Nexxt NexxtGate User Manual

Page 1

Page 2

Nexxt Solutions - NexxtGate Wireless Access Point

Nexxt Solutions™ is a registered trademark. Other trademarks or brand names contained herein are the trademarks or registered brand names of their respective owners. Copyright of the whole product as integration, including its accessories and software, belongs to Nexxt Solutions Ltd. No individual or third party is allowed to copy, plagiarize, reproduce, or translate it into other languages, without express consent from Nexxt Solutions, Ltd. All of the photos and product speciﬁcations mentioned in this manual are used as reference only. Upgrades of software and hardware may occur, and should there be any changes, Nexxt Solutions shall not be responsible for notifying about any such modiﬁcations in advance. If you would like to know more about our products, please visit our website at www.NexxtSolutions.com.

Page 3

Nexxt Solutions - NexxtGate Wireless Access Point

FCC STATEMENT

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

•

Reorient or relocate the receiving antenna.

•

Increase the separation between the equipment and receiver.

•

Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

•

Consult the dealer or an experienced radio/TV technician for help.

This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

This device may not cause harmful interference.

1. This device must accept any interference received, including interference that may cause

2. undesired operation.

Any changes or modiﬁcations not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment. Note: The manufacturer is not responsible for any radio or TV interference caused by unauthorized modiﬁcations to this equipment. Such modiﬁcations could void the user’s authority to operate the equipment.

FCC RF Radiation Exposure Statement

This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This device and its antenna must not be co-located or operating in conjunction with any other antenna or transmitter. “To comply with FCC RF exposure compliance requirements, this grant is applicable to only Mobile Conﬁgurations. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter.”

Page 4

Nexxt Solutions - NexxtGate Wireless Access Point

CONTENTS

Chapter 1 Introduction

Product overview

1.1 Features

1.2

Chapter 2 Device layout

LED deﬁnition

2.1 Rear panel layout and connectos

2.2 System requirements

2.3 Environment requirements

2.4 Connecting the device

2.5

Chapter 3 Quick installation guide

Checking the LEDs

3.1 Initial conﬁguration

3.2 Quick setup wizard

3.3

Chapter 4 AP Client Router & AP Router Operation Mode

4.1 Status

4.2 Quick setup

4.3 Operation mode

4.4 Network

4.5

4.5.1

4.5.2

4.5.3

4.6.1

4.6.2

4.6.3

4.6.4

4.6.5

4.6.6

4.6.7

4.6.8

4.7.1

4.7.2

4.7.3

4.9.1

4.9.2

4.9.3

4.9.4

4.10.1

4.10.2

4.10.3

LAN WAN MAC clone Wireless

4.6 Basic settings Wireless mode Security settings MAC ﬁltering Wireless statistics Distance setting Antenna alignment Throughput monitor DHCP

4.7 DHCP settings DHCP clients list Address reservation Wireless settings

4.8 Forwarding

4.9 Virtual servers Port triggering DMZ UPnP Security

4.10 Firewall IP address ﬁltering Domain ﬁltering

Page 5

Nexxt Solutions - NexxtGate Wireless Access Point

4.10.4

4.10.5

4.10.6

4.12.1

4.12.2

4.13.1

4.13.2

4.13.3

4.14.1

4.14.2

4.15.1

4.15.2

4.15.3

4.15.4

4.15.5

4.15.6

4.15.7

4.15.8

4.15.9

4.15.10

MAC address ﬁltering Remote management Advanced security

4.11

Static routing

4.12

IP & MAC binding Binding setting ARP list

4.13

Dynamic DNS Dyndns.org DDNS Oray.net DDNS Comexe.cn DDNS

4.14

SNMP Community setting SNMP system setting

4.15

System tools Time Firmware Factory defaults Backup & restore Ping Watch Dog Speed test Reboot Password Syslog Statistics

Appendix A: FAQ Appendix B: Conﬁguring the PC Appendix C: Speciﬁcations Appendix D: Glossary

Package Contents

Upon opening the box, make sure that the following items are included: High Power Wireless Access Point Power adapter PSE module Mounting kit Quick installation guide Resource CD

Note:

If any of the listed items is missing, mismatched, damaged or broken, contact your local dealer immediately for replacement.

•

Page 6

Nexxt Solutions - NexxtGate Wireless Access Point

Chapter 1

Introduction

Thank you for purchasing the AELPLDR4U1 High Power Wireless Outdoor Access Point from Nexxt Solutions.

1.1 Product overview

The 2.4 GHz High Power Wireless Outdoor Access Point is a dedicated Wireless Internet Service Provider Customer-Premises Equipment (WISP CPE) device, providing the functions of a Wireless Access Point (WAP), WISP Client, and a high-gain antenna in one weatherproof device designed for outdoor use. The high power design extends transmission range and delivers a more reliable wireless connection. Equipped with a Power over Ethernet Port known as PoE, this device can be installed in locations where AC power is not readily available. It also features a web-based management utility for easy conﬁguration and hassle-free network connection. Convenient power, LAN and signal strength LED indicators allow users to monitor the status of the network.

Three operation modes are provided in the access point to meet each user’s needs. AP Client Router: choose this mode to enable users to share the internet as a WISP client router. AP Router: choose this mode to enable users to share internet via ADSL/Cable modem, in a wireless broadband router conﬁguration. AP: choose this mode to enable wireless devices to access a network using, in an access point conﬁguration.

1.2 Features

•

Complies with IEEE 802.11g, IEEE 802.11b, IEEE 802.3, IEEE 802.3u standards.

•

Wireless Data transfer rates up to 54Mbps.

•

The access point serves as the connection point between wireless and wired networks or as the center point of a stand-alone wireless network.

•

High output power for extended range and reliability

•

12 dBi, dual-polarized antenna easily builds up to 9.3-mile wireless.

•

Strong 24 dBm output power rating.

•

Easy to set up and manage with PPoE option. Ping Watch Dog feature automatically reboots device when necessary

•

Controlled access and WEP, WPA/WPA2, WPA-PSK/WPA2-PSK encryption methods ensure data integrity and privacy.

•

3 year full warranty, with a 2 year extension with online registration

•

Supports AP Client Router, AP Router and AP operation mode.

•

Supports Client Router Mode for WISP CPE

•

Supports passive power over Ethernet.

•

Supports Wireless Distribution System (WDS).

•

Up to 50Km.

•

Supports Antenna Alignment.

•

Throughput monitor detailed information about the current wireless data throughput.

•

Supports Layer 2 User Isolation.

•

Supports Ping Watch Dog.

•

Supports link speed test.

•

Supports Remote Management

Page 7

Nexxt Solutions - NexxtGate Wireless Access Point

•

Output transmit power adjustable.

•

Supports PPPoE, Dynamic IP, Static IP Internet Access.

•

Built-in NAT and DHCP server supporting static IP address distributing. Supports UPnP, Dynamic DNS, Static Routing, VPN Pass-through.

•

Supports Virtual Server, Special Application and DMZ host.

•

Built-in ﬁrewall supporting IP address ﬁltering, Domain Name ﬁltering, and MAC address ﬁltering.

•

Provides WLAN ACL (Access Control List).

•

Supports conﬁguration backup/restore and ﬁrmware upgrade.

•

Supports Web management.

Page 8

Nexxt Solutions - NexxtGate Wireless Access Point

Chapter 2

Device layout

2.1 LED

The AELPLDR4U1 access point features LED indicators, designed to display the connection status and the strength of the wireless signal.

Wireless Signal StrengthPower LAN

Figure 2-1 Front Panel sketch

Name

Status Indication

Off No power

Power

On Power on

Off There is no device linked to the corresponding port

LAN

Wireless

Blinking

Off

Signal Strength

Note:

Wireless Signal Strength Indicators:

In AP or Bridge mode, all the four LEDs will light up.

•

In Client or Repeater mode, the corresponding LED(s) will light up when the RSSI value

•

(wireless signal strength value) reaches the RSSI threshold. The value of RSSI threshold can be set on the Wireless Advanced Settings page, as shown in Figure 4-26. For example, if the RSSI value you set is 30, while RSSI threshold of the four LEDs are 15, 25, 35, 45 respectively, then the LEDs having RSSI thresholds of 15 and 25 will light up.

There is a device linked to the corresponding port but no activity is being detected

There is an active device linked to the corresponding port

There is no remote wireless signal

Indicates the wireless signal strength of a remote AP

Table 2-1

Client or Repeater mode

Page 9

Nexxt Solutions - NexxtGate Wireless Access Point

2.2 Rear panel layout and connectors

Figure 2-2 Rear panel sketch

Ground

•

RESET button: use it to reset device to its factory default values

•

LAN: this port is used to connect to the PoE port of the PSE (Power Sourcing Equipment)

•

module. : antenna jack to connect an additional high-power external antenna. Since the unit comes with a built in antenna, usually it is not required to connect another one outside.

2.3 System requirements

•

Each PC in the LAN needs a working Ethernet Adapter and an Ethernet cable with RJ45 connectors

•

TCP/IP protocol must be installed on each PC

•

Web browser, such as Microsoft Internet Explorer 5.0 or later, Netscape Navigator 6.0 or later

•

If the device is conﬁgured in the AP client router mode, you will also need: Wireless Internet Access Service (WISP).

•

If the device is conﬁgured in the AP router mode, you will also need: Broadband Internet Access Service (DSL/Cable/Ethernet)

•

One DSL/Cable Modem that has an RJ45 connector (you do not need it if you connect the router to the Ethernet)

2.4 Environment requirements

•

Operating temperature: -30ºC~70ºC

•

Operating Humidity: 10%~90% RH, non-condensing

Page 10

Nexxt Solutions - NexxtGate Wireless Access Point

2.5 Connecting the device

To establish an infrastructure network in AP Client Router mode as Figure 2-3, please take the following steps:

Make sure you are provided with wireless Internet service by your WISP (Wireless Internet

1. Service Provider). Locate an optimum location for the AP. Try to place your AP in an appropriate position where

2. it can well receive the signal from WISP. Connect the AP to the desktop PC.

