XAVi Technologies 6219X1 ADSL2+MODEM User Manual
XAVi Technologies Corp. ADSL2+MODEM
Users Manual
I
User Manual
AR396
ADSL2+ Gateway with 4-port Ethernet Switch
802.11b/g Wireless AP
Issue 1.0
31 July 2009
AR396 User’s Guide
II
XAVi Technologies Corporation
Tel: +886-2-2995-7953
9F, No. 129, Hsing Te Road, Sanchung City,
Taipei County 241,
Taiwan
Copyright © 2009, XAVi Technologies Corporation
Information in this manual is subject to change without notice. No part of this manual may be reproduced
or transmitted in any form or by any means, electronic or mechanical, including photocopying or scanning,
for any purpose, without the written permission of XAVi Technologies Corporation.
XAVi Technologies Corporation provides this documentation without warranty of any kind, implied or
expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular
purpose.
AR396 User’s Guide
III
T
Ta
ab
bl
le
e
o
of
f
C
Co
on
nt
te
en
nt
ts
s
1 Introduction................................................................................................. 1
Features ................................................................................................................................1
Device Requirements ...........................................................................................................2
2 Getting to know the device........................................................................ 3
Parts Check...........................................................................................................................3
Front Panel............................................................................................................................4
Rear Panel ............................................................................................................................5
3 Connecting your device............................................................................. 6
Connecting the Hardware.....................................................................................................6
Step 1. Connect the WAN port to ADSL network ......................................................................... 7
Step 2. Connect the Ethernet cable ..............................................................................................7
Step 3. Attach the power connector ..............................................................................................7
Step 4. Configure your Ethernet PCs............................................................................................ 7
Or, step 5. Install a Wireless card and connect Wireless PCs if the device is with wireless
interface ......................................................................................................................................... 7
Next step........................................................................................................................................ 7
4 Getting Start with the Web pages.............................................................8
Accessing the Web pages....................................................................................................8
Testing your Setup..............................................................................................................10
5 Device Information ...................................................................................11
Summary.............................................................................................................................11
WAN....................................................................................................................................11
Statistic................................................................................................................................12
Route...................................................................................................................................14
ARP.....................................................................................................................................14
DHCP ..................................................................................................................................14
6 Advanced Setup........................................................................................15
WAN....................................................................................................................................15
PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE)........................................................ 17
MAC Encapsulation Routing (MER)............................................................................................ 20
IP over ATM (IPoA)...................................................................................................................... 21
Bridging........................................................................................................................................ 21
LAN......................................................................................................................................22
Ethernet Mode ....................................................................................................................23
NAT (Network Access Translation)....................................................................................24
Virtual Server ............................................................................................................................... 24
Port Triggering ............................................................................................................................. 25
AR396 User’s Guide
IV
DMZ ............................................................................................................................................. 26
Security ...............................................................................................................................27
IP Address Filter .......................................................................................................................... 27
Parental Control..................................................................................................................29
Quality of Service................................................................................................................30
Queue Configuration ................................................................................................................... 31
QoS Classification ....................................................................................................................... 32
Routing................................................................................................................................33
Default Gateway .......................................................................................................................... 33
Static Route ................................................................................................................................. 34
Policy Routing.............................................................................................................................. 35
RIP ............................................................................................................................................... 36
DNS.....................................................................................................................................36
DNS Server.................................................................................................................................. 36
Dynamic DNS.............................................................................................................................. 37
DSL......................................................................................................................................38
Interface Grouping ..............................................................................................................38
IPSec...................................................................................................................................40
Certificate ............................................................................................................................41
Local Certificates ......................................................................................................................... 41
Trusted CA Certificate ................................................................................................................. 43
7 Wireless Setup..........................................................................................45
Basic....................................................................................................................................45
Security ...............................................................................................................................46
MAC Filter ...........................................................................................................................50
Wireless Bridge...................................................................................................................50
Advanced ............................................................................................................................51
Station Information..............................................................................................................52
8 Diagnostic.................................................................................................. 53
Diagnostic............................................................................................................................53
9 Management.............................................................................................. 54
Settings ...............................................................................................................................54
Backup......................................................................................................................................... 54
Update ......................................................................................................................................... 54
Restore Default............................................................................................................................ 55
System Log .........................................................................................................................55
SNMP Agent .......................................................................................................................56
TR-069 Client......................................................................................................................56
Internet Time.......................................................................................................................58
Access Control....................................................................................................................58
Service......................................................................................................................................... 58
IP Address ................................................................................................................................... 59
AR396 User’s Guide
V
Password..................................................................................................................................... 60
Update Software.................................................................................................................60
Save / Reboot .....................................................................................................................61
Appendix A - Configuring the Network Settings..............................................62
Configuring Ethernet (LAN) Card.......................................................................................62
Before you begin.......................................................................................................................... 62
Windows XP PCs ........................................................................................................................ 62
Assigning static IP addresses to your PCs ................................................................................. 62
Configuring Wireless LAN card..........................................................................................63
Wireless card and drivers............................................................................................................ 63
Configuring wireless device......................................................................................................... 63
Appendix B - Troubleshooting ...........................................................................64
Troubleshooting Suggestions.............................................................................................64
IP Utilities for diagnostic......................................................................................................65
Ping.............................................................................................................................................. 65
Nslookup...................................................................................................................................... 65
Appendix C - Specification .................................................................................67
Appendix D - Warranties ..................................................................................... 69
Appendix E - Contact information......................................................................70
I
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful interference
to radio communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception, which can
be determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one of the following measures:
z Reorient or relocate the receiving antenna.
z Increase the separation between the equipment and receiver.
z Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
z Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: Any changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate this equipment.
This device complies with Part 15 of the FCC Rules.
Operation is subject to the following two conditions: (1) This device may not cause harmful interference,
and (2) this device must accept any interference received, including interference that may cause undesired
operation.
This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna
or transmitter.
FCC/IC Radiation Exposure Statement:
This equipment complies with FCC/IC RSS-102 radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance 20cm between the
radiator & your body.
Country Code selection feature to be disabled for products marketed to the US/CANADA
This Class [B] digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe [B] est conforme à la norme NMB-003 du Canada.
AR396 User’s Guide
1
1 Introduction
Congratulations on becoming the owner of the AR396 gateway. You will now be able to
access the Internet using your high-speed connection.
The AR396 is a gateway integrating ADSL2+, 4 Ethernet ports switch and 802.11g wireless
interfaces into one device which provides the most flexibility and efficiency way to you. You
could connect devices like PCs, Set-Top-Box, ATA, servers and so on easily by Ethernet and
wireless interfaces to enjoy data, voice, and video services immediately through high speed
connection.
This User Guide will show you how to connect your AR396 gateway and how to customize its
configuration to get the most out of your new product.
Features
The list below contains the main features of the device (AR396) and may be useful to users
with knowledge of networking protocols. The chapters throughout this guide will provide you
with enough information to get the most out of your device.
The features include:
High Speed Asymmetrical Data Transmission on Twisted Copper Pair Wire
Service providers can deploy ADSL rapidly over existing wire infrastructure
Integrates the phone filter
Compatible and interoperable with most central office site ADSL DSLAM or Multi-service
Access Systems.
Integrated four-port 10/100BaseTX Ethernet switch with speed-sensing and crossover
detection automatically
802.11b/g WLAN supports up to 54 Mbps transmission rate
Provides wireless secure transmitting encryption by either 802.1x; WEP; WEP2; WPA;
WPA2; TKIP; AES
Support Networking protocols such as PPP, Routing, RIP and so on
Support DHCP client and server for IP management
Support Port Forwarding (virtual server) and MAC address filtering
Network address translation (NAT) functions to provide security for your LAN and multiple
PCs surfing Internet simultaneously.
Configuration and management by Web-browser through the Ethernet interface and
remotely through WAN interface
Firmware Supports TR-069 for auto-provisioning and configuration.
Upgradeable through HTTP (web browser)
AR396 User’s Guide
2
Device Requirements
In order to use the device, you must have the following:
High speed broadband service
Instructions from your ISP on what type of Internet access you will be using, and the IP
addresses needed to set up access
One or more computers, each containing an Ethernet card (10Base-T/100Base-T network
interface card (NIC)).
For system configuration using the supplied web-based program in PC.
