process the packet according to the sender’s identity. The details are as follows: 1. If the sender is a legal user, the packet will be allowed to pass, and then be further processed by other function modules. 2. If the sender is an illegal user, the packet will be dropped immediately to prevent IP spoofing. 3. If the sender is an undefined user, there are two cases: 1) If the Allow Undefined LAN PCs check box is checked, the packet will be allowed to pass, and then be further processed by other function modules. 2) Else, the packet will be dropped immediately. 7.2.2 IP/MAC Binding Global Settings Figure 7- 10 IP/MAC Binding Global Settings Allow Undefined LAN PCs: It allows or blocks the undefined local computers from accessing the Wireless Router or accessing the Internet through the Wireless Router. If you want to allow the undefined local computers to access the Wireless Router and Internet, please select the check box. Save: Click to save your changes. Note If you want to clear the Allow Undefined LAN PCs check box to block the undefined local computers, please make sure that you have added the IP/MAC address pair of the computer that you use to administer the Wireless Router into the IP/MAC Binding List. Otherwise you cannot access the Wireless Router from that computer. http://www.uttglobal.com Page 115 UTT Technologies 7.2.3 Chapter 7 Advanced IP/MAC Binding List Figure 7- 11 IP/MAC Binding List Add One or More IP/MAC Bindings: To add one or more IP/MAC bindings, first click the Add button to go to the IP/MAC Binding Settings page shown in Figure 7- 14, next configure them, lastly click the Save button. View IP/MAC Binding(s): When you have configured one or more IP/MAC bindings, you can view them in the IP/MAC Binding List. Modify an IP/MAC Binding: To modify a configured IP/MAC binding, click its User Name hyperlink or icon, the related information will be displayed in the setup page shown in Figure 7- 12. Then modify it, and click the Save button. Figure 7- 12 Modifying an IP/MAC Binding The Allow check box is used to allow or block a user matching an IP/MAC binding from accessing the Wireless Router and Internet. To allow the user matching the IP/MAC binding to access, select the IP/MAC binding’s Allow check box; else clear it. Delete IP/MAC binding(s): There are three ways to delete IP/MAC bindings. 1. To delete a IP/MAC binding, directly click its 2. To delete more than one IP/MAC binding at a time, select the leftmost check boxes of the bindings that you want to delete, and then click the Delete button. 3. To delete all the IP/MAC bindings at a time, directly click the Delete All button. http://www.uttglobal.com icon. Page 116 UTT Technologies Chapter 7 Advanced Note When you add the IP/MAC address pair of the computer that you use to administer the Wireless Router into the IP/MAC Binding List, please leave the Allow check box checked. Otherwise you cannot access the Wireless Router from that computer. If you attempt to clear the check box, you will be prompted that the operation is not permitted, see the following figure. Figure 7- 13 IP/MAC Binding Error Message 7.2.4 IP/MAC Binding Settings Figure 7- 14 IP/MAC Binding Settings Subnet: It specifies the subnet you want to scan. The default is the Wireless Router’s LAN IP address and subnet mask. Scan: If you click the Scan button, the Wireless Router will immediately scan the specified subnet to detect active computers connected to the Wireless Router, learn and display dynamic ARP information (that is, IP and MAC address pairs) in the text http://www.uttglobal.com Page 117 UTT Technologies Chapter 7 Advanced box. Note that if a computer’s IP/MAC address pair has been added in the IP/MAC Binding List, this IP/MAC address pair will not be displayed here. Bind: Click to bind all the valid IP and MAC address pairs in the text box. Add IP/MAC Binding(s) Manually: To manually add one or more IP/MAC bindings, follow these steps: Enter one or more IP/MAC address pair entries in the text box, and then click the Bind button. The input contents are: IP Address, MAC Address and User Name, one address pair entry per line; and the input format for each entry is: IP Address MAC Address User Name . ● IP Address: It specifies the IP address of the local computer. ● MAC Address: It specifies the MAC address of the local computer. ● User Name: It specifies a unique user name of the local computer whose IP/MAC address pair will be bound. It is an optional parameter. If you don’t enter it, the system will automatically create a user name for the computer. Note 1. You can use the ipconfig /all command at the command prompt to find a Windows-based computer’s IP address and MAC address. 2. For an IP/MAC address pair entry entered manually, there can be one or more spaces between the IP Address and MAC Address, and between the MAC address and User Name. 3. The Bind operation will skip any invalid IP and MAC address pairs in the text box. In other words, it will only bind the valid IP and MAC address pairs. 7.2.5 How to Add IP/MAC Bindings To add one or more IP/MAC bindings, follow these steps: Step 1 Go to the Advanced > IP/MAC Binding page, and click the Add button to go to the IP/MAC Binding Settings page. Step 2 There are two methods to add IP/MAC bindings: 1) Method One: Click the Scan button to learn current dynamic ARP information (that is, IP and MAC address pairs) of the local computers, next click the Bind button to bind the valid IP/MAC address pairs in the text box. 2) Method Two: You can manually add one or more IP/MAC address pairs in the text box, next click the Bind button to bind these IP/MAC address pairs. Refer to Section 7.2.4 IP/MAC Binding Settings for more information. http://www.uttglobal.com Page 118 UTT Technologies Chapter 7 Advanced Step 3 After you have added some IP/MAC bindings, you can view them in the IP/MAC Binding List. Step 4 If you want to block the undefined local computers from accessing the Wireless Router and Internet, please clear the Allow Undefined LAN PCs check box; else, the undefined local computers are allowed to access the Wireless Router and Internet. Step 5 If you want to temporarily block a user matching an IP/MAC binding from accessing the Wireless Router and Internet, please clear the binding’s Allow check box. After you have finished configuring IP/MAC binding feature, when receiving a packet initiated from LAN, the Wireless Router will firstly compare the packet with the bindings in the IP/MAC Binding List, and then process the packet according to the related configuration. The packet will be allowed to pass or be dropped immediately. If it is allowed to pass, the packet will be further processed by other function modules. 7.2.6 Internet Whitelist and Blacklist 7.2.6.1 Introduction to Internet Whitelist and Blacklist Based on IP/MAC Binding By utilizing IP/MAC binding feature, you can flexibly configure an Internet whitelist or blacklist for the LAN users. If you want to allow only a small number of LAN users to access the Internet, you can configure an Internet whitelist for these users. Then all users cannot access the Internet, except those listed in the whitelist. If you want to block only a small number of LAN users from accessing the Internet, you can configure an Internet blacklist for these users. Then all users can access the Internet, except those listed in the blacklist. On the Wireless Router, a user listed in the whitelist is a legal user, i.e., the user’s IP and MAC address pair matches an IP/MAC binding whose Allow check box is checked. A user listed in the blacklist is an illegal user, i.e., the user’s IP and MAC address pair matches an IP/MAC binding whose Allow check box is cleared; or the IP address or MAC address is the same as that of an IP/MAC binding, but not both. http://www.uttglobal.com Page 119 UTT Technologies 7.2.6.2 Chapter 7 Advanced How to Configure an Internet Whitelist To configure an Internet whitelist, follow these steps: Step 1 Go to the Advanced > IP/MAC Binding page, and click the Add button to go to the IP/MAC Binding Settings page. Step 2 Specify the legal users by creating the IP/MAC bindings: Add these users’ IP and MAC address pairs into the IP/MAC Binding List. By default, an IP/MAC binding’s Allow check box is checked, which means that the user matching the IP/MAC binding can access the Wireless Router and Internet, so please leave the default value. Refer to Section 7.2.4 IP/MAC Binding Settings for detailed information. Step 3 Clear the Allow Undefined LAN PCs check box to block all the undefined users from accessing the Wireless Router and Internet. For example, if you want to allow a local computer with IP address 192.168.1.2 and MAC address 0021859b4544 to access the Wireless Router and Internet, you can add its IP/MAC address pair into the IP/MAC Binding List, see Figure 7- 15. The binding’s Allow check box is checked by default, so please leave the default value. Figure 7- 15 IP/MAC Binding List - Example 1 7.2.6.3 How to Configure an Internet Blacklist To configure an Internet blacklist, follow these steps: Step 1 Go to the Advanced > IP/MAC Binding page, and click the Add button to go to the IP/MAC Binding Settings page. Step 2 Specify the illegal users by creating the IP/MAC bindings. There are two methods (Refer to Section 7.2.4 IP/MAC Binding Settings for detailed information.): http://www.uttglobal.com Page 120 UTT Technologies Chapter 7 Advanced 1) Method One: Bind each illegal user’s IP address to a MAC address which is different from any local computer’s, and add these IP/MAC address pairs into the IP/MAC Binding List. 2) Method Two: Add these users’ IP and MAC address pairs into the IP/MAC Binding List, and clear each IP/MAC binding’s Allow check box respectively. Thus the matched users cannot access the Wireless Router and Internet. Step 3 Select the Allow Undefined LAN PCs check box to allow all the undefined users to access the Wireless Router and Internet. For example, if you want to block a local computer with IP address 192.168.1.3 from accessing the Wireless Router and Internet, you can add an IP/MAC binding into the IP/MAC Binding List: the IP Address is 192.168.1.3, and the MAC Address is different from any local computer’s MAC address (112233445566 here), see Figure 7- 16. Figure 7- 16 IP/MAC Binding List - Example 2 Another example is that if you want to block a local computer with IP address 192.168.1.3 and MAC address 0021859b2564 from accessing the Wireless Router and Internet, you can add its IP/MAC address pair into the IP/MAC Binding List, next clear the binding’s Allow check box, see Figure 7- 17. Figure 7- 17 IP/MAC Binding List - Example 3 http://www.uttglobal.com Page 121 UTT Technologies 7.3 Chapter 7 Advanced Static Route This section describes the Advanced > Static Route page, where you can configure and view static routes. 7.3.1 Introduction to Static Route A static route is manually configured by the network administrator, which is stored in a routing table. By using routing table, the Wireless Router can select an optimal transmission path for each received packet, and forward the packet to the destination site effectively. The proper usage of static routes can not only improve the network performance, but also achieve other benefits, such as traffic control, provide a secure network environment. The disadvantage of using static routes is that they cannot dynamically adapt to the current operational state of the network. When there is a change in the network or a failure occurs, some static routes will be unreachable. In this case, the network administrator should update the static routes manually. 7.3.2 Static Route List Figure 7- 18 Static Route List Add a Static Route: To add a new static route, first click the Add button to go to the setup page, next configure it, lastly click the Save button. View Static Route(s): When you have configured one or more static routes, you can view them in the Static Route List. Modify a Static Route: To modify a configured static route, click its Name hyperlink http://www.uttglobal.com Page 122 UTT Technologies Chapter 7 Advanced or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete Static Route(s): There are three ways to delete static route(s). 1. To delete a static route, directly click its 2. To delete more than one static route at a time, select the leftmost check boxes of the static routes that you want to delete, and then click the Delete button. 3. To delete all the static routes at a time, directly click the Delete All button. 7.3.3 icon. Static Route Settings Figure 7- 19 Static Route Settings Name: It specifies a unique name of the static route. Enable: It allows you to enable or disable the static route. The default value is checked, which means the static route is in effect. If you want to disable the static route temporarily instead of deleting it, please clear the check box. Destination IP: It specifies the IP address of the destination network or destination host. Subnet Mask: It specifies the subnet mask associated with the destination network. Gateway IP Address: It specifies the IP address of the next hop gateway or router to which to forward the packets. Priority: It specifies the priority of the static route. If there are multiple routes to the same destination with different priorities, the Wireless Router will choose the route with the highest priority to forward the packets. The smaller the number, the higher http://www.uttglobal.com Page 123 UTT Technologies Chapter 7 Advanced the priority. Interface: It specifies an outbound interface through which the packets are forwarded to the next hop gateway or router. The available options are LAN, WAN1, WAN2, APClient and 3G. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Static Route List. 7.3.4 How to Add Static Routes To add one or more static routes, follow these steps: Step 1 Go to the Advanced > Static Route page, and click the Add button to go to the setup page. Step 2 Specify the Name for the static route, and leave the Enable check box checked. Step 3 Specify the Destination IP, Subnet Mask, and Gateway IP Address. Step 4 Specify the Priority as required. Step 5 Select an outbound interface from the Interface drop-down list as required. For example, if you want to add a static route for the network 192.168.1.0/24 pointing to 192.168.1.254, please choose LAN as the outbound interface. The following figure shows the detailed settings. Figure 7- 20 Static Route Settings - Example http://www.uttglobal.com Page 124 UTT Technologies Chapter 7 Advanced Step 6 Click the Save button to save the settings. You can view the static route in the Static Route List. Step 7 To add another new static route, please repeat the above steps. Note If you want to delete static route(s), please follow the ways described in Section 7.3.2 Static Route List. http://www.uttglobal.com Page 125 UTT Technologies 7.4 Chapter 7 Advanced PPPoE Server This section describes how to configure PPPoE server global settings and PPPoE account settings, and how to view PPPoE user status. 7.4.1 PPPoE Overview The PPPoE stands for Point-to-Point Protocol over Ethernet, which uses client/server model. The PPPoE provides the ability to connect the Ethernet hosts to a remote Access Concentrator (AC) over a simple bridging access device. And it provides extensive access control management and accounting benefits to ISPs and network administrators. The PPPoE is a network protocol for encapsulating PPP frames in Ethernet frames to provide point-to-point connection over an Ethernet network. 