3. Adjust the direction of the AP to get the best signal.

4. Power on the AP before conﬁguring the AP on the web-based page on your computer.

Figure 2-3

Page 11

Nexxt Solutions - NexxtGate Wireless Access Point

Power adapter

Power Injector

Computer

AELPLDR4U1

PSE device

Chapter 3

Quick installation guide

This Chapter will guide you to conﬁgure the AP to function in your network and gain access to the internet through your ISP immediately after successful conﬁguration. A more detailed description of the AP’s webbased utility and its functions can be found in “Chapter 4: Conﬁguring the AP”

Note: only a wired network connection can be used for the initial conﬁguration of the access point. Before making any hardware connections, ﬁnd a suitable location to place the access point. The best spot is usually at the center of the wireless network, with unobstructed line-of-sight to all wireless clients operating in the coverage area. Also consider that the higher the antenna is placed, the better the device can perform. Do not forget to make sure that the pole or structure you use to install the device is stable and ﬁrmly secured in place.

In order to integrate your new wireless access point into your installation, start by plugging

1. one end of an Ethernet cable to the PoE port of the supplied PSE, and the other end of the cable to the LAN port on the access point. Use a second Ethernet cable to make the connection between the LAN port of the PSE

2. module and your computer. Power the device by plugging the included AC power adapter to DC jack on the PSE device,

3. and the other end into a standard wall outlet.

If setting up the device in an outdoor location, the connection will be similar to the ﬁgure

4. below, once the above steps have been successfully completed.

Page 12

Nexxt Solutions - NexxtGate Wireless Access Point

Flashing or steady orange

Steady orange Steady orange

3.1 Checking the LEDs

Upon powering on all your network devices, check the status of the access point by verifying that all the LEDs light up normally, as shown in the diagram below.

3.2 Initial conﬁguration of the access point

Note: ﬁrst make sure your wired station Static IP address is set within the same range as the

Wireless Access Point.

3.2.1 Login

Start your WEB browser. Type http://192.168.0.1 in the address ﬁeld of the browser.

1. Press enter to continue.

A dialog box will prompt you to enter the User name and Password. Enter the default values,

2. both in lower case, and then click OK to complete the logging procedure.

Page 13

Nexxt Solutions - NexxtGate Wireless Access Point

Afterwards, you can assign a new password for security purposes without necessarily

3. modifying the default user name. If the login window fails to appear, it means that your Web-browser has been set

4. to a proxy. Verify that your parameters and passwords are correct, before making another attempt. After successfully logging in, the main navigation page will appear on the screen.

3.3 Quick setup wizard

From the main menu on the left column of the screen, select the option Quick Setup.

The Quick Setup window will pop up on the screen, as shown below. Click Next to open the

2. following window.

Three operation modes are provided in the access point to meet each user’s needs.

•

AP Client Router: choose this mode to enable users to share the internet as a WISP client router.

•

AP Router: choose this mode to enable users to share internet via ADSL/Cable modem, in a wireless broadband router conﬁguration.

•

AP: choose this mode to enable wireless devices to access a network using Wi-Fi, in an access point conﬁguration.

Page 14

Nexxt Solutions - NexxtGate Wireless Access Point

4. For illustration purposes only, we will walk you through the AP option.

3.4 AP mode setting

1. Select AP on the Quick setup dialog box, as shown in the above illustration.

2. Click Next to open the wireless conﬁguration window.

Enter a unique name to identify your wireless network. However, choose a name that is easily remembered by network users. In this example, we are using Nexxt_xxxxxx as the SSID identiﬁer.

Select your region from the drop-down list, followed by next.

Page 15

Nexxt Solutions - NexxtGate Wireless Access Point

Click Finish to exit the Quick Setup wizard and wait until the AP ﬁnishes rebooting automatically. Changes will take effect only after the reboot is complete.

Remove the LAN cable from your computer and the PSE module. Now, insert your internet cable into the port labeled LAN located in the PSE device.

From now on, you can refer to the manual for any customized settings such as security, encryption, network modes, antenna alignment and more.

Page 16

Nexxt Solutions - NexxtGate Wireless Access Point

Page 17

Nexxt Solutions - NexxtGate Wireless Access Point

Page 18

Nexxt Solutions - NexxtGate Wireless Access Point

Chapter 4

AP client router & AP router operation mode

This Chapter describes how to conﬁgure some advanced settings for your Access Point through the web-based management page. In the following sections, we will use the device in AP Client Router operation mode as example.

4.1 Login

After your successful login, you can conﬁgure and manage the Access Point.. There are fourteen main menus on the left of the Web-based management page. Submenus will be available after you click one of the main menus. The fourteen main menus are: Status,

Quick Setup, Operation Mode, Network, Wireless, DHCP, Wireless Settings, Forwarding, Security, Static Routing, IP & MAC Binding, Dynamic DNS, SNMP and System Tools. On the

right of the Web-based management page, you will ﬁnd detailed descriptions and instructions for the corresponding page. To apply any settings you have altered on the page, please click Save. For a description of each Web page key functions, please refer to the sections below.

4.2 Status

In this screen, you will be able to view the AP’s current status and conﬁguration settings, all of which are read-only.

Figure 4-1 Status

Page 19

Nexxt Solutions - NexxtGate Wireless Access Point

1. LAN

This ﬁeld displays the current settings or information belonging to the LAN, including the MAC address, IP address and Subnet Mask.

2. Wireless

This ﬁeld displays basic information or status belonging to the wireless function, including Wireless Radio, SSID, Channel, Mode, and Wireless MAC address.

3. WAN

These parameters apply to the WAN port of the router, including MAC address, IP address, Subnet Mask, Default Gateway and DNS server. If PPPoE is chosen as the WAN connection type, the Disconnect button will be shown here while you are accessing the Internet. You can also cut the connection by clicking the button. If you have not connected to the Internet, just click Connect to establish the connection.

4. Trafﬁc Statistics

This ﬁeld displays the router’s trafﬁc statistics.

5. System Up Time

The length of time since the system was last powered on or reset.

4.3 Quick setup

Please refer to Section 3.2: “Quick Setup”.

4.4 Operation mode

The Operation Mode window will allow you to choose the operational application for your AP. The AP supports three mode types: AP Client Router, AP Router and AP. Please select the one you prefer, as shown in Figure 4-2. Click Save to conﬁrm your choice.

Figure 4-2 Operation Mode

Page 20

Nexxt Solutions - NexxtGate Wireless Access Point

•

AP Client Router - In this mode, the device enables multiple computers to share the Internet from WISP. All LAN ports share the same IP from WISP through Wireless port. While connecting to WISP, the Wireless port works as a WAN port when in AP Client mode. The Ethernet port acts as a LAN port.

•

AP Router - In this mode, the device enables multiple computers to share the Internet via ADSL/Cable Modem. The wireless port share the same IP to ISP through an ethernet WAN port. The Wireless port acts like a LAN port when in the AP mode.

•

AP - In this mode, the device allows wireless communication devices to access a wireless network using WIFI. Both, the ethernet port and the wireless port work as LAN ports.

4.5 Network

The Network option allows you to customize your local network manually by changing the default settings of the AP. There are three submenus under the Network menu (shown in Figure 4-3): LAN, WAN and MAC Clone. Click any of them in order to conﬁgure the corresponding function. Please refer to the sections below for a detailed description of each submenu.

Figure 4-3 Network menu

4.5.1 LAN

Go to Network > LAN to enable the conﬁguration of IP parameters of the LAN port on this page.

Figure 4-4 LAN

•

MAC Address - The physical address of the router, as seen from the LAN. This value cannot be changed.

•

IP Address - Enter the IP address of your router in dotted-decimal notation (factory default:

192.168.0.1).

•

Subnet Mask - An address code that determines the size of the network. Normally use

255.255.255.0 as the subnet mask.

Page 21

Nexxt Solutions - NexxtGate Wireless Access Point

Note:

If you change the IP Address of the LAN, you must use the new IP Address to login to the Router.

If the new LAN IP Address you set is not in the same subnet, the IP Address pool of the DHCP server will not take effect until they are re-conﬁgured.

If the new LAN IP Address you set is not in the same subnet, the Virtual Server and DMZ Host will change accordingly at the same time.

4.5.2 WAN

Go to Network > WAN to enable the conﬁguration IP parameters of the WAN port on this page. First, please choose the WAN Connection Type (Dynamic IP/Static IP/PPPoE) for the Internet. The default type is Dynamic IP. If you are not given any login parameters (ﬁxed IP Address, logging ID, etc), please select Dynamic IP. If you are given a ﬁxed IP (static IP), please select Static IP. If you are given a user name and a password, please select the type of your ISP provided (PPPoE). If you are not sure which connection type you are currently using, please contact your ISP to obtain the correct information.

If you choose Dynamic IP, the router will automatically get IP parameters from your ISP. Please refer to Figure 4-5 below.

This page displays the WAN IP parameters assigned dynamically by your ISP, including IP address, Subnet Mask, Default Gateway, etc. Click Renew to obtain new IP parameters from your ISP. Click the Release button to release the assigned IP parameters.

•

MTU Size - The normal MTU (Maximum Transmission Unit) value for most ethernet networks is 1500 bytes. For some ISPs you need to reduce the MTU. But this is rarely required, and should not be done unless you are sure it is necessary for your ISP connection.

