Compex Systems 08-WPE53G Users Manual

NetPassage WPE53G
User Manual
Table of Contents
OVERVIE W THE PRODUCT..............................................................1
Introduction ................................................................................................... 1
Features and Benefits................................................................................... 2
When to Use Which Mode........................................................................... 4
PANEL VIEWS AND DESCRIPTION................................................13
INSTALL T HE HARDWAR E...............................................................14
Setup Requirements...................................................................................14
Setup for Windows XP/2000....................................................................... 18
ACCESS THE WEB I N TE R F A C E .......................................................20
Access with uConfig ..................................................................................20
Manual access with Internet Explorer .....................................................23
PERFORM BASIC CONFIGURATION ............................................25
Setup Management Port........................................................................... 25
Setup WLAN.................................................................................................40
Setup Your WAN..........................................................................................57
Setup Telnet / SSH.......................................................................................64
Set the WEB Mode......................................................................................68
Setup SNMP..................................................................................................69
Setup SNMP Trap......................................................................................... 70
Setup STP ......................................................................................................71
Use MAC Fi ltering........................................................................................ 74
PERFORM ADVANCED CONFIGURATION..................................84
Setup Routing.............................................................................................. 84
Use Routing Information Protocol............................................................. 86
Use Network Address Translation..............................................................87
Control the Bandwidth Available ............................................................94
Perform Remote Management................................................................98
USE PARALLEL BROA DBAND........................................................99
Setup Email Notification........................................................................... 101
Using Static Address Translation..............................................................102
Use DNS Redirection.................................................................................103
Dynamic DNS Setup .................................................................................106
USE THE WIRELESS EXTENDED FEATURES....................................111
Setup WDS2................................................................................................ 111
Set Virtual AP (Multiple SSID) ...................................................................115
Set Preferred APs.......................................................................................117
Set Wireles s Mu l t i m edia............................................................................120
Setup Point-to-Point & Point-to-MultiPoint Connection......................123
Setup Repeater.........................................................................................127
SECURE YOUR WIRELESS LAN.....................................................132
Setup WEP.................................................................................................. 133
Setup WPA-Pe r s on a l................................................................................. 134
Setup 802.1x/RADIUS for Access Point................................................... 136
Setup 802.1x/RADIUS for Client............................................................... 138
Setup WPA Enterprise for Access Point .................................................140
Setup WPA Enterprise for Client.............................................................. 141
CONFIGURE THE SECURITY FEATURES .......................................144
Use Packet Filtering...................................................................................144
Use URL Filtering......................................................................................... 147
Configure the Firewall.............................................................................. 148
Use the Firewall Log..................................................................................152
ADMINISTER THE SYSTEM.............................................................15 3
Use the System Tools.................................................................................153
Use the HELP menu...................................................................................170
APPENDIX: USE THE COMMAND LINE INTERFACE...................172
APPENDIX: VIRTUAL AP (MULT I-SSID) FA Q................................177
APPENDIX: VIEW THE TECHNICAL SPECIFICATIONS................181
Overview the Product
Introduction
NetPassage WPE53G is a high-performance and low-cost IEEE802.11b/g Access Point using the latest AR5007 technology. NetPassage WPE53G is also very small compared to other Access Points in the market. Using Atheros System-on-Chip (SoC) solution, WPE53G supports high-speed data transmission of up to 54Mbps or 108 Mbps. Moreover, Power-over-Ethernet support enables NetPassage WPE53G to be used even in areas without readily-available power outlets.
NetPassage WPE53G complements devices supporting multiple virtual AP connections by directing each to a separate secure virtual LAN. Each VLAN can be secured with different wireless encryption methods, providing the security connections necessary for enterprise networks.
NetPassage WPE53G also incorporates features that are useful to system integrators, such as Antenna Alignment for adjusting your antenna to optimize performance, Syslog for event logging, as well as Telnet/SSH for easy device management.
Page 1
Features and Benefits
••
CCoommppaacctt FFoorrmm FFaaccttoorr
Small in dimension; light in weight. You can bring it with you anywhere.
••
MMuullttiippllee--SSSSIIDD SSuuppppoorrttiinngg VVLLAANN SSeeggmmeennttaattiioonn..
Up to 4 virtual access points (VAP) with unique BSSIDs is supported and if required, traffic from each VAP can be tagged to a specific VLAN and bridged. The security mode for each VLAN can be configured separately.
LLoonngg RRaannggee SSuuppppoorrtt
••
Our proprietary Long Distance Algorithm for ACK and CTS Timeout adjustment support opens up the potential for long range wireless deployment. Recommended values are provided for the parameters that can also be fine­tuned for optimal performance.
••
BBaannddwwiiddtthh CCoonnttrrooll
In Routing Mode, Bandwidth Control allows the administrator to manage the bandwidth of subscribers to prevent massive data transfer from slowing down the Internet access of other users. The Upload/Download bandwidth at WAN/LAN ports of specific IP or MAC addresses can be specifically limited.
••
WWiirreelleessss DDiissttrriibbuuttiioonn SSyysstteemm 22
WDS connects access points using MAC address / ESSID to create a wider network so mobile users can roam while remaining connected to network resources.
Page 2
••
SSppaannnniinngg TTrreeee PPrroottooccooll
Provides redundancy and automatically reconfigures to changes in network topology.
••
PPaarraalllleell BBrrooaaddbbaanndd
In Gateway Mode, Load-Balancing and Fail-Over Redundancy provides scalable Internet bandwidth.
SSNNMMPP TTrraapp
SNMP traps logs and provides notification of significant events in the network.
••
AAnntteennnnaa CCoonnttrrooll aanndd AAlliiggnnmmeenntt
Allows the user to select the specific antenna to use, and also adjust it for optimal throughput.
CPP RReellaayy
••
DDHHC
In Routing Mode, DHCP clients can get IP address from the central DHCP server even if they are on different subnets.
••
RReemmoottee FFiirrmmwwaarree UUppggrraaddee
Even if they are physically distant from the access point, users can upgrade the firmware remotely through Telnet / SSH.
••
RRIIPP 11 // 22
In Routing Mode, Routing Information Protocol Version 1 / 2 is supported.
Page 3
When to Use Which Mode
Access Point Mode
The Access Point Mode is the default mode of the access point and enables the bridging of wireless clients to access the wired network infrastructure and also enables their communication with each other. In this example the wireless users are able to access the file server connected to the switch, through the access point in Access Point Mode.
Page 4
Access Point Client Mode
In Access Point Client Mode the device acts as a wireless client. When connected to an access point, it creates a network link between the Ethernet network connected at this client device, and the wireless Ethernet network connected at the access point.
In this mode it can only connect with another access point. Other wireless clients cannot connect to it directly unless they are also connected to the same access point – allowing them to communicate with all devices connected to the Ethernet port of the access point.
In this example the workgroup PCs can access the printer connected to the access point in Access Point Client Mode.
Optional additional feature: Point-to-Point connection in this operation mode is also supported if you specifically wish to connect with an access point only. Please refer to the Point-to-Point setup section.