7.4.1.1 PPPoE Stages As specified in RFC 2516, the PPPoE has two distinct stages: a discovery stage and a PPP session stage. The following describes them respectively. 7.4.1.2 PPPoE Discovery Stage In the PPPoE discovery stage, a PPPoE client will find a proper server, and then build the connection. When a client initiates a PPPoE session, it should perform discovery to indentify the PPPoE server’s Ethernet MAC address, and establish a PPPoE session ID. Figure 7- 21 PPPoE Discovery Stage Flows As shown in Figure 7-21, the discovery stage includes the following four steps: 1. PADI (PPPoE Active Discovery Initiation): At the beginning, a PPPoE client http://www.uttglobal.com Page 126 UTT Technologies Chapter 7 Advanced broadcasts a PADI packet to find all the servers that can be connected possibly. Until it receives PADO packets from one or more servers. The PADI packet must contain a service name which indicates the service requested by the client. 2. PADO (PPPoE Active Discovery Offer): When a PPPoE server receives a PADI packet in its service range, it will send a PADO response packet. The PADO packet must contain the server’s name, and a service name identical to the one in the PADI, and any number of other service names which indicate other services that the PPPoE server can offer. If a PPPoE server receives a PADI packet beyond its service range, it cannot respond with a PADO packet. 3. PADR (PPPoE Active Discovery Request): The client may receive more than one PADO packet as the PADI was broadcast. The client chooses one server according to the server’s name or the services offered. Then the client sends a PADR packet to the selected server. The PADR packet must contain a service name which indicates the service requested by the client. 4. PADS (PPPoE Active Discovery Session- confirmation): When a PPPoE server receives a PADR packet; it prepares to begin a PPP session. It generates a unique PPPoE session ID, and respond to the client with a PADS packet. The PADS packet must contain a service name which indicates the service provided to the client. When the discovery stage completes successfully, both the server and client know the PPPoE session ID and the peer's Ethernet MAC address, which together define the PPPoE session uniquely. 7.4.1.3 PPP Session Stage In the PPP session stage, the server and client perform standard PPP negotiation to establish a PPP connection. After the PPP connection is established successfully, the original datagram are encapsulated in PPP frames, and PPP frames are encapsulated in PPPoE session frames, which have the Ethernet type 0x8864. Then these Ethernet frames are sent to the peer. In a PPPoE session frame, the session ID must be the value assigned in the Discovery stage, and cannot be changed in this session. 7.4.1.4 PPPoE Session Termination After a session is established, either the server or client may send a PADT (PPPoE Active Discovery Terminate) packet at anytime to indicate the session has been terminated. The PADT packet’s SESSION-ID must be set, to indicate which session is to be terminated. Once received a PADT, no further PPP packets (even normal PPP termination packets) are allowed to be sent using the specified session. A PPP peer should use the PPP protocol itself to terminate a PPPoE session, but can use the PADT packet to terminate http://www.uttglobal.com Page 127 UTT Technologies Chapter 7 Advanced the PPPoE session if PPP cannot be used. 7.4.2 PPPoE Server Global Settings Figure 7- 22 PPPoE Server Global Settings Enable PPPoE Server: It allows you to enable or disable PPPoE server. If you want to enable PPPoE server on the Wireless Router, please select this check box. Start IP Address: It specifies the starting IP address that is assigned by the PPPoE server. Primary DNS Server: It specifies the IP address of the primary DNS server that is available to a PPPoE client. Secondary DNS Server: It specifies the IP address of the secondary DNS server that is available to a PPPoE client. PPP Authentication: It specifies the PPP authentication mode by which the PPPoE server authenticates a PPPoE client. The available options are PAP, CHAP and AUTO. In most cases, please leave the default value of AUTO, which means that the Wireless Router will automatically choose PAP or CHAP to authenticate the PPPoE client. Maximum Sessions: It specifies the maximum number of PPPoE sessions that can be created on the Wireless Router. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. http://www.uttglobal.com Page 128 UTT Technologies 7.4.3 Chapter 7 Advanced PPPoE Account List Figure 7- 23 PPPoE Account List Add a PPPoE Account: To add a new PPPoE account, first click the Add button to go to the setup page, next configure it, lastly click the Save button. View PPPoE Account(s): When you have configured one or more PPPoE accounts, you can view them in the PPPoE Account List. Modify a PPPoE Account: To modify a configured PPPoE account, click its User Name hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete PPPoE Account(s): There are three ways to delete PPPoE account(s). 1. To delete a PPPoE account, directly click its 2. To delete more than one PPPoE account at a time, select the leftmost check boxes of the PPPoE accounts that you want to delete, and then click the Delete button. 3. To delete all the PPPoE accounts at a time, directly click the Delete All button. 7.4.4 icon. PPPoE Account Settings Go to the Advanced > PPPoE Server > PPPoE Account Settings page, and click the Add button to go to the setup page shown in Figure 7- 24. http://www.uttglobal.com Page 129 UTT Technologies Chapter 7 Advanced Figure 7- 24 PPPoE Account Settings User Name: It specifies a unique user name of the PPPoE account. It must be between 1 and 31 characters long. The PPPoE server will use User Name and Password to identify the PPPoE client. Password: It specifies the password of the PPPoE account. Confirm Password: You should re-enter the password. Static IP Address: It specifies a static IP address that is assigned to the user who uses the current PPPoE account. It must be a valid IP address within the range of IP addresses assigned by the PPPoE server. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the PPPoE Account List. 7.4.5 PPPoE User Status You can go to the Advanced > PPPoE Server > PPPoE User Status page view the status information of online PPPoE dial-in users in the PPPoE User Status List, which include the user name, assigned IP address, MAC address, Rx rate and Tx rate, and online time. http://www.uttglobal.com Page 130 UTT Technologies Chapter 7 Advanced Figure 7- 25 PPPoE User Status List User Name: It displays the user name of the PPPoE account. The PPPoE dial-in user uses it to dial-up and establish the PPPoE session to the Wireless Router. IP Address: It displays the PPPoE dial-in user’s IP address assigned by the PPPoE server. MAC Address: It displays the PPPoE dial-in user’s MAC address. Online Time: It displays the elapsed time since the PPPoE session was established. Tx Rate: It displays the real-time upload rate (in kilobytes per second) of the PPPoE dial-in user. Rx Rate: It displays the real-time download rate (in kilobytes per second) of the PPPoE dial-in user. Refresh: Click to view the latest information in the list. http://www.uttglobal.com Page 131 UTT Technologies Chapter 8 User Management Chapter 8 User Management This chapter describes how to control and manage the Internet behaviors of the LAN users, including global management and group management. 8.1 Global Management This section describes the User > Global Management page. In this page, you can easily control and manage the Internet behaviors of the LAN users based on schedule, which include: allow or block the LAN users from using popular IM (e.g., QQ, MSN) and P2P applications (e.g., Bit Comet, Bit Spirit, Thunder Search) during the specified schedule. Using P2P applications in the LAN will impact the other users accessing the Internet, even cause network congestion and performance deterioration. You can block P2P applications to avoid such situations. 8.1.1 Global Management Policy Settings Figure 8- 1 Global Management Policy Settings Block QQ: It allows or blocks QQ application. If you want to block the LAN users from using QQ to chat with others, please select this check box. http://www.uttglobal.com Page 132 UTT Technologies Chapter 8 User Management Block MSN: It allows or blocks MSN Messenger. If you want to block the LAN users from using MSN Messenger to chat with others, please select this check box. Block BT: It allows or blocks BitSpirit and BitComet applications. If you want to block the LAN users from using BitSpirit or BitComet to download files, please select this check box. Block Thunder Search: It allows or blocks Thunder search application. If you want to block the LAN users from using Thunder to search resources, please select this check box. Schedule: It allows you to define a schedule to restrict when the global management policy is in effect. By default, it is always in effect. • Days: It specifies the day(s) of the week during which the schedule is in effect. By default, the Everyday check box is checked, which means all days of the week. You may clear the Everyday check box, and then select any single day (Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, or Sunday) or combinations of days as desired. • Time: It specifies a range of hours and minutes during which the schedule is in effect. By default, the 24 Hours check box is checked, which means the schedule is in effect all day on the selected day(s). You may clear the 24 Hours check box, and then choose the daily start time and end time as desired. If the start time is later than the end time, the system will automatically divide it into two time periods. E.g., if you select the Mon check box, and choose 23:00 and 06:00 as the daily start time and end time respectively, the schedule will be in effect during 00:00~06:00 and 23:00~23:59 on Monday. Update Policy: Click to update the corresponding policy. If you click the Update Policy hyperlink, the system will jump to the Update Policy page (see Figure 8- 2), and go back to the User > Global Management page after the update is complete. Figure 8- 2 Updating Policy Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note The global management policy applies to the LAN users whose IP address is on the same subnet as the Wireless Router’s LAN interface, and PPPoE dial-in users. Other users aren’t subject to the policy. http://www.uttglobal.com Page 133 UTT Technologies 8.1.2 Chapter 8 User Management An Example for Global Management Policy A business uses a AC750W Wireless Router to access the Internet. The CEO wants to block the employees from using MSN and BT applications during business hours (Monday to Friday, 9:00 to 17:00). The configuration steps are the following: Step 1 Go to the User > Global Management page. Step 2 Select the Block MSN and Block BT check boxes. Step 3 Define business hours: clear the Everyday check box, next select the Mon, Tue, Wed, Thu, and Fri check boxes; clear the 24 Hours check box, next choose 09:00 and 17:00 as the daily start time and end time respectively. The above settings are shown in Figure 8- 3. Step 4 Click the Save button to save your settings. Figure 8- 3 Global Management Policy - Example http://www.uttglobal.com Page 134 UTT Technologies 8.2 Chapter 8 User Management Group Management This section describes the User > Group Management page. In this page, you can group the users that have the same Internet access privileges into a user group, and assign a range of contiguous IP addresses to them. After that, you can create group management policies for each group based on schedule. For convenience, a group can also contain a single user. A group management policy is used to control the Internet behaviors of the users in the group, which include: allow or block these users from using popular IM (e.g., QQ, MSN) and P2P applications (e.g., Bit Comet, Bit Spirit, Thunder Search) during the specified schedule; in addition, it is also used to control the maximum upload and download rate of these users during the specified schedule. 8.2.1 Group Management Policy List Figure 8- 4 Group Management Policy List Figure 8- 5 Group Management Policy List (Continue) http://www.uttglobal.com Page 135 UTT Technologies Chapter 8 User Management Add a Group Management Policy: To add a new group management policy, first click the Add button to go to the Group Management Settings page, next configure it, lastly click the Save button. View Group Management Policy(s): When you have configured one or more group management policies, you can view them in the Group Management List. Modify a Group Management Policy: To modify a configured group management policy, click its Group Name hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete Group Management Policy(s): There are three ways to delete group management policy(s). 1. To delete a group management policy, directly click its 2. To delete more than one group management policy at a time, select the leftmost check boxes of the policies that you want to delete, and then click the Delete button. 3. To delete all the group management policies at a time, directly click the Delete All button. 8.2.2 icon. Group Management Policy Settings http://www.uttglobal.com Page 136 UTT Technologies Chapter 8 User Management Figure 8- 6 Group Management Policy Settings Group Name: It specifies a unique name of group. Start IP Address and End IP Address: They specify a range of contiguous IP addresses. All the computers within the specified range are members of the group, and are subject to the group management policy. Rate Limit Mode: It specifies the mode by which the Wireless Router will limit the maximum Tx/Rx rate of the LAN computers belonging to the group. ● Each: If you select this option, the Tx/Rx rate of each computer can reach up to the Max. Tx Rate/ Max. Rx Rate you specify. ● Share: If you select this option, the total Tx/Rx rate of all computers in the group can reach up to the Max. Tx Rate/ Max. Rx Rate you specify. Max. Tx Rate: It specifies the maximum upload rate (in Kbit/s) of the LAN computers belonging to the group. Max. Rx Rate: It specifies the maximum download rate (in Kbit/s) of the LAN computers belonging to the group. There are two ways to set the Max. Tx Rate and Max. Rx Rate. ● Enter a value in the associated text box. If you don’t want to limit Max. Tx Rate/ Max. Rx Rate, please leave the default value of 0. Select an option from the associated drop-down list. If you don’t want to Max. Tx Rate/ Max. Rx Rate, please leave the default value of No Limit. Block QQ, Block MSN, Block BT, Block Thunder Search, and Schedule: Refer to Section 8.1.1 Global Management Policy Settings for detailed information. Update Policy: Click to update the corresponding policy. Refer to Section 8.1.1 Global Management Policy Settings for detailed operation. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Group Management List. Note 1. The policy management policies take priority over the global management policy. 2. The Wireless Router supports up to five group management policies. 