Figure 4-5 WAN – Dynamic IP

Page 22

Nexxt Solutions - NexxtGate Wireless Access Point

If your ISP gives you one or two DNS addresses, select Use These DNS Servers and enter the primary and secondary addresses into the correct ﬁelds. Otherwise, the DNS servers will be assigned dynamically from your ISP.

Note:

If you get address and ﬁnd error when you go to a Web site, it is likely that your DNS servers are set up improperly. You should contact your ISP to get DNS server addresses.

•

Get IP with Unicast DHCP - A few ISPs’ DHCP servers do not support the broadcast applications. If you cannot get the IP Address normally, you can choose this option. (This is rarely required.)

If you choose Static IP, you should have ﬁxed IP Parameters speciﬁed by your ISP. The Static IP settings page will appear as shown in Figure 4-6.

Figure 4-6 WAN - Static IP

In this case, you need to enter the following parameters into the spaces provided:

•

IP Address - Enter the IP address in dotted-decimal notation provided by your ISP.

•

Subnet Mask - Enter the subnet Mask in dotted-decimal notation provided by your ISP. Usually

255.255.255.0 is used as the subnet mask.

•

Default Gateway - (Optional) Enter the gateway IP address in dotted-decimal notation provided by your ISP.

•

MTU Size - The normal MTU (Maximum Transmission Unit) value for most ethernet networks is 1500 Bytes. For some ISPs you may need to modify the MTU. But this is rarely required, and should not be done unless you are sure it is necessary for your ISP connection.

•

Primary DNS - (Optional) Enter the DNS address in dotted-decimal notation provided by your ISP.

•

Secondary DNS - (Optional) Type another DNS address in dotted-decimal notation provided by your ISP if provided.

Page 23

Nexxt Solutions - NexxtGate Wireless Access Point

3. If you choose PPPoE, you should enter the following parameters as shown in Figure 4-7.

Figure 4-7 WAN - PPPoE

•

User Name/Password - Enter the User Name and Password provided by your ISP. These ﬁelds are case-sensitive.

•

Connect on Demand - You can conﬁgure the router to disconnect your Internet connection after a speciﬁed period of inactivity (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the router to automatically re-establish your connection as soon as you attempt to access the Internet again. If you wish to activate Connect on Demand, click the radio button. If you want your Internet connection to remain active at all times, enter 0 in the Max Idle Time ﬁeld. Otherwise, enter the number of minutes you want to have elapsed before your Internet connection terminates. Caution: Sometimes the connection cannot be terminated despite your setting of the “Max Idle Time” interval. This is due to some applications are continually linked to the internet in the background.

•

Connect Automatically: The connection can be re-established automatically after being disabled.

•

Time-based Connection - The connection will only be established within the period ranging from the start time to the end time (both are in HH:MM format) you specify in the Period of Time ﬁeld.

Note:

Only when you have conﬁgured the system time on the System Tools -> Time page, the Time-based Connection will take effect.

Page 24

Nexxt Solutions - NexxtGate Wireless Access Point

•

Connect Manually - You can set up the router so as to connect or disconnect it manually. After a speciﬁed period of inactivity (Max Idle Time), the router will cancel your Internet connection, in which case you will not be able to re-establish your connection automatically as soon as you attempt to access the Internet again. To use this option, click the radio button. If you want your Internet connection to remain active at all times, enter “0” in the Max Idle Time ﬁeld. Otherwise, enter the number of minutes that you wish to keep the connected status active unless a new link is requested. Caution: Sometimes the connection cannot be terminated despite your setting of the “Max Idle Time” interval. This is due to some applications are continually linked to the internet in the background. Click the Connect button to connect immediately. Click the Disconnect button to disconnect immediately. If you want to do some advanced conﬁgurations, please click the Advanced button, and the page shown in Figure 4-8 will appear.

4.5.3 MAC clone

MAC Clone allows you to clone the MAC address of the managing PC’s adapter to the WAN port. This is because some ISPs require that you register the MAC address of your adapter. Usually, no changes are required here. Go to Network > MAC Clone in order to conﬁgure the MAC address of the WAN port on the current, page as shown in Figure 4-9.

Figure 4-8 PPPoE Advanced Settings

Page 25

Nexxt Solutions - NexxtGate Wireless Access Point

Figure 4-9 MAC Address Clone

Some ISPs require that you register the MAC Address of your adapter, which is connected to your cable/DSL Modem or Ethernet during installation. Changes are rarely needed here.

•

WAN MAC Address - This ﬁeld displays the current MAC address of the WAN port. If your ISP requires that you register the MAC address, please enter the correct MAC address into this ﬁeld. The format for the MAC Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit).

•

Your PC’s MAC Address - This ﬁeld displays the MAC address of the PC that is managing the router. If the MAC address is required, you can click the Clone MAC Address To button and this MAC address will be copied in the WAN MAC Address ﬁeld.

Click Restore Factory MAC to restore the MAC address of the WAN port to its factory default value. Click Save to store your settings.

Note:

1) Only the PC on your LAN can use the Clone MAC Address To feature.

2) If you click Save, the Router will prompt you to reboot.

4.6 Wireless

The Wireless option, designed to improve functionality and performance of the wireless network, can help you to make the AP the ideal solution for your wireless network. This menu allows users to create a wireless local area network through a few simple settings. Basic Settings are used for the conﬁguration of some basic parameters of the AP. Wireless Mode allows you to select the mode that the AP works on. Security Settings provides three different security methods to protect your data and better safeguard your wireless network. MAC ﬁltering allows you to control the access of wireless stations to the AP. Wireless Statistics shows you the statistics of current connected Wireless stations. Distance Setting is used to adjust the wireless range in outdoor installations. Antenna Alignment shows the signal strength variation of the remote AP while changing the antenna’s direction. Throughput Monitor provides information about the wireless data throughput. Wireless statistics enables you to get detailed information about the wireless stations currently connected. There are eight submenus under the Wireless menu (shown in Figure 4-10): Basic Settings,

Wireless Mode, Security Settings, MAC Filtering, Wireless Statistics, Distance Setting, Antenna Alignment, Throughput Monitor, and Speed Test. Click any of them, and you will

be able to conﬁgure the corresponding function. A detailed description of each submenu is provided below.

Page 26

Nexxt Solutions - NexxtGate Wireless Access Point

4.6.1 Basic settings

Figure 4-10 Wireless menu

Go to Wireless > Basic Settings in order to conﬁgure the basic parameters of your wireless network, as illustrated below (Figure 4-11).

Figure 4-11 Wireless Settings in AP Client Router mode

•

SSID - Enter a string of up to 32 characters The same name or SSID (Service Set Identiﬁcation) must be assigned to all wireless devices in your network. Considering your wireless network security, the default SSID is set to be NEXXT_XXXXXX (in which xxxxxx represent the last six unique characters of each router’s MAC address). But it is strongly recommended that you change your network name (SSID) to a different value. This value is case-sensitive. For example, TEST is NOT the same as test.

•

Region - Select your region from the pull-down list. This ﬁeld speciﬁes the region where the wireless function of the device can be used. t may be illegal to use the wireless function of the router in a region different from those speciﬁed in this ﬁeld. If your country or region is not listed, please contact your local government agency for assistance. When you select your local region from the pull-down list, click the Save button. The dialog box with this note will be displayed. Click OK to continue.

Page 27

Nexxt Solutions - NexxtGate Wireless Access Point

Dialog box

Note:

Based on local regulations, the North America version does not have the region selection option available.

•

Channel - This ﬁeld determines which operating frequency will be used. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point.

•

Mode - Select the desired wireless mode. The options are:

•

54Mbps (802.11g) - Both 802.11g and 802.11b wireless stations can connect to the router.

•

11Mbps (802.11b) - Only 802.11b wireless stations can connect to the router.

•

Region - Speciﬁes the region where the wireless function of the AP can be used. Select your region from the drop-down list. If your country or region is not listed, please contact your local government agency for assistance.

Make sure to click the Save button to store your settings on this page.

Note:

The device will reboot automatically after you click the Save button.

Page 28

Nexxt Solutions - NexxtGate Wireless Access Point

4.6.2 Wireless mode

Go to Wireless > Wireless Mode in order to conﬁgure the wireless mode to be used by your device, as illustrated on this page (Figure 4-12).

Figure 4-12 Wireless Mode

Page 29

Nexxt Solutions - NexxtGate Wireless Access Point

Note:

When AP Client Router is selected, only the Client mode will be available, as shown as Figure 4-12. However, when AP Router is selected, only the Access Point mode will be available.

•

Access Point - Access Point mode allows wireless stations, including AP clients, to access the router. Enable SSID Broadcast - If you select the Enable SSID Broadcast checkbox, the Wireless AP will start broadcasting its name (SSID) on the air.

•

Client - In Client mode, the access point will act as a wireless station to enable wired host(s) to access the wireless AP.

•

SSID - Enter the SSID of AP that you want to access. If you check the radio button next to SSID, the AP client will connect to the AP using its SSID. MAC of AP - Enter the MAC address of AP that you want to access. If you check the radio button next to MAC of AP, the AP client will connect to the AP using its MAC address.

Note:

To apply any settings you have changed on the page, you must click the Save button. In this case, the AP will reboot automatically. Click Survey to display the available access points within range after performing a scan. Choose from the list any of the access points to connect to, as shown in Figure 4-13.

Figure 4-13 AP List

•

BSSID - The BSSID of the AP, usually also the MAC address of the AP.

•

SSID - The SSID of the AP.

•

Signal - The signal received from the AP.

•

Channel - The channel the AP works in. Security - The AP communicates in privacy.

•

Choose - Choose one AP from list to connect to.

If you click Connect, the values you selected will be ﬁlled in the SSID and MAC of AP ﬁelds, as shown in Figure 4-12.

Note:

If you want to conﬁgure other wireless mode settings, you can change your AP to AP operation mode on the Operation Mode page, as shown in Figure 4-2.