Page 5
Wireless Routing Client Mode
In Wireless Routing Client Mode the Ethernet port of the access point may be used to connect with other devices on the network while Internet access would be provided through wireless communication with a wireless ISP.
Page 6
Gateway Mode
In Gateway Mode, the access point supports several types of broadband connections in a wireless network after you have identified the type of broadband Internet access you are subscribed to.
Page 7
Broadband Internet Access Type:
Static IP Address
Use Static IP Address if you have subscribed to a fixed IP address or to a range of fixed IP addresses from your ISP.
Dynamic IP Address
With Dynamic IP Address the access point requests for, and is automatically assigned an IP address by your ISP, for instance:
Singapore Cable Vision
@HOME Cable Services
PPP over Ethernet (PPPoE)
Use PPPoE if you are using ADSL services in a country utilizing standard PPPoE authentication, for instance:
Germany with T-1 Connection
Singapore with SingNet Broadband or Pacific Internet
Broadband
PPTP
Use PPTP if you are using ADSL services in a country utilizing PPT P connection and authentication.
Page 8
Wireless Adapter Mode
In Wireless Adapter Mode, the access point can communicate wirelessly with another access point to perform transparent bridging between 2 networks, like in the Access Point Client Mode. In this mode, however, the wireless adapter connects to a single workstation only. No client software or drivers are required to use this mode.
Optional additional feature: Point-to-Point connection in this operation mode is also supported if you specifically wish to connect with an access point only. Please refer to the Point-to-Point setup section.
Page 9
Transparent Client Mode
In Transparent Client Mode, the access point provides connection with an access point* acting as the RootAP. This operation is designed for the implementation of Point-to-Point and Point-to-Multipoint connections.
Point-to-Point
An access point acts as Root AP and 1 other access point acts as Transparent
An access point acts as Root AP
and several other access point
Client.
This mode is generally used for outdoor connections over long distances, or for indoor connections between local networks.
Point-to-MultiPoint
acts as Transparent Clients.
Current Compex model that provide RootAP support are: WP54x series; WPP54x series; WP18; and NP18A.
For newer models, please contact your Compex supplier or visit the Compex web site.
Page 10
Difference Between other client modes and Transparent
Client Mode
Other client modes
Connectivity with any
standard APs.
All devices connected to
the Ethernet port use a
common MAC address for
communications with the
AP.
The Transparent Client Mode is more transparent, making it more suitable for linking 2 networks together in a point-to-point, or point-to­multipoint network connection.
Transparent Client Mode
Connectivity with RootAP-
supported APs. Devices connected to the Ethernet port flow through
freely and transparently
without the MAC address
restriction.
Page 11
Repeater Mode
The access point comes with a built-in Repeater Mode to extend the range, and substantially enhance the performance of the wireless network by allowing communications over much greater distances.
In Repeater Mode, the access point acts as a relay for network signals on the network by regenerating the signals it receives, and retransmitting them to extend the range of the existing network infrastructure.
Detailed information on the Repeater Mode is available in the Repeater Setup section.
Page 12
Panel Views and Description
Page 13
Install the Hardware
Setup Requirements
CAT5/5e Networking Cable.
At least 1 computer installed with a web browser and a wired or
wireless network interface adapter.
All network nodes installed with TCP/IP and properly configured IP address parameters.
Using power adapter to supply power to the unit
SStteepp 11::
Connect the external antenna to the SMA connector of the access point.
Page 14
SStteepp 22::
Insert one end of the Ethernet cable to the Ethernet port on your access point, and the other end of the cable to your PC’s Ethernet network adapter.
SStteepp 33::
Attach the power adapter to the main electrical supply, and connect the power plug into the socket of the access point.
SStteepp 44::
Turn ON the power supply and power ON your PC. Notice that the LEDs: Power and Port 1 or 2 (depending on which port you have connected the RJ45 Ethernet cable to) have lighted up. This indicates that connection has been established successfully between your access point and your PC.
Page 15
Using PoE to supply power to the unit
PoE is fu lly com patible with your access point. This accessory supp lies operational power to the wireless AP via the Ethernet cable connection.
Users who wish to use it to supply power to the access point may follow the installation procedures as shown below:
SStteepp 11::
Connect the external antenna to the SMA connector of the access point.
SStteepp 22::
Use an RJ45 Ethernet cable to connect one end of the cable to the Ethernet socket of PoE and the other end to one of the Ethernet ports of the access point.
Page 16
SStteepp 33::
Next, connect the RJ45 Ethernet cable attached to PoE to your PC’s Ethernet network adapter.
Once you have finished configuring your access point, you can connect the PoE RJ45 Ethernet cable to your network device, such as to a switch or hub.
SStteepp 44::
Connect the power adapter supplied with PoE to the main electrical supply and the power plug into the socket of PoE.
Note:
The voltage and current supplied to the access point’s power adapter and PoE power adapter are different. Do not interchange the power adapters.
SStteepp 55::
Now, turn on your power supply. Notice that the LEDs have lighted up. This indicates that the access point is receiving power through PoE and that connection between the access point and your PC has been established.
Page 17
Setup for Windows XP/2000
SStteepp 11::
Go to your desktop, right-click on the My Network Places icon and select Properties.
SStteepp 22::
Right-click the network adapter icon and select Properties.
SStteepp 33::
Highlight Internet Protocol
(TCP/IP) and click on the Properties button.
SStteepp 44::
Select the Use the following IP address radio button.
Set the IP address to
192.168.168.X and subnet mask to 255.255.255.0, where X can be any number from 2 to 254.
Page 18
SStteepp 55::
Click on the OK button to close all windows.
SStteepp 66::
To verify that the IP address has been correctly assigned to your PC, go to the Start menu, Accessories, select Command Prompt, and type the command: ipconfig/all
Your PC is now ready to communicate with your access point.
Page 19
Access the Web Interface
Access with uConfig
The UConfig utility provides direct access to the web interface.
SStteepp 11::
Insert the Product CD into your CD-ROM drive, the CD will autorun.
SStteepp 22::
From the UUttiilliittiieess section, select to install the uuCCoonnffiigg utility to your hard disk .
SStteepp 33::
After installation double-click on the uuCCoonnffiigg icon and click on the YYeess button.
Page 20
SStteepp 66::
Select the access point from the products list and click on the OOppeenn WWeebb button. To retrieve and display the latest device(s) in the list, click on the RReeffrreesshh button.
SStteepp 77::
Do not exit the uConfig program while accessing the web-based interface as this will disconnect you from the device. Click on the OOKK button.
Page 21
SStteepp 88::
At the login page, press the LLOOGGIINN!! button to enter the configuration page. The default password is: password
SStteepp 99::
You will then reach the home page of the access point web-based interface.
Page 22
Manual access with Internet Explorer
SStteepp 11::
Launch your Web browser and under the TToooollss tab, select IInntteerrnneett OOppttiioonnss.
SStteepp 22::
Open the CCoonnnneeccttiioonnss tab and in the LLAANN SSeettttiinnggss section disable all the option boxes. Click on the OOKK button to update the changes.