Note
You do not need to use a hub or switch in order to connect more than one
Ethernet PC to the device. Instead, you can connect up to four Ethernet
PCs directly to the device using the ports labeled LAN1 to LAN4 on the
rear panel.
AR396 User’s Guide
3
2 Getting to know the device
Parts Check
In addition to this document, your package should arrive containing the following:
The device (AR396)
Ethernet cable
Standard phone line cable
Power adapter
Figure 1: Package Contents
AR396 device
RJ-45 Cable
RJ-11 Cable
Power adapter
AR396 User’s Guide
4
Front Panel
The front panel of this device will be described here which cover all front panel definitions of
other models.
Figure 2: Front Panel and LEDs
Connector and LED definitions from left to right:
Label Color Function
Power Green or
Red
Off : No power
On (Green) : Power on
On (Red): Self-test fails
Alarm Red On: DSL is not connected
LAN 1 ~ 4 Green On : LAN link established and active
Off : No LAN link
Blink : Data being transmitted
WiFi Green On : WLAN service is enabled
Off : WLAN service is disabled
Blink : Data being transmitted
DSL Green On : Physical layer sync up successfully.
Off : No connection or no signal
Blink : Physical sync up progress
Internet Green or
Red
Off : No connection to Internet
On (Green) : The device gets an IP address
successfully in router mode
Blink : Data being transmitted.
On (Red) : PPP Authenication of the device failed. Or
it can not get an IP address in ROUTER mode.
AR396 User’s Guide
5
Rear Panel
The rear panel of this device will be described here which cover all rear panel definitions of
other models.
Figure 3: Rear Panel Connections
Connector definition:
Label Function
Phone Connects to phone set
Line Connects to the ADSL line
LAN1 ~ LAN4 Connects the device via Ethernet to your devices in LAN
Reset A reset button to restart the device or reset to default settings:
1. Restart - Press the reset button for 1 second while the
router is up and running.
2. Reset to Default Settings - Press the reset button for 5
seconds while the router is up and running.
Power Switch ON/OFF switch
Power Jack Connects to the supplied power adapter
Antenna Connects to the 802.11b/11g enabled wireless devices in LAN
AR396 User’s Guide
6
3 Connecting your device
This chapter provides basic instructions for connecting the device to a computer or LAN and to
the Internet.
In addition to configuring the device, you need to configure the Internet properties of your
computer(s). For more details, see the following sections in Appendix A:
Configuring Ethernet PCs section
Configuring Wireless PCs section
This chapter assumes that you have already subscribed a broadband service with your
Internet service provider (ISP). These instructions provide a basic configuration that should be
compatible with your home or small office network setup. Refer to the subsequent chapters for
additional configuration instructions.
Connecting the Hardware
This section describes how to connect the device to the power outlet and your computer(s) or
network.
WAR NI NG
Before you begin, turn the power off for all devices. These include
your computer(s), your LAN hub/switch (if applicable), and the device.
The diagram below illustrates the hardware connections. The layout of the ports on your
device may vary from the layout shown. Refer to the steps that follow for specific instructions.
Figure 4: Overview of Hardware Connections
AR396 User’s Guide
7
Step 1. Connect the WAN port to ADSL network
Connect the WAN port to the DSL network which has the high speed internet connection.
Step 2. Connect the Ethernet cable
Connect up to four single Ethernet computers or to a HUB/Switch directly to the device via
Ethernet cable(s).
Note that the cables do not need to be crossover cables; the switch provides MDI and MDIX
auto-detection.
Step 3. Attach the power connector
Connect the AC power adapter to the Power connector on the back of the device and plug the
adapter into a wall outlet or power strip. Turn on and boot up your computer(s) and any LAN
devices such as hubs or switches.
Step 4. Configure your Ethernet PCs
You must also configure the Internet properties on your Ethernet PCs. See Configuring
Ethernet PCs section.
Or, step 5. Install a Wireless card and connect Wireless PCs if the device is with wireless
interface
You can attach a Wireless LAN that enables Wireless PCs to access the Internet via the
device.
You must configure your Wireless computer(s) in order to access your device. For complete
instructions, see Configuring Wireless PCs section.
Next step
After setting up and configuring the device and PCs, you can log on to the device by following
the instructions in “Getting Started with the Web pages” on chapter 4. The chapter includes a
section called Testing your Setup, which enables you to verify that the device is working
properly.
AR396 User’s Guide
8
4 Getting Start with the Web pages
The device includes a series of Web pages that provide an interface to the software installed
on the device. It enables you to configure the device settings to meet the needs of your
network. You can access it through a web browser on a PC connected to the device.
Accessing the Web pages
To access the web pages, you need the following:
A laptop or PC connected to the LAN or WLAN port on the device.
A web browser installed on the PC. For the best display quality, use latest version of Internet
Explorer, Netscape or Mozilla Firefox.from any of the LAN computers, launch your web
browser, type the URL, http://192.168.1.1 in the web address (or location) box, and press
[Enter]. The default IP address of the device is 192.168.1.1. Then enter the default username
and password: admin/admin to access the configuration web page, if you have not changed
the username and password. Please be informed that strings of username and password are
case-sentitive.
Figure 5: Login Page
The Menu comprises:
Device Information: provides the basic information of the system. It includes sub menus,
Summary, WAN, Statistics, Route, ARP and DHCP.
AR396 User’s Guide
9
Advanced Setup: provides information about the current configuration of various system
features with options to change the configuration. It includes the sub menus WAN, LAN,
Ethernet Mode, NAT, Security, Parental Control, Routing, DNS, DSL, Interface Group, IPSec
and Certificate.
Wireless Setup: provides wireless SSID, security, key and various options to change the
configuration. It includes the sub menu, Basic, Security, MAC Filter, Wireless Bridge,
Advanced and Station Info.
Diagnostic: provides the diagnostic utility to check the LAN and Wireless physical connection
and ADSL connection as well.
AR396 User’s Guide
10
Management: provides the administration utilities. It includes the sub menus, Settings,
System Log, SNMP Agent, TR-069 Client, Internet Time, Access Control, Update Software,
and Save/Reboot.
Testing your Setup
Once you have connected your hardware and configured your PCs, any computer on your
LAN should be able to use the device to access the Internet.
To test the connection, turn on the device, wait seconds till device booting up and then verify
that the LEDs are illuminated as follows:
Table 1: LED Indicators
If the LEDs illuminate as expected, test your Internet connection from a LAN computer. To do
this, open your web browser, and type the URL of any external website (such as
http://www.yahoo.com).
If the LEDs do not illuminate as expected, you may need to configure your Internet access
settings using the information provided by your ISP. If the LEDs still do not illuminate as
expected or the web page is not displayed, see Troubleshooting section or contact your ISP
for assistance.
LED Behavior
Power Solid red to indicate that the device is turned on. If
this light is not on, check the power cable
attachment.
Wireless (WiFi) Solid green to indicate that the Wireless LAN
function is operational.
LAN Solid green to indicate that the device can
communicate with your LAN.
DSL Solid green to indicate that the device has
successfully established a connection with your ISP.
AR396 User’s Guide
11
5 Device Information
The Device Information web page menu includes the following submenus:
Summary
WAN
Statistics
Route
ARP
DHCP
Summary
The Summary Page of the device shows the following information, Firmware version, Product
name, Serial number, Hardware version, Software version, Bootloader version,, Wireless
driver version, and MAC address. Besides, LAN IP, Default gateway, Primary DNS server and
Secondary DNS server are shown too.
Figure 6: Device Information
WAN
The WAN information of the device shows detailed information about the WAN connection
such as DSL port information (VPI/VCI, VLAN Mux., UBR/CBR/VBR and so on), Protocol,
AR396 User’s Guide
12
IGMP enabled or disabled, QoS enabled or disabled, WAN port state, DSL link status, and IP
address of WAN port.
Figure 7: WAN Port Information
Statistic
The Statistic Page of the device shows the following information, Interfaces, data transmitting
(Received and Transmitted directions) in that interface such as total bytes, packets, error
count and drop count of LAN port, WAN port, ATM, and ADSL.
Figure 8: Device LAN Port Statistic Information
Figure 9: Device WAN Port Statistic Information
AR396 User’s Guide
13
Figure 10: Device ATM Statistic Information
Figure 11: Device ADSL Statistic Information
AR396 User’s Guide
14
Route
The Route Page of the device shows the route table. It contains Destination IP address,
Gateway, Subnet Mask, Flag, Metric, Service and Interface.