3. If both Start IP Address and End IP Address are set to 0.0.0.0, the group will contain all computers on the LAN no matter what IP address they might have. In this case, the Wireless Router will check all the packets initiated from the LAN computers, so the system performance will be degraded to some extent. Therefore, you’d better not set them to 0.0.0.0. http://www.uttglobal.com Page 137 UTT Technologies 8.2.3 Chapter 8 User Management Execution Order of Group Management Policies If a user’s computer belongs to more than one group, in other words, if the user matches more than one group management policy, it will be subject to the first one added. More specifically, after you configure some group management policies, the Wireless Router will search the Group Management List to find out if there is a policy matching a user. It will check the user’s IP address against each policy in the order in which the policies are listed. The first matching policy will apply to the user. Note that the policies are listed in chronological order of creation (i.e., most recent at the bottom). 8.2.4 Priorities of Global and Group Management Policies and Access Rules The access rules have higher priority than the group management policies, and the group management policies have higher priority than the global management policy. That is, when receiving a packet initiated from a local computer, the Wireless Router will first check it against the access rules, next the group management policies, lastly the global management policy. The first rule (or policy) that matches the packet is applied. After a match is found, no further rules or policies are checked. For example, if you have selected the Block MSN check box in the User > Global Management page, added a group management policy which allows a group of users to use MSN (Block MSN check box is cleared) in the User > Group Management page, and added an access rule which denies all users access to the Internet in the Firewall > Access Control page, then any users are unable to access the Internet because the access rule is matched first. Now if you only delete the access rule, then the users belong to the specified group can use MSN, but other users cannot. 8.2.5 An Example for Group Management Policy 1. Requirements A business uses a AC750W Wireless Router to access the Internet. The CEO wants to control Internet behaviors of the employees of the Administration Department and Business Department: 1) Block the Administration Department’s employees (IP range: 192.168.1.2192.168.1.10) from using MSN and QQ, and allow them to access all other services. http://www.uttglobal.com Page 138 UTT Technologies Chapter 8 User Management The exception is that the CEO with IP address 192.168.1.6 can access any services. 2) Allow the Business Department’s employees (IP range: 192.168.1.11-192.168.1.30) to access any services. 2. Analysis We need to create three group management policies to meet the requirements: ● Group management policy 1: It allows the CEO to access all Internet services. ● Group management policy 2: It blocks the Administration Department’s employees from using QQ and MSN. ● Group management policy 3: It allows the Business Department’s employees to access all Internet services. 3. Configuration Steps Step 1 Go to the User > Group Management page. Step 2 Click the Add button to go to the Group Management Settings page to create the policy 1. The detailed settings are shown in Figure 8- 7. Figure 8- 7 Group Management Policy Example - Policy 1 http://www.uttglobal.com Page 139 UTT Technologies Step 3 Chapter 8 User Management Click the Add button to go to the Group Management Settings page to create the policy 2. The detailed settings are shown in Figure 8- 8. Figure 8- 8 Group Management Policy Example - Policy 2 Step 4 Click the Add button to go to the Group Management Settings page to create the policy 3. The detailed settings are shown in Figure 8- 9. http://www.uttglobal.com Page 140 UTT Technologies Chapter 8 User Management Figure 8- 9 Group Management Policy Example - Policy 3 Step 5 After you have configured the three policies, you can view them in the Group Management List, see Figure 8- 10. Figure 8- 10 Group Management List – Example http://www.uttglobal.com Page 141 UTT Technologies Chapter 8 User Management Figure 8- 11 Group Management List – Example (Continue) http://www.uttglobal.com Page 142 UTT Technologies Chapter 9 Firewall Chapter 9 Firewall This chapter describes how to configure firewall features, including access control, domain filtering, and attack prevention. 9.1 Access Control This section describes the Firewall > Access Control page, which includes the Access Rule List and Access Rule Settings. 9.1.1 Introduction to Access Control 9.1.1.1 The Purpose of Access Control Feature By flexibly utilizing access control, you can not only assign different Internet access privileges to different LAN users, but also assign different Internet access privileges to the same users based on schedules. In practice, you can set appropriate access rules according to the actual requirements of your organization. Such as, for a school, you can block the students from accessing game websites; for a family, you can only allow your children to access the Internet during the specified period of time; for a business, you can block the Financial Department’s employees from accessing the Internet. 9.1.1.2 The Operation Principle of Access Control By default, the Wireless Router will forward all the valid packets received by the LAN interface because no access rule exists. After you have configured some access rules, the Wireless Router will examine each packet received by the LAN interface to determine whether to forward or drop it, based on the criteria you specified in the access rules. More specifically, when receiving a packet initiated from LAN, the Wireless Router will analyze the packet by extracting its source MAC address, source IP address, destination IP address, protocol type, port number, content, and the date and time at which the packet was received, and then compare them with each rule in decreasing order of priority. The http://www.uttglobal.com Page 143 UTT Technologies Chapter 9 Firewall first rule that matches the packet is applied, and the specified Action (Allow or Deny) is taken. After a match is found, no further rules are checked. Note that the rules are listed in decreasing order of priority in the Access Rule List: The rule with a higher priority is listed before the one with a lower priority. 9.1.1.3 Filtering Type of Access Rule The Wireless Router supports three filtering types of access rule, which include IP filtering, URL filtering and keyword filtering. All of them support access control based on schedule. 1. IP Filtering The IP filtering rules are used to filter IP packets based on the packet header information, such as source IP address, destination IP address, protocol type (TCP, UDP, ICMP, etc.), TCP/UDP source port and destination port. The filtering criteria that you can specify within an IP filtering rule include: source IP address, destination IP address, protocol, source port, destination port, and schedule. 2. URL Filtering The URL filtering rules are used to filter URLs based on keyword in the URL. It allows you to filter any web page whose URL contains the specified keyword. For example, if you want to block sex related websites, you can use the URL keyword “sex”. This will block any web page whose URL contains sex, such as www.sexpicture.com. Of course, you can use the full URL (like “www.yahoo.com”) to filter only the specified URL. The filtering criteria that you can specify within a URL filtering rule include: source IP address, filtering content (i.e., URL keyword), and schedule. 3. Keyword Filtering The keyword filtering rules are used to block users from submitting information to the web page based on keyword, that is, the information that contains the specified keyword (such as pornography, gambling, etc.) cannot be submitted to any web page. The Wireless Router supports both Chinese and English keyword filtering. The filtering criteria that you can specify within a keyword filtering rule include: source IP address, filtering content (i.e., keyword in the web page), and schedule. 9.1.1.4 Action of Access Rule The action of an access rule is either Allow or Deny. As mentioned earlier, the Wireless http://www.uttglobal.com Page 144 UTT Technologies Chapter 9 Firewall Router checks each received packet against the access rules in the Access Rule List, and the first access rule that matches a packet determines whether the Wireless Router accepts or drops the packet. If the rule’s Action is Allow, the packet is forwarded. If the rule’s Action is Deny, the packet is dropped. Note that keyword filtering rules only support the Deny action. 9.1.2 Access Rule List Figure 9- 1 Access Rule List Figure 9- 2 Access Rule List (Continue) http://www.uttglobal.com Page 145 UTT Technologies Chapter 9 Firewall Figure 9- 3 Access Rule List (Continue) Add an Access Rule: To add a new access rule, first click the Add button to go to the Access Rule Settings page, next configure it, lastly click the Save button. View Access Rule(s): When you have configured one or more access rules, you can view them in the Access Rule List. Modify an Access Rule: To modify a configured access rule, click its Name hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete Access Rule(s): There are three ways to delete access rule(s). 1. To delete a access rule, directly click its 2. To delete more than one access rule at a time, select the leftmost check boxes of the access rules that you want to delete, and then click the Delete button. 3. To delete all the access rules at a time, directly click the Delete All button. 9.1.3 icon. Access Rule Settings The following sections describe three types of access rule respectively, which include IP filtering, URL filtering and keyword filtering. http://www.uttglobal.com Page 146 UTT Technologies 9.1.3.1 Chapter 9 Firewall Access Rule Settings - IP Filtering Figure 9- 4 Access Rule Settings - IP Filtering Name: It specifies a unique name of the access rule. Enable: It allows you to enable or disable the access rule. The default value is checked, which means the access rule is in effect. If you want to disable the rule temporarily instead of deleting it, please clear the check box. Source IP Range: It specifies a range of source IP addresses (i.e., a group of local computers) to which the access rule applies. To specify a single local computer, enter its address in both text boxes. Prority: It specifies the priority of the access rule. The access rules will be checked against the packets in descending order of priority. It must be between 0 and 100. The smaller the number, the higher the priority. And the priority of each access rule cannot http://www.uttglobal.com Page 147 UTT Technologies Chapter 9 Firewall be repeated. Action: It specifies the action to be taken if a packet matches the access rule. The available options are Allow and Deny. ● Allow: It indicates that the Wireless Router will allow the packets matching the rule, that is, the Wireless Router will forward these packets. ● Deny: It indicates that the Wireless Router will deny the packets matching the rule, that is, the Wireless Router will drop these packets. Filtering Type: It specifies the filtering type of the access rule. The options are IP Filtering, URL Filtering, and Keyword Filtering. Here please select IP Filtering. Protocol: It specifies the protocol to which the access rule applies. The options are 1 (ICMP), 6 (TCP), 17 (UDP), 51 (AH), and All. Select All if you want to the rule to apply to all protocols. Apendix C provides the list of common IP protocols and their protocol numbers. Predefined Service: It provides some of the most common services and their associated port numbers. Select All if you want to the rule to apply to all ports 1‐65535). Apendix D provides the list of common services and their port numbers. Dest Port Start and Dest Port End: They specify a range of destination ports to which the access rule applies. To specify a single port, enter the port number in both text boxes. The port number must be between 1 and 65535. Dest IP Start and Dest IP End: They specify a range of destination IP addresses to which the access rule applies. To specify a single IP addres, enter the port number in both text boxes. Source Port Start and Source Port End: They specify a range of source ports to which the access rule applies. To specify a single port, enter the port number in both text boxes. The port number must be between 1 and 65535. Schedule: It allows you to specify when the access rule is in effect. By default, the access rule is always in effect. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Access Rule List. Note By default, the Source IP Range is from 0.0.0.0 to 0.0.0.0, which means the access rule applies to all computers on the LAN no matter what IP address they might have. In this case, the Wireless Router will check any packets initiated from the LAN computers, so the system performance will be degraded to some extent. Therefore, you’d better change the default value. http://www.uttglobal.com Page 148 UTT Technologies 9.1.3.2 Chapter 9 Firewall Access Rule Settings - URL Filtering Figure 9- 5 Access Rule Settings - URL Filtering The parameters Name, Source IP Range, Priority and Action, and Schedule related parameters are the same as those of the IP Filtering access rule, please refer to Section 9.1.3.1 Access Rule Settings - IP Filtering for detailed information. Filtering Type: It specifies the filtering type of the access rule. The options are IP Filtering, URL Filtering, and Keyword Filtering. Here please select URL Filtering. Filtering Content: It specifies the URL keyword that you want to filter. The access rule is used to filter any web pages whose URL contains the specified keyword. You can enter part of a URL to match all URLs that contain that string, or you can enter the full URL to match only the specified URL. Here we give two examples. Example 1: If you enter yahoo, it will match any URL that contains yahoo, such as http://www.yahoo.com, http://news.yahoo.com/, http://cn.yahoo.com/, and so on. Example 2: If you enter news.yahoo.com, it will match http://news.yahoo.com/ and all URLs that start with news.yahoo.com, such as http://news.yahoo.com/education/. However, it won’t match http://www.yahoo.com and http://cn.yahoo.com/. http://www.uttglobal.com Page 149 UTT Technologies Chapter 9 Firewall Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Access Rule List. Note 1. The URL keyword that you enter in the Filtering Content text box is case insensitive, and it needn’t include http://. 2. The URL filtering rules cannot be used to control users’ access to other services through a web browser. For example, to control users’ access to ftp://ftp.utt.com.cn, you need to configure an IP filtering rule to allow or deny ftp service. 9.1.3.3 Access Rule Settings - Keyword Filtering Figure 9- 6 Access Rule Settings - Keyword Filtering The parameters Name, Source IP Range, Priority and Action, and Schedule related parameters are the same as those of the IP Filtering access rule, please refer to Section http://www.uttglobal.com Page 150 UTT Technologies Chapter 9 Firewall 9.1.3.1 Access Rule Settings - IP Filtering for detailed information. Filtering Type: It specifies the filtering type of the access rule. The options are IP Filtering, URL Filtering, and Keyword Filtering. Here please select Keyword Filtering. Filtering Content: It specifies the keyword that you want to block. The access rule is used to block users from submitting any information that contains the specified keyword to any web page. The Wireless Router supports both Chinese and English keyword filtering. A keyword must be a single word without white space. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Access Rule List. Note 1. The keyword filtering rules only support the Deny action. 2. The English keyword is case sensitive. 9.1.4 Configuration Examples for Access Rule 9.1.4.1 Example 1 - Only Allow a Group of Users to Access Certain Services In this example, we want to allow a group of users (IP address range: 192.168.1.10-192.168.1.20) to access web service, and block them from accessing any other services. We need to create three access rules to meet the requirements: ● Access rule 1: It allows those users to access DNS service. And it is used to ensure that the domain names can be resolved successfully, thus the users can access web service properly. ● Access rule 2: It allows those users to access Web service. ● Access rule 3: It blocks those users from accessing any Internet services. Therein, both rule 1 and rule 2 must have a higher priority than rule 3. Otherwise, rule 3 will be matched first. This will make those users unable to access web service. http://www.uttglobal.com Page 151 UTT Technologies Chapter 9 Firewall Figure 9- 7 Access Rule List - Example 1 Figure 9- 8 Access Rule List - Example 1 (Continue) Figure 9- 9 Access Rule List - Example 1 (Continue) 9.1.4.2 Example 2 - Only Block a Group of Users from Accessing Certain Services In this example, we want to block a group of users (IP address range: 192.168.1.80 -192.168.1.100) from accessing www.bbc.com and www.cnn.com, and allow them to http://www.uttglobal.com Page 152 UTT Technologies Chapter 9 Firewall access any other services. We need to create three access rules to meet the requirements: ● Access rule 1: It blocks those users from accessing www.bbc.com. ● Access rule 2: It blocks those users from accessing www.cnn.com. ● Access rule 3: It allows those users to access all Internet services. Therein, both rule 1 and rule 2 must have a higher priority than rule 3. Otherwise, rule 3 will be matched first. This will make those users unable to access www.bbc.com and www.cnn.com. Figure 9- 10 Access Rule List - Example 2 Figure 9- 11 Access Rule List - Example 2 (Continue) http://www.uttglobal.com Page 153 UTT Technologies Chapter 9 Firewall Figure 9- 12 Access Rule List - Example 2 (Continue) 9.1.4.3 Example 3 - Control Internet Behaviors of a Group of Users based on Schedule In this example, we want to only allow a group of users (IP address range: 192.168.1.150 -192.168.1.200) to access web service during business hours (Monday to Friday, 9:00 to 17:00), and block them from accessing any Internet services during rest periods. We need to create three access rules to meet the requirements: ● Access rule 1: It allows those users to access DNS service during business hours. And it is used to ensure that the domain names can be resolved successfully, thus the users can access web service properly. ● Access rule 2: It allows those users to access web service during business hours. ● Access rule 3: It blocks those users from accessing any Internet services. Therein, both rule 1 and rule 2 must have a higher priority than rule 3. Otherwise, rule 3 will be matched first. This will make those users unable to access web service during business hours. Figure 9- 13 Access Rule List - Example 3 http://www.uttglobal.com Page 154 UTT Technologies Chapter 9 Firewall Figure 9- 14 Access Rule List - Example 3 (Continue) Figure 9- 15 Access Rule List - Example 3 (Continue) 9.1.4.4 Example 4 - Control Internet Behaviors of a Single User You can assign a range of contiguous IP addresses to the users that have the same Internet access privileges, and then create access rules for the user group. However, if one or several users in the group have special or new Internet needs, you need to individually create access rules for a single user. In this example, we want to allow a group of users (IP address range: 192.168.1.10-192.168.1.120) to access web service, and block them from accessing all other services. The exception is that the user with IP address 192.168.1.16 is allowed to access all Internet services during business hours (Monday to Friday, 9:00 to 17:00). We need to create four access rules to meet the requirements: ● Access rule 1: It allows the user group to access DNS service. ● Access rule 2: It allows the user group to access web service. ● Access rule 3: It allows the user with IP address 192.168.1.16 to access all Internet services during business hours. ● Access rule 4: It blocks the user group from accessing any Internet services. Therein, rule 4 must have a lower priority than the other three rules. http://www.uttglobal.com Page 155 UTT Technologies Chapter 9 Firewall Figure 9- 16 Access Rule List - Example 4 Figure 9- 17 Access Rule List - Example 4 (Continue) Figure 9- 18 Access Rule List - Example 4 (Continue) http://www.uttglobal.com Page 156 UTT Technologies 9.2 Chapter 9 Firewall Domain Filtering This section describes the Firewall > Domain Filtering page. The domain filtering feature allows you to block access to unwanted websites in your organization. 9.2.1 Domain Filtering Global Settings Figure 9- 19 Domain Filtering Global Settings Enable Domain Filtering: It allows you to enable or disable domain filtering. If you select the check box to enable domain filtering, the domain names in the Domain Name List will take effect. Else, they will be of no effect. Save: Click to save your changes. 9.2.2 Domain Filtering Settings Figure 9- 20 Domain Filtering Settings Domain Name: It specifies the domain name of the website that you want to block. Domain Name List: It displays the domain names that you have added. The http://www.uttglobal.com Page 157 UTT Technologies Chapter 9 Firewall Wireless Router will block the LAN users from accessing these domain names. Add a Domain Name: To add a domain name to the Domain Name List, enter the domain name of the website that you want to block in the Domain Name text box, and then click the Add button. You can add up to 100 domain names in the list. Delete: To delete one or more domain names, select them in the Domain Name List, and then click the Delete button. Delete All: To delete all the domain names in the Domain Name List at a time, directly click the Delete All button. Note 1. The Wireless Router supports up to 100 domain names. 2. The matching rule of domain filtering is whole words matching, that is, only a domain name matches the whole words of the domain name in the Domain Name List, the Wireless Router will block access to it. 3. You can use the wildcard "*" in a domain name to filter multiple URLs. For example, if you add www.163.* into the Domain Name List, then all the URLs that begin withwww.163. will be blocked. http://www.uttglobal.com Page 158 UTT Technologies 9.3 Chapter 9 Firewall Attack Prevention This section describes the Firewall > Attack Prevention page. Figure 9- 21 Attack Prevention Settings Enable DDoS Prevention: It is used to enable or disable DDoS prevention. If you select the check box to enable this feature, it will effectively protect the Wireless Router against popular DoS/DDoS attacks. Enable Blaster Prevention It is used to enable or disable blaster virus prevention. If you select the check box to enable this feature, it will effectively protect the Wireless Router against popular virus attacks such as Blaster and Sasser. Block WAN Ping: It is used to block or allow WAN ping. If you select the check box to block WAN ping, all the WAN interfaces of the Wireless Router will not respond to ping requests from the Internet. Save: Click to save your changes. http://www.uttglobal.com Page 159 UTT Technologies Chapter 10 VPN Chapter 10 VPN The Wireless Router supports PPTP client feature. PPTP is a VPN tunneling protocol which encapsulates PPP frames in IP packets for transmission over a public IP network such as the Internet. PPTP is based on client/server model. The PPTP client initiates a PPTP connection to the server, while the PPTP server accepts the incoming PPTP connection from the client. PPTP is often used to implement remote access VPNs over an IP network (such as a broadband network), to extend the reach of your Intranet. 10.1 Introduction to PPTP Implementation PPTP is used to encapsulate PPP frames in IP packets for transmission over a public IP network such as the Internet. The PPTP client or server encapsulates the original user packets inside PPP frames before sending them through a PPTP tunnel over the Internet; while the peer performs decapsulation firstly, and then forward the original packets to their intended destinations. As shown in Figure 10- 1, the typical application of PPTP is that some laptop or desktop computers act as the PPTP client devices, that is, some employees in the remote branch offices or mobile users (traveling employees, telecommuters, etc.) use the Windows built-in PPTP client software to initiate PPTP connections; the PPTP server deployed at the head office accepts the PPTP incoming connections from the clients. After a PPTP tunnel has been established between the PPTP client and server, the PPTP server will receive the PPTP packets from the client firstly, and then perform decapsulation, lastly forward the original packets to their intended destinations. Figure 10- 1 Typical Application of PPTP http://www.uttglobal.com Page 160 UTT Technologies Chapter 10 VPN 10.1.1 Protocol Overview There are two parallel components of PPTP: 1. A PPTP Control Connection It is a logical connection representing the PPTP tunnel that must be created, maintained, and terminated through a series of PPTP messages. The PPTP control connection traffic uses a dynamically allocated TCP port on the PPTP client and the registered TCP port 1723 on the PPTP server. 2. GRE encapsulation for data When data is sent through the PPTP tunnel, PPP frames are encapsulated with a Generic Routing Encapsulation (GRE) header, which includes information that identifies the specific PPTP tunnel for the data packet. GRE is described in RFC 1701. The use of a separate GRE mechanism for PPTP data encapsulation has an interesting side effect for NAT devices. Most NAT devices can translate TCP-based packets for PPTP tunnel maintenance. However, many NAT devices or firewalls cannot handle GRE packets, thus the PPTP data packets with the GRE header cannot pass them. The UTT products support NAT traversal for PPTP tunnels. In order for the PPTP tunnel to be established and function properly, the following basic conditions are necessary: 1) The PPTP client and server should have IP-route reachability between them. 2) The firewalls between the two endpoints of the tunnel should be configured to open TCP port 1723 and IP protocol 47 (GRE) to allow PPTP traffic. http://www.uttglobal.com Page 161 UTT Technologies Chapter 10 VPN 10.1.2 Packet Flow - PPTP Client Figure 10- 2 PPTP Packet Flow As shown in Figure 10- 2, during the PPTP tunnel establishment and data transmission processes, the packet flow through the PPTP client can be summarized as follows: ¾ After the PPTP tunnel parameters are configured properly, the PPTP client automatically creates a virtual interface for the new tunnel to listen for user data ((1) in Figure 10- 2). ¾ The PPTP client’s virtual interface listens for the user packets destined for the remote LAN ((3) in Figure 10- 2). ¾ The PPTP client initiates the PPTP tunnel setup request ((4) in Figure 10- 2). ¾ The PPTP client receives the user authentication request from the PPTP server, and then responds to the request ((7) in Figure 10- 2). ¾ The PPTP client negotiates with the PPTP server to establish a PPTP tunnel ((8) in Figure 10- 2). ¾ The PPTP client receives the user data (i.e., original packets) and encapsulates them in the PPP frames ((9) in Figure 10- 2). http://www.uttglobal.com Page 162 UTT Technologies Chapter 10 VPN ¾ The PPTP client sends the PPTP packets to the PPTP server through the PPTP tunnel ((10) in Figure 10- 2). ¾ The PPTP client receives the PPTP packets from the PPTP server, and performs decapsulation ((15) in Figure 10- 2). ¾ The PPTP client forwards the user data (i.e., original packets) to their intend destinations ((16) in Figure 10- 2). ¾ The PPTP tunnel is terminated manually by the user or automatically due to no activity for some time ((17) in Figure 10- 2). ¾ After the PPTP tunnel is terminated, the PPTP client’s virtual interface returns to the listening state ((18) in Figure 10- 2). 10.1.3 User Authentication PPTP provides user authentication to authenticate the user attempting the PPTP connection by PPP-based user authentication modes such as PAP, CHAP, etc. Note that the two endpoints of a PPTP tunnel should use the same authentication mode. On the Wireless Router, it allows you to choose PAP, CHAP or Either as the user authentication mode for a PPTP client. It also allows you to choose None, which means that no authentication is performed. By default, the authentication mode is Either, which means that the PPTP client will automatically negotiate it with peer. 10.1.4 Data Confidentiality PPTP doesn’t provide any data encryption service by itself; it uses PPP compression and encryption mechanisms (such as CCP, PPE, etc.) to provide data confidentiality. 