Page 30

Nexxt Solutions - NexxtGate Wireless Access Point

4.6.3 Security settings

Go to Wireless > Security Settings in order to conﬁgure the security parameters of the wireless network for your device, as illustrated on this page (Figure 4-14).

•

Disable Security - The wireless security function can be enabled or disabled. If disabled, the wireless stations will be able to connect to the device without encryption. It is strongly recommended to opt for one of the following encryption methods, to better protect your network trafﬁc.

•

WEP - Selects the 802.11 WEP security.

Type - Choose the type for the WEP security from the pull-down list. The available options are:

•

Automatic - Selects Shared Key or Open System authentication form automatically based on the wireless station’s capability and request.

Shared Key – Selects the 802.11 Shared Key authentication.

Open System – Selects the 802.11 Open System authentication.

Figure 4-14 Wireless Security

Page 31

Nexxt Solutions - NexxtGate Wireless Access Point

•

WEP Key Format - You can select ASCII or Hexadecimal format. ASCII format stands for any combination of keyboard characters in the speciﬁed length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the speciﬁed length.

•

WEP Key - Select which of the four keys will be used and enter the matching WEP key information for your network next to the key radio button you checked. These values must be identical on all wireless stations in your network.

•

Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. “Disabled” means this WEP key entry is invalid.

For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not supported) or 5 ASCII characters.

For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not supported) or 13 ASCII characters.

For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not supported) or 16 ASCII characters.

Note:

If you do not set a passkey, the wireless encryption feature remains disabled even if you have selected Shared Key, as your Authentication Mode.

•

WPA/WPA2 - Selects WPA/WPA2 based on the radius server.

•

Version - Choose the WPA encryption method from the pull-down list. The available options are:

Automatic – It automatically sets WPA or WPA2 based on the wireless station’s capability

and request. WPA - Wi-Fi Protected Access.

WPA2 - WPA version 2.

•

Encryption - You can select either Automatic, or TKIP or AES.

•

Radius Server IP - Enter the IP address of the radius server.

•

Radius Port - Enter the port used by the radius server

•

Radius Password - Enter the password for the radius server.

•

Group Key Update Period - Speciﬁes the group key update interval in seconds. The value should be 30 or higher. Enter 0 to disable the update.

•

WPA-PSK/ WPA2-PSK - Selects WPA based on pre-shared passphrase.

•

Version: The user can choose any of the options below:

Automatic - It automatically sets WPA-PSK or WPA2-PSK based on the wireless station’s capability and request.

WPA-PSK - Pre-shared key of WPA.

WPA2-PSK - Pre-shared key of WPA2.

•

Encryption - When WPA-PSK or WPA is set as the Authentication Mode, you can either select Automatic, or TKIP or AES as your Encryption type.

•

PSK Passphrase - You can enter a passphrase between 8 and 63 characters long. Group Key Update Period - Specify the group key update interval in seconds. The value should

•

be 30 or higher. Enter 0 to disable the update.

Make sure to click the Save button to store your settings on this page.

Note: The device will reboot automatically after you click the Save button.

Page 32

Nexxt Solutions - NexxtGate Wireless Access Point

4.6.4 MAC ﬁltering

Go to Wireless > MAC Filtering in order to set up ﬁltering rules designed to control the wireless access to the device, as shown in Figure 4-15.

Figure 4-15 Wireless MAC address Filtering

The Wireless MAC Address Filtering feature allows you to control the wireless stations accessing the AP, based on the station’s MAC address.

•

MAC Address - The wireless station’s MAC address that you want to access.

•

Status - The status of this entry, either Enabled or Disabled.

•

Privilege - Select the privileges for this entry. You may select one of the following Allow / Deny.

•

Description - A short description of the wireless station. To set up an entry, follow these instructions:

First, you must decide whether the unspeciﬁed wireless stations can access the router or not. If you desire that the unspeciﬁed wireless stations can access the router, please select the radio button Allow the stations not speciﬁed by any enabled entries in the list to access, otherwise, select the radio button Deny the stations not speciﬁed by any enabled entries in the list to access. To Add a Wireless MAC Address ﬁltering entry, click the Add New… button. The Add or Modify Wireless MAC Address Filtering entry page will appear, as shown in Figure 4-16.

Figure 4-16 Add or Modify Wireless MAC Address Filtering entry

To add or modify a MAC Address Filtering entry, follow the instructions below:

Page 33

Nexxt Solutions - NexxtGate Wireless Access Point

Enter the appropriate MAC Address into the MAC Address ﬁeld. The format of the MAC

Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). For example: 00-0A-EB-B0-00-0B. Enter a short description of the wireless station in the Description ﬁeld. For example:

Wireless station A. Privilege - Select the privileges for this entry, either Allow or Deny.

Status - Select Enabled or Disabled as the status for this entry, from the Status pull-down list.

Click the Save button to conﬁrm this entry.

To add additional entries, repeat steps 1-5. To modify or delete an existing entry:

Click the Modify button next to the entry you want to change. If you want to erase the entry, click on the Delete in this step.

Proceed with the changes you want to make.

Click the Save button.

Click the Enable All button to activate all entries enabled. Click the Disabled All button to cancel all entries disabled. Click the Delete All button to erase all entries. Click the Next button to go to the following page and click the Previous button to return to the previous page. For example: If you want to grant access to wireless station A with MAC address 00-0A-EB00- 07-BE, but deny access to wireless station B with MAC address 00-0A-EB- 00-07-5F, while all other wireless stations cannot access the router, you should conﬁgure the Wireless MAC Address Filtering list by following these steps:

Click the Enable button to enable this function.

Select the radio button: Deny the stations not speciﬁed by any enabled entries in the list to access for Filtering Rules.

Delete all or disable all entries, if there are any entries already.

Click the Add New... button and enter the MAC address 00-0A-EB-00-07-BE in the MAC Address ﬁeld, enter wireless station A in the Description ﬁeld, select Allow in the Privilege pull-down list and select Enabled in the Status pull-down list. Click the Save and the Return button at the end.

Click the Add New... button and enter the MAC address 00-0A-EB-00-07-5F in the MAC Address ﬁeld, enter wireless station B in the Description ﬁeld, select Deny in the Privilege pull-down list and select Enabled in the Status pull-down list. Click the Save and the Return button to complete this procedure. The ﬁltering rules just conﬁgured should look similar to the following list:

Note:

If you select the radio button Allow the stations not speciﬁed by any enabled entries in the list to access for Filtering Rules, the wireless station B will still not be able to access the router, however, other wireless stations that are not in the list will be able to access the router.

If you enable the function and select the Deny the stations not speciﬁed by any enabled entries in the list to access for Filtering Rules, and there are not any enabled entries in the list, thus, no wireless stations can access the router.

Page 34

Nexxt Solutions - NexxtGate Wireless Access Point

4.6.5 Wireless statistics

Selecting Wireless > Wireless Statistics will allow you to see the wireless transmission information in the following screen, as shown in Figure 4-17.

Figure 4-17 Wireless stations linked to the router

•

MAC Address - The connected wireless station’s MAC address.

•

Current Status - The connected wireless station’s running status, one of STA-AUTH / STA-ASSOC / AP-UP / WPA / WPA-PSK /WPA2/WPA2-PSK.

•

Received Packets - Packets received by the station

•

Sent Packets - Packets sent by the station

You cannot change any of the values on this page. To update this page and to show the current connected wireless stations, click on the Refresh button. If the numbers of connected wireless stations go beyond one page, click the Next button to go to the next page and click the Previous button to return the previous page.

Note:

This page will be refreshed automatically every 5 seconds.

4.6.6 Distance setting

Go to Wireless > Distance Setting in order to adjust the wireless range in outdoor settings, as shown in Figure 4-18. This parameter is critical for ensuring the stability of the link. Enter the distance of your wireless link, and the software will optimize the frame ACK timeout value automatically.

Figure 4-18 Distance Setting

•

Adjust option - Keep the default setting if the access point is mounted outdoors. You can also choose to set up this parameter manually. Distance: Use this command to specify the distance expressed in kilometers, rounded up to

•

the nearest decimal place. If the distance is set too short or too long, it will result in a poor connection and degraded throughput performance. It is best to set the value at 110% of the real distance. If the AP is being used in an indoor installation, please select the indoor option.

Click Save to conﬁrm your settings.

Page 35

Nexxt Solutions - NexxtGate Wireless Access Point

4.6.7 Antenna alignment

Go to Wireless > Antenna Alignment in order to visualize how the signal strength of the remote AP varies when changing the antenna’s direction.

Figure 4-19 Antenna Alignment

•

Remote AP RSSI - Remote AP signal strength value.

•

Signal percent - The ratio of RSSI to RSSI RANGE (in percentage points).

•

RSSI RANGE - You can drag the slider bar to conﬁgure it or input the RSSI RANGE value. The slider bar allows the range of the meter to be either increased or reduced. If the range is reduced, the color change will be more sensitive to signal ﬂuctuations. The slider can be used to change an offset of the maximum indicator value.

Note:

This works only after the connection to the remote access point has been established in client mode.

4.6.8 Throughput monitor

Go to Wireless > Throughput Monitor in order to visualize the wireless throughput information in the screen as illustrated in Figure 4-20.

Figure 4-20 Wireless Throughput

Page 36

Nexxt Solutions - NexxtGate Wireless Access Point

•

Rate - The unit used to measure throughput.

•

Run Time - How long this function has been running.

•

Transmit - Wireless transmit rate.

•

Receive - Wireless receive rate.

Click the Start button to start the wireless throughput monitor. Click the Stop button to cancel the wireless throughput monitor.