Page 23
SStteepp 33::
At the AAddddrreessss bar type in http://192.168.168.1 and press EEnntteerr on your keyboard.
SStteepp 44::
At the login page, click on the LLOOGGIINN!! Button.
You will then reach the home page of the access point web interface.
Page 24
Perform Basic Configuration
Setup Management Port
At the Management Port Setup page, you may:
Automatically obtain IP address from DHCP server. The default IP 192.168.168.1 is used until a new IP is obtained. Access Point Clients also allows PCs connected to the Ethernet port to obtain IP from the DHCP server at the access point end network.
Manually define IP address
Follow these steps to automatically obtain the IP address from DHCP server.
SStteepp 11::
Click on TTCCPP//IIPP SSeettttiinnggss from MMaannaaggeemmeenntt SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Select to AAuuttoommaattiiccaallllyy oobbttaaiinn IIPP aaddddrreessss.
Page 25
SStteepp 33::
Select to either AAuuttoommaattiiccaallllyy oobbttaaiinn DDNNSS sseerrvveerr aaddddrreessss or UUssee tthhee ffoolllloowwiinngg DDNNSS sseerrvveerr
aaddddrreessssees
s and enter the parameters, if any.
In the MMaannaaggeemmeenntt PPoorrtt SSeettuupp page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network.
If you choose to Automatically obtain DNS server address.
If you choose to Use the following DNS server addresses.
SStteepp 44::
Click on the AAppppllyy button to save your new parameters.
Page 26
This table describes the parameters that can be modified in the
Management Port Setup page if you select to Use the following DNS server addresses.
Parameters Description
Primary DNS IP Address
Secondary DNS IP Address
Your ISP usually provides the IP address of the DNS server.
This optional field is reserved for the IP address of a secondary DNS server.
Page 27
Follow these steps to manually define the IP address.
SStteepp 11::
Click on TTCCPP//IIPP SSeettttiinnggss from MMaannaaggeemmeenntt SSeettuupp from the
CCOONNFFIIGGUURRAATTIIOON
N menu.
SStteepp 22::
Select to UUssee tthhee ffoolllloowwiinngg IIPP aaddddrreessss. In the MMaannaaggeemmeenntt PPoorrtt SSeettuupp page, refer to the table below to
replace the default settings of Access point with appropriate values to suit the needs of your network.
The parameters are the same in routing mode.
SStteepp 33::
Click on the AAppppllyy button to save your new parameters.
Page 28
This table describes the parameters that can be modified in the Management Port Setup page.
Parameters Description
IP Address When the DHCP server of the access point is enabled (unless
you set a different DHCP Gateway IP Address), this LAN IP Address would be allocated as the Default Gateway of the DHCP client.
The IP address of your Access point is set by default to
192.168.168.1.
Network Mask
Default Gateway IP
Primary DNS IP Address
Secondary DNS IP Address
The Network Mask serves to identify the subnet in which your Access point resides. The default network mask is
255.255.255.0.
(Optional) As a bridge Access Point, the access point does not usually communicate with devices on other IP subnets. However, the Default Gateway a PC allows the access point to communicate with devices on different subnets. For instance, if you want to access the access point from the Internet or from a router on the LAN, enter the router IP address in the Default Gateway IP field.
The Default Gateway IP address of your access point is set to nil by default.
Your ISP usually provides the IP address of the DNS server.
This optional field is reserved for the IP address of a secondary DNS server.
Page 29
Setup DHCP Server
There are 3 DHCP Modes:
NONE By default, DHCP Mode is set to NONE. Leave the selection at this mode if you do not wish to use DHCP.
DHCP Server Select this mode to setup a DHCP server.
DHCP Relay Select this mode to setup a DHCP relay. By default, DHCP broadcast messages do not cross router interfaces. DHCP Relay supports DHCP Clients and DHCP Servers on different networks by configuring the router to pass selective DHCP messages.
Follow these steps if you do not wish to use DHCP.
SStteepp 11::
Click on AAddvvaanncceedd SSeettttiinnggss from MMaannaaggeemmeenntt SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Set DDHHCCPP MMooddee to NNOONNEE.
SStteepp 33::
Click on the AAppppllyy button.
Page 30
The following will guide you to setup the DHCP Server.
SStteepp 11::
Click on AAddvvaanncceedd SSeettttiinnggss from MMaannaaggeemmeenntt SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Set DDHHCCPP MMooddee to DDHHCCPP SSeerrvveerr. In DDHHCCPP SSeerrvveerr SSeettuupp, refer to the table below to set the appropriate values to suit
the needs of your network.
SStteepp 33::
Click on the AAppppllyy button.
Page 31
This table describes the parameters that can be modified in DHCP Server Setup.
Parameters Description
The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN.
DHCP Start IP Address
DHCP End IP Address
This is the first IP address that the DHCP server will assign and should belong to the same subnet as the access point. For example if the access point IP address is 192.168.168.1 and the network mask is
192.168.168.1 and 255.255.255.0, the DHCP Start IP Address should be 192.168.168.X, where X can be any number from 2 to 254. It is pre-set to
192.168.168.100.
This is the last IP address that the DHCP server can assign and should also belong to the same subnet as your access point. For example if the access point IP address is 192.168.168.1 and the network mask is 192.168.168.1 and 255.255.255.0, the DHCP End IP Address should be 192.168.168.X, where X can be any number from 2 to 254. It is pre-set as
192.168.168.254.
Page 32
DHCP Gateway IP Address
DHCP Lease Time
Always use these DNS servers
Primary DNS IP Address
Secondary DNS IP Address This optional setting is the IP address of a
Though the DHCP server usually also acts as the Default Gateway of the DHCP client, the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client. The DHCP client will thus receive its dynamic IP address from the access point but will access to the Internet or the other LAN through the Default Gateway defined by the DHCP Gateway IP Address.
For inst ance if the acce ss point in Acces s Point Client mode connects to an Internet gateway X, a PC wired to the access point will be unable to obtain a dynamic IP address directly from X. But if you enable the DHCP server of the access point and set the IP address of X as the DHCP Gateway IP Address, the PC will obtain its IP address from the access point and access the Internet through
X.
This is the length of time that the client may use the assigned address before having to check with the DHCP server to see if the Address is still valid.
Select this option to always use the DNS servers specified.
Your ISP usually provides the IP address of the DNS server.
secondary DNS server.
Page 33
The following will guide you to setup the DHCP Relay. (Availab le in Clie nt and Wirele ss Routing Client modes)
SStteepp 11::
Click on AAddvvaanncceedd SSeettttiinnggss from MMaannaaggeemmeenntt SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Set DDHHCCPP MMooddee to DDHHCCPP RReellaayy. In DDHHCCPP SSeerrvveerr SSeettuupp, refer to the table below to set the appropriate values to suit
the needs of your network.
SStteepp 33::
Click on the AAppppllyy button.
Page 34
This table describes the parameters that can be modified in DHCP Server Setup.
Parameters Description
DHCP Server IP
DHCP Gateway IP Though the DHCP server usually also acts as the
This is the IP address of the DHCP server.