10.1.5 MTU and Fragmentation The Wireless Router will fragment an IP packet if it exceeds the MTU of the outbound physical interface. For example, a standard Ethernet-type interface has a MTU of 1500 bytes, thus the Wireless Router will fragment a packet exceeding 1500 bytes in order to transmit it over the Ethernet interface. With PPTP, the addition of PPTP headers may cause IP fragmentation. When an IP packet is nearly the size of MTU of the outbound physical interface (for example, ERP or FTP packets are often relatively large), and it is further encapsulated with PPTP headers, http://www.uttglobal.com Page 163 UTT Technologies Chapter 10 VPN the encapsulated packet is likely to exceed the MTU of the outbound physical interface. This causes the encapsulated packet to be fragmented before transmission, and the PPTP receiver is responsible for reassembling the fragments back into the original encapsulated packet before decapsulation. More specifically, the receiver cannot perform reassembly until the last fragment is received; and if one fragment is lost, the entire original encapsulated packet must be resent, and it will also be fragmented. Data fragmentation and reassembly can seriously degrade the system performance, so it is highly necessary to avoid fragmentation and reassembly in the PPTP switching path. To solve this problem, PPTP allows the client and server to negotiate PPP MRU/MTU during PPTP tunnel establishment. In addition, on the Wireless Router, you can adjust the global PPTP tunnel MTU (i.e., tunnelmtu) to minimize the fragmentation: if an IP packet exceeds the specified MTU, it will be fragmented by the original computer before transmission. The following two examples describe how to calculate PPTP tunnel MTU. Figure 10- 3 illustrates the format of the PPTP packet to be sent over a static IP or DHCP Internet connection; and Figure 10- 4 illustrates the format of the PPTP packet to be sent over a PPPoE Internet connection. Therein, the sizes of standard Ethernet MTU and each encapsulation header are as follows: Ethernet MTU 1500 Bytes IP Header 20 Bytes GRE Header 8 Bytes PPTP Header 30 Bytes (at most) PPPoE Header 8 Bytes Figure 10- 3 PPTP Packet Format - Static IP/DHCP Internet Connection Figure 10- 4 PPTP Packet Format - PPPoE Internet Connection Therefore, to avoid fragmentation and reassembly in the PPTP switching path, the PPTP tunnel MTU should be smaller or equal to 1442 bytes (1500-20-8-30=1442) when the PPTP packets are sent over a static IP or DHCP Internet connection (see Figure 10- 3); and it must be smaller or equal to 1434 bytes (1442-8=1434) when the PPTP packets are sent over a PPPoE Internet connection (see Figure 10- 4). On the Wireless Router, the PPTP tunnel MTU is 1400 bytes by default. In most cases, please leave the default value because it can meet most application needs. http://www.uttglobal.com Page 164 UTT Technologies Chapter 10 VPN 10.1.6 PPTP Sessions Limit The Wireless Router supports two concurrent PPTP sessions (i.e., tunnels) at most. If there are already two active PPTP sessions on the Wireless Router, the system will reject any request for creating a new PPTP session and prompt you. 10.2 PPTP Client Settings Figure 10- 5 PPTP Client Settings Enable: It allows you to enable or disable the PPTP client entry. The default value is checked, which means the PPTP client entry is in effect. If you want to disable the entry temporarily instead of deleting it, please clear the check box. Tunnel Name: It specifies a unique name of the PPTP tunnel. It is used to identify multiple tunnels. User Name: It specifies a unique user name of the PPTP/L2TP client. It must be between 1 and 31 characters long. The remote PPTP/L2TP server will use the User Name and Password to identify the client. Password: It specifies a password of the PPTP/L2TP client. PPP Authentication: It specifies the PPP authentication mode by which the remote PPTP server authenticates the PPTP client. The available options are None, PAP, CHAP and Either. • PAP: Password Authentication Protocol. • CHAP: Challenge Handshake Authentication Protocol. http://www.uttglobal.com Page 165 UTT Technologies Chapter 10 VPN • None: It means that no authentication is performed. • Either: It means that the Wireless Router will automatically negotiate it with the remote VPN appliance. Remote Subnet IP: It specifies the subnet IP address of the remote network. In most cases, you may enter the IP address of the remote VPN appliance’s LAN interface. Remote Subnet Mask: It specifies the subnet mask of the remote network. Tunnel Server IP/Domain Name: It specifies the IP address or domain name of the remote PPTP/L2TP server. In most cases, you may enter the WAN IP address or domain name of the remote VPN appliance. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the PPTP Client List. 10.3 PPTP Client List After you have configured a PPTP/L2TP client entry, you can view its configuration and status in the PPTP Client List, see Figure 10- 6. Figure 10- 6 PPTP Client List Figure 10- 7 PPTP Client List (Continue) After the Wireless Router has successfully established a PPTP tunnel with the remote http://www.uttglobal.com Page 166 UTT Technologies Chapter 10 VPN PPTP server, you will see that the tunnel’s Status changes from Disconnected to Connected, the Up Time timer starts, and the Out Bytes and In Bytes will go on increasing as long as there is some network traffic being passed through the PPTP tunnel. 10.4 Configuration Example for PPTP Client Figure 10- 8 Network Topology - The Wireless Router Acts as a PPTP client In this example, a company’s head office is located in Washington, and its branch office is located in New York. Now the company wants the head office and branch office to securely communicate with each other over the Internet. As shown in Figure 10- 8, we will use PPTP to establish a VPN tunnel, deploy a AC750W Wireless Router acting as a PPTP client at the branch office, and another VPN appliance (a UTT VPN gateway is recommended) acting as a PPTP server at the head office. The IP addresses are as follows: The AC750W (PPTP Client) at the branch office: LAN Subnet: 192.168.1.0/255.255.255.0 LAN Interface IP Address: 192.168.1.1/255.255.255.0 The VPN appliance (PPTP Server) at the head office: LAN Subnet: 192.168.123.0/255.255.255.0 LAN Interface IP Address: 192.168.123.1/255.255.255.0 http://www.uttglobal.com Page 167 UTT Technologies Chapter 10 VPN WAN Interface IP Address: 200.200.202.123/255.255.255.0 To configure the AC750W as a PPTP client, follow these steps: Step 1 Go to the VPN > PPTP Client page, and click the Add button to go to the PPTP Client Settings page. Step 2 Make the following settings. Enable Select Tunnel Name To_HQ User Name VPN_test Password vpntest PPP Authentication Either Remote Subnet IP 192.168.123.1 Remote Subnet Mask 255.255.255.0 Tunnel Server IP/Domain Name 200.200.202.123 Step 3 Click the Save button. http://www.uttglobal.com Page 168 UTT Technologies Chapter 11 System Administration Chapter 11System Administration This chapter describes how to perform maintenance activities on the Wireless Router, including administrator settings, system time settings, configuration backup and restore, firmware upgrade, remote management, and scheduled task settings. 11.1 Administrator This section describes the Administration > Administrator page, where you can add, view, modify and delete the administrator accounts. 11.1.1 Administrator List Figure 11- 1 Administrator List Add an Administrator Account: To add a new administrator account, first click the Add button to go to the setup page, next configure it, lastly click the Save button. View Administrator Account(s): When you have configured one or more administrator accounts, you can view them in the Administrator List. Modify an Administrator Account: To modify a configured administrator account, click its User Name hyperlink or icon, the related information will be displayed in the setup page. Then modify it, and click the Save button. Delete Administrator Account(s): There are three ways to delete administrator account(s). http://www.uttglobal.com Page 169 UTT Technologies Chapter 11 System Administration 1. To delete an administrator account, directly click its icon. 2. To delete more than one administrator account at a time, select the leftmost check boxes of the administrator accounts that you want to delete, and then click the Delete button. 3. To delete all the administrator accounts at a time, directly click the Delete All button. Note You can change the default administrator password, but you cannot change its user name or delete it. 11.1.2 Administrator Settings Figure 11- 2 Administrator Settings User Name: It specifies a unique login name (case sensitive) of the administrator. Password: It specifies a login password (case sensitive) of the administrator. This password will be required to login to the Wireless Router in the future. Confirm Password: You should re-enter the password. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Administrator List. Note To ensure security, it is strongly recommended that you change the default administrator password, remember your new password and keep it safe. Once changed, you should use the new password to login to the Wireless Router in the future. http://www.uttglobal.com Page 170 UTT Technologies Chapter 11 System Administration 11.2 System Time This section describes the Administration > Time page, see Figure 11- 3. To ensure that the time-related features (e.g., DDNS, Schedule, Access Control, etc.) work well, you should synchronize the system clock. You can manually configure the system time or enable SNTP (Synchronize with SNTP Server) to automatically synchronize the system time from a designated SNTP server on the Internet. It is suggested that you choose SNTP to automatically synchronize time in most cases. Figure 11- 3 System Time Settings Current System Time: It displays the Wireless Router’s current date (YYYY-MM-DD) and time (HH:MM:SS). Time Zone: It specifies the time zone for your local time. To ensure that SNTP operates properly, you must select the correct time zone. Set Time Manually: If you want to set the date (YYYY-MM-DD) and time (HH:MM:SS) for the Wireless Router manually, select this radio button. Synchronize with SNTP Server: If you want the Wireless Router to automatically synchronize the system clock from a designated SNTP server on the Internet, select this radio button. http://www.uttglobal.com Page 171 UTT Technologies Chapter 11 System Administration SNTP Server 1 IP Address ~ SNTP Server 3 IP Address: It allows you to configure up to three SNTP servers on the Wireless Router. The Server 1 is the primary server (the default is 192.43.244.18), and the Server 2 is the first backup server (the default is 129.6.15.28), and the Server 3 is the second backup server (the default is 0.0.0.0). Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note For more information about SNTP, or to find an SNTP server with which you can synchronize the system clock, please refer to http://www.ntp.org. http://www.uttglobal.com Page 172 UTT Technologies Chapter 11 System Administration 11.3 Configuration This section describes the Administration > Configuration page, where you can backup the current configuration file to the local PC, restore your previous configuration using the backup configuration file, and reset the Wireless Router to factory default settings. 11.3.1 Backup Configuration Figure 11- 4 Backup Configuration Backup: Click to export and save the Wireless Router’s current configuration to a text file on your local computer. 11.3.2 Restore Configuration Figure 11- 5 Restore Configuration Reset to Factory Defaults before Restore: If you select this check box, it will reset the Wireless Router to factory default settings before importing the configuration file; else import the file directly. Select a Configuration File: Click the Browse button to choose an appropriate configuration file or enter the file path and name in the text box. Restore: Click to import the selected configuration file. It will overwrite the current configuration on the Wireless Router with the new configuration. Note To avoid any unexpected error, do not power off the Wireless Router during importing the configuration file. http://www.uttglobal.com Page 173 UTT Technologies Chapter 11 System Administration 11.3.3 Reset to Factory Defaults Figure 11- 6 Reset to Factory Defaults Reset: To reset the Wireless Router to factory default settings, click the Reset button, and then restart the Wireless Router. Note 1. After performing the reset operation, you must manually restart the Wireless Router in order for the default settings to take effect. 2. The reset operation will clear all of the Wireless Router’s custom settings. It is strongly recommended that you backup the current configuration before resetting. 3. The default administrator user name and password both are admin (case sensitive). The default LAN IP address is 192.168.1.1 with a subnet mask of 255.255.255.0. http://www.uttglobal.com Page 174 UTT Technologies Chapter 11 System Administration 11.4 Firmware Upgrade This section describes the Administration > Firmware page, where you can view the current firmware version information, download the latest firmware from the website of UTT Technologies Co., Ltd., and upgrade the firmware. Figure 11- 7 Firmware Upgrade Current Firmware Version: It displays the version of the current firmware installed on the Wireless Router. To upgrade the Wireless Router’s firmware, follow these steps: Step 1 Downloading the latest firmware Click the Download Firmware hyperlink to download the latest firmware from the website of UTT Technologies Co., Ltd. Note 1. Please select the appropriate firmware file according to the product model. 2. It is recommended that you go to the Administration > Configuration to backup the Wireless Router’s current configuration before upgrade. Step 2 Choosing the firmware Click the Browse button to choose the firmware file you want to upgrade or enter the file path and name in the Select a Firmware File text box. Restart after Upgrade: After the upgrade is complete, the Wireless Router will automatically restart in order for the new firmware to take effect. http://www.uttglobal.com Page 175 UTT Technologies Step 3 Chapter 11 System Administration Renewing the firmware Click the Upgrade button to renew the Wireless Router’s firmware. If you click the Upgrade button, you will be prompted to confirm the upgrade (see Figure 11- 8). Then you can click OK to upgrade the firmware and restart the Wireless Router, or click Cancel to cancel the operation. Figure 11- 8 Prompt Dialog Box - Firmware Upgrade Note 1. It is strongly recommended that you upgrade the firmware when the Wireless Router is under light load. 2. If you upgrade firmware timely, the Wireless Router will have more functionality and better performance. The right upgrade will not change the Wireless Router’s current settings. 3. To avoid any unexpected error or unrecoverable hardware damage, do not power off the Wireless Router during upgrading. 4. After the upgrade is complete, the Wireless Router will automatically restart in order for the new firmware to take effect, without human intervention. http://www.uttglobal.com Page 176 UTT Technologies Chapter 11 System Administration 11.5 Remote Access This section describes the Administration > Remote Access page. In this page, you can enable HTTP remote management, which allows you to access the Wireless Router’s Web UI from anywhere over the Internet. Figure 11- 9 Remote Access Settings Enable HTTP: It allows you to enable or disable HTTP remote management. Select this check box to enable HTTP remote management. To access the Wireless Router’s Web UI over the Internet, you should enter http:// and the Wireless Router's WAN IP address, followed by a colon and the port number. For example, if the WAN IP address is 218.21.31.3 and port number is 8081, please enter http://218.21.31.3:8081 in your browser’s address bar. Remote Management Port: It specifies the port number that will be open to outside access. The default value is 8081. Interface: It specifies the interface on which the HTTP remote management is enabled. Here you can select only one interface. To enable HTTP remote management on multiple interfaces at the same time, you need to go to the Advanced > NAT&DMZ > Port Forwarding page to create port forwarding entry(s) for the other interface(s). Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Note 1. To ensure security, it is strongly recommended that you don’t enable HTTP remote management unless necessary. 2. After you enable the HTTP remote management, the system will automatically create a port forwarding entry whose name is admin. You can go to the Advanced > NAT&DMZ > Port Forwarding page to view it in the Port Forwarding List. http://www.uttglobal.com Page 177 UTT Technologies Chapter 11 System Administration 11.6 Scheduled Task This section describes the Administration > Scheduled Task page, where you can create and view the scheduled tasks. With scheduled tasks, the Wireless Router can periodically start each task at the time you specify. 