IBM WRT-410 User Manual

802.11g Wireless Broadband Router

WRT-410

User’s Manual

Copyright 2003 by PLANET Technology Corp. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission of PLANET.

PLANET makes no representations or warranties, either expressed or implied, with respect to the contents hereof and specifically disclaims any warranties, merchantability or fitness for any particular purpose. Any software described in this manual is sold or licensed "as is". Should the programs prove defective following their purchase, the buyer (and not this company, its distributor, or its dealer) assumes the entire cost of all necessary servicing, repair, and any incidental or consequential damages resulting from any defect in the software. Further, this company reserves the right to revise this publication and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes..

All brand and product names mentioned in this manual are trademarks and/or registered trademarks of their respective holders.

Federal Communication Commission Interference Statement

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

1. Reorient or relocate the receiving antenna.

2. Increase the separation between the equipment and receiver.

3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

4. Consult the dealer or an experienced radio technician for help.

FCC Caution:

To assure continued compliance.(example-use only shielded interface cables when connecting to computer or peripheral devices). Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.

This device complies with Part 15 of the FCC Rules. Operation is subject to the Following two conditions: (1) This device may not cause harmful interference, and (2 ) this Device must accept any interference received, including interference that may cause undesired operation.

Federal Communication Commission (FCC) Radiation Exposure Statement

This equipment complies with FCC radiation exposure set forth for an uncontrolled environment. In order to avoid the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antenna shall not be less than 20 cm(8 inches) during normal operation.

R&TTE Compliance Statement

This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal Equipment and the mutual recognition of their conformity (R&TTE)

The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal Equipment and Satellite Earth Station Equipment) As of April 8,2000.

Safety

This equipment is designed with the utmost care for the safety of those who install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment. All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment.

Revision

User’s Manual for PLANET Wireless Broadband Router Model: WRT-410 Rev: 1.0 (November. 2003) Part No. EM-WRT410

TABLE OF CONTENTS

CHAPTER 1 INTRODUCTION..................................................................................................1

1.1 PACKAGE CONTENTS .........................................................................................................1

1.2 SYSTEM REQUIREMENTS....................................................................................................1

1.3 FEATURES.........................................................................................................................1

1.4 SPECIFICATION ..................................................................................................................2

1.5 WIRELESS PERFORMANCE .................................................................................................3

CHAPTER 2 HARDWARE INSTALLATION.............................................................................4

2.1 HARDWARE CONNECTION...................................................................................................4

2.2 LED INDICATORS...............................................................................................................4

CHAPTER 3 CONFIGURE THROUGH WEB BROWSER.......................................................5

3.1 MAIN.................................................................................................................................5

3.1.1 LAN & DHCP Server................................................................................................5

3.1.2 WAN.........................................................................................................................6

3.1.3 Password..................................................................................................................8

3.1.4 Time..........................................................................................................................9

3.1.5 Dynamic DNS.........................................................................................................10

3.2 WIRELESS .......................................................................................................................10

3.2.1 Basic.......................................................................................................................10

3.2.2 Authentication.........................................................................................................11

3.2.3 Advanced................................................................................................................12

3.3 STATUS ...........................................................................................................................13

3.3.1 Device Information.................................................................................................13

3.3.2 Log.........................................................................................................................14

3.3.3 Log Settings...........................................................................................................15

3.3.4 Statistic...................................................................................................................16

3.3.5 Wireless..................................................................................................................17

3.4 ROUTING.........................................................................................................................17

3.4.1 Static.......................................................................................................................17

3.4.2 Dynamic.................................................................................................................18

3.4.3 Routing Table.........................................................................................................19

3.5 ACCESS...........................................................................................................................20

3.5.1 Filters......................................................................................................................20

3.5.2 Virtual Server..........................................................................................................23

3.5.3 Special AP..............................................................................................................24

3.5.4 DMZ........................................................................................................................25

3.5.5 Firewall Rule...........................................................................................................25

3.6 MANAGEMENT .................................................................................................................26

3.6.1 SNMP.....................................................................................................................26

3.6.2 Remote Management.............................................................................................27

3.7 TOOLS.............................................................................................................................28

3.7.1 Restart....................................................................................................................28

3.7.2 Settings..................................................................................................................28

3.7.3 Firmware................................................................................................................29

3.7.4 Ping Test.................................................................................................................29

3.8 WIZARD...........................................................................................................................30

CHAPTER 4 802.1X AUTHENTICATION SETUP..................................................................31

4.1 802.1X INFRASTRUCTURE................................................................................................31

4.2 RADIUS SERVER SETUP.................................................................................................32

4.2.1 Required Services..................................................................................................32

4.2.2 Setup Procedure....................................................................................................32

4.3 AUTHENTICATOR SETUP ...................................................................................................46

4.4 WIRELESS CLIENT SETUP.................................................................................................47

4.4.1 EAP-MD5 Authentication........................................................................................47

4.4.2 EAP-TLS Authentication.........................................................................................50

CHAPTER 5 TROUBLESHOOTING.......................................................................................58

5.1 FREQUENTLY ASKED QUESTIONS......................................................................................58

5.2 GLOSSARY ......................................................................................................................59

If any of the above items are missing, contact your supplier as soon as

Chapter 1 Introduction

Thank you for purchasing WRT-410. This device features the latest innovation wireless technology making the wireless networking world happened. This manual guides you on how to install and properly use the WRT-410 in order to take full advantage of its features.

1.1 Package Contents

Make sure that you have the following items:

• One WRT-410

• One dipole antenna

• One AC Power Adapter

• One User’s Manual CD

• One Quick Installation Guide

Note:

possible.

1.2 System Requirements

Before installation, please check the following requirements with your equipment.

• Pentium Based (And Above) IBM-Compatible PC System

• CD-ROM drive

• Windows 98/ME/NT/2000/XP Operating System with TCP/IP protocol

1.3 Features

• 2.4GHz ISM band, unlicensed operation

• Strong network security with 802.1X authentication, and 64/128-bit WEP encryption

• Supports WPA (Wi-Fi Protected Access) for both 802.1x and WPA-PSK

• Dual-standard capability: 802.11g and 802.11b compliant

• Super G mode efficiently raises the data transfer rate up to 108Mbps

• Supports DHCP server

• Web Configuration provide a user friendly interface for the user to configure through web

browser

• Support MAC Filter

• Build-in 4 -port switch

• Provides Setup Wizard for the user to configure easily in the first time

- 1 -

Data Encryption

1.4 Specification

Standards IEEE 802.11b, IEEE 802.11g Signal Type DSSS (Direct Sequence Spread Spectrum) Modulation BPSK / QPSK / CCK / OFDM

Port

Antenna One Detachable Dipole Antenna Antenna Gain

Output Power

Sensitivity

WAN: 10/100Base-TX (RJ-45) * 1 LAN: 10/100Base-TX (RJ-45) * 4

2dBi 17dBm

11 Mbps (CCK): -82dBm

802.11b

802.11g

5.5 Mbps (QPSK): - 86dBm 1, 2 Mbps (BPSK): - 90dBm (typically @PER < 8% packet size 1024 and @25ºC + 5ºC) 54 Mbps: -72dBm 48 Mbps: - 72dBm 36 Mbps: -76dBm 24 Mbps: -79dBm 18 Mbps: -82dBm 12 Mbps: -86dBm 9 Mbps: -89dBm 6 Mbps: -90dBm

(typically @PER < 8% packet size 1024 and @25ºC + 5ºC)

64/128-bit WEP encryption

Frequency band 2.4 GHz ~2.484GHz

FCC: 11 Channels (US, Canada)

Channel

Data Rate

Environment

Dimension 200 x 115 x 31mm (W x D x H) Power Supply 5V, 2.5A

ETSI: 13 Channels (Europe) TELEC: 14 Channels (Japan)

Super G mode Up to 108Mbps

802.11g Up to 54Mbps (6/9/12/18/24/36/48/54)

802.11b Up to 11Mbps (1/2/5.5/11) Operating temperature: 0 ~ 55°C Operating humidity: 5 ~ 95%(non-condensing) Storage temperature: -20 ~ 70°C Storage humidity: 0 ~ 95%(non-condensing)

- 2 -

1.5 Wireless Performance

The following information will help you utilizing the wireless performance, and operating coverage of WRT-410.