Default Gateway of the DHCP client, the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client. The DHCP client will thus receive its dynamic IP address from the access point but will access to the Internet or the other LAN through the Default Gateway defined by the DHCP Gateway IP Address.
For inst ance if the acce ss point in Acces s Point Client mode connects to an Internet gateway X, a PC wired to the access point will be unable to obtain a dynamic IP address directly from X. But if you enable the DHCP server of the access point and set the IP address of X as the DHCP Gateway IP Address, the PC will obtain its IP address from the access point and access the Internet through X.
Page 35
View Active DHCP Leases
SStteepp 11::
Select MMaannaaggeemmeenntt SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Go to the AAddvvaanncceedd DDHHCCPP SSeerrvveerr OOppttiioonnss section and click on the SShhooww AAccttiivvee
DDHHCCPP lleeaassees
The DHCP Active Leases table displays:
The Host Name of the DHCP client.
The IP Address allocated to the DHCP client.
The Hardware (MAC) Address of the DHCP client.
The Lease Expired Time.
s button.
NOTE
Invalid date and time displayed in the Lease Expired Time column indicates that the clock of the access point has not been set properly.
Page 36
Reserve IP Addresses for Predetermined DHCP Clients
A reserved IP address is excluded from the pool of free IP addresses the DHCP server draws on for dynamic IP address allocation. For instance if you set up a publicly accessible FTP or HTTP server within your private LAN, while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
SStteepp 11::
From the AAddvvaanncceedd DDHHCCPP SSeerrvveerr Options section click on the DDHHCCPP SSeerrvveerr
RReesseerrvvaattiioonnss
SStteepp 22::
Click on the AAdddd button.
button.
Page 37
SStteepp 33::
Fill in: The host portion of the IP Address to be reserved. The Hardware Address, in pairs of two hexadecimal values.
Press the AAppppllyy button to effect your new entry.
The DDHHCCPP SSeerrvveerr RReesseerrvvaattiioonnss page refreshes to display the currently reserved IP addresses.
Page 38
Delete DHCP Server Reservation
SStteepp 11::
Select the reserved IP address to delete.
SStteepp 22::
Click on the DDeelleettee button.
The DDHHCCPP SSeerrvveerr RReesseerrvvaattiioonnss table refreshes to display your changes.
Page 39
Setup WLAN
Configure the Basic Setup of the Wireless Mode
SStteepp 11::
Select WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu and you will see the sub menus expanded under WWLLAANN SSeettuupp, select BBaassiicc. The default operating mode of the access point is the Access Point mode.
SStteepp 22:: ((OOppttiioonnaall:: CChhaannggee CCuurrrreenntt mmooddee))
To change the current mode of the access point click on CChhaannggee, select the OOppeerraattiioonn MMooddee, and click on the AAppppllyy button to access the setup page of the selected mode. You will be prompted to reboot the access point to effect the mode setting.
Page 40
Step 3: Enter the parameters in their respective fields, click on the
y button and reboot your device to let your changes
AApppplly
take effect. Note that the WWLLAANN BBaassiicc SSeettuupp pages for the modes are
different.
Example: WWLLAANN BBaassiicc SSeettuupp page for CClliieenntt MMooddee
Example: WWLLAANN BBaassiicc SSeettuupp page for AAcccceessss PPooiinntt
Page 41
WLAN Basic Setup
page Parameters
The Current Mode The default operating mode is the Access Point mode. Operating
modes:
Access Point Mode
Client Mode
Wireless Routing Client
Gateway Mode
Wireless Adapter Mode
Transparent Client Mode
Repeater Mode
You can toggle the modes by clicking on the CChhaannggee button.
ESSID
Site Survey
Enter a preferred name for the wireless network. Your wireless clients must be configured with the same ESSID. This case-sensitive entry can consist of a maximum of 32 characters.
A list of wireless devices in the WLAN that are detected by your access point. Information such as MAC address, channel, SSID, algorithm and signal strength can be found in the listing. This feature is supported by the Access Point Client and Wireless Routing Client modes.
Description
Page 42
Wireless Profile
Country
Channel
Tx Rate
Closed System
A selection of network environment types in which to operate the access point:
••
880022..1111bb oonnllyy
Supports wireless B clients with data rates of up to 11Mbps in the frequency range of 2.4GHz.
••
880022..1111bb//gg mmiixxeedd
Supports both wireless B and G clients.
••
880022..1111gg oonnllyy
Supports wireless-G clients that offer transmission rates of up to 54Mbps in the 2.4GHz frequency band.
••
ssuuppeerrGG
Supports wireless superG clients that offer transmission rates of up to 108Mbps in the 5GHz frequency band.
Choose the Country where you are located.
This option allows you to select a frequency channel for the wireless communication and is only available in the Access Point, Point to Point and Point to Multiple Point modes. Select SmartSelect to automatically scan and recommend the best channel that the access point can utilize.
Allows you to choose the rate of data transmission ranging from 1Mbps to Fully Auto.
The access point will not broadcast its WLAN name (ESSID) when Closed system is enabled. By default Closed system is disabled.
Page 43
Act as RootAP
VLAN ID
Channel Survey
The access point will connect with 1, or multiple clients to create a point-to-point and point-to-multi-point connection network with 2 or more access points.
This connection mode is fully compliant with 802.1h standards.
This is the number that identifies the different virtual network segments to which the network devices are grouped.
This can be any number from 1 to 4094.
A list of channels that are detected by your access point in the WLAN. Information such as frequency, channel, MyQuality, NeighQuality, APCount and Recommendation can be found in the listing.
The Access Point and Gateway modes support this feature.
Page 44
Scan for Site Survey
(Availab le in Clie nt and Wirele ss Routing Client modes)
SStteepp 11::
In the MMooddee SSeettuupp page click on the SSiittee SSuurrvveeyy button.
The SSiittee SSuurrvveeyy provides a list of the MMAACC aaddddrreesssseess ((BBSSSSIIDD)) and SSSSIIDD of neighbouring access points detected, the CChhaann (channels), AAuutthh (Authentication), AAllgg (Algorithm) used, and the strength of the SSiiggnnaall received.
SStteepp 22::
To connect the client to one of the access points detected, select the radio button corresponding to the access point you want to connect to.
SStteepp 33::
Click on the AAppppllyy button to effect the change and return to the setup page.
SStteepp 44::
Click on the RReeffrreesshh button to update the screen.
Page 45
Read-Only Parameters of
Neighbouring Access Points
Viewable from Site Survey page
Bssid
SSID
Chan
Auth
Alg
Signal
NOTE Site Survey is used to scan and display all access points based on the
current security setting of your access point. Explanation of the following information supplied by the Site Survey
according to the security setting:
If the security mode is set to None or WEP, the scan will show all available access points with no security or WEP security
If the security mode is set to WPA-Personal, the scan will show all available access points with all types of security from no security,
WEP security to WPA-Personal security.
Description
Wireless MAC address of the access point in a wireless network infrastructure.
Network name that uniquely identifies the network to which the access point is connected.