11.6.1 Scheduled Task Settings Figure 11- 10 Scheduled Task Settings Task Name: It specifies a unique name of the task. Repeat: It specifies how often the Wireless Router will perform the task. The available options are Weekly, Daily, Hourly, Minutely. Start Time: It specifies the time at which the Wireless Router will start the task. Its settings depend on the value of Repeat. Task Content: It specifies the content of the task. Now the Wireless Router only provide one option: Restart, which means that the Wireless Router will restart itself periodically. Save: Click to save your changes. Cancel: Click to revert to the last saved settings. Back: Click to go back to the Scheduled Task List. http://www.uttglobal.com Page 178 UTT Technologies Chapter 11 System Administration 11.6.2 Scheduled Task List Figure 11- 11 Scheduled Task List Figure 11- 12 Scheduled Task List (Continue) Add a Scheduled Task: To add a new scheduled task, first click the Add button to go to the Scheduled Task Settings page, next configure it, lastly click the Save button. View Scheduled Task(s): When you have configured one or more scheduled tasks, you can view them in the Scheduled Task List. Modify a Scheduled Task: To modify a configured scheduled task, click its User icon, the related information will be displayed in the setup Name hyperlink or page. Then modify it, and click the Save button. Delete Scheduled Task(s): There are three ways to delete scheduled task(s). 1. To delete a scheduled task, directly click its 2. To delete more than one scheduled task at a time, select the leftmost check boxes of the tasks that you want to delete, and then click the Delete button. 3. To delete all the scheduled tasks at a time, directly click the Delete All button. http://www.uttglobal.com icon. Page 179 UTT Technologies Chapter 12 Status Chapter 12 Status This chapter describes how to view the wired status and wireless status, the traffic statistics for each interface, and system information including the current system time, system up time, system resources usage information, firmware version, and system log. 12.1 System Status This section describes the Status > System Status page, which include Wired Status and Wireless Status. Figure 12- 1 System Status - Wired Status http://www.uttglobal.com Page 180 UTT Technologies Chapter 12 Status Figure 12- 2 System Status - Wireless Status ● Wired Status: Refer to Section 4.2.1 Wired Status for detailed information. ● Wireless Status: Refer to Section 4.2.2 Wireless Status for detailed information. Note The Wired Status page and Wireless Status page only display the status information of the interfaces that have been configured. http://www.uttglobal.com Page 181 UTT Technologies Chapter 12 Status 12.2 Traffic Statistics This section describes the ingress and egress traffic statistics for each interface. Figure 12- 3 Traffic Statistics WAN1, WAN2, 3G, APClient and LAN: You can view the traffic statistics for each interface, including the number of bytes received and transmitted, and the number of packets received and transmitted. Clear: Click to clear all traffic statistics. Refresh: Click to view the latest traffic statistics. Back: Click to go back to the Start > Interface Traffic page. Note This page only displays the traffic statistics for the interfaces that have been configured. http://www.uttglobal.com Page 182 UTT Technologies Chapter 12 Status 12.3 System Information This section describes the Status > System Info page, which includes the current system time, system up time, system resources usage information, SN, firmware version, and system log. System information can help you identify and diagnose the source of current system problems, or help you predict potential system problems. Figure 12- 4 System Information Current System Time: It displays the Wireless Router’s current date (YYYY-MM-DD) and time (HH:MM:SS). System Up Time: It displays the elapsed time (in days, hours, minutes and seconds) since the Wireless Router was last started. CPU: It displays the current CPU usage. Memory: It displays the current memory usage. http://www.uttglobal.com Page 183 UTT Technologies Chapter 12 Status SN: It displays the internal serial number of the Wireless Router, which may be different from the SN found on the label at the bottom of the Wireless Router. Version: It displays the version of the current firmware installed on the Wireless Router. System Log: It records the events that occur in the system, such as, system startup, wireless enabled, and so on. Refresh: Click to view the latest system information . Note The CPU and Memory are displayed as a status bar and percentage value. The color of the status bar indicates the usage percentage for each resource. ● When the percentage is below 1%, the bar is blank. ● When the percentage is between 1% and 50% (below 50%), the color is green. ● When the percentage is between 50% and 70% (below 70%), the color is orange. ● When the percentage is equal to or above 70%, the color is red. http://www.uttglobal.com Page 184 UTT Technologies Chapter 13 Support Chapter 13 Support The Support page provides links to the UTTCare, Forum, Knowledge and Reservation page of the UTT website, which can help you quickly learn the UTT Technologies service system and enjoy the most intimate and professional services. Figure 13- 1 Support As shown in Figure 13- 1, it allows you to click each Learn More hyperlink to directly open the corresponding page of the UTT website. ● UTTCare: Link to the support page of the UTT website to download product data and get help. ● Forum: Link to the forum page of the UTT website to participate in product discussions. ● Knowledge: Link to the knowledge base page of the UTT website to learn more about our products and how to use them. ● Reservation: Link to the booking customer service page of the UTT website to request a booking. http://www.uttglobal.com Page 185 UTT Technologies Appendix A How to configure your PC Appendix A How to Configure Your PC This appendix describes how to configure TCP/IP settings on a Windows XP-based computer. There are two ways to configure TCP/IP settings: manually configuring TCP/IP settings, and automatically configuring TCP/IP settings with DHCP. The following describes the two ways respectively. ● Method One: Manually Configuring TCP/IP To configure the TCP/IP protocol manually, follow these steps: 1. On the Windows taskbar, click Start > Settings > Control Panel. 2. Double-click the Network Connections icon, right-click the Local Area Connection icon and select Properties. On the General tab (see Figure A-0-1), in the This connection uses the following items box, click the Internet Protocol (TCP/IP) item, and then click the Properties button. http://www.uttglobal.com Page 186 UTT Technologies Appendix A How to configure your PC Figure A- 0- 1 Local Area Connection Properties 3. In the Internet Protocol (TCP/IP) Properties dialog box (see Figure A-0-2), select the Use the following IP address option，enter 192.168.1.x (x is between 2 and 254, including 2 and 253) in the IP address text box, 255.255.255.0 in the Subnet mask text box, and 192.168.1.1 in the Default gateway text box. Figure A-0- 2 Internet Protocol (TCP/IP) Properties 4. Select the Use the following DNS server address option, enter the primary DNS server IP address in the Preferred DNS server text box, and enter the secondary DNS server IP address in the Alternate DNS server text box (optional). A DNS query is sent to the primary DNS server at first. If the primary DNS server is unable to service the query, the query will be sent to the secondary DNS server. 5. Click the OK button. Now you have finished configuring the TCP/IP settings. ● Method Two: Automatically Configuring TCP/IP with DHCP 1. To ensure that the PC can obtain an IP address and other TCP/IP parameters automatically from the Wireless Router, you should go to the Network > DHCP Server page to enable DHCP server on the Wireless Router. http://www.uttglobal.com Page 187 UTT Technologies Appendix A How to configure your PC 2. On the Windows taskbar, click Start > Settings > Control Panel. 3. Double-click the Network Connections icon, right-click the Local Area Connection icon and select Properties. On the General tab (see Figure A-0-1), in the This connection uses the following items box, click the Internet Protocol (TCP/IP) item, and then click the Properties button. 4. In the Internet Protocol (TCP/IP) Properties dialog box, on the General tab (see Figure A-0-3), select the Obtain an IP address automatically option and Obtain DNS server address automatically option. Figure A-0- 3 Internet Protocol (TCP/IP) Properties 5. Click the OK button. Now you have finished configuring the TCP/IP settings. Note In Windows XP, the TCP/IP stack is a core component of the operating system. Therefore, you cannot remove TCP/IP in Windows XP. However, if you have network connectivity problems and think its TCP/IP related, you can reinstall TCP/IP on your Windows XP-based computer. To install TCP/IP on top of itself, follow these steps: a. On the Windows taskbar, click Start > Settings > Control Panel. a. Double-click Network Connections, right-click Local Area Connection and select Properties. http://www.uttglobal.com Page 188 UTT Technologies Appendix A How to configure your PC b. Click Install. c. Click Protocol, and then click Add. d. Click Have Disk. e. In the Copy manufacturer's files from box, type System_Drive_Letter:\windows\inf, and then click OK. f. In the list of available protocols, click Internet Protocol (TCP/IP), and then click OK. g. Restart your computer. http://www.uttglobal.com Page 189 UTT Technologies Appendix B FAQ Appendix B FAQ 1. How to connect the Wireless Router to the Internet using PPPoE? Step 1 Set your ADSL Modem to bridge mode (RFC 1483 bridged mode). Step 2 Please make sure that your PPPoE Internet connection use standard dial-type. You may use Windows XP built-in PPPoE dial-in client to test. Step 3 Connect a network cable from the ADSL modem to a WAN port of the Wireless Router, and connect your telephone line to the ADSL modem’s line port. Step 4 Configure the PPPoE Internet connection related parameters in the Start > Setup Wizard or the Network > WAN page. Step 5 If you pay monthly for the Internet connection, you can choose Always On as the Dial Type; else, you can choose On Demand or Manual as the Dial Type, and specify the Idle Timeout to avoid wasting online time due to that you forget to hang up the connection in time. Step 6 If you choose Manual as the Dial Type, you need to dial up manually in the Internet Connection List on the Network > WAN page. Refer to Section 5.1.1.3 for more information. Step 7 After the PPPoE connection is established successfully, you can view its configuration and status information in the Internet Connection List on the Network > WAN page, such as Status (Connected means that the connection is established successfully), the connection’s IP address and Gateway assigned by your ISP, Tx Rate, Rx Rate, and so on, see Figure B-0- 1. Figure B-0- 1 Viewing PPPoE Connection Status in the Internet Connection List http://www.uttglobal.com Page 190 UTT Technologies Appendix B FAQ Figure B-0- 2 Viewing PPPoE Connection Status in the Internet Connection List (Continue) Step 8 2. Configure the local computers according to the steps described in Appendix A How to Configure Your PC. How to connect the Wireless Router to the Internet using Static IP? Step 1 Please make sure the Internet connection is normal. You may use your PC to test. Step 2 Connect a network cable from the network device provided by your ISP to a WAN port of the Wireless Router. Step 3 Configure the Static IP Internet connection related parameters in the Start > Setup Wizard or the Network > WAN page. Step 4 After the Static IP connection is established successfully, you can view its configuration and status information in the Internet Connection List on the Network > WAN page. Step 5 Configure the local computers according to the steps described in Appendix A How to Configure Your PC. 3. How to connect the Wireless Router to the Internet using DHCP? Step 1 Please make sure the Internet connection is normal. You may use your PC to test. Step 2 Connect a network cable from the network device provided by your ISP to a WAN port of the Wireless Router. http://www.uttglobal.com Page 191 UTT Technologies Step 3 Appendix B FAQ Configure the DHCP Internet connection related parameters in the Start > Setup Wizard or the Network > WAN page. Note Some ISPs register the MAC address of your network device (usually a computer) when your account is first opened, and they will only accept traffic from that MAC address. In this case, you need to change the new Router’s MAC address to the registered MAC address. The operation is as follows: Go to the Network > WAN page, select the MAC Address Clone tab, and then change the MAC address of the corresponding interface, lastly click the Save button. Step 4 After the DHCP Internet connection is established successfully, you can go to the view its configuration and status information in the Internet Connection List on the Network > WAN page, such as Status (Connected means the connection is established successfully), the connection’s IP address and Gateway assigned by your ISP, Tx Rate, Rx Rate, and so on, see Figure B- 0- 4. Figure B- 0- 3 Viewing DHCP Connection Status in the Internet Connection List Figure B- 0- 4 Viewing DHCP Connection Status in the Internet Connection List (Continue) Step 6 Configure the local computers according to the steps described in Appendix A How to Configure Your PC. http://www.uttglobal.com Page 192 UTT Technologies 4. Appendix B FAQ How to reset the Wireless Router to factory default settings? Note The reset operation will clear all the custom settings on the Wireless Router, so do it with caution. The following describes how to reset the Wireless Router to factory default settings. There are two cases depending on whether you remember the administrator password or not. ● Case One: Remember the administrator password When you remember the administrator password, you can reset the Wireless Router to factory default settings via the Web UI. The operation is as follows: Go to the Administration > Configuration page, and then click the Reset button in the Reset to Factory Defaults configuration field, lastly manually restart the Wireless Router. ● Case Two: Forget the administrator password If you forget the administrator password, you cannot login to the Wireless Router’s Web UI. However, you can reset the Wireless Router to factory default settings via the RESET button, which is located on the rear panel of the Wireless Router. The operation is as follows: While the Wireless Router is powered on, use a pin or paper clip to press and hold the RESET button for more than 5 seconds, and then release the button. After that, the Wireless Router will restart with factory default settings. http://www.uttglobal.com Page 193 UTT Technologies Appendix C Common IP Protocols Appendix C Common IP Protocols Protocol Name Protocol Number Full Name IP Internet Protocol ICMP Internet Protocol Message Protocol IGMP Internet Group Management GGP Gateway-Gateway Protocol IPINIP IP in IP Tunnel Driver TCP Transmission Control Protocol EGP Exterior Gateway Protocol IGP Interior Gateway Protocol PUP 12 PARC Universal Packet Protocol UDP 17 User Datagram Protocol HMP 20 Host Monitoring Protocol XNS-IDP 22 Xerox NS IDP RDP 27 Reliable Datagram Protocol GRE 47 General Routing Encapsulation ESP 50 Encap Security Payload AH 51 Authentication Header RVD 66 