1. Site selection

To avoid interferences, please locate WRT-410 and wireless clients away from transformers, microwave ovens, heavy-duty motors, refrigerators, fluorescent lights, and other industrial equipments. Keep the number of walls, or ceilings between AP and clients as few as possible; otherwise the signal strength may be seriously reduced. Place WRT-410 in open space or add additional WAP-4000 as needed to improve the coverage.

2. Environmental factors

The wireless network is easily affected by many environmental factors. Every environment is unique with different obstacles, construction materials, weather, etc. It is hard to determine the exact operating range of WRT-410 in a specific location without testing.

3. Antenna adjustment

The bundled antenna of WRT-410 is adjustable. Firstly install the antenna pointing straight up, then smoothly adjust it if the radio signal strength is poor. But the signal reception is definitely weak in some certain areas, such as location right down the antenna. Moreover, the original antenna of WRT-410 can be replaced with other external antennas to extend the coverage. Please check the specification of the antenna you want to use, and make sure it can be used on WRT-410.

4. WLAN type

If WRT-410 is installed in an 802.11b and 802.11g mixed WLAN, its performance will reduced significantly. Because every 802.11g OFDM packet needs to be preceded by an RTS-CTS or CTS packet exchange that can be recognized by legacy 802.11b devices. This additional overhead lowers the speed. If there are no 802.11b devices connected, or if connections to all 802.11b devices are denied so that WRT-410 can operate in 11g-only mode, then its data rate should actually 54Mbps and 108Mbps in Super G mode.

- 3 -

0. Otherwise, the product may be

0 to default settings, press and hold the Reset button over 5

Link is established

Packet

Link is established

Packet

Link is established

Green

Link is established

Chapter 2 Hardware Installation

Before you proceed with the installation, it is necessary that you have enough information about the WRT-410.

2.1 Hardware Connection

1. Locate an optimum location for the WRT-410. The best place for your WRT-410 is usually at

the center of your wireless network, with line of sight to all of your mobile stations.

2. Adjust the antennas of WRT-410. Try to adjust them to a position that can best cover your wireless network. The antenna’s position will enhance the receiving sensitivity.

3. Connect RJ-45 cable to WRT-410 LAN port. Connect one of the LAN ports on WRT-410 to your LAN switch/hub with a RJ-45 cable.

4. Connect RJ-45 cable to WRT-410 WAN port. Connect ADSL/Cable Modem to the WAN port on WRT-410. Use the cable supplied with your modem. If no cable was supplied with your modem, please use a RJ-45 Ethernet cable

5. Plug in power adapter and connect to power source. After power on, WRT-410 will start to operate.

Note: ONLY use the power adapter supplied with the WRT-41

damaged.

Note: If you want to reset WRT-41

seconds. And then wait for 10 seconds for WRT-410 restart.

2.2 LED Indicators

WRT-410

LED STATE MEANING

Green Device power on PWR Off

STATUS Green Indicates a connection error

Green WAN link status is on WAN Blinking Green Green WLAN link status is on WLAN

Blinking Green WLAN activity

LAN

Green Blinking Green Green

Blinking Green Green

STATUSPWRWANWLAN1234

Device power off

WAN activity

s are transmitting or receiving

LAN

802.11g

Wireless Router

Blinking Green Packets are transmitting or receiving

- 4 -

Chapter 3 Configure through Web Browser

Web configuration provides a user-friendly graphical user interface (web pages) to manage your WRT-410. A WRT-410 with an assigned IP address will allows you to monitor and configure via web browser (e.g., MS Internet Explorer or Netscape).

1. Open your web browser.

2. Enter the IP address of your WRT-410 in the address field (default IP address is http://192.168.1.1).

3. A User Name and Password dialog box will appear. Please enter your User Name and Password here. Default User Name and Password are both “admin”. Click “OK”.

4. Then you will see the WRT-410 web configuration page.

5. When the first time you enter WRT-410, Setup Wizard will pop up. Please refer to our Quick Installation Guide to use the Setup Wizard to configure. Setup Wizard will guide you through configuration step by step.

3.1 Main

3.1.1 LAN & DHCP Server

You can configure WRT-410’s IP settings and DHCP server function in this screen. When configuration is completed, please click “Apply” to save and restart WRT-410.

- 5 -

This page enables you to set LAN and DHCP properties, such as the host name, IP address, subnet mask, and domain name. LAN and DHCP profiles are listed in the DHCP table at the bottom of the screen.

Host Name: Type the host name in the text box. The host name is required by some ISPs. The default host name is "AP-Router."

IP Address: This is the IP address of the router. The default IP address is 192.168.1.1. Subnet Mask: Type the subnet mask for the router in the text box. The default subnet mask is

255.255.255.0.

DHCP Server: Enables the DHCP server to allow the router to automatically assign IP addresses to devices connecting to the WLAN or LAN. DHCP is enabled by default. All DHCP client computers are listed in the table at the bottom of the page, providing the host name, IP address, and MAC address of the client.

Start IP: Type an IP address to serve as the start of the IP range that DHCP will use to assign IP addresses to all LAN devices connected to the WRT-410.

End IP: Type an IP address to serve as the end of the IP range that DHCP will use to assign IP addresses to all LAN devices connected to the WRT-410.

Domain Name: Type the local domain name of the network in the text box. This item is optional. Lease Time: Select the proper expired duration of the IP leased by DHCP server.

3.1.2 WAN

Please refer to your Internet connection method to select the Connection Type. And please configure those settings per the information your ISP provides.

Connection Type: Select the connection type, DHCP client/Fixed IP, PPPoE, or PPTP from the drop-down list.

When using DHCP client/Fixed IP, enter the following information in the fields (some information are provided by your ISP):

WAN IP: Select whether you want to specify an IP address manually, or want DHCP to obtain an IP address automatically. When “Specify IP” is selected, type the IP address, subnet mask, and default gateway in the fields. Your ISP will provide you with this information.

DNS 1/2/3: Type up to three DNS numbers in the fields. Your ISP will provide you with this DNS information.

- 6 -

MAC Address: If required by your ISP, type the MAC address for the WRT-410 WAN interface in this field. You can also copy the MAC address of your PC’s network card to the WRT-410 WAN interface by clicking “Clone MAC address”.

When using PPPoE, enter the following information in the fields (some information are provided by your ISP):

WAN IP: Select whether you want the ISP to provide the IP address automatically, or whether you want to assign a static IP address to the WRT-410 WAN interface. When “Specify IP” is selected, type the PPPoE IP address in the field. Your ISP will provide you with this information.

DNS 1/2/3: Type up to three DNS numbers in the fields. Your ISP will provide you with this DNS information.

User Name: Type your PPPoE user name. Password: Type your PPPoE password. Connect on Demand: Enables or disables the connect on demand function, which enables WRT-410 to

initiate a connection with your ISP when an Internet request is made to the WRT-410. When enabled, the WRT-410 automatically connects to the Internet when you open your browser.

Idle Time Out: Specify the time that will elapse before the WRT-410 times out of a connection. MTU: Type the MTU value in the field.

- 7 -

When using PPTP, enter the following information in the fields (some information are provided by your ISP):

IP Address: Type the IP address which your ISP provides. Subnet Mask: Type the Subnet Mask which your ISP provides. Gateway: Type the IP address of Gateway which your ISP provides. Server IP: Type the IP address of server which offers Internet service. Your ISP will provide you with this

information.

PPTP Account: Type your PPTP account. PPTP Password: Type your PPTP password. PPTP Retype password: Confirm your PPTP password again. Maximum Idle Time: Specify the time that will elapse before the WRT-410 times out of a connection. Auto-reconnect: If this function is enabled, WRT-410 will try to rebuild Internet connection once the link

is down.

3.1.3 Password

You can change the Administrator and User’s password in this screen. These passwords are used to gain access to the router interface. When you login with user name “User”, you don’t have permission to configure WRT-410.

- 8 -

Administrator: Type the password the Administrator will use to login to the system. The password must be typed again for confirmation.

User: Users can type a password to be used for logging in to the system. The password must be typed again for confirmation.

3.1.4 Time

This screen enables you to set the time and date for the router's real time clock, select your time zone, specify an NTP server, and enable or disable daylight saving.

Local Time: Displays the local time and date. Time Zone: Select your time zone from the pull-down list. Default NTP Server: Type the NTP server IP address in the field to enable the WRT-410 to

automatically synchronize the time with Internet NTP server. Set the Time: Select the date and time from the pull-down lists, and click “Set Time” to set the

WRT-410's internal clock to the correct date and time. Daylight Saving: Enables you to enable or disable daylight saving time. When enabled, select the start

and end date for daylight saving time.

- 9 -

3.1.5 Dynamic DNS

You can configure WRT-410 to use DDNS service if you already have a registered DDNS account.

DDNS: You can enable or disable DDNS function here. Server Address: Please type in the url of your DDNS service provider. Currently, WRT-410 supports

DynDNS only, thus you have to key in “www.dyndns.org” in this field.

Host Name: Enter the host name you registered to DDNS provider. User Name: Enter the user name you registered to DDNS provider. Password: Enter the password of your registered account.

3.2 Wireless

3.2.1 Basic

This page enables you to enable and disable the wireless LAN function, enter a SSID, and set the channel for wireless communications.

- 10 -

Enable/Disable: Enable or disable wireless LAN via the WRT-410. SSID: Type an SSID in the field. The SSID of any wireless device must match the SSID typed here in

order for the wireless device to access the LAN and WAN via the WRT-410. Channel: Select a work channel for wireless communications. The channel of any wireless device must

match the channel selected here in order for the wireless device to access the LAN and WAN via the WRT-410.

3.2.2 Authentication

This screen enables you to set authentication types and the parameters for secure wireless communications.

Authentication Type: Select the type from the listed options. If Open System or Shared Key is selected, the screen would appear as above.

WEP: You can enable or disable WEP function here. Mode: Select the key code you want to use for WEP Key, HEX or ASCII. When Hex is selected, you may

enter alphanumeric characters in the range of “A-F”, “a-f” and “0-9” in the WEP Key entry field. Alternatively, you may enter digit hexadecimal values in the range of “a-z”, “A-Z” and “0-9”.

WEP Key: Select the level of encryption you want from the drop-down list. WRT-410 supports 64, and 128-bit encryption.

Key 1 ~ Key 4: There are 4 keys available, please ensure you have enter correct number for the key values with different Key Length and coding (Hex or ASCII) as 64bit (10 Hex digit / 5 ASCII), 128bit (26 Hex digit / 13 ASCII) or 256bit (58 Hex digit / 29 ASCII), please select one of them and enter the key you want to use. Click “Clear” to erase key values.

Note: 128bit WEP encryption will require more system resources than 64bit encryption. Use 64-bit

encryption for better performance.

If WPA or 802.1x is selected in the Authentication Type field, the screen appears as below.

- 11 -

Lifetime: Select proper time interval from the drop-down list. Once the lifetime expires, the Encryption key will be renewed by RADIUS server automatically.

Encryption Key: Select the Encryption key length to be 64-bits or 128-bits. RADIUS Server 1: Enter the IP address, communicate port number, and shared secret key of your

primary RADIUS server. RADIUS Server 2: Enter the IP address, communicate port number, and shared secret key of your

secondary RADIUS server.

Note: As soon as 802.1X authentication is enabled, all the wireless client stations that are connected

to the Router currently will be disconnected. The wireless clients must be configured manually to authenticate themselves with the RADIUS server to be reconnected.

If WPA-PSK is selected, the screen appears as below. Please enter a hard-to-guess passphrase (between 8 and 63 characters) in the field.

3.2.3 Advanced

This screen enables you to configure advanced wireless functions.

- 12 -

Beacon Interval: Type the beacon interval in the field. You can specify a value from 20 to 1000. The default beacon interval is 100.

RTS Threshold: Type the RTS (Request-To-Send) threshold in the field. This value stabilizes data flow. If data flow is irregular, choose values between 1 and 2346 until data flow is normalized.

Fragmentation Threshold: Type the fragmentation threshold in the field. If packet transfer error rates are high, choose values between 256 and 2346 until packet transfer rates are minimized. Please note that setting the fragmentation threshold value may diminish system performance.

DTIM Interval: Type a DTIM (Delivery Traffic Indication Message) interval in the field. You can specify a value between 1 and 255. The default value is 1.

TX Rates (MBps): Select one of the wireless communications transfer rates, based upon the speed of wireless adapters connected to the WLAN.

11g only mode: Enable 11g only mode will improve the performance of a 802.11g WLAN, but non-802.11g clients cannot connect to WRT-410.

Antenna Transmit Power: You can control the transmit power of WRT-410 here. There are five options available: full, half, quarter, eighth, and min.

Super G Mode: There are four options selectable: Disabled, Super G without Turbo, Super G with Dynamic Turbo, and Super G with Static Turbo. When you use Super G mode, it is recommended to enable 11g only for best performance.

3.3 Status

3.3.1 Device Information

This screen enables you to view the router LAN, wireless LAN, and WAN configuration.

- 13 -

Firmware Version: Displays the latest build of the WRT-410 firmware interface. After upgrading the firmware in Tools -> Firmware, check this to ensure that your firmware was successfully upgraded.

LAN: This field displays the WRT-410 LAN interface MAC address, IP address, subnet mask, and DHCP server status. Click “DHCP Table” to view a list of client stations currently connected to the WRT-410 LAN interface.

Wireless: Displays the WRT-410 wireless connection information, including the WRT-410 wireless interface MAC address, connection status, SSID status, which channel is being used and whether WEP is enabled or not.

WAN: This field displays the WRT-410 WAN interface MAC address, DHCP client status, IP address, subnet mask, default gateway and DNS. Click “DHCP Release” to release IP addresses get from ISP for the WAN port. Click “DHCP Renew” to get a new IP addresses from ISP for the WAN port.

3.3.2 Log

This screen will show you a running log of system statistics, events and activities. The log displays up to 200 entries. Older entries are overwritten by new entries. You can save logs via the Log Settings option

-> “Send to”. The Log screen commands and information meaning are as follows

- 14 -

First Page: View the first page of the log message list. Last Page: View the last page of the log message list. Previous Page: View the page just before the current page. Next Page: View the page just after the current page. Clear Log: Delete the contents of the log and begin a new log. Refresh: Renew log statistics. Time: Displays the time and date that the log entry was created. Message: Displays summary information about the log entry. Source: Displays the source of the communication. Destination: Displays the destination of the communication. Note: Displays the IP address of the communication.

3.3.3 Log Settings

This screen allows you to set WRT-410 logging parameters.

- 15 -

SMTP Server: Type the SMTP server address for the email that the log will be sent to in the next field. Send to: Type an email address for the log to be sent to. Click “Email Log Now” to send the current log

immediately. Syslog Server: Type the IP address of the Syslog Server if you want the WRT-410 to listen and receive

incoming SysLog messages.

Log Type: Select what items will be included in the log: System Activity: Displays information related to WRT-410 operation. Debug Information: Displays information related to errors and system malfunction. Attacks: Displays information about any malicious activity on the network. Dropped Packets: Displays information about packets that have not been transferred successfully. Notice: Displays important notices by the system administrator.

3.3.4 Statistic

This screen displays a table that shows the rate of packet transmission via the WRT-410 LAN, WLAN and WAN ports (in bytes per second).

- 16 -

+ 48 hidden pages