Channel being used for transmission.
Types of authentication, such as WPA, WPA-Personal, etc being used by the access point.
Types of algorithm, such as WEP, TKIP, etc being used by the access point.
Strength of the signal received in percentage.
Page 46
View Link Information
(Availab le in Clie nt and Wirele ss Routing Client modes)
To view the connection status when the client is linked to another access point, click on the SShhooww LLiinnkk IInnffoorrmmaattiioonn button.
The LLiinnkk IInnffoorrmmaattiioonn table displays the following data:
Page 47
Parameters Viewable from
Link Information page
State
Current Channel
Tx Rate
Signal Strength
Description
Displays whether the State is Scanning or Associated, and MAC address of the access point to which the client is connected.
Channel presently being used for transmission.
Rate of data transmission in Mbps.
Intensity of the signal received, in percentage.
Page 48
Scan for Channel Survey
(Available in Access Point and Gateway modes) Channel Survey displays a list of all the channels supported by the
access point, shows the relative interference of all the channels, and recommends the least congested channel.
SStteepp 11::
In the MMooddee SSeettuupp page, click on the CChhaannnneell SSuurrvveeyy button.
Page 49
SStteepp 22::
To connect the client to one of the channels detected, select the corresponding radio button.
SStteepp 33::
Click on the AAppppllyy button to effect the change and return to the setup page.
SStteepp 44::
Click on the RReeffrreesshh button to update the screen.
Page 50
Read-Only Parameters of All
Channels Viewable from
Channel Survey page
Freq
Channel
MyQuality
APCount
NeighQuality
Recommendation
Description
Frequency of the channel at which your access point is operating.
Channel of the access point being used for transmission depending on its orig in of country.
Interference level of the respective channel with this AP. The lower the value, the less interference. If the value is zero, there is no interference.
Total number of access points operating at the current channel.
Interference level with those discovered APs at those respective channels. The lower the value, the less interference. If the value is zero, there is no interference.
Best channel for the device to use in its current environment.
Page 51
Align the Antenna
Antenna Alignment precisely aligns the antenna over long distances for higher signal strength to improve the connection between the access point and another access point.
SStteepp 11::
Select WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu. You will see the sub-menus expanded under WWLLAANN SSeettuupp. Click on AAnntteennnnaa AAlliiggnnmmeenntt. The AAnntteennnnaa AAlliiggnnmmeenntt page can act as a diagnostic tool to check the communication with a remote device. The remote AP MAC Address is preset to all zeros by default.
SStteepp 22::
If you wish to specify the MAC address of the remote AP, edit the field next to RReemmoottee AAPP AAddddrreessss ((ooppttiioonn)), followed by clicking on the SSttaarrtt button. A pop-up status screen will display, allowing you to monitor the signal strength received from the remote access points.
If there is no specified access point with the specified MAC address, this screen will display. To abort or to key in the MAC address of another available remote access point, click on the SSttoopp button.
Page 52
NOTE If no MAC address is entered, the Antenna Alignment tool will make use of the SSID to align
the antenna. Please ensure that the correct SSID is entered. If more than one access point share the same SSID, the access point with the strongest signal will be shown.
Signal Strength
(RSSI Value) Indicated by DIAG LED
Above 20
Between 19 and 17
Between 17 and 14
Between 13 and 10
Below 10
NOTE
Outdoor long distance connection should preferably have signal strength of a RSSI of 10 and above.
NOTE
To ensure proper functionality of the device, select to Stop antenna alignment. Alternatively, you may also reboot the device.
Status of DIAG LED
Stays turned on.
Flashes 6 times.
Flashes 3 times.
Flashes once.
Turns off.
Page 53
Configure the Advanced Setup of the Wireless Mode
SStteepp 11::
Select WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu to expand four sub-menus. From here, select AAddvvaanncceedd.
SStteepp 22::
Enter the parameters in the WWLLAANN AAddvvaanncceedd SSeettuupp page.
SStteepp 33::
Click on the AAppppllyy button to update the changes.
Page 54
Advanced Setup Parameters Description
Beacon Interval
(Only in Access Point mode)
Data Beacon Rate (DTIM)
(Only in Access Point mode)
RTS/CTS Threshold
Frag Threshold
Transmit Power
Radio Off When Ethernet Link
Down
NOTE
The values illustrated in the example are suggested values for their respective parameters.
Amount of time between beacon transmissions. This tells the client when to receive the beacon. A beacon is a guidance signal sent by the access point to announce its presence to other devices in the network.
How often the beacon contains a delivery traffic indication message (DTIM). The DTIM identifies which clients have data waiting to be delivered to them.
If the beacon period is set at the default value of 100, and the data beacon rate is set at the default value of 1, the access point will send a beacon containing a DTIM every 100 kilomicrosecond (1 kilomicrosecond equals 1,024 microsecond)
Minimum size of a packet in bytes that will trigger the RTS/CTS mechanism.
This value extends from 1 to 2312 bytes. Maximum size that a packet can reach without being fragmented; represented in bytes.
This value extends from 256 to 2346 bytes, where a value of 0 indicates that all packets should be transmitted using RTS.
Drop-down list of a range of transmission power.
Disables the radio card automatically when the Ethernet link is down.
Page 55
View the Statistics
The Statistics feature reveals information on the wireless device connected to the WLAN.
SStteepp 11::
Select WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu. The sub-menus under WWLLAANN SSeettuupp expand, select SSttaattiissttiiccss. Wireless clients that are connected to the WLAN are shown in the WLAN Station List.
SStteepp 22::
Click on the RReeffrreesshh button to get the latest information on the availability of wireless clients in the wireless network.
SStteepp 33::
To check the details on an individual wireless client, click on the corresponding MAC Address in the WLAN Station List. The statistics of the selected wireless client displays.
In CClliieenntt mode you are not allowed to view the information of other wireless clients, to do that you need to change to the Access Point mode.
Page 56
Setup Your WAN
(Availab le in Wireless Routing Client and Gateway modes)
NOTE:
Any changes to the WAN Setup will only take effect after rebooting.
Setup your WAN to share Internet connection among the clients of the access point.
Setup your WAN for cable internet whereby WAN IP address is
dynamically assigned by ISP
The access point is pre-configured to support this WAN type. However, you may verify the WAN settings with the following steps:
Step 1:
UUnnddeerr CCOONNFFIIGGUURRAATTIIOONN oonn tthhee ccoommmmaanndd mmeennuu,, sseelleecctt WWAANN SSeettuupp..
SStteepp 22::
On the WWAANN DDyynnaammiicc SSeettuupp screen, verify that the WWAANN TTyyppee is
DDyynnaammiicc ((DDHHCCPP)
Step 3:
Select DDyynnaammiicc IIPP AAddddrreessss and hit the AAppppllyy button. Reboot to let the settings take effect.
). Otherwise, click on the CChhaannggee button.