4.7 DHCP

DHCP stands for Dynamic Host Conﬁguration Protocol. The DHCP Server will automatically assign dynamic IP addresses to the computers on the network. This protocol simpliﬁes network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign new IP addresses. There are three submenus under the DHCP menu (as shown in Figure 4-21): DHCP Settings, DHCP Clients List and Address Reservation. Clicking any of them will enable you to conﬁgure the corresponding function. Detailed descriptions for each submenu are provided below.

Figure 4-21 DHCP menu

4.7.1 DHCP settings

Go to DHCP > DHCP Settings in order to set up the AP as a DHCP (Dynamic Host Conﬁguration Protocol) server, which provides the TCP/IP conﬁguration for all the PCs that are connected to the system on the LAN. The DHCP Server can be conﬁgured on this page (Figure 4-22).

Figure 4-22 DHCP Settings

Page 37

Nexxt Solutions - NexxtGate Wireless Access Point

•

DHCP Server - Selecting the radio button next to Disable/Enable will switch the DHCP server off or on in your AP. The default setting is Disable. If you disable the Server, you must have another DHCP server within your network. Otherwise, you will have to conﬁgure the IP address of the computer manually.

•

Start IP Address - This ﬁeld speciﬁes the ﬁrst address in the IP Address pool.

192.168.0.100 is the default start IP address.

•

End IP Address - This ﬁeld speciﬁes the last address in the IP Address pool. 192.168.0.199 is the default end IP address.

•

Address Lease Time - Enter the amount of time for the PC to connect to the AP with its current assigned dynamic IP address. The time is measured in minutes. After the time is up, the PC will be automatically assigned a new dynamic IP address. The time range is 1 ~ 2880 minutes. The default value is 120 minutes.

•

Default Gateway (optional) - This ﬁeld is used to enter the IP address of the gateway for your LAN. The factory default setting is 0.0.0.0.

•

Default Domain (optional) - This ﬁeld is used to enter the domain name of the your DHCP server. You can leave the ﬁeld blank.

•

Primary DNS (optional) - This ﬁeld is used to enter the DNS IP address provided by your ISP. Consult your ISP if you don’t know the DNS value. The factory default setting is 0.0.0.0.

•

Secondary DNS (optional) - This ﬁeld is used to enter the IP address of another DNS server if your ISP provides two DNS servers. The factory default setting is 0.0.0.0.

Click Save to save the changes.

Note:

To use the DHCP server function of the device, you should conﬁgure all computers in the LAN as “Obtain an IP Address automatically” mode. This function will not take effect only after the device reboots.

4.7.2 DHCP clients list

Go to DHCP > DHCP Clients List in order to visualize the Client Name, MAC Address, Assigned IP and Lease Time for each DHCP Client attached to the device (Figure 4-23).

Figure 4-23 DHCP Clients List

•

ID - In this ﬁeld, the index of the DHCP client is displayed.

•

Client Name - Here displays the name of the DHCP client.

•

MAC Address - In this ﬁeld ,the MAC address of the DHCP client is displayed.

•

Assigned IP - In this ﬁeld, the IP address that the AP has allocated to the DHCP client is displayed.

•

Lease Time - In this ﬁeld,, the time of the DHCP client leased is displayed. Before the time is up, DHCP client will request to renew the lease automatically.

No values on this page can be modiﬁed. To update this page and to show the devices currently attached, click on the Refresh button.

Page 38

Nexxt Solutions - NexxtGate Wireless Access Point

4.7.3 Address reservation

Go to DHCP > Address Reservation in order to specify a reserved IP address for a PC on the LAN, so the PC will always obtain the same IP address each time when it accesses the AP. Reserved IP addresses should be assigned to servers that require permanent IP settings. The screen below is used for address reservation (shown in Figure 4-24).

Figure 4-24 Address Reservation

•

MAC Address - In this ﬁeld the MAC address of the PC for which you want to reserve an IP address for is displayed.

•

Reserved IP Address – In this ﬁeld, the IP address that the AP reserved is displayed.

•

Status - It shows whether the entry is enabled or not.

•

Modify - Use it to either modify or delete an existing entry.

To reserve IP addresses:

Click the Add New button on the Address Reservation page. The following window will be displayed (Figure 4-25).

Enter the MAC address (using the XX-XX-XX-XX-XX-XX format) and the IP address in dotted-decimal notation of the computer you want to add.

Click the Save button when ﬁnished.

Figure 4-25 Add or Modify an Address Reservation Entry

To modify a reserved IP address:

Select the reserved address entry you need and click Modify. If you wish to erase the

entry, click Delete. Click Save to keep your changes

To delete all reserved IP addresses:

Click Clear All.

Click Next to go to the following page, and Click Previous to return the last page.

Page 39

Nexxt Solutions - NexxtGate Wireless Access Point

Note:

Changes will take effect only after the device reboots.

4.8 Wireless settings

Go to Wireless Settings in order to enable the conﬁguration of some advanced settings for the device in the following screen, as shown in Figure 4-26.

Figure 4-26 Wireless settings

•

Enable WMM - WMM function guarantees that packets with high- priority messages to be transmitted preferentially. It is strongly recommended to have this feature enabled.

•

Enable AP Isolation - This function can isolate wireless stations on your network from each other. Wireless devices will not be able to communicate with each other through the WLAN. This option is available only on Access Point mode.

•

Disable short preamble - Check this box to disable the short preamble and use the long preamble only.. It is recommended not to modify these settings.

•

RTS threshold - Here you can specify the RTS/CTS (Request to Send/Clear to send) threshold, which is the packet maximum size deﬁning whether RTS/CTS frames should be sent.

•

Fragmentation Threshold - The maximum packet size used for fragmentation.

•

Beacon Interval - The time interval between two successive beacons.

•

Power - The transmit power of the access point. The checkbox determines whether the transmit power conforms to regulatory levels or not. Un-checking the Obey Regulatory Power option may cause interference to other devices and also violate applicable laws in some areas.

•

Antenna Settings - The polarization of an antenna.

•

Signal LED Thresholds - The RSSI thresholds of the signal LEDs.

Page 40

Nexxt Solutions - NexxtGate Wireless Access Point

4.9 Forwarding

There are four submenus under the Forwarding menu (shown in Figure 4-27): Virtual Servers, Port Triggering, DMZ and UPnP. Click any of them to be able to conﬁgure the corresponding

function. Detailed descriptions of each submenu are provided in the sections below. Virtual servers can be used for setting up public services on your LAN, such as DNS, Email and FTP. A virtual server is deﬁned as a service port, and all requests from the Internet to this service port will be redirected to the computer speciﬁed by the server IP. Any PC that is used as a virtual server must have a static or reserved IP Address because its IP Address may change when using the DHCP function. Port Triggering is used for some applications that cannot work with a pure NAT router, like Internet games, video conferencing, Internet calling and so on, which require multiple connections. The DMZ host feature allows one local host to be exposed to the Internet to gain access to certain applications such as Internet gaming or videoconferencing. DMZ host forwards all the ports at the same time. Any PC with a port being forwarded must have its DHCP client function disabled and should have a new static IP Address assigned to it, because its IP Address may change when using the DHCP function. The Universal Plug and Play (UPnP) feature allows the devices, such as Internet computers, to access the local host resources or devices as needed. UPnP devices can be automatically discovered by the UPnP service application on the LAN.

Figure 4-27 The Forwarding menu

4.9.1 Virtual servers

Go to Forwarding > Virtual Servers in order to set up virtual servers on this page, as shown in Figure 4-28.

Figure 4-28 Virtual Servers

•

Service Port - The numbers of External Ports. You can enter a service port or a range of service ports (in XXX – YYY format, whereby XXX is the start port number, and YYY is the end port number).

•

IP Address - The IP Address of the PC providing the service application.

Page 41

Nexxt Solutions - NexxtGate Wireless Access Point

•

Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols supported by the router).

•

Status - This ﬁeld displays either Enabled or Disabled, as the current status for the device.

•

Modify - Click the Modify button next to in the entry you want to change. If you want to erase that entry, click on Delete.

To setup a virtual server entry, follow the steps described below:

Click the Add New… button on the virtual servers page. (Figure 4-29)

Select the service you want to use from the Common Service Port list. If the Common Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port ﬁeld.

Type the IP Address of the computer in the Server IP Address ﬁeld.

Select the protocol used for this application.

Select the Enable option to activate the virtual server.

Click the Save button.

Figure 4-29 Add or Modify a Virtual Server Entry

•

Common Service Port - Some common services are already available from the pull-down list.

Note:

If your computer or server has more than one type of service available, please select a different service, and enter the same IP Address for that computer or server. To modify or delete an existing entry:

Click the Modify button next to the entry you want to modify. If you want to erase this entry, click on the Delete button.

Proceed with the changes you want to make.

Click the Save button when you are done.

Click the Enable All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries. Click the Next button to go to the following page. Click the Previous button to return to the last page.

Note:

If you set the virtual server of service port as 80, you must conﬁgure the Web management port on System Tools –> Remote Management page to be any value other than 80, such as 8080. Otherwise, there will be a conﬂict to disable the virtual server.

Page 42

Nexxt Solutions - NexxtGate Wireless Access Point

4.9.2 Port triggering

Go to Forwarding > Port Triggering in order to conﬁgure the Port Triggering parameters on this menu, as shown in Figure 4-30.

Figure 4-30 Port triggering

Once conﬁgured, the operation is as follows:

A local host makes an outgoing connection to an external host using a destination port

number deﬁned in the Trigger Port ﬁeld. The router records this connection, opens the incoming port or ports associated with this

entry in the Port Triggering table, and associates them with the local host. When necessary, the external host will be able to connect to the local host using one of the

ports deﬁned in the Incoming Ports ﬁeld.

•

Trigger Port - The port for outgoing trafﬁc. An outgoing connection using this port will “Trigger” this rule.