MIT Remote Virtual Disk EIGRP 88 Enhanced Interior Gateway Routing Protocol OSPF 89 Open Shortest Path First http://www.uttglobal.com Page 194 UTT Technologies Appendix D Common Service Ports Appendix D Common Service Ports Service Name Port Protocol echo tcp echo udp discard tcp discard udp systat 11 tcp Active users systat 11 udp Active users daytime 13 tcp daytime 13 udp qotd 17 tcp Quote of the day qotd 17 udp Quote of the day chargen 19 tcp Character generator chargen 19 udp Character generator ftp-data 20 tcp FTP, data ftp 21 tcp FTP. control telnet 23 tcp smtp 25 tcp Simple Mail Transfer Protocol time 37 tcp timserver time 37 udp timserver rlp 39 udp Resource Location Protocol nameserver 42 tcp Host Name Server nameserver 42 udp Host Name Server nicname 43 tcp whois domain 53 tcp Domain Name Server http://www.uttglobal.com Description Page 195 UTT Technologies Appendix D Common Service Ports domain 53 udp Domain Name Server bootps 67 udp Bootstrap Protocol Server bootpc 68 udp Bootstrap Protocol Client tftp 69 udp Trivial File Transfer gopher 70 tcp finger 79 tcp http 80 tcp World Wide Web kerberos 88 tcp Kerberos kerberos 88 udp Kerberos hostname 101 tcp NIC Host Name Server iso-tsap 102 tcp ISO-TSAP Class 0 rtelnet 107 tcp Remote Telnet Service pop2 109 tcp Post Office Protocol - Version 2 pop3 110 tcp Post Office Protocol - Version 3 sunrpc 111 tcp SUN Remote Procedure Call sunrpc 111 udp SUN Remote Procedure Call auth 113 tcp Identification Protocol uucp-path 117 tcp nntp 119 tcp Network News Transfer Protocol ntp 123 udp Network Time Protocol epmap 135 tcp DCE endpoint resolution epmap 135 udp DCE endpoint resolution netbios-ns 137 tcp NETBIOS Name Service netbios-ns 137 udp NETBIOS Name Service netbios-dgm 138 udp NETBIOS Datagram Service netbios-ssn 139 tcp NETBIOS Session Service imap 143 tcp Internet Message Access Protocol pcmail-srv 158 tcp PCMail Server http://www.uttglobal.com Page 196 UTT Technologies Appendix D Common Service Ports snmp 161 udp snmptrap 162 udp SNMP trap print-srv 170 tcp Network PostScript bgp 179 tcp Border Gateway Protocol irc 194 tcp Internet Relay Chat Protocol ipx 213 udp IPX over IP ldap 389 tcp Lightweight Directory Access Protocol https 443 tcp MCom https 443 udp MCom microsoft-ds 445 tcp microsoft-ds 445 udp kpasswd 464 tcp Kerberos (v5) kpasswd 464 udp Kerberos (v5) isakmp 500 udp Internet Key Exchange exec 512 tcp Remote Process Execution biff 512 udp login 513 tcp who 513 udp cmd 514 tcp syslog 514 udp printer 515 tcp talk 517 udp ntalk 518 udp efs 520 tcp Extended File Name Server router 520 udp route routed timed 525 udp tempo 526 tcp courier 530 tcp http://www.uttglobal.com Remote Login Page 197 UTT Technologies Appendix D Common Service Ports conference 531 tcp netnews 532 tcp netwall 533 udp uucp 540 tcp klogin 543 tcp Kerberos login kshell 544 tcp Kerberos remote shell new-rwho 550 udp remotefs 556 tcp rmonitor 560 udp monitor 561 udp ldaps 636 tcp LDAP over TLS/SSL doom 666 tcp Doom Id Software doom 666 udp Doom Id Software kerberos-adm 749 tcp Kerberos administration kerberos-adm 749 udp Kerberos administration kerberos-iv 750 udp Kerberos version IV kpop 1109 tcp Kerberos POP phone 1167 udp Conference calling ms-sql-s 1433 tcp Microsoft-SQL-Server ms-sql-s 1433 udp Microsoft-SQL-Server ms-sql-m 1434 tcp Microsoft-SQL-Monitor ms-sql-m 1434 udp Microsoft-SQL-Monitor wins 1512 tcp Microsoft Windows Internet Name Service wins 1512 udp Microsoft Windows Internet Name Service ingreslock 1524 tcp l2tp 1701 udp Layer Two Tunneling Protocol pptp 1723 tcp Point-to-point tunnelling protocol radius 1812 udp RADIUS authentication protocol http://www.uttglobal.com For emergency broadcasts Page 198 UTT Technologies Appendix D Common Service Ports radacct 1813 udp RADIUS accounting protocol nfsd 2049 udp NFS server knetd 2053 tcp Kerberos de-multiplexor man 9535 tcp Remote Man Server http://www.uttglobal.com Page 199 UTT Technologies Appendix E Figure Index Appendix E Figure Index Figure 0- 1 MAC Address Filtering List...................................................................................................................3 Figure 2- 1 Front Panel of the Wireless Router..................................................................................................13 Figure 2- 2 Back Panel of the Wireless Router.................................................................................................. 14 Figure 3- 1 Entering IP address in the Address Bar.......................................................................................... 20 Figure 3- 2 Login Screen.........................................................................................................................................20 Figure 3- 3 Homepage.............................................................................................................................................21 Figure 3- 4 Running the Setup Wizard.................................................................................................................22 Figure 3- 5 Welcome Page..................................................................................................................................... 23 Figure 3- 6 Setup Wizard - Internet Access Mode............................................................................................. 23 Figure 3- 7 Setup Wizard - WAN1/WAN2 Internet Connection Settings (Static IP).................................... 25 Figure 3- 8 Setup Wizard - WAN1/WAN2 Settings (DHCP).............................................................................26 Figure 3- 9 Setup Wizard - WAN1/WAN2 Settings (PPPoE)........................................................................... 26 Figure 3- 10 Setup Wizard - 3G Internet Connection Settings........................................................................ 27 Figure 3- 11 Setup Wizard - APClient Connection Settings (Disabling Wireless Security)........................28 Figure 3- 12 Setup Wizard - APClient Connection Settings (WEP)................................................................29 Figure 3- 13 Setup Wizard - APClient Connection Settings (WPA-PSK/WAP2-PSK)................................ 31 Figure 3- 14 Setup Wizard - Wireless Settings...................................................................................................32 Figure 4- 1 System Status - Wired Status........................................................................................................... 35 Figure 4- 2 System Status - Wireless Status...................................................................................................... 36 Figure 4- 3 Interface Traffic Chart......................................................................................................................... 37 Figure 4- 4 Traffic Statistics.................................................................................................................................... 38 Figure 4- 5 Restart the Wireless Router.............................................................................................................. 39 Figure 4- 6 Prompt Dialog Box - Restart the Wireless Router.........................................................................39 Figure 5- 1 Internet Connection List..................................................................................................................... 40 Figure 5- 1 Internet Connection List (Continue)................................................................................................. 41 Figure 5- 2 Internet Connection List - PPPoE/3G Connection........................................................................ 44 Figure 5- 3 Internet Connection List - DHCP Connection................................................................................ 44 Figure 5- 4 Network - WAN Settings.....................................................................................................................45 Figure 5- 5 Static IP Internet Connection.............................................................................................................46 Figure 5- 6 DHCP Internet Connection Settings................................................................................................ 47 Figure 5- 7 PPPoE Internet Connection Settings...............................................................................................47 Figure 5- 8 3G Internet Connection Settings...................................................................................................... 49 http://www.uttglobal.com Page 200 UTT Technologies Appendix E Figure Index Figure 5- 9 MAC Address Clone............................................................................................................................50 Figure 5- 10 Global Settings - Full Load Balancing........................................................................................... 53 Figure 5- 11 Global Settings - Partial Load Balancing...................................................................................... 54 Figure 5- 12 Load Balancing List...........................................................................................................................55 Figure 5- 12 Load Balancing List (Continue)...................................................................................................... 55 Figure 5- 13 Connection Detection Settings....................................................................................................... 56 Figure 5- 14 LAN Interface Settings..................................................................................................................... 58 Figure 5- 15 DHCP Server Settings......................................................................................................................59 Figure 5- 16 Static DHCP Settings........................................................................................................................61 Figure 5- 17 Static DHCP List................................................................................................................................ 62 Figure 5- 18 DHCP Client List................................................................................................................................63 Figure 5- 19 DHCP Server Settings - Example.................................................................................................. 66 Figure 5- 20 Adding the Static DHCP Entry 1 - Example................................................................................. 66 Figure 5- 21 Adding the Static DHCP Entry 2 - Example................................................................................. 67 Figure 5- 22 Static DHCP List - Example............................................................................................................ 67 Figure 5- 23 Apply for a DDNS Account from 3322.org.................................................................................... 69 Figure 5- 24 Disabling DDNS Service.................................................................................................................. 69 Figure 5- 25 DDNS Settings Related to 3322.org..............................................................................................70 Figure 5- 26 DDNS Settings Related to iplink.com.cn...................................................................................... 71 Figure 5- 27 DDNS Status...................................................................................................................................... 72 Figure 5- 28 Enable UPnP......................................................................................................................................73 Figure 5- 29 UPnP Port Forwarding List.............................................................................................................. 74 Figure 6- 1 Basic Wireless Settings - AP Mode..................................................................................................76 Figure 6- 2 Basic Wireless Settings - APClient Mode....................................................................................... 78 Figure 6- 3 Basic Wireless Settings - Repeater Mode...................................................................................... 80 Figure 6- 4 Security Settings - WEP Mode..........................................................................................................81 Figure 6- 5 Key Settings Prompt Dialog Box...................................................................................................... 82 Figure 6- 6 Security Settings - TKIP Mode.......................................................................................................... 82 Figure 6- 7 Security Settings - AES Mode........................................................................................................... 82 Figure 6- 8 Basic Wireless Settings - Bridge Mode........................................................................................... 83 Figure 6- 9 Basic Wireless Settings - Lazy Mode.............................................................................................. 84 Figure 6- 10 Configuration Example for WDS - Network Topology................................................................ 85 Figure 6- 11 Configuration Example for WDS - Configuring the Wireless Router A................................... 86 Figure 6- 12 Configuration Example for WDS - Configuring the Wireless Router B...................................87 Figure 6- 13 Configuration Example for WDS - Verifying Connectivity..........................................................87 Figure 6- 14 Disabling Wireless Security.............................................................................................................88 Figure 6- 15 Wireless Security Settings - WEP..................................................................................................89 http://www.uttglobal.com Page 201 UTT Technologies Appendix E Figure Index Figure 6- 16 Wireless Security Settings - WPA/WPA2......................................................................................90 Figure 6- 17 Wireless Security Settings - WPA-PSK/WPA2-PSK...................................................................91 Figure 6- 18 MAC Address Filtering Global Settings.........................................................................................93 Figure 6- 19 MAC Address Filtering List.............................................................................................................. 94 Figure 6- 20 MAC Address Filtering Settings......................................................................................................94 Figure 6- 21 Adding a MAC Address Filtering Entry - Example...................................................................... 96 Figure 6- 22 MAC Address Filtering Global Settings - Example..................................................................... 