Page 57
Setup your WAN for cable internet whereby fixed WAN IP
address is assigned by ISP
WAN Setup Parameters Example:
IP Address: 203.120.12.240
Network Mask: 255.255.255.0
Gateway IP Address: 203.120.12.2
Step 1:
UUnnddeerr CCOONNFFIIGGUURRAATTIIOONN oonn tthhee ccoommmmaanndd mmeennuu,, sseelleecctt WWAANN SSeettuupp..
Step 2:
AAcccceessss tthhee cclliicckkiinngg tthhee
Step 3: Fill in the information provided by your ISP in the IIPP AAddddrreessss,, NNeettwwoorrkk
k and GGaatteewwaayy IIPP AAddddrreessss fields, and click the AAppppllyy button.
MMaassk
Select RReebboooott SSyysstteemm under SSYYSSTTEEMM TTOOOOLLSS and click the RReebboooott button to effect the settings.
Select WAN Type ppaaggee aanndd sseelleecctt Static IP Address bbeeffoorree
Apply bbuuttttoonn..
Page 58
Setup your WAN for ADSL Internet using PPP over Ethernet
If you subscribe to an ADSL service using PPP over Ethernet (PPPoE) authentication, you can set up your access point’s WAN type as follows. For example, you may configure an account whose username is ‘guest’ as described below:
Step 1:
UUnnddeerr
Step 2:
AAcccceessss tthhee bbeeffoorree cclliicckkiinngg tthhee
CONFIGURATION oonn tthhee ccoommmmaanndd mmeennuu,, cclliicckk oonn WAN Setup..
Select WAN Type ppaaggee aanndd cchhoooossee PPP over Ethernet
Apply bbuuttttoonn..
Page 59
Step 3: Enter your account name assigned by your ISP (Example: guest) in the
field for UUsseerrnnaammee, followed by your account PPaasssswwoorrdd. Select AAllwwaayyss--OOnn if you want your access point to always maintain a
connection with the ISP. Otherwise select OOnn--DDeemmaanndd for the access point to connect to the ISP automatically when it receives Internet requests from the PCs in your network.
IIddllee TTiimmeeoouut
specify the value in seconds after the last Internet activity by which the access point will disconnect from the ISP. A value of “0” will disable idle timeout. RReeccoonnnneecctt TTiimmee FFaaccttoorr is also associated with the AAllwwaayyss--oonn option and specifies the maximum time the access point will wait before reattempting to connect with your ISP. A value of “0” will disable idle timeout. Click the AAppppllyy button and RReebboooott the access point.
t is associated with the OOnn--DDeemmaanndd option, allowing you to
Page 60
You can limit the maximum size a packet can be in a network by setting the MMTTUU (Maximum Transmissible Unit). Click the MMTTUU Button in AAddvvaanncceedd WWAANN OOppttiioonnss.
The MMTTUU VVaalluuee has a range of 1 to 1492. Enter the MMTTUU VVaalluuee and click AAppppllyy.
Page 61
Setup your WAN for ADSL Internet using Point-to-Point Tunneling
Protocol (PPTP)
WAN Setup Parameters Example:
IP Address: 203.120.12.47
Network Mask: 255.255.255.0
VPN Server: 203.120.12.15
Step 1:
UUnnddeerr
Step 2: Access the SSeelleecctt WWAANN TTyyppee page and select PPPPTTPP before clicking the
AApppplly
CONFIGURATION oonn tthhee ccoommmmaanndd mmeennuu,, cclliicckk oonn WAN Setup..
y button.
Page 62
Step 3: Fill in the information provided by your ISP in the IIPP AAddddrreessss,, NNeettwwoorrkk
k, GGaatteewwaayy,, and VVPPNN SSeerrvveerr fields; select whether to enable DDHHCCPP;
MMaassk
and click the AAppppllyy button. Select RReebboooott SSyysstteemm under SSYYSSTTEEMM TTOOOOLLSS and click the RReebboooott button
to effect the settings The IIddllee TTiimmeeoouutt setting allows you to specify the value in seconds after
the last Internet activity by which the access point will disconnect from the ISP. A value of “0” will disable idle timeout.
Page 63
Setup Telnet / SSH
Telnet allows a computer to remotely connect to the access point CLI (Command Line Interface) for control and monitoring.
SSH (Secure Shell Host) establishes a secure host connection to the access point CLI for control and monitoring.
Step 1: Select Telnet/SSH Setup from the CONFIGURATION menu.
Step 2:
1. Select Telnet Server Enable and enter the Port Number to enable.
2. Select SSH Server Enable and enter the Port Number to enable.
Click the Apply button.
Page 64
Step 3: To add user:
1. Click the Add button.
2. In Add User Entry Page, enter the User Name, Password, and specify whether the user is granted permission to Read Only or Read/Write.
3. Click the Apply button.
To Delete User:
1. Select which user to Delete.
2. Click the Delete button.
To Refresh User Management list click the Refresh button.
Page 65
Access the TELNET Command Line Interface
You may connect to the CLI (Command Line Interface) via a TELNET session to the default IP 192.168.168.1 Microsoft TELNET command is shown here but any TELNET client can be used.
1. Enter C:\WINDOWS\TELNET 192.168.168.1 at DOS prompt and the TELNET application will launch and connect.
2. At the login prompt, type in the default password “password” and press enter. You will then login to the CLI.
Page 66
Access the Secure Shell Host Command Line Interface
SSH provides the best remote access security using different forms of encryption and ciphers to encrypt sessions, and providing better authentication facilities and features that increase the security of other protocols.
An encrypted connection like SSH is not viewable on the network. The server can still read the information, but only after negotiating the encrypted session with the client.
SSH CLI has a command line interface.
Page 67
Set the WEB Mode
The access point supports HTTPS (SSL) featuring additional authentication and encryption for secure communication, in addition to the standard HTTP.
Step 1: Select Web Management Setup from the CONFIGURATION menu.
Step 2:
1. Select whether to set web server to HTTP or HTTPS (SSL) mode.
2. Specify the Login Timeout (time of inactivity in seco nds before user is automatically logged out).
3. Click Apply.
Changes will be effected after reboot.
Page 68
Setup SNMP
The Simple Network Management Protocol (SNMP) is a set of communication protocols that separates the management software architecture from the hardware device architecture.
Step 1:
Select SSNNMMPP SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
Step 2:
Select EEnnaabbllee from the SSNNMMPP SSttaattee drop-down list. The RReeaadd PPaasssswwoorrdd is set to public while the RReeaadd//WWrriittee PPaasssswwoorrdd is set to private by
default.
Step 3:
Click on the AAppppllyy button.
Page 69
Setup SNMP Trap
The SNMP Trap saves network resources through eliminating the need for unnecessary SNMP requests by providing notification of significant network events with unsolicited SNMP messages.
Step 1:
Select SSNNMMPP SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
Step 2:
1. Select whether to EEnnaabbllee or DDiissaabbllee the SNMP Trap.
2. Enter the RReemmoottee IIPP AAddddrreessss oorr DDNNSS.
3. Enter the RReemmoottee PPoorrtt.
This is the port number of the SNMP manager.
4. Enter the CCoommmmuunniittyy.
This is used to authenticate message, and is included in every packet that is transmitted between the SNMP manager and agent.