•

Trigger Protocol - The protocol used for Trigger Ports, either TCP, UDP, or All (all protocols supported by the router).

•

Incoming Ports Range - The port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports will be forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port section). Every group of ports must be separated by commas “,”. For example, 2000-2038, 2050-2051, 2085, 3010-3030.

•

Incoming Protocol - The protocol used for Incoming Ports Range, either TCP , UDP, or ALL (all protocols supported by the router).

•

Status - This ﬁeld displays either Enabled or Disabled, as the current status for the device.

To add a new rule, follow the steps below:

Click the Add New… button o the Port Triggering page. (Figure 4-31)

Select a common application from the Common Applications drop-down list, then the port parameters will be automatically ﬁlled in the corresponding ﬁeld. If the Common Applications list does not have the application you want, enter the port parameters manually.

Select the protocol used for Trigger Port and Incoming Ports from the corresponding pull-down list.

Click on Enable on the Status ﬁeld.

Click the Save button to save the new rule.

Page 43

Nexxt Solutions - NexxtGate Wireless Access Point

Figure 4-31 Add or Modify a Triggering Entry

To modify or delete an existing entry, please complete the steps below:

Click the Modify button next to the entry you want to change. If you want to delete that entry, click the Delete in this stage.

Proceed with the changes you want to make.

Click the Save button when you are done.

Click the Enable All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries.

Note:

When the trigger connection is released, will cause the closing of the corresponding opened

ports. Each rule can only be used by one host on the LAN at a time. The trigger connection of other

hosts on the LAN will be refused. Incoming Port Range enabled cannot overlap each other at the same time.

4.9.3 DMZ (Demilitarized Zone)

Go to Forwarding > DMZ in order to set up an DMZ host on this page, as shown in Figure 4-32.

Figure 4-32 DMZ

Page 44

Nexxt Solutions - NexxtGate Wireless Access Point

To assign a computer or server to be a DMZ server:

Click the Enable radio button.

Enter the IP address in the DMZ Host IP Address ﬁeld of the local PC that you want to set as the DMZ host.

Click the Save button when done.

Note:

Once you set the DMZ host, the ﬁrewall protection for that host will be disabled.

4.9.4 UPnP

Go to Forwarding > UPnP in order to conﬁgure the UPnP function on this page, as shown in Figure 4-33:

Figure 4-33 UPnP Settings

•

Current UPnP Status - UPnP can be enabled or disabled by clicking the corresponding button. As enabling UPnP may present a risk to security, this feature is disabled by default.

•

Current UPnP Settings List - This table displays the current UPnP information.

•

App Description - The description provided by the application in the UPnP request.

•

External Port - The external port that the router opened for the application.

•

Protocol - Shows which type of protocol is opened.

•

Internal Port – The Internal port that the router opened as a local host.

•

IP Address - The IP address of the local host that initiates the UPnP request.

•

Status - The port status is displayed in this ﬁeld. “Enabled” means that the port is still active. Otherwise, the port will be inactive.

Click Enable to activate the UPnP feature. Click Disable to cancel the UPnP feature. Click Refresh to update the Current UPnP Settings List.

Page 45

Nexxt Solutions - NexxtGate Wireless Access Point

4.10 Security

This menu offers an enhanced level of protection for your network. IP address Filtering allows you to control the Internet Access of speciﬁc users on your LAN based on their IP addresses. Domain Filtering allows you to control access to certain websites on the Internet by specifying their domains or key words. Like IP Address Filtering, MAC Address Filtering allows you to control access to the Internet of users on your local network based on their MAC Addresses. Advanced Security helps to protect the router from cyber attacks. Remote Management allows you to manage your Router from a remote location via the Internet. There are six submenus under the Security menu (shown in Figure 4-34): Firewall, IP Address

Filtering, Domain Filtering, MAC Address Filtering, Remote Management and Advanced Security. Click any of them in order to conﬁgure the corresponding function. A detailed

description of each submenu is provided below.

Figure 4-34 The Security menu

Page 46

Nexxt Solutions - NexxtGate Wireless Access Point

4.10.1 Firewall

Go to Security > Firewall in order to enable the main ﬁrewall screen, as shown in Figure 4-35.

The default setting for the switch is off. Turning the general ﬁrewall switch to off will disable IP Filtering, Domain Filtering and MAC Filtering even if their individual settings are enabled.

Figure 4-35 Firewall Settings

•

Enable Firewall - Check this box to activate the Firewall.

•

Enable IP Address Filtering - Check this box to activate IP Address Filtering on the AP. There are two default ﬁltering rules for IP Address Filtering: Allow or Deny the packets speciﬁed to pass through the router.

•

Enable Domain Filtering - Check this box to enable Domain Filtering.

•

Enable MAC Filtering - Check this box to activate MAC Address Filtering on the AP. There are two default ﬁltering rules for MAC Address Filtering: Allow or Deny the packets speciﬁed to pass through the router.

Page 47

Nexxt Solutions - NexxtGate Wireless Access Point

4.10.2 IP address ﬁltering

Go to Security > IP Address Filtering in order to conﬁgure the IP address ﬁltering entry on the

current page, as shown in Figure 4-36.

Figure 4-36 IP address Filtering

Do not change the default setting if you want to keep the IP Address Filtering feature disabled. To set up an IP Address Filtering entry, you should ﬁrst enable the Firewall, followed by the IP Address Filtering on the Firewall page, as shown in Figure 4-35, and then click the Add New… button, as illustrated in Figure 4-36. This will cause the page Add or Modify an IP Address Filtering entry to be displayed, just like the one shown in Figure 4-37 below.

Figure 4-37 Add or Modify an IP Address Filtering Entry

To create or modify an IP Address Filtering entry, follow these instructions below:

Effective Time - Enter a time range using the HHMM format. It represents the period within which the entry shall remain active. For example 0803 - 1705, means that the command will be effective from 08:03 to 17:05.

LAN IP Address - Enter a LAN IP Address or a range of LAN IP addresses in this ﬁeld, in dotted-decimal notation format. For example, 192.168.0.20 192.168.0.30. Leave the ﬁeld blank if you want all LAN IP Addresses to be used.

Page 48

Nexxt Solutions - NexxtGate Wireless Access Point

LAN Port - Enter a LAN Port or a range of LAN ports in this ﬁeld. For example, 1030 2000. Leave the ﬁeld blank if you want all LAN ports to be used.

WAN IP Address - Enter a WAN IP Address or a range of WAN IP Addresses in this ﬁeld, in dotted-decimal notation format. For example, 61.145.238.6 - 61.145.238.47. Leave the ﬁeld blank if you want all WAN IP Addresses to be used.

WAN Port - Enter a WAN Port or a range of WAN Ports in this ﬁeld. For example, 25 110. Leave the ﬁeld blank if you want all WAN to be used.

Protocol - Select the protocol to be used, either TCP, UDP, or All (all protocols supported by the router).

Action - Select either Allow or Deny through the router.

Status - Select Enabled or Disabled for this entry from the Status pull-down list.

Click the Save button to conﬁrm this entry. To add another entry, repeat steps 1-9. When ﬁnished, click the Back button.

To modify or delete an existing entry:

Click the Modify next the entry you want to change. If you want to erase the entry, click the Delete button.

Proceed with the changes you want to make.

Click the Save button.

Click the Enable All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries. You can change the entry’s order as desired. Fore entries are before hind entries. Enter the ID number in the ﬁrst box you want to move and another ID number in second box you want to move to, and then click the Move button to change the entry’s order. Click the Next button to move to the following page and click the Previous button to return to the last page. For example: If you wish to block e-mail received and sent by the IP Address 192.168.0.7 on your local network, and to make the PC with IP Address 192.168.0.8 unable to visit the website of IP Address 202.96.134.12, while imposing no limitations on other PC(s), you should specify the following IP address ﬁltering list:

Page 49

Nexxt Solutions - NexxtGate Wireless Access Point

4.10.3 Domain Filtering

Go to Security > Domain Filtering in order to conﬁgure the domain ﬁltering feature, as shown in Figure 4-38.

Figure 4-38 Domain Filtering

Before adding a Domain Filtering entry, you must ensure that Enable Firewall and Enable Domain Filtering have been selected on the Firewall page, as shown in Figure 4-35. To Add a Domain ﬁltering entry, click the Add New… button, as it appears in Figure 4-38. This will open the Add or Modify a Domain Filtering entry page, as in Figure 4-39.

To add or modify a Domain Filtering entry, follow these instructions:

Domain Name - Type the domain or key word as desired in the ﬁeld. Leave the ﬁeld blank if you want all websites on the Internet to be used. For example: www.xxyy.com.cn, .net.

Status - Select Enabled or Disabled for this entry on the Status pull-down list.

Click the Save button to conﬁrm this entry.

To add or modify a Domain Filtering entry, follow these instructions:

Figure 4-39 Add or Modify a Domain Filtering entry

Page 50

Nexxt Solutions - NexxtGate Wireless Access Point

Click the Modify button next the entry you want to change. If you want to erase the entry, click the Delete button.

Proceed with the changes you want to make.

Click the Save button when done.

Click the Enabled All button to activate all entries . Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries Click the Next button to go to the following page and the Previous button to return to the last page. For example, if you want to block the PC(s) on your LAN to access websites www.xxyy.com.cn, www.aabbcc.com and websites ending in .net on the Internet, while imposing no limitations on other websites, you should specify the following Domain ﬁltering list.

4.10.4 MAC address ﬁltering

Go to Security > Domain Filtering in order to conﬁgure the MAC address ﬁltering feature on the current page, as shown in Figure 4-40.