Figure 12: Device Route Table Information
ARP
The ARP Page of the device shows the ARP table mapping the IP address and related MAC
address. The ARP table contains IP address, Flag, MAC address, Device Interface.
Figure 13: Device ARP Table Information
DHCP
The DHCP Page of the device shows the DHCP table which DHCP server of device assigns
the IP address to the PC requesting an IP address. The DHCP table contains Hostname, MAC
address, IP address and Expired In.
Figure 14: Device DHCP Table Information
AR396 User’s Guide
15
6 Advanced Setup
The Advance Setup menu includes the sub menus WAN, LAN, Ethernet Mode, NAT, Security,
Parental Control, Quality of Service, Routing, DNS, DSL, Interface Group, IPSec and
Certificate.
WAN
LAN
Ethernet Mode
NAT
Security
Parental Control
Quality of Service
Routing
DNS
DSL
Interface Group
IPSec
Certificate
WAN
You can configure your internet connection from this page. This page displays the details of
existing internet connection. Please refer below for more details. There are three connection
types can be configured including PPP over Ethernet (PPPoE), IP over Ethernet, and
Bridging.
Figure 15: WAN Setup Page
To configure the WAN port, click Edit or Add to get the configuration pages. If there are many
services (protocols) in the single PVC interface, please enter the unique VLAN tag number to
identify the service (protocol).
AR396 User’s Guide
16
Figure 16: WAN Port - ATM PVC Configuration
To configure ATM PVC on the WAN interface:
Enter VPI/VCI values
Check to enable the VLAN Mux that allows multiple protocols in the same PVC and then
enter the 802.11Q VLAN ID valued from 0 to 4095
Select the Service Category from the list (UBR without PCR, UBR with PCR, CBR, Non
Realtime VBR, Realtime VBR). Please leave it as default, UBR with PCR, if ISP does not
give you any information of this setting.
Check to enable the Qualify of Service if Service Category is UBR without PCR, URB with
PCR or Non Realtime VBR and you like this service. Select the Service Category from the
list (UBR without PCR, UBR with PCR, CBR, Non Realtime VBR, Realtime VBR). Please
leave it as default, if ISP does not give you any information of this setting.
Figure 17: Service Category Configuration
PCR stands for Peak Cell Rate (ATM cells per second). It is the maximum allowable rate
which cells can be transferred in the connection.
SCR stands for Sustainable Cell Rate (ATM cells per second). It is an average allowable
rate which cells can be transferred in the connection.
MRS stands for Maximum Burst Size (ATM cells). It is the maximum allowable burst size
of cells which cells can be transferred in the connection.
AR396 User’s Guide
17
Click Next to configure the Connection Type
Figure 18: WAN Connection Type Configuration
Global settings:
Check the WAN protocol from PPP over ATM (PPPoA), PPP over Ethernet (PPPoE),
MAC Encapsulation Routing (MER), IP over ATM (IPoA) and Briding.
Select the Encapsulation Mode from the list (LLC/SNAP-BRIDGING,
LLC/SNAP-Routing or VC/MUX)
Click Next
PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE)
Figure 19: WAN Connection, PPPoA or PPPoE Configuration
AR396 User’s Guide
18
To configure the PPPoA or PPPoE settings:
Enter the User’s PPP Username and Password
Enter the Service Provider Name if any
Select the Authentication Method (AUTO, PAP, CHAP, or MSCHAP) used during
negotiation, default is AUTO.
Enter the PPP MTU (Maximum Transmission Unit) size between 128 and 1492. Default is
1492.
Check “Dial On Demand” if you do not need PPPoA or PPPoE connection always ON and
enter the timeout value to disconnect the PPPoA or PPPoE connection when connection
is idle and timeout.
Check the “IP extension” if your ISP requests to enable it, otherwise do not select it. This
is a special service to forward IP address assigned by remote to the local device in the
LAN.
Check the “Use Static IP address” and enter the IP address if your ISP assigns a fixed IP
address to you. Otherwise, do not select it.
Check to enable “Retry PPP Password on Authentication Error”.
Check to enable “PPP Debug Mode”
This “Bridge PPP frames between WAN and Local Ports” is checked in default.
Click Next
Figure 20: WAN Service, PPPoA or PPPoE NAT Configuration
Network Access Translation (NAT), IGMP Multicast and MAC Clone settings:
Check to enable NAT feature which allows multiple PCs to surf Internet simultaneously
with one public WAN port IP address.
Check to enable Fullcore NAT if necessary
AR396 User’s Guide
19
Select the Public IP of NAT from Interface IP address or Manual IP address. If it is manual
IP address, enter the associated IP address.
Check to enable Firewall feature
Check to enable IGMP Multicast to avoid the multicast packet flooding to other LAN ports
where do not need this IGMP packet to get better efficiency in Ethernet port.
Check to enable WAN service
Enter the Service Name if you want to change it.
Check to enable MAC Clone feature and enter the associated MAC address.
Click Next
The WAN Setup Summary page shows all of parameters.
Figure 21: WAN Summary, PPPoA or PPPoE Configuration
Click Save if correct and click Back to restart the configuration again.
AR396 User’s Guide
20
MAC Encapsulation Routing (MER)
Figure 22: WAN Connection, MER Configuration
To configure the IP over Ethernet settings:
Select “Obtain an IP address automatically” or “Use the following (fixed) IP address” and
then also enter the WAN IP address and WAN Subnet Mask.
Select “Obtain default gateway automatically” or “Use the following default gateway” and
then also enter the gateway IP address and Use WAN Interface where packets will be
sent to.
Select “Obtain DNS server address automatically” or “Use the following DNS server
addresses” and then also enter the IP addresses of Primary DNS server and Secondary
DNS server.
Click Next to set the NAT, IGMP multicast and MAC Clone settings, please refer above
descriptions in PPPoE configuration for details.
The page of Network Address translation (NAT), IGMP multicast and MAC Clone settings will
show up and then WAN Setup Summary page will show up. Please refer related pages above
for reference. Click Save if correct and click Back to restart the configuration again.
AR396 User’s Guide
21
IP over ATM (IPoA)
Figure 23: WAN Connection, MER Configuration
To configure the IP over Ethernet settings:
Enter the WAN IP address and WAN Subnet Mask.
Select “Use the following default gateway” and then also enter the gateway IP address
and Use WAN Interface where packets will be sent to.
Select “Use the following DNS server addresses” and then also enter the IP addresses of
Primary DNS server and Secondary DNS server.
Click Next
The page of Network Address translation (NAT), IGMP multicast and MAC Clone settings will
show up and then WAN Setup Summary page will show up. Please refer related pages above
for reference. Click Save if correct and click Back to restart the configuration again.
Bridging
Figure 24: WAN Connection, Bridging Configuration
AR396 User’s Guide
22
To configure the Bridging settings:
Check “Enable Bridge Service” to enable bridge service
Enter the Service Name for this bridging interface.
Click Next
The WAN Setup Summary page shows all of parameters. Click Save if correct and click Back
to restart the configuration again.
LAN
Figure 25: LAN Configuration
To configure LAN:
Enter the IP address which the CPE in the LAN will use to connect to the device. For
example, enter 192.168.1.1
Enter the Subnet Mask. For example, enter 255.255.255.0
Check to enable UPnP feature
Check to Enable IGMP Snooping. This feature will snoop all of IGMP packets and record
AR396 User’s Guide
23
related information. Therefore, multicast packets will be generated to the related LAN
ports only to avoid the packet flooding on all of LAN ports. Select one of two modes,
Standard mode or Blocking mode.
Select to Enable or Disable DHCP server. If it is enabled, please enter the DHCP IP pool
of Start IP address and End IP address. Enter the value of leased time in hour about the
valid period of assigned IP address. The DHCP server ON (enabled) feature will enable
this device to assign IP address automatically to PC in LAN if PC requests an IP address
by DHCP client protocol.
Click Add Entries button to add IP address excluded in the IP pool.
Figure 26: LAN DHCP Static IP Lease Configuration
Enter the MAC address and static IP address which a dedicated PC uses this fixed IP
address already. This IP address will be excluded from the IP pool. Click Apply/Save to
save configuration.
Check to Enable DHCP Server Relay and then input the IP address of DHCP server.
The device can handle second IP address and subnet of LAN interface. You may check
this feature to configure the second IP address and subnet for LAN port to meet your LAN
environment.