5. Click on the AAppppllyy button.
Page 70
Setup STP
(Available in Access Point, Transparent Client, and Repeater modes)
Spanning Tree Protocol (STP) prevents broadcast storms when there are redundant paths in the network. STP creates a tree that spans all devices in an extended network, forcing redundant paths into a standby state, but establishing the redundant links as backup in case the active link should fail. If STP costs change, or if one network segment in the STP becomes unreachable, the spanning tree algorithm reconfigures the spanning tree topology and re-establishes the connection by activating the standby path. The path with the smallest cost will be used and extra redundant paths will be disabled.
Page 71
Scenario #1 – (No STP)
With no STP, all clients (Notebook#1, #2, #3, #4) can access one another, resulting in low data security. Due to the redundant paths, broadcast packets will be duplicated and forwarded endlessly, resulting in a broadcast storm.
Scenario #2 – (With STP)
With STP, extra redundant network paths between access points will be disabled, hence preventing multiple active network paths in between any 2 access points. If one of the access points is down, the STP algorithm will reactivate one of the redundant paths so that the network connection will not be lost. All wireless users will be able to communicate with each other if they are associated to the access points that are in the same zone.
Page 72
SStteepp 11::
Select STP SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Select the SSTTPP SSttaattuuss EEnnaabbllee radio button, fill in the fields, and click on the AAppppllyy button to update the changes.
Priority: (Default: 32768, Range: 0 – 65535) This is the relative priority. The lowest priority will be elected as the root.
Hello Time: (Default: 2, Range: 1 – 10) This is the time interval in seconds whereby a hello packet is sent out. Hello packets are used to communicate information about the topology throughout the entire STP network.
Forward Delay: (Default: 15, Range: 4 – 30) This is the time that is spent in the listening and learning state.
Max Age: (Default: 20, Range: 6 – 40) The max age timer controls the maximum length of time that passes before a port saves its configuration informatio n.
Page 73
Use MAC Filtering
MAC Filtering acts as a security measure by restricting user network access according to MAC address. Each WLAN or radio card supports up to 16 virtual access points and has its own MAC address listing.
NOTE
MAC Filtering will not filter any MAC address from the Ethernet port.
Page 74
Add a MAC Address to the MAC Address List
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp. The MAC Address Filtering page displays.
In this page you may also set the MAC Filtering Status to EEnnaabbllee or
DDiissaabbllee
MAC addresses.
Click the EEddiitt button.
for access points and set the Policy to either AAcccceepptt or DDeennyy
MAC Filtering set to EEnnaabbllee with Policy to AAcccceepptt only the MAC addresses in the MAC Filter Address List and deny all other MAC addresses.
MAC Filtering set to EEnnaabbllee with Policy to DDeennyy all the MAC addresses in the MAC Filter Address List and accept all other MAC addresses.
MAC Filtering set to DDiissaabbllee. Whether Policy is set to
EEnnaabblle
MAC Filtering set to DDiissaabbllee. Whether Policy is set to
EEnnaabblle
e or DDeennyy does not matter.
e or DDeennyy does not matter.
Page 75
SStteepp 22::
MAC Filter Address List page displays. Click the AAdddd button.
SStteepp 33::
The Add MAC Address page displays.
SStteepp 44::
Enter the MAC Address of the client in the format xx-xx-xx-xx-xx-xx, where x can take any value from 0 to 9 or a to f. Enter the Comment. This describes the MAC Address you have entered.
To apply to all virtual access points, check AAppppllyy ttoo AAllll. To apply to specific virtual access point, select the checkbox of the corresponding access point.
Click the AAppppllyy button.
Page 76
SStteepp 55::
MAC Filter Address List page displays with updated MAC Address List.
NOTE
Please reboot to effect all changes and new MAC address entries.
Page 77
Delete a MAC Address from All Access Points
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp. The MAC Address Filtering page displays.
Select VViieeww CCoommpplleettee MMAACC LLiisstt..
SStteepp 22::
The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete.
Click the DDeelleettee button.
Page 78
SStteepp 33::
The MAC Filter Address List page displays with updated MAC Address List.
Page 79
Delete a MAC Address from Individual Access Point
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp. The MAC Address Filtering page displays.
Select EEddiitt for the corresponding access point.
SStteepp 22::
The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete.
Click the DDeelleettee button.
Page 80
SStteepp 33::
The MAC Filter Address List page displays with updated MAC Address List.
Page 81
Edit MAC Address from the MAC Address List
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp. The MAC Address Filtering page displays.
Select EEddiitt.
SStteepp 22::
MAC Filter Address List page displays. Select the MAC address to edit.
Page 82
SStteepp 33::
The Edit MAC Address page displays. Edit the MAC address settings accordingly.
Click the SSaavvee button.
SStteepp 44::
The MAC Filter Address List page displays with updated MAC Address List.
Page 83
Perform Advanced Configuration
Setup Routing
(Availab le in Wireless Routing Client and Gateway modes) The access po int allows you to add a static routing entry into its routing
table to re-route IP packets to another access point. This is useful if your network has more than one access point.
In this network, the main office of subnet 192.168.168.0 contains two routers: the office is connected to the Internet via the access point (192.168.168.1) and to the remote office via 192.168.168.254 The remote office resides on subnet 192.168.100.0
You can add a static routing entry into the access p oint routing tabl e so that IP packets from the clients in the main office with a destination IP address of 192.168.100.X where X is any number from 2 to 254 will be re-routed to the router, which acts as the gateway to that subnet.
Important:
You do NOT need to set any routing information if you are simply configuring the access point for broadband Internet sharing. The wrong routing configuration might cause the access point to function improperly.
Page 84
Configure Static Routing
Step 1:
Select RRoouuttiinngg from the
CCOONNFFIIGGUURRAATTIIOON
menu. The SSyysstteemm RRoouuttiinngg
e page displays. Initially
TTaabblle
the table contains the default routing entries of the access point.
Step 3:
Enter the DDeessttiinnaattiioonn IIPP
AAddddrreessss,, DDeessttiinnaattiioonn NNeett MMaassk
and GGaatteewwaayy IIPP AAddddrreessss, and click the AAdddd button.
The SSttaattiicc RRoouuttiinngg TTaabbllee reflects the entry.
N command
Step 2:
Click on the SSttaattiicc RRoouuttiinngg TTaabbllee button, and then click the Add button.
k,
Page 85
Use Routing Information Protocol
(Availab le in Wireless Routing Client and Gateway modes) RIP (Routing Information Protocol) allows information to be exchanged
within a set of routers under the same administration. RIPv1 bases the path used to pass traffic between routers on the fewest
number of hops between the source and destination IP addresses within a packet. Routers broadcast RIPv1 information on all router interfaces every 30 seconds and process the information from other routers to determine if a better path is available. RIPv2 is more secure, and performs broadcasting and the assignment of IP address more efficiently.
Step 1: Under the CCOONNFFIIGGUURRAATTIIOONN command menu, click on RRoouuttiinngg to be brought to RRoouuttee IInnffoorrmmaattiioonn
PPrroottooccool
l.
Step 2:
Select to EEnnaabbllee RRIIPP SSttaattuuss. Select either RIPv1 or RIPv2. On this page, click the Apply button.
Page 86
Use Network Address Translation
(Availab le in Wireless Routing Client and Gateway modes) NAT (Network Address Translation) allows multiple PCs in a private
network to share a single public IP address by using different TCP ports to identify requests coming from different PCs, and is enabled by default. Computers in the private LAN behind the access point will not be directly accessible from the Internet. However, employing virtual servers allows the hosting of Internet servers by using IP/ Port Forwarding and De-Militariz ed Zone hosting.
Step 1:
Select NNAATT from the
CCOONNFFIIGGUURRAATTIIOON
To disable it, select the DDiissaabbllee radio button.]
Step 2:
Click the AAppppllyy button to effect the setting.
N command menu.
Important:
NAT provides for effective broadband Internet sharing; do NOT disable NAT unless it is absolutely necessary.
Page 87
Configure Virtual Servers Based on DMZ Host
DMZ (De-Militarized Zon e) mak es spec ific PCs in a NAT-enabled network directly accessible from the Internet.
With NAT, the access point keeps track of which client is using which port number and forwards Internet replies to the client according to the port number in the reply packet. Reply packets with unrecognized port numbers are discarded, but with DMZ, these packets are forwarded to the DMZ-enabled PC instead.
Step 3:
Enter the PPrriivvaattee IIPP AAddddrreessss of the DMZ host on the NNAATT DDMMZZ IIPP AAddddrreessss page.
To disable DMZ, enter 00..00..00..00 Click the AAppppllyy button.
NOTE
1. DMZ may not function properly if the DMZ host IP address is changed due to DHCP, therefore, Static IP Address configuration is recommended for the DMZ host.
2. Please note that the DMZ host is susceptible to malicious attacks as ALL of its ports are exposed to the Internet.
Step 1:
Select NNAATT from the CCOONNFFIIGGUURRAATTIIOONN command menu.
Step 2:
Click on the DDMMZZ button in AAddvvaanncceedd
NNAATT OOppttiioonns
s.
Page 88
Configure Virtual Servers Based on Port Forwarding
Virtual Server based on Port Forwarding forwards Internet requests arriving at the access point WAN interface to specific PCs in the private network based
on their ports.
Step 1: Select NNAATT from the CCOONNFFIIGGUURRAATTIIOONN command menu.
Step 2: Click the PPoorrtt FFoorrwwaarrddiinngg button in AAddvvaanncceedd NNAATT OOppttiioonnss.
Step 2:
CClliicckk tthhee
Add bbuuttttoonn oonn tthhee Port Forward Entries ppaaggee..
Page 89
Step 3: In the AAdddd PPoorrtt FFoorrwwaarrdd EEnnttrryy page, you can set up a Virtual Server for a KKnnoowwnn
SSeerrvveer
r type by selecting from a drop-down menu or you can define a CCuussttoomm SSeerrvveerr.
Page 90
Known
Server
Server Type : Select from the drop-down list of known server types:
Private IP
Address
Public IP : Select All, Single, or Range from the dropdown list.
From
To
Custom
Server
Server Type
Protocol
Public Port : Select whether to define a single port or a range of public
From
To
Private IP
Address
Private Port
From
HTTP
FTP
POP3
Netmeeting
:
Specify the LAN IP address of the server PC running within the private network.
Enter the beginning of the range. : :
Enter the end of the range.
:
Define a name for the server type you wish to configure. :
Select either TCP or UDP protocol type from the dropdown list.
port numbers to accept. :
Starting public port number :
Ending public port number. If the Public Port type is Single, this
field will be ignored. :
Specify the IP address of the server PC running within the
private network. :
Starting private port number. The ending private port number
will be calculated automatically according to the public port
range.
Page 91
Public IP
From
To
For example to set up a web server on a PC with IP address 192.168.168.55, set the
SSeerrvveerr TTyyppe
d button.
AAddd
e as HTTP and set the PPrriivvaattee IIPP AAddddrreessss as 119922..116688..116688..5555, then click on the
:
Select All, Single, or Range from the dropdown list. :
Enter the beginning of the range. :
Enter the end of the range.
Page 92
Configure Virtual Servers based on IP Forwarding
If you are subscribed to more than one IP address from your ISP, virtual servers based on IP forwarding can forward all Internet requests regardless of the port number to defined computers in the private network.
Step 3:
In the AAdddd IIPP FFoorrwwaarrdd EEnnttrryy page, enter the PPrriivvaattee IIPP AAddddrreessss and Public IIPP
AAddddrreesss
In this example, we would like all requests for 213.18.213.101 to be forwarded to a PC with PPrriivvaattee IIPP
AAddddrreesss
Step 4:
Click the AAdddd button.
s.
s 192.168.168.55.
NOTE
Please ensure that you are subscribed to the PPuubblliicc IIPP AAddddrreessss you intend to forward from.
Step 1:
Select NNAATT from the CCOONNFFIIGGUURRAATTIIOONN command menu.
Step 2:
Click the IIPP FFoorrwwaarrddiinngg button in
AAddvvaanncceedd NNAATT OOppttiioonns
Step 5:
The IIPP FFoorrwwaarrdd EEnnttrriieess page reflects your new addition.
s.
Page 93
Control the Bandwidth Available
(Availab le in Wireless Routing Client and Gateway modes) Keep in control of your LAN network in router operation. Bandwidth
access to the Internet on both the wireless LAN connection in Gateway mode and the Ethernet connection in Wireless Routing Client Mode can be managed.
Enable Bandwidth Control
Step 1:
Select BBaannddwwiiddtthh CCoonnttrrooll from the CCOONNFFIIGGUURRAATTIIOONN command menu.
Step 2:
BBaannddwwiiddtthh CCoonnttrrool
Page 94
l is disabled by default, select EEnnaabbllee, and click the AAppppllyy button.
Configure WAN Bandwidth Control
The Upload / Download Bandwidth Setting can limit throughput to the defined rates regardless of the number of connections.
Step 1:
Select WWAANN BBaannddwwiiddtthh CCoonnttrrooll SSeettuupp from the BBaannddwwiiddtthh CCoonnttrrooll sub­menu from the CCOONNFF
Step 2:
Enter the DDoowwnnllooaadd TToottaall RRaattee and UUppllooaadd TToottaall RRaattee. The default values are 0, which indicates that there is no bandwidth limit.
Click the AAppppllyy button.
IIGGUURRAATTIIOON
N command menu.
Page 95
Configure LAN Bandwidth Control
Bandwidth Control can also limit LAN users’ throughput.
Step 1:
Select LLAANN BBaannddwwiiddtthh CCoonnttrrooll SSeettuupp from the BBaannddwwiiddtthh CCoonnttrrooll sub­menu from the CCOONNFFIIGGUURRAATTIIOONN command menu.
Step 2:
Click the AAdddd button to create the bandwidth rule for LAN user.
Page 96
Loading...