Figure 4-40 MAC address Filtering

Before setting up MAC Filtering entries, you must ﬁrst ensure that Enable Firewall and Enable MAC Filtering have been selected on the Firewall page, as shown in Figure 4-35. To Add a MAC Address ﬁltering entry, click the Add New… button in Figure 4-40. Then the Add or Modify a MAC Address Filtering entry page will be displayed, as shown in Figure 4-41:

Page 51

Nexxt Solutions - NexxtGate Wireless Access Point

Figure 4-41 Add or Modify a MAC Address Filtering entry

To add or modify a MAC Address Filtering entry, follow these instructions:

Enter the appropriate MAC Address into the MAC Address ﬁeld. The format of the MAC

Address is XX-XX-XX-XX-XX-XX (X represents any hexadecimal digit). For example: 00-0E-AE-B0-00-0B. Enter a short description of the PC in the Description ﬁeld. Fox example: John’s PC.

Status - Select Enabled or Disabled for this entry, from the Status pull-down list.

Click the Save button to conﬁrm this entry.

To add additional entries, repeat steps 1-4. When ﬁnished, click the Return button to go back to the MAC Address Filtering page. To modify or delete an existing entry:

Click the Modify button next to the entry you want to change. If you want to erase the entry, click the Delete button.

Proceed with the changes you want to make.

Click the Save button once you are done.

Click the Enabled All button to activate all entries . Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries Click the Next button to go to the following page and click the Previous button to return to the last page. Fox example: If you want to block the PC with MAC addresses 00-0A-EB-00-07-BE and 00-0A-EB-00-07-5F from accessing the Internet, ﬁrst, enable the Firewall and MAC Address Filtering on the Firewall page. Then, you should specify the Default MAC Address Filtering Rule Deny these PC(s) with effective rules to access the Internet on the Firewall page, and include the following MAC address ﬁltering list on this page:

Page 52

Nexxt Solutions - NexxtGate Wireless Access Point

4.10.5 Remote management

Go to Security > Remote Management in order to conﬁgure the Remote Management function on this screen, as shown in Figure 4-42. This feature allows you to manage your Router from a remote location via the Internet.

Figure 4-42 Remote Management

•

Web Management Port – The web browser normally uses the standard HTTP service port 80 for access.. This Router’s default remote management web port number is 80. For greater security, you can change the remote management web port to a custom port by entering that number in the box provided. Choose a number between 1 and 65534 but do not use the number of any common service port.

•

Remote Management IP Address - This is the current address you will use when accessing your Router from the Internet. This function is disabled when the IP address is set to the default value of 0.0.0.0. To enable this function, change 0.0.0.0 to a valid IP address. If set to

255.255.255.255, then all the hosts will be able to access the Router from the internet.

Note:

To access the Router, you should type your Router’s WAN IP address into your browser’s

1. address (in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example, if your Router’s WAN address is 202.96.12.8, and the port number used is 8080, please enter http://202.96.12.8:8080 in your browser. Later, you may be asked for the Router’s password. After successfully entering the username and password, you will be able to access the Router’s web-based utility. Be sure to change the Router’s default password to a more secure password.

Page 53

Nexxt Solutions - NexxtGate Wireless Access Point

4.10.6 Advanced security

Go to Security > Advanced Security in the menu in order to prevent the router from being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood from LAN, as shown in Figure 4-43.

•

Packets Statistic interval (5 ~ 60) - The default value is 10. Select a value between 5 and 60 seconds from the pull-down list. The Packets Statistic interval value indicates the time section of the packets statistic. The result of the statistic is used for analysis by SYN Flood, UDP Flood and ICMP-Flood.

•

DoS protection - Enable or Disable the DoS protection function. Only when enabled, ﬂood ﬁlters will be effective.

•

Enable ICMP-FLOOD Attack Filtering – Check this box to Enable or Disable the ICMP-FLOOD Attack Filtering.

Figure 4-43 Advanced Security settings

Page 54

Nexxt Solutions - NexxtGate Wireless Access Point

•

ICMP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current ICMP-FLOOD Packets number is beyond the set value, the router will start up the blocking function immediately.

•

Enable UDP-FLOOD Filtering - Enable or Disable the UDP-FLOOD Filtering.

•

UDP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Select the desired setting between 5 ~ 3600 packets. When the current UPD-FLOOD Packets numbers exceeds the set value, the router will immediately start up the blocking feature.

•

Enable TCP-SYN-FLOOD Attack Filtering - Check this box to Enable or Disable the TCP-SYN- FLOOD Attack Filtering.

•

TCP-SYN-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Select the desired setting between 5 ~ 3600 packets. When the current TCP-SYN-FLOOD Packets numbers exceeds the set value, the router will immediately start up the blocking feature.

•

Ignore Ping Packet from WAN Port - Check this box to Enable or Disable this option. The default setting is disabled. If enabled, the ping packet from the Internet will be denied access to the router.

•

Forbid Ping Packet from LAN Port - Check this box to Enable or Disable Ping Packet access to the router from the LAN port. The default value is disabled. If enabled, the ping packet from the LAN port will be denied access to the router. (This can be used to defend the network against some viruses)

Click the Save button to store the settings. Click the Blocked DoS Host Table button to display the DoS host list with the items excluded.

4.11 Static routing

A static route is a pre-determined path that network information must travel to reach a speciﬁc host or network. To add or delete a route, use the parameters under the Static Routing page, as shown in Figure 4-44.

Figure 4-44 Static Routing

To add static routing entries:

Click the Add New button. The screen, as shown in Figure 4-45 will open.

Enter the following parameters.

•

Destination IP Address - The Destination IP Address is the address of the network or host that you want to assign a static route to.

•

Subnet Mask - The Subnet Mask determines which portion of an IP Address is the network portion, and which portion is the host portion.

•

Default Gateway - This is the IP Address of the gateway device that allows for contact between the router and the network or host.

Page 55

Nexxt Solutions - NexxtGate Wireless Access Point

Select Enabled or Disabled for this entry from the Status pull-down list.

Click the Save button to keep your settings.

Figure 4-45 Add or Modify a Static Route Entry

To modify or delete an existing entry:

Click the Modify button next to the entry you want to change. If you want to erase the entry, click the Delete button.

Proceed with the changes you want to make.

Click the Save button when done.

Click the Enabled All button to activate all entries. Click the Disabled All button to cancel all entries. Click the Delete All button to erase all entries.

4.12 IP & MAC binding

ARP Binding is useful for controlling access of speciﬁc computers in the LAN. This page displays the IP & MAC Binding Setting table; which you can conﬁgure based on your particular needs. There are two submenus under the IP & MAC Binding menu (shown in Figure 4-46): Binding Setting and ARP List. Click any of them in order to conﬁgure the corresponding function. Detailed descriptions for each submenu are provided below.

Figure 4-46 the IP & MAC Binding menu

Page 56

Nexxt Solutions - NexxtGate Wireless Access Point

4.12.1 Binding setting

Go to IP & MAC Binding > Binding Setting in order to conﬁgure the binding parameters, as shown in Figure 4-47.

Figure 4-47 Binding Setting

•

MAC Address - The MAC address of the monitored computer in the LAN.

•

IP Address - The assigned IP address of the monitored computer in the LAN.

•

Bind - Check this option to enable ARP binding for a speciﬁc device.

•

Modify - Use this link to edit or delete an existing entry.

When you want to add or modify an IP & MAC Binding entry, you can click the Add New button or Modify button, and then you will be directed to the next page. This page is used for adding or modifying an IP & MAC Binding entry (shown in Figure 4-48).

Figure 4-48 IP & MAC Binding Setting (Add & Modify)

To add IP & MAC Binding entries, follow the steps below.

Click the Add New... button, as shown in Figure 4-48.

Enter the MAC Address and IP Address.

Select the Bind checkbox.

Click the Save button to accept your changes.

To modify or delete an existing entry, follow the steps below.

Find the desired entry in the table.

1. Click Modify or Delete as desired, on the Modify column.

Page 57

Nexxt Solutions - NexxtGate Wireless Access Point

To ﬁnd an existing entry, follow the steps below.

Click the Find button, to open the window.

Enter the MAC Address or IP Address.

Click the Bind button on the page, as shown in Figure 4-49.

Figure 4-49 Find IP & MAC Binding Entry

Click the Enabled All button to activate all entries . Click the Delete All button to erase all entries.

4.12.2 ARP list

Go to IP & MAC Binding > ARP List in order to see the IP addresses on the LAN and their associated MAC addresses included in the ARP list. You can also use the list to conﬁgure the corresponding parameters from there. (Figure 4-50).

•

MAC Address - The MAC address of the monitored computer in the LAN.

•

IP Address - The assigned IP address of the controlled computer in the LAN.

•

Status - Indicates whether or not the MAC and IP addresses are bound.

•

Conﬁgure – To load or delete an item.

•

Load - To load the item into the IP & MAC Binding list.

•

Delete - To erase the item.

Click the Bind All button to bind all the current items. This option is only available when the ARP binding is enabled. Click the Load All button to include all items in the IP & MAC Binding list. Click the Refresh button to update all items.

Figure 4-50 ARP List

Page 58

Nexxt Solutions - NexxtGate Wireless Access Point

Note:

An item cannot be entered into the IP & MAC Binding list if the IP address of the item has been loaded before. An error warning will be displayed as well. Likewise, The Load All command will only load the items without interfering with the IP & MAC Binding list.

4.13 Dynamic DNS

The router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a ﬁxed host and domain name to a dynamic Internet IP Address. It is useful when you are hosting your own website, FTP server, or other server behind the router. Before using this feature, you need to sign up for DDNS service providers such as www.dyndns.org, www.oray.net or www.comexe. cn. The Dynamic DNS client service provider will give you a password or key.

4.13.1 Dyndns.org DDNS

If your selected dynamic DNS Service Provider is www.dyndns.org, the page will appear as shown in Figure 4-51.