96 Figure 6- 23 MAC Address Filtering List - Example...........................................................................................96 Figure 6- 24 Advanced Wireless Settings............................................................................................................97 Figure 6- 25 Wireless Client List............................................................................................................................99 Figure 7- 1 Port Forwarding List..........................................................................................................................103 Figure 7- 2 Port Forwarding Settings................................................................................................................. 104 Figure 7- 3 Port Forwarding Settings - Example..............................................................................................106 Figure 7- 4 NAT Rule List..................................................................................................................................... 106 Figure 7- 5 NAT Rule Settings - EasyIP............................................................................................................ 107 Figure 7- 6 NAT Rule Settings - One2One........................................................................................................108 Figure 7- 7 EasyIP NAT Rule Settings - Example............................................................................................110 Figure 7- 8 One2One NAT Rule Settings - Example....................................................................................... 112 Figure 7- 9 DMZ Host Settings............................................................................................................................ 112 Figure 7- 10 IP/MAC Binding Global Settings...................................................................................................115 Figure 7- 11 IP/MAC Binding List........................................................................................................................ 116 Figure 7- 12 Modifying an IP/MAC Binding....................................................................................................... 116 Figure 7- 13 IP/MAC Binding Error Message....................................................................................................117 Figure 7- 14 IP/MAC Binding Settings................................................................................................................117 Figure 7- 15 IP/MAC Binding List - Example 1.................................................................................................120 Figure 7- 16 IP/MAC Binding List - Example 2.................................................................................................121 Figure 7- 17 IP/MAC Binding List - Example 3.................................................................................................121 Figure 7- 18 Static Route List.............................................................................................................................. 122 Figure 7- 19 Static Route Settings......................................................................................................................123 Figure 7- 20 Static Route Settings - Example.................................................................................................. 124 Figure 7- 21 PPPoE Discovery Stage Flows.................................................................................................... 126 Figure 7- 22 PPPoE Server Global Settings.....................................................................................................128 Figure 7- 23 PPPoE Account List........................................................................................................................129 Figure 7- 24 PPPoE Account Settings............................................................................................................... 130 Figure 7- 25 PPPoE User Status List.................................................................................................................131 Figure 8- 1 Global Management Policy Settings..............................................................................................132 Figure 8- 2 Updating Policy..................................................................................................................................133 http://www.uttglobal.com Page 202 UTT Technologies Appendix E Figure Index Figure 8- 3 Global Management Policy - Example..........................................................................................134 Figure 8- 4 Group Management Policy List...................................................................................................... 135 Figure 8- 4 Group Management Policy List (Continue).................................................................................. 135 Figure 8- 5 Group Management Policy Settings........................................................................................... 137 Figure 8- 6 Group Management Policy Example - Policy 1...........................................................................139 Figure 8- 7 Group Management Policy Example - Policy 2...........................................................................140 Figure 8- 8 Group Management Policy Example - Policy 3...........................................................................141 Figure 8- 9 Group Management List – Example.............................................................................................. 141 Figure 8- 9 Group Management List – Example (Continue)..........................................................................142 Figure 9- 1 Access Rule List................................................................................................................................ 145 Figure 9- 1 Access Rule List (Continue)............................................................................................................ 145 Figure 9- 1 Access Rule List (Continue)............................................................................................................ 146 Figure 9- 2 Access Rule Settings - IP Filtering.................................................................................................147 Figure 9- 3 Access Rule Settings - URL Filtering.............................................................................................149 Figure 9- 4 Access Rule Settings - Keyword Filtering.....................................................................................150 Figure 9- 5 Access Rule List - Example 1......................................................................................................... 152 Figure 9- 5 Access Rule List - Example 1 (Continue)..................................................................................... 152 Figure 9- 5 Access Rule List - Example 1 (Continue)..................................................................................... 152 Figure 9- 6 Access Rule List - Example 2......................................................................................................... 153 Figure 9- 6 Access Rule List - Example 2 (Continue)..................................................................................... 153 Figure 9- 6 Access Rule List - Example 2 (Continue)..................................................................................... 154 Figure 9- 7 Access Rule List - Example 3......................................................................................................... 154 Figure 9- 7 Access Rule List - Example 3 (Continue)..................................................................................... 155 Figure 9- 7 Access Rule List - Example 3 (Continue)..................................................................................... 155 Figure 9- 8 Access Rule List - Example 4......................................................................................................... 156 Figure 9- 8 Access Rule List - Example 4 (Continue)..................................................................................... 156 Figure 9- 8 Access Rule List - Example 4 (Continue)..................................................................................... 156 Figure 9- 9 Domain Filtering Global Settings....................................................................................................157 Figure 9- 10 Domain Filtering Settings.............................................................................................................. 157 Figure 9- 11 Attack Prevention Settings.............................................................................................................159 Figure 10- 1 Typical Application of PPTP.......................................................................................................... 160 Figure 10- 2 PPTP Packet Flow.......................................................................................................................... 162 Figure 10- 3 PPTP Packet Format - Static IP/DHCP Internet Connection................................................. 164 Figure 10- 4 PPTP Packet Format - PPPoE Internet Connection................................................................ 164 Figure 10- 5 PPTP Client Settings......................................................................................................................165 Figure 10- 6 PPTP Client List.............................................................................................................................. 166 Figure 10- 6 PPTP Client List (Continue).......................................................................................................... 166 http://www.uttglobal.com Page 203 UTT Technologies Appendix E Figure Index Figure 10- 7 Network Topology - The Wireless Router Acts as a PPTP client...........................................167 Figure 11- 1 Administrator List............................................................................................................................. 169 Figure 11- 2 Administrator Settings.....................................................................................................................170 Figure 11- 3 System Time Settings.....................................................................................................................171 Figure 11- 4 Backup Configuration..................................................................................................................... 173 Figure 11- 5 Restore Configuration.....................................................................................................................173 Figure 11- 6 Reset to Factory Defaults.............................................................................................................. 174 Figure 11- 7 Firmware Upgrade...........................................................................................................................175 Figure 11- 8 Prompt Dialog Box - Firmware Upgrade.....................................................................................176 Figure 11- 9 Remote Access Settings................................................................................................................ 177 Figure 11- 10 Scheduled Task Settings............................................................................................................. 178 Figure 11- 11 Scheduled Task List...................................................................................................................... 179 Figure 11- 11 Scheduled Task List (Continue)..................................................................................................179 Figure 12- 1 System Status - Wired Status.......................................................................................................180 Figure 12- 2 System Status - Wireless Status..................................................................................................181 Figure 12- 3 Traffic Statistics................................................................................................................................182 Figure 12- 4 System Information.........................................................................................................................183 Figure 13- 1 Support..............................................................................................................................................185 Figure A- 0- 1 Local Area Connection Properties.............................................................................................187 Figure A-0- 2 Internet Protocol (TCP/IP) Properties........................................................................................187 Figure A-0- 3 Internet Protocol (TCP/IP) Properties........................................................................................188 Figure B-0- 1 Viewing PPPoE Connection Status in the Internet Connection List....................................190 Figure B-0- 1 Viewing PPPoE Connection Status in the Internet Connection List (Continue)............... 191 Figure B- 0- 2 Viewing DHCP Connection Status in the Internet Connection List.....................................192 Figure B- 0- 2 Viewing DHCP Connection Status in the Internet Connection List (Continue)................ 192 http://www.uttglobal.com Page 204 UTT Technologies Appendix F Table Index Appendix F Table Index Table 0- 1 Common Button Descriptions................................................................................................................3 Table 0- 2 Basic Elements and Features of the List............................................................................................ 4 Table 0- 3 Factory Default Settings......................................................................................................................... 5 Table 2- 1 Description of LEDs on the Front Panel........................................................................................... 14 Table 2- 2 Description of Ports on the Rear Panel.............................................................................................15 Table 2- 3 Description of Components on the Rear Panel............................................................................... 15 Table 5- 1 Description of PPPoE Connection Status.........................................................................................41 Table 5- 2 Description of Static IP Connection Status.......................................................................................42 Table 5- 3 Description of DHCP Connection Status.......................................................................................... 42 Table 5- 4 Description of 3G Connection Status................................................................................................ 42 http://www.uttglobal.com Page 205 Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. IMPORTANT NOTE: FCC Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.4 Linearized : No XMP Toolkit : 3.1-701 Producer : Acrobat Distiller 7.0.5 (Windows) Creator Tool : PScript5.dll Version 5.2.2 Modify Date : 2014:09:10 11:04:51+08:00 Create Date : 2014:07:15 16:01:52+08:00 Metadata Date : 2014:09:10 11:04:51+08:00 Format : application/pdf Title : C:\Documents and Settings\yi.jian\桌面\新建文件夹\英文资料\AC750W Wireless Router Advanced Configuration Guide_V1.0.docx Creator : Document ID : uuid:729affd6-de9f-44cc-8d39-cde2a085f4cd Instance ID : uuid:b1c9759b-8cbd-4d0e-9d6d-0f664d9c279c Has XFA : No Page Count : 214 Author :EXIF Metadata provided by EXIF.tools