Click Save to save the configuration
Ethernet Mode
The Ethernet Mode feature provides to configure the connection speed of each Ethernet port
of switch. Besides, the connection status will be shown too.
Figure 27: Ethernet Mode Configuration
Global settings:
Select the LAN port connection speed of each Ethernet port of switch from the list, AUTO,
100Full, 100Half, 10Full or 10Half. 100Full means 100Mbps full duplex and 100Half
means 100Mbps half duplex.
Click Save to save the configuration
AR396 User’s Guide
24
NAT (Network Access Translation)
The NAT feature provides the basic firewall feature to avoid hacker attacks from remote site.
There are three more setting pages including virtual server, port trigger, and DMZ to provide
specified service for remote users.
Virtual Server
Virtual Server enables you to run a server on your local network that can be accessed from the
remote parties. You need to set up a rule to tell the device on which computer the server is
held. When port virtual server is enabled, your router (the device) routes all the inbound traffic
on a particular port to the chosen computer on your network.
Figure 28: Virtual Server Setup Configuration
Click Add to add a rule of virtual server.
Figure 29: Add A Rule Of Virtual Server
AR396 User’s Guide
25
Global Setting
Select a service from the predefined list or enter the name of Custom Server
Enter the Server IP Address located in the LAN to provide the service to remote party
Enter the Start External Port # and End External Port # that open to remote to access the
service
Select the Protocol from the list
Enter the Start Internal Port # and End Internal Port # that may use different port # to
secure the service. If you use the same port # as external port #, please leave Internal
Port # as blank.
Enter the Remote IP address to allow the specified IP packet coming through virtual
server only.
Click Save/Apply
Port Triggering
The feature is similar to the virtual server, but provides a more secure way to provide your
device. It opens up the port hole temporary and allows CPE in LAN to establish a connection
with remote parties. Those ports are open only if a specified request from a PC in LAN is
received, and then the device allows the remote parties to access to establish a connection
with that PC in LAN.
Figure 30: Port Triggering Setup
Click Add to add a rule of port triggering.
Global Setting
Select a service from the predefined list or enter the name of Custom Server
Enter the Server IP Address located in the LAN to provide the service to remote party
Enter the Start Trigger Port # and End Trigger Port # that open to remote to access the
service
Select the Trigger Protocol
Enter the Start Open Port # and End Open Port # that may use different port # to secure
the service. If you use the same port # as Trigger port #, please leave Open Port # as
AR396 User’s Guide
26
blank.
Select the Open Protocol
Click Save/Apply
Figure 31: Add A Rule Of Port Triggering
DMZ
A DMZ (De-Militarized Zone) host is a computer on your network that can be accessed from
the Internet. The de-militarized zone (DMZ) is for forwarding IP packets from the remote
parties that are not fixed to any of the applications configured in the virtual server. These
packets are forwarded to a designated DMZ host device. A DMZ is often used to host Web
servers, FTP servers etc that need to be accessible from the Internet
Figure 32: Add A Rule Of Port Triggering
Global Setting
AR396 User’s Guide
27
Enter the DMZ Host IP address
Click Save/Apply
Security
The Security feature provides two more setting pages including MAC filtering and Parental
Control.
IP Address Filter
The device can block the packet in outgoing and incoming directions. By default, all outgoing
IP packets from LAN is allowed to surf Internet, but some IP packets can be blocked by setting
up filters.
Figure 33: Outgoing IP Filter Setup
Click Add to add a rule of Outgoing IP Filtering.
Check Remove and click Remove to remove the specified entry.
Figure 34: Add - Outgoing IP Filter Setup
AR396 User’s Guide
28
Global Setting
Enter the Filter Name
Select the Protocol from the selection list.
Enter the Source IP Address and Subnet Mask (range of IP addresses) of packet
Enter the one port or multi ports (port range)
Enter the Destination IP Address and Subnet Mask (range of IP addresses) of packet
Enter the one port or multi ports (port range)
Click Save/Apply
By default, all incoming IP packets from WAN are blocked to access PCs in LAN, but some IP
packets can be accepted by setting up filters.
Figure 35: Incoming IP Filter Setup
Click Add to add a rule of Incoming IP Filtering.
Check Remove and click Remove to remove the specified entry.
Figure 36: Add - Incoming IP Filter Setup
AR396 User’s Guide
29
Global Setting
Enter the Filter Name
Select the Protocol from the selection list.
Enter the Source IP Address and Subnet Mask (range of IP addresses) of packet
Enter the one port or multi ports (port range)
Enter the Destination IP Address and Subnet Mask (range of IP addresses) of packet
Enter the one port or multi ports (port range)
Select the WAN interfaces which will be applied with this incoming IP filter rule.
Click Save/Apply
Parental Control
This feature allows you to configure some of PCs in LAN to surf Internet in specific time
period.
Figure 37: Parental Control Configuration
Click Add to add a rule of schedule for parental control.
Check Remove and click Remove to remove the specified entry.
Figure 38: Time of Day Restriction Configuration
AR396 User’s Guide
30
Global Setting
Enter the Username
Select the Browser’s MAC Address or Other MAC Address to enter the specific PC MAC
address.
Check those days you want to block above PC to surf Internet.
Enter the Start Blocking Time and End Blocking Time
Click Save/Apply.
Quality of Service
The Quality of Service feature provides a method to prioritize the packet and arrange a better
efficiency of bandwidth. In other words, some traffic such as voice or video has handled as
higher priority than others such as data to get near real time response.
Figure 39: Quality of Service Configuration
Global Setting
Check Enable QoS (Quality of Service)
Select “Default DSCP Mark” from the list if the egress packets that do not match any
classification rules.
Click Save/Apply
AR396 User’s Guide
31
Queue Configuration
You could configure a maximum 16 QoS queues to provide different service levels.
Figure 40: Quality of Service Queue Configuration
Click Add to add a class of Qualify of Service.
The screen allows to configure a QoS queue entry and assign it to a specific network interface.
Each interface with QoS enabled will be allocated three queues by default. Each of the
queues can be configured for a specific precedence. The queue entry configured here will be
user by the classifier to place ingress packets appropriately. Note: lower integer values for
precedence imply higher priority for this queue relative to others.
Figure 41: Add a QoS Queue
Global Setting
Select Enable or Disable for Queue Configuration Status
Select the queue attaching to a specific network Interface
Select the Queue Precedence (1, 2, 3), lower integer values for precedence imply
higher priority for this queue relative to others.
Click Save/Apply to save it.
AR396 User’s Guide
32
QoS Classification
You need to define one or more classes of data traffic and set the priority for each of classes.
A maximum 32 entries can be configured.
Figure 42: Quality of Service Classification Setup
Click Add to add a class of Qualify of Service.
Check Remove and click Remove to remove the specified entry.
Click Edit to edit the entry.
Figure 43: Add a Quality of Service Classification
AR396 User’s Guide
33
The screen creates a traffic class rule to classify the traffic, assign queue priority which
defines the precedence and type of service. A rule consists of a class name and at least one
condition below. All of the specified conditions in this classification rule must be satisfied for
the rule to take effect. Click 'Save/Apply' to save and activate the rule.
Global Setting
Enter the Traffic Class Name
Select the Rule Order and Rule Status (enable or disable) from the list
Select the Assign Classification Queue from the list.
Select the Assign Differentiated Services Code Point (DSCP) Mark from the list.
Select the 802.1p mark level from the list if 802.1q is enabled.
Select the Physical LAN port
Select the Protocol of packet
Select the Differentiated Service Code Point (DSCP) Check from the list.
Select the IP address, Vendor Class ID (DHCP option 60), or User class ID (DHCP option
77) and enter the associated value.
Enter Source Subnet Mask and UDP/TCP Source Port (single port or port range)
Enter Destination IP address and Destination Subnet mask
Enter Source MAC address, Source MAC Mask, Destination MAC address and
Destination MAC mask.
Select 802.1p priority from the list.
Click Apply to add this QoS class
Routing
The section shows the IP addresses or address routes for the computers connected to the
gateway to reach different destinations, such as the local network, the gateway, or the Internet.
The Routing feature provides three more setting pages including Default Gateway and Static
Route.
Default Gateway
Figure 44: Default Gateway Configuration
AR396 User’s Guide
34
Global Setting
Check Enable Automatic Assigned Default Gateway checkbox, this router will accept the
first received default gateway assignment from one of the PPPoA, PPPoE or Static
IP/DHCP interface. If the checkbox is not checked, enter the static default gateway
AND/OR a WAN interface.
Click Save to save the configuration
NOTE: If changing the Automatic Assigned Default Gateway from “unselected” to “selected”,
you must reboot the router to get the automatic assigned default gateway
Static Route
Figure 45: Static Route Configuration
Click Add to add the static route path.
Figure 46: Add Static Route Configuration
Global Setting
Enter the Destination Network Address and Subnet Mask (range)
Check Use Gateway IP Address and enter the IP address where packet will be forwarded
to.
Check the Use Interface and select it from the list
Click Save to save the configuration
AR396 User’s Guide
35
Policy Routing
Figure 47: Policy Routing Configuration
Click Add to add the static route path.
Figure 48: Add Policy Route Configuration
Global Setting
Enter the Policy Name
Select the Source Interface (LAN1 to 4 and Wireless) from the list
Select the Protocol (TCP/UDP, TCP, IP and ICMP) from the list
Enter the Source IP Address and Source Subnet Mask
Enter the Source Port Number (single port or port range)
Enter the Destination IP Address and Destination Subnet Mask
Enter the Destination Port Number (single port or port range)
Enter the Gateway IP Address and select the associated Gateway WAN Interface from
the list.
Click Save to save the configuration
AR396 User’s Guide
36
RIP
Figure 49: RIP Configuration
Global Setting
Check to enable or disable Global RIP mode
Select the desired RIP version and operation, followed by placing a check in the 'Enabled'
checkbox for the interface.
Click Save to save the configuration
The RIP can not be configured if the WAN interface has NAT enabled.
DNS
The DNS feature provides two more setting pages including DNS server setting and Dynamic
DNS.
DNS Server
You could configure to get the IP address of DNS server automatically or set the IP address of
DNS server manually.
Figure 50: DNS Server Configuration
Global Setting
Check to Enable Automatic Assign DNS or enter IP address of Primary DNS
server/Secondary DNS server manually.
Click Save/Apply to save the configuration.
AR396 User’s Guide
37
Dynamic DNS
The Dynamic DNS feature allows you to bind the dynamic assigned WAN IP address into a
specified domain name. You could pass this domain name to friends to access your service in
your site instead of informing them every times if WAN IP address is changed.
.
Figure 51: Dynamic DNS Configuration
Click Add to add Dynamic DNS setting.
Check Remove and click Remove to remove the specified entry.
Figure 52: Add a Dynamic DNS
Global Setting
Select the Dynamic DNS service provider from the list
Enter the your Hostname
Select the Interface from the list where the device can reach it for registration
Enter the Username and Password
Click Save/Apply to save the configuration
AR396 User’s Guide
38
DSL
The DSL feature provides basic and advance configuration to set the DSL parameters. Please
contact technician for details before changing any parameters.
Figure 53: DSL Basic Configuration
Global Setting
Check to select the DSL modulation modes.
Select the DSL phone line pair, inner pair or outer pair. The inner pair is default setting.
Check to select the Capabilities, Bitswap and SRA (Seamless Rate Adaption).
Click Apply to save the configuration
Click Advanced Settings to get details, please contact technician for support.
Interface Grouping
The page provides Interface Grouping configuration. In default, the LAN1 to LAN4 and
wireless grouped together as a single Ethernet environment. Interface grouping supports
multiple LAN ports to PVC and bridging groups. Only bridged-WAN interface will show on this
page. Each bridging group will perform as an independent network.
Figure 54: Interface Grouping Configuration
AR396 User’s Guide
39
Click Add to add a new Interface group setting. Check Remove and click Save/Apply button to
remove the specified entry. Click Edit button to edit current settings.
To create (add) a new interface group:
Figure 55: Create New Interface Group Configuration
Global Setting
Enter the Group Name.
Select the Interfaces from the available interface list and add it to the grouped interface list
using the arrow buttons to create required mapping of the ports. The selected interface will
be removed from its original group and joined this new group.
If you like to add LAN clients to a PVC automatically in the new group, add the DHCP
Vendor ID string. By configuring a DHCP vendor ID string, any DHCP client request with
the specified vendor ID (DHCP option 60) will be denied an IP address from the local
DHCP server. If a vendor ID is configured for a specified client device, please reboot the
client device attached to the modem to allow it to obtain an appropriate IP address.
Click Save/Apply to save the configuration.
AR396 User’s Guide
40
IPSec
The page provides IPSec VPN configuration to establish a VPN tunnel.
Figure 56: IPSec VPN Configuration
Check the Enable box to enable this IPSec tunnel.
Click Add New Connection to create a IPSec VPN profile. Click Edit button to edit the current
settings, click Remove button to remove the IPSec VPN profile.
Figure 57: IPSec VPN Settings
Global Setting
Enter IPSec Connection Name
Enter the IP address of remote IPSec Gateway
Select Tunnel access from local IP address: subnet or single IP address
Enter the local IP address of VPN tunnel
Enter the local IP subnet mask
Select the Key exchange method: IKE or Manual
AR396 User’s Guide
41
Select the Authentication Method: Pre-shared Key or Certificate (X.509)
Enter the Pre-shared key if chooses Pre-shared key as the authentication method
Select to enable or disable the Perfect Forward Secrecy.
Click Show Advanced Settings for more settings.
Figure 58: IPSec VPN Advanced Settings
There are two phases in advanced settings. There are five parameters in phase 1 and four
parameters in phase 2.
Select Mode from the list in phase 1: Main or Aggressive
Select Encryption Algorithm from the list in phase 1 and 2: DES, 3DES, AES-128,
AES-192, AES-255
Select Integrity Algorithm in phase 1 and 2: MD5 or SHA1
Set Diffie-Hellman Group in phase 1 and 2 for Key Exchange
Enter the Key life time in phase 1 and 2 to change the key again.
Click Save/Apply to save the configuration
Certificate
The page provides the Certificate configuration. There are two sub-menu (Local and Trusted
CA) are provided. “Local” means local certificates and “Trusted CA” means trusted certificate
Authority certificates. Local Certificates preserve the identity of the modem. CA certificates are
used by the device to very certificates from the other hosts.
Local Certificates
Local certificates are used by peers to verify your identity.
Figure 59: Local Certificate Configuration
AR396 User’s Guide
42
Click Create Certificate Request to generate a certificate.
Check Import Certificate to get a certificate from file.
Create New Certificate Request:
Figure 60: Crate New Certificate Request
Global Setting
Enter Certificate Name, Common Name, Organization Name, and State/Province Name.
Select Country/Region Name from the list.
Click Apply to create new certificate request. The generated certificate will be shown as
below.
Figure 61: Generated Certificate
The certificate request needs to be submitted to a certificate authority, which would sign the
request. Then the signed certificate needs to be loaded into modem. Click “Load Signed
Certificate” button to load the certificate and then a new certificate is created.
AR396 User’s Guide
43
Import Certificate:
Figure 62: Import Certificate
Global Setting
Enter Certificate Name
Enter the Certificate and Private Key
Click Apply
Trusted CA Certificate
CA (Certificate Authority) is used by you to verify peer’s certificate. It can be imported only.
Figure 63: Trusted CA (Certificate Authority) Certificates Configuration
Click Import Certificate to set certificate.
AR396 User’s Guide
44
Figure 64: Import CA Certificate
Global Setting
Enter Certificate Name.
Enter the Certificate.
Click Apply.
AR396 User’s Guide
45
7 Wireless Setup
The Wireless Setup web page menu comprises:
Basic
Security
MAC Filter
Wireless Bridge
Advanced
Station Information
Basic
The device provides wireless connection to wireless clients. This page allows you to enable
the wireless service, hide the network from active scan and set the SSID (Service Set
Identifier).
Figure 65: Wireless Setting – Basic
Global Setting
Check to enable Wireless feature
Check to disable Wireless feature when DSL line is down
Check to enable Hide Access Point to hide from active scan of wireless client
Check to isolate the wireless clients that each wireless client can not communicate others
by the device directly.
Check to disable WMM (WiFi Multi-Media) feature. WMM takes the audio, voice, and
video data stream as prioritized packet to support better performance for such
applications.
Enter the wireless network name (SSID)
AR396 User’s Guide
46
The BSSID is the MAC address of the device
Input to set the maximum wireless clients the device wants to provide service.
Click Save/Apply to save the configuration
Security
The device provides wireless connection with security including authentication method and
data encryption to protect your data in the air.
Figure 66: Wireless Setting – Security
Global Setting
Select the SSID from the list, then set the related security parameters
Select the method of Network Authentication. It could be OPEN (none), Shared, 802.1X,
WPA, WPA-PSK, WPA2, WPA2-PSK, Mixed WPA2/WPA, Mixed WPA2/WPA-PSK
Select the method of WEP Encryption if Network Authentication is Open. Select the
Encryption Strength with 64bits or 128bits, select the current Key Index and enter the key
and four keys when necessary if WEP Encryption is enabled.
Figure 67: Wireless Setting – OPEN and WEP Security
If the Network Authentication is Shared. Select the Encryption Strength with 64bits or
128bits, select the current Key Index and enter the key and four keys when necessary as
AR396 User’s Guide
47
the same as Network Authentication is Open and WEP Encryption is enabled.
If the Network Authentication is 802.1X, enter the IP address and Port number of Radius
server, Radius Key, enable or disable WEP encryption. If WEP Encryption is enabled,
select the Encryption Strength with 64bits or 128bits, select the current Key Index and
enter the key and four keys when necessary.
Figure 68: Wireless Setting – 802.1x Security
If the Network Authentication is WPA, enter WPA Group Rekey Interval, the IP address
and Port number of Radius server, Radius Key, WPA Encryption Method (TKIP, AES,
TKIP+AES), enable or disable WEP encryption. If WEP Encryption is enabled, select the
Encryption Strength with 64bits or 128bits, select the current Key Index and enter the key
and four keys when necessary.
Figure 69: Wireless Setting – WPA Security
If the Network Authentication is WPA-PSK (pre-shared key), enter the WPA Pre-Shared
Key and enter WPA Group Rekey Interval, WPA Encryption Method (TKIP, AES,
TKIP+AES), enable or disable WEP encryption. If WEP Encryption is enabled, select the
Encryption Strength with 64bits or 128bits, select the current Key Index and enter the key
and four keys when necessary.
AR396 User’s Guide
48
Figure 70: Wireless Setting – WPA-PSK Security
If the Network Authentication is WPA2, select Enable or Disable for WPA2
Pre-authentication, enter value of Network Re-Auth Interval, enter value of WPA Group
Rekey Interval, the IP address and Port number of Radius server, Radius Key, WPA
Encryption Method (TKIP, AES, TKIP+AES), enable or disable WEP encryption. If WEP
Encryption is enabled, select the Encryption Strength with 64bits or 128bits, select the
current Key Index and enter the key and four keys when necessary.
Figure 71: Wireless Setting – WPA2 Security
If the Network Authentication is WPA2-PSK (pre-shared key), enter the WPA Pre-Shared
Key and enter WPA Group Rekey Interval, WPA Encryption Method (TKIP, AES,
TKIP+AES), enable or disable WEP encryption. If WEP Encryption is enabled, select the
Encryption Strength with 64bits or 128bits, select the current Key Index and enter the key
and four keys when necessary.
Figure 72: Wireless Setting – WPA2-PSK Security
If the Network Authentication is mixed WPA2/WPA, select Enable or Disable for WPA2
Pre-authentication, enter value of Network Re-Auth Interval, enter value of WPA Group
Rekey Interval, the IP address and Port number of Radius server, Radius Key, WPA
Encryption Method (TKIP, AES, TKIP+AES), enable or disable WEP encryption. If WEP
Encryption is enabled, select the Encryption Strength with 64bits or 128bits, select the
AR396 User’s Guide
49
current Key Index and enter the key and four keys when necessary.
Figure 73: Wireless Setting – Mixed WPA2/WPA Security
If the Network Authentication is Mixed WPA2/WPA-PSK (pre-shared key), enter the WPA
Pre-Shared Key and enter WPA Group Rekey Interval, WPA Encryption Method (TKIP,
AES, TKIP+AES), enable or disable WEP encryption. If WEP Encryption is enabled,
select the Encryption Strength with 64bits or 128bits, select the current Key Index and
enter the key and four keys when necessary
Figure 74: Wireless Setting – Mixed WPA2/WPA-PSK Security
Click Save/Apply to save the configuration.
AR396 User’s Guide
50
MAC Filter
With this configuration, you could allow or deny wireless to access the device by wireless
MAC address filtering feature. It is disabled as default.
Figure 75: Wireless MAC Filter Configuration
Global Setting
Select the MAC Restrict Mode from one of Disable (no MAC filter), Allow (only those PCs
with MAC addresses in the table can surf Internet) and Deny (only those PCs with MAC
addresses in the table can not surf Internet).
Click Add to add an entry or Remove to remove the specified entry.
Figure 76: Add a Wireless MAC Address
Global Setting
Enter the MAC Address of wireless client
Click Save/Apply to save the configuration.
Wireless Bridge
The wireless bridge feature is also known as WDS, Wireless Distribution System).
Figure 77: Wireless Bridge Configuration
AR396 User’s Guide
51
Global Setting
Set the AP mode as Access Point or Wireless Bridge
When the AP mode is set to Wireless Bridge, the Wireless Restrict determine where it can
communicate with all other wireless bridges (set Bridge Restrict is Disabled) or just the
specified MAC addresses of remote wireless bridge devices (set Bridge Restrict is Enable
or Enable (scan)).
Click Refresh to get the updated information
Click Save/Apply to save the configuration
Advanced
This page allows you to configure advanced parameters for wireless communication.
Figure 78: Wireless Setting – Advanced
Global Setting
Enable AP Isolation if you do not want AP to be able to communicate with each other.
Set the Wireless Communication Band. If you do not know it, please it as default.
Select the channel from the list
Enter the value of Auto Channel Timer
Set the 54g Rate (Wireless Communication Rate), AUTO means to use the highest rate if
possible)
Set the Rate for Multicast Packets, AUTO means to use the highest if possible.
Set the Basic Rate
Set the Fragmentation Threshold values from 256 to 2364 bytes. If the value is too small,
it may cause a result in poor performance.
Set the RTS (Ready to Send) Threshold
Set DTIM Interval. DTIM stands for Delivery Traffic Indication Message. This is a beacon
and is a countdown informing wireless clients of the next window for listening to broadcast
and multicast messages. It is a wake-up interval for clients in power-saving mode.
Set Beacon Interval. The interval in milliseconds between beacon transmissions.
AR396 User’s Guide
52
Set the Maximum Associated Wireless Client
Set XPress Technology enabled or disabled.
Set 54g Mode to 54g Auto, 54g Performance, 802.11b, 54g LRS (limited rate support).
Set 54g Protection to AUTO if there are 802.11g and 802.11b coexisting in the wireless
network.
Set Afterburner Technology
Set Preamble Type. A preamble is a signal that sync up the timing between devices.
Set Transmission Power. Larger value means more coverage.
Station Information
The table shows up whole associated wireless clients the device and their status.
Figure 79: Wireless Setting – Station Information
Global Setting
Click Refresh to get the latest updated information
AR396 User’s Guide
53
8 Diagnostic
The Diagnostic web page provides the connection check in physical layer and upper layer.
The result is helpful to figure out the problem if you have problem to surf Internet.
Diagnostic
This page will show up the result of diagnostic in physical layer like WAN port and also upper
layer of PPP if ISP provides the PPP access protocol.
Figure 80: Diagnostic Result
Global Setting:
Click the Test to test it again
Click Test with OAM F4 to verify the DSL link.
AR396 User’s Guide
54
9 Management
The Management web page menu comprises:
Settings
System Log
SNMP Agent
TR-069 Client
Internet Time
Access Control
Update Software
Save/Reboot
Settings
This page allows you to backup the current configuration of the device, update the
configuration, and restore default configuration (factory setting).
Backup
Figure 81: Backup Settings
Click Backup Settings to backup the current settings of the device into file in PC.
Update
Figure 82: Restore Default Settings
Click Browser to specify the configuration file (settings) in PC and click Update Settings to
upload the settings to the device.
AR396 User’s Guide
55
Restore Default
Figure 83: Restore Default Settings
Click Restore Default Settings to restore the factory default settings.
System Log
This page allows you to view system log and also configure system log that way you want to
see.
Figure 84: Management Configuration – System Log
Global Setting
Click View System Log to view system log
Click Configure System Log to configure the way you want to see
Figure 85: Management Configuration – Configure System Log
AR396 User’s Guide
56
Global Setting
Select to Enable Log function or not
Select Log Level from the list
Select Display Level from the list
Select Mode from the list
Click Save/Apply to save the configuration.
SNMP Agent
This page allows you to use a management application to retrieve statistics and status from
the SNMP agent in the device.
Figure 86: Management Configuration – SNMP Agent
Global Setting
Check to enable or disable SNMP Agent
Enter the name of Read Community and Set Community
Enter the name of System Location and System Contact
Enter the IP address of Trap Manager IP
Click Save/Apply to save the configuration
TR-069 Client
This page allows you to access TR-069 ACS (Auto-Configuration Server). The ACS can
provision, configure, and diagnostic the device from remote site.
AR396 User’s Guide
57
Figure 87: Management Configuration – Firmware Upgrade
Global Setting
Select to Enable or Disable to send Inform packet to ACS.
Enter the Inform Interval number of seconds. The Inform packet will be sent to ACS
periodically.
Enter the ACS URL to reach ACS
Enter the ACS User Name and Password
Select to Enable or Disable to send the TR-069 SOAP messages to serial console port.
This is usually used for trouble shooting purpose.
Check to enable Connection Request Authentication
Enter the Connection Request User Name and Password
Click Save/Apply to save the configuration
AR396 User’s Guide
58
Internet Time
This page allows you to sync up the real time clock from Internet. .
Figure 88: Internet Time Configuration
Global Setting
Check to enable Automatically synchronize with Internet time servers
Click Save to save your settings
Access Control
This submenu provides you local (LAN) or remote (WAN) access to the device. This may help
the IT support staff to configure the router locally or remotely.
Service
Figure 89: Management Configuration – Access Control: Service
Global Setting:
Specify the method by which you wish to access the router locally or remotely by selecting
it. The following are the methods available for local and remote access:
AR396 User’s Guide
59
• FTP
• HTTP
• ICMP (Ping)
• SNMP
• SSH
• TELNET
• TFTP
Click Save/Apply to save the configuration.
IP Address
Figure 90: Management Configuration – Access Control: IP Address
Click to enable or disable Access Control by IP address.
Click Add to add IP address.
Check Remove and click Remove to remove the specified entry.
Figure 91: Management Configuration – Access Control: Add IP Address
Global Setting:
Add the IP Address and Subnet Mask which are permitted to access the device and
execute the management service.
Click Save/Apply to save the settings.
AR396 User’s Guide
60
Password
There are three levels of access accounts: admin, support, and user. The user name “admin”
has unrestricted access to change and view configuration of the device. The user name
“support” is used to allow an ISP technician to access the device for maintenance and to run
diagnostics. The user name “user” can access the device, view configuration settigns and
statistics, as well as updaet the device software.
Figure 92: Management Configuration – Access Control: Password
Global Setting:
Select the level of Username; admin, support or user
Enter the Old Password
Enter the New Password and Confirm Password
Click Save/Apply to save the configuration.
Update Software
This page allows you to upgrade the software (firmware).
Figure 93: Management Configuration – Update Software
AR396 User’s Guide
61
Global Setting:
First of all, you have to get the updated software (firmware) from ISP or manufacture.
Click Browser to specify the location and filename
Click Update Software to start the process. It could take minutes to complete it.
Save / Reboot
This page allows you to save current configuration and reboot to use the settings.
Figure 94: Management Configuration – Save/Reboot (no picture)
Global Setting
Click Save/Reboot to save the changes and reboot the device.
Click Reboot to discard changes and reboot the device only
AR396 User’s Guide
62
Appendix A - Configuring the Network Settings
To surf Internet through the device, you need to configure the network settings of your PC
correctly. This appendix provides the guide for a reference.
Configuring Ethernet (LAN) Card
Before you begin
By default, the device automatically assigns the required Internet settings to your PCs. You
need to check your PCs to get the information automatically. If you need to set the information
manually, please make sure you get enough information from service provider and configure
the network settings of PC correctly.
If you have connected your LAN PCs via Ethernet to the device, please follow the instructions to
configure the network settings in Windows XP (for example). The instructions for different
Windows system are very similar, please refer its manual separately.
Windows XP PCs
Click the Start button, and then click Control Panel, and then click the Network connection icon.
In the LAN window, right-click on the icon corresponding to your network interface card (NIC)
and select Properties. The Local Area Connection dialog box is displayed with a list of
currently installed network items.
Make sure that the check box of Internet Protocol TCP/IP is checked and click Properties. In
the Internet Protocol (TCP/IP) Properties dialog box, click the radio button labeled Obtain an
IP address automatically and also click the radio button labeled Obtain DNS server address
automatically. The PC will send inquiry packet to the device to get an IP address, gateway IP
address, DNS IP address and son on automatically.
Click OK to confirm your changes, and then close the Control Panel.
Assigning static IP addresses to your PCs
If you are professional in networking and subscribe to public IP addresses from service
provider, you need to assign the public IP address and associated information to the PCs
manually. For example, you may provide public WEB server in your LAN environment, you
need to assign public IP address in the WEB server. Basically, you need the information from
your service provider.
1. The IP address and subnet mask of each your PC.
2. The gateway IP address for PC to send packets to.
3. The DNS server IP address.
With above information, you are ready to configure your PCs.
Click the Start button, and then click Control Panel, and then click the Network connection icon.
In the LAN window, right-click on the icon corresponding to your network interface card (NIC)
and select Properties. The Local Area Connection dialog box is displayed with a list of
currently installed network items.
Make sure that the check box of Internet Protocol TCP/IP is checked and click Properties. In
the Internet Protocol (TCP/IP) Properties dialog box, click the radio button to enter the LAN IP
address, subnet and gateway IP address manually. Besides, click the radio button to enter
DNS IP address manually.
AR396 User’s Guide
63
Click OK to confirm your changes, and then close the Control Panel.
Configuring Wireless LAN card
If your PC is connected to the device through wireless link, you need to configure the network
setting of wireless LAN card in stead of LAN card. The steps to configure the network settings
of wireless LAN card are the same procedure described in previous section, Configuring
Ethernet LAN card section.
Wireless card and drivers
You need to install the wireless card and drivers correctly. Please check the information of
installation and security of wireless card provided by the wireless card vendor or notebook
vendor.
Configuring wireless device
The following steps provide a basic guide line to configure the wireless card to establish a
wireless connection to the device.
To configure wireless card to establish a connection to the device:
1. Make sure the wireless access card is installed.
2. Make sure the wireless driver is installed.
3. Scan the available wireless AP (Access Point) and find the SSID of the device
4. Connect to the AP
5. Enter the security code (WPA, WEP or others) if necessary
Then you have a connection to the device through wireless link.
AR396 User’s Guide
64
Appendix B - Troubleshooting
During the installing or using the device, you may encounter problem, this appendix provides
the solution and instructions to solve the issues. In case, the problem can not be solved,
please contact Customer Support for further support.
Troubleshooting Suggestions
Problem Troubleshooting Suggestion
LEDs
Power LED does not illuminate
after product is turned on. Verify that you are using the power adapter
provided with the device and that it is securely
connected to the device and a wall
socket/power strip.
LAN LED does not illuminate after
Ethernet cable is attached to your
PC.
Verify that the Ethernet cable is securely
connected to your LAN switch or PC and to the
device. Make sure the PC and/or hub is turned
on.
Internet Access
Cannot access the Internet Use the ping utility provided by PC’s system to
check whether your PC can communicate with
the device. Command: ping device’s LAN IP
address (by default 192.168.1.1). If it cannot,
check the Ethernet cabling.
If you assigned a private IP address to your PC,
(not a public address), please check the IP
addresses of gateway and DNS server in your
PC network settings. Those IP addresses
should be given by service provider. Otherwise,
configure the PC to receive the IP, gateway IP
and DNS IP automatically.
Cannot surf web pages on the
Internet. Verify that the DNS server IP address in the
PCs is correct for your ISP. If you configured
that the DNS server be assigned automatically
from a server, then verify with your ISP that the
address configured on the device is correct.
Device’s Web pages
Forgot my user ID or password. The default setting of username and password
is “admin”. If you failed to access the device by
enter this. You can reset the device to the
default configuration by pressing the Reset
Default button on the front or rear panel of the
device. Then, type the default Username
(admin) and password (admin). WARNING:
Reset Default means the device returns all
settings to their default values.
AR396 User’s Guide
65
Problem Troubleshooting Suggestion
Cannot access the web pages Verify the Ethernet connection by using ping
utility. Command: ping device’s LAN IP address
(by default 192.168.1.1). If it cannot, check the
Ethernet cabling.
Verify that you are using latest Internet Explorer
or Netscape Navigator or other browsers.
Verify that subnet mask: the PC’s IP address
should be defined as being on the same subnet
as the IP address of the LAN port on the device.
Changes/settings to the web
pages are not being saved. Be sure to save the configuration after any
changes.
IP Utilities for diagnostic
Ping
Ping is a simple command and easy way to check remote PC or device on your network and
the Internet. Besides, this is a command supported in most of IP-based network operation
system like Windows, Linux and so on. To use it, you must know the IP address of the PC or
device which you like to send a message to. If the remote PC or device gets this message, the
PC or device will send back a message in reply. If you saw the reply, you know the
communication link to remote PC or device is OK. In Windows system, you can execute a ping
command from the Start menu by clicking the Start button, and then clicking Run and then
enter below statement in the open box: (the 192.168.1.1 is an IP address which you like to
check the device is on line or not.)
ping 192.168.1.1
Click OK.
If the communication link is OK, you will see the message and a Command Prompt window is
displayed as an example:
If not, you will receive the message Request timed out.
You could also use this ping tool to verify the Internet connection by entering an external
address, such as www.yahoo.com. If you do not know the IP address of a particular Internet
location, you can use the nslookup command as described in the following section.
Please be noted that some of PCs or devices may reject to reply message requesting by ping
command. At that time, you won’t get message in reply, but message timeout.
Nslookup
There is another useful command provided by Windows system. You can use the nslookup
command to get the IP address associated with a domain name like www.yahoo.com or
www.microsoft.com. The nslookup command looks up the domain name in on your DNS
server located in your service provider. The server then returns the associated IP address. In
Windows system, you can execute the nslookup command by clicking the Start button and
then clicking Run and then entering below statement in the open box.
AR396 User’s Guide
66
Nslookup
Click OK.
A Command Prompt window is prompted. Enter the domain name like www.yahoo.com or
www.microsoft.com. The associated IP address will be shown as below
In this case, you see multiple IP addresses associated with that domain name. It is common
for Web server. System engineers prepare multiple and redundant servers to handle the
heavy traffic and also balance the load in each server.
AR396 User’s Guide
67
Appendix C - Specification
A1. Hardware Specifications
Local Interface
• Four port 10/100BaseT Ethernet Switch (4 * RJ-45 connectors), IEEE 802.3u with
MDI/MDIX auto-detection
• Integrated 802.11b/g WLAN Access Point
WAN ADSL Line Interface
• Compliant with ITU-T G.992.1, G.992.2, G.992.3, G.992.5 and ANSI T1.413 Issue 2
• Line Impedance: 100 Ω
• Connection Loops: One (pair wire)
• Connector: RJ-11
Indicators
• POWER – Green LED indicates power and operation. Orange LED indicates failure.
• ALARM – Red LED indicates DSL link not connected.
• LAN 1 ~ 4 – Green LED indicates LAN connection.
• WLAN – Green LED indicates wireless function enabled.
• DSL – Green LED indicates DSL link connected.
• INTERNET – Green LED indicates PPP connection. Red indicates PPP failure or device
can not get an IP address.
OAM&P
• Local: Telnet and Web management
• Remote: Telnet and Web Management
Environment
• Operation Temperature: 0°C ~ 40°C
• Operation Humidity: 5% ~ 95%
• Storage Temperature: -20 ~ +85°C
• Storage Humidity: 5%~95%
Power
• DC Adapter: Input 100~240VAC, 50/60Hz; Output 12VDC 1A
Certificates
• UL,FCC(TBD)
A2. Software Specifications
Bridging
Transparent Bridging and spanning(IEEE 802.1D) with at least 32 MAC addresses
RFC2684 (RFC 1483) Bridged
Routing
IP routing and PPP supported
PAP and CHAP for user authentication in PPP connection
RFC2684 (RFC1483) Routed
MAC Encapsulated Routing (MER)
DHCP client, server and relay agent
DNS relay
Wireless LAN
Supports 802.1x; WEP; WEP2; WPA; WPA2; TKIP; AES
Hidden SSID
WMM for advanced Quality of Service
Firewall
Support NAT and DMZ
Stateful Packet Inspection (SPI) with DOS protection - Ping of Death, SYN Flood LAND
AR396 User’s Guide
68
Protection against IP and MAC address spoofing
Configuration and Network Management Features
SNMP GETs, SETs and TRAPs for four groups in MIB-II
DHCP client and server for IP management
UPnP Internet Gateway Device (IGD) compliance
WEB for local or remote management
HTTP or TFTP for firmware upgrade and configuration
Support TR-069, TR-098 and with parameters: DeviceInfo, ManagementServer, Time,
IPPingDiagonostic, etc
Note: The hardware and software s
p
ecifications are sub
j
ected to chan
g
e without notices.
AR396 User’s Guide
69
Appendix D - Warranties
B1. Product Warranty
XAVi Technologies warrants that the ADSL unit will be free from defects in material and
workmanship for a period of twelve (12) months from the date of shipment.
XAVi Technologies shall incur no liability under this warranty if
－ The allegedly defective goods are not returned prepaid to XAVi Technologies within thirty (30)
days of the discovery of the alleged defect and in accordance with XAVi Technologies’ repair
procedures; or
－ XAVi Technologies’ tests disclose that the alleged defect is not due to defects in material or
workmanship.
XAVi Technologies’ liability shall be limited to either repair or replacement of the defective goods,
at XAVi Technologies’ option.
XAVi Technologies MARKS NO EXPRESS OR IMPLIED WARRANTIES REGARDING THE
QUALITY, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE BEYOND
THOSE THAT APPEAR IN THE APPLICABLE USER’S DOCUMETATION. XAVi SHALL NOT
BE RESPONSIBLE FOR CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE DAMAGE,
INCLUDING, BUT NOT LIMITED TO, LOSS OF PROFITS OR DAMAGES TO BUSINESS OR
BUSINESS RELATIONS. THIS WARRANTY IS IN LIEU OF ALL OTHER WARRANTIES.
B2. Warranty Repair
1. During the first three (3) months of ownership, XAVi Technologies will repair or replace a
defective product covered under warranty within twenty-four (24) hours of receipt of the
product. During the fourth (4th) through twelfth (12th) months of ownership, XAVi
Technologies will repair or replace a defective product covered under warranty within ten (10)
days of receipt of the product. The warranty period for the replaced products shall be ninety
(90) days or the remainder of the warranty period of the original unit, whichever is greater.
XAVi Technologies will ship surface freight. Expedited freight is at customer’s expense.
2. The customer must return the defective product to XAVi Technologies within fourteen (14)
days after the request for replacement. If the defective product is not returned within this time
period, XAVi Technologies will bill the customer for the product at list price.
B3. Out-of-Warranty Repair
XAVi Technologies will either repair or, at its option, replace a defective product not covered
under warranty within ten (10) working days of its receipt. Repair charges are available from
the Repair Facility upon request. The warranty on a serviced product is thirty (30) days
measured from date of service. Out-of-warranty repair charges are based upon the prices in
effect at the time of return.
AR396 User’s Guide
70
Appendix E - Contact information
You can help us serve you better by sending us your comments and feedback. Listed below
are the addresses, telephone and fax numbers of our offices. You can also visit us on the
World Wide Web at www.xavi.com.tw for more information. We look forward to hearing from
you!
WORLD HEADQUARTER
XAVi Technologies Corporation
9F, No. 129 Hsing Te Road, Sanchung City
Taipei County 241, Taiwan
Tel: +886-2-2995-7953 Fax: +886-2-2995-7954
USA BRANCH OFFICE
53 Parker Irvine, CA 92618
Tel: +1-949-380-7550 Fax: +1-949-380-9204
S.AMERICA OFFICE
Tel: +55-12-8144-2972
EUROPEAN BRANCH OFFICE
Oehleckerring 6B, 22419 Hamburg, Germany
Tel: +49-40-514400-53 Fax: +49-40-514400-79
CHINA SUBSIDIARY
Room 401, Floor 4, #608 ZhaoJiaBang Road,
Shanghai, 200031
Tel: +86-21-6431-8800 Fax: +86-21-6431-7885
V1.0XAAR3960