To set up DDNS, follow these instructions:

Enter the User Name for your DDNS account.

Enter the Password for your DDNS account.

Enter the Domain Name you received from the dynamic DNS service provider

Click the Login button to log into the DDNS service.

•

Connection Status - The status of the DDNS service connection is displayed in this ﬁeld.

Click Logout to exit the DDNS service.

Figure 4-51 Dyndns.org DDNS Settings

Page 59

Nexxt Solutions - NexxtGate Wireless Access Point

4.13.2 Oray.net DDNS

If your selected dynamic DNS Service Provider is www.oray.net, the following page will appear, as shown in Figure 4-52.

Figure 4-52 Oray.net DDNS Settings

To set up DDNS, follow these instructions:

Enter the User Name for your DDNS account.

Enter the Password for your DDNS account.

Click the Login button to log in to the DDNS service.

•

Connection Status - The status of the DDNS service connection is displayed here.

•

Domain Name - The domain names are displayed in this ﬁeld.

Click Logout to log out the DDNS service.

Page 60

Nexxt Solutions - NexxtGate Wireless Access Point

4.13.3 Comexe.cn DDNS

If your selected dynamic DNS Service Provider is www.comexe.cn, the page will appear as shown in Figure 4-53.

Figure 4-53 Comexe.cn DDNS Settings

To set up for DDNS, follow these instructions:

Enter the domain names your dynamic DNS service provider gave.

Enter the User Name for your DDNS account.

Enter the Password for your DDNS account.

Click the Login button to log in to the DDNS service.

•

Connection Status -The status of the DDNS service connection is displayed here.

Click Logout to log out the DDNS service.

Page 61

Nexxt Solutions - NexxtGate Wireless Access Point

4.14 SNMP

SNMP will allow the network management station to retrieve statistics and status from the SNMP agent in this device. Simple Network Management Protocol (SNMP) is a popular network monitoring and management tool, which encompasses a collection of speciﬁcations for network management that include the protocol itself. To use this function, select Enable and enter the following parameters in Figure 4-54.

Figure 4-54 SNMP Settings

4.14.1 Community setting

Go to SNMP > Community Setting in order to conﬁgure SNMP (Simple Network Management Protocol) communities, which are helpful for managing client access authority levels.

Figure 4-55 Community Setting

•

Num - It displays the number for which the SNMP community is deﬁned.

•

Community String - Enter the password used to authenticate the management station to the device.

•

Access Mode - This ﬁeld allows you to specify the access privileges of the community. Read Only indicates that the community is only permitted to visualize the device conﬁguration. Read & Write indicates that the community has been granted permission to read and change the device conﬁguration.

•

Status - This ﬁeld allows you to enable/disable the corresponding entry.

•

Modify - This ﬁeld allows you to modify an entry.

To modify a community setting entry:

Find the desired entry in the table.

1. Click the Modify button in front of the community you wish to change

2. Modify the community access to the SNMP entity.

3. From the Access Mode pull-down list, select the Read Only or Read&Write option.

4. Select the Enabled option from the Status pull-down list.

5. Click the Save button to save your changes.

Click the Enabled All button to activate all entries. Click the Disable All button cancel all entries.

Page 62

Nexxt Solutions - NexxtGate Wireless Access Point

4.14.2 SNMP System Setting

Go to SNMP > SNMP Setting in order to conﬁgure several system-related parameters (iso.org.dod.internet.mgmt.mib-2.system), as shown in Figure 4-56.

Figure 4-56 SNMP System Setting

•

System Contact - The textual identiﬁcation of the contact person for this managed node, together with information on how to contact this person.

•

System Name - An administratively-assigned name for this managed node. By convention, this is the node’s fully-qualiﬁed domain name.

•

System Location - The physical location of this node.

Click the Save button to keep the conﬁguration of the current page.

4.15 System tools

System Tools option helps you to optimize the conﬁguration of your device. You can upgrade the AP to the latest version of ﬁrmware, as well as backup or restore the AP’s conﬁguration ﬁles. Ping Watch Dog is designed to constantly monitor a particular connection to a remote host using the Ping tool. Speed Test helps to test the connection speed to and from any reachable IP address on current network, especially when we are building wireless network between devices which are far away from each other. It’s suggested that you change the default password to a more secure one because it controls access to the device’s web-based management page. Besides, you can ﬁnd out what happened to the system in System Log. There are ten submenus under the System Tools menu (shown as Figure 4-57): Time, Firmware, Factory Defaults, Backup & Restore, Ping Watch Dog, Reboot, Password, Syslog and Statistics. Clicking any of them will enable you to conﬁgure the corresponding function. The detailed explanations for each submenu are provided below.

Figure 4-57 System Tools menu

Page 63

Nexxt Solutions - NexxtGate Wireless Access Point

4.15.1 Time

Go to System Tools > Time in order to set the time manually or get the GMT from the Internet for the router on the page as shown in Figure 4-58.

Figure 4-58 Time settings

•

Time Zone - Select your local time zone from this drop-down list.

•

Date - Enter your local date in MM/DD/YY into the blank ﬁelds.

•

Time - Enter your local time in HH/MM/SS into the blank ﬁelds.

To conﬁgure Time settings, please follow the steps below:

Select your local time zone.

1. Enter date and time in the corresponding blank ﬁelds.

2. Click Save.

Click the Get GMT button to get GMT time from the Internet if you have an active internet connection. If you’re using Daylight saving time, please follow the steps below.

1. Select Using Daylight Saving Time.

2. Enter daylight saving start time and end time in the blanks.

Note:

This setting will be used for some time-based functions such as ﬁrewall. You must specify

1. your time zone once you log in to the router successfully, otherwise, none of these functions will work. The time will be lost if the router is turned off.

The router will obtain GMT automatically when it connects to Internet.

Page 64

Nexxt Solutions - NexxtGate Wireless Access Point

4.15.2 Firmware

Go to System Tools > Firmware in order to upgrade the latest version of ﬁrmware for the device, as seen on the screen shown in Figure 4-59.

Figure 4-59 Firmware Upgrade

New ﬁrmware versions are posted at http://www.tp-link.com and can be downloaded for free. There is no need to upgrade the ﬁrmware unless the new ﬁrmware has a new feature you want to use. However, when experiencing problems caused by the AP itself, you can try to upgrade the ﬁrmware.

Note:

Before upgrading the AP’s ﬁrmware, you should write down some of your customized settings to avoid losing important conﬁguration settings of AP. To upgrade the AP’s ﬁrmware, please take the following steps:

Download a more recent ﬁrmware upgrade ﬁle from our website

1. (http://www.nexxtsolutions.com). Click Choose File to view the folders and select the downloaded ﬁle.

2. Click Upgrade.

•

Firmware Version - Displays the current ﬁrmware version.

•

Hardware Version - Displays the current hardware version. The upgrade ﬁle must match the current hardware version.

Note:

Do not turn off the AP or press the Reset button while the ﬁrmware is being upgraded. The AP will reboot after the Upgrading is complete.

Page 65

Nexxt Solutions - NexxtGate Wireless Access Point

4.15.3 Factory defaults

Go to System Tools > Factory Default in order to restore the router conﬁguration to its factory default values, as seen on the following screen (Figure 4-60).

Figure 4-60 Restore Factory Default

Click Restore to reset all conﬁguration settings to their default values.

•

The default User Name: admin

•

Default Password: admin

•

Default IP Address: 192.168.0.1

•

Default Subnet Mask: 255.255.255.0

Note:

Any settings you have saved will be lost after the default settings are restored.

4.15.4 Backup & restore

Go to System Tools > Backup & Restore button to save all the conﬁguration settings as a backup ﬁle in your local computer, as shown in Figure 4-61.

Figure 4-61 Save or Restore the Conﬁguration

Click the Backup button to save all conﬁguration settings as a backup ﬁle in your local computer. To restore the AP’s conﬁguration, please take the following steps:

•

Click Choose File to ﬁnd the location of conﬁguration ﬁle which you want to restore.

•

Click Restore to update the conﬁguration with the ﬁle using the path you have entered or selected in the blank ﬁeld.

Note:

The current conﬁguration will be overwritten by the uploaded conﬁguration ﬁle.

1. If the process is not done correctly, it could render the device unmanageable.

2. The upgrade process lasts around 20 seconds, after which the router will restart

3. automatically. Keep the router on during the entire upgrading process to prevent any potential damage to the unit.

Page 66

Nexxt Solutions - NexxtGate Wireless Access Point

4.15.5 Ping Watch Dog

Go to System Tools > Ping Watch Dog in order to constantly monitor a particular connection to a remote host using the Ping tool. It makes this device continuously ping a user deﬁned IP address (it can be the internet gateway, for example). If it is unable to ping under the user-deﬁned constraints, this device will automatically reboot.

Figure 4-62 Ping Watch Dog Utility

•

Enable - Check this box to Enable or Disable the Ping Watch Dog..

•

IP Address - The IP address of the target host where the Ping Watch Dog Utility is sending ping packets.

•

Interval - Sets the time interval between two consecutive ping packets being sent..

•

Delay - Sets the time delay before ﬁrst ping packet is sent out when the device is restarted.

•

Fail Count - Upper limit of the ping packet the device can drop continuously. If this value is overrun, the device will restart automatically.

Make sure to click the Save button to make your settings changes effective.

4.15.6 Speed test

Go to Wireless > Speed in order to test the connection speed to and from any reachable IP address of the existing network, especially when establishing a wireless link between devices which are far away from each other. It should be used for the preliminary throughput reading between two network devices. This reading is a rough estimate. You can input the remote device’s administrator Username and Password to get a precise reading, provided the remote device do support the Speed Test Utility of our AP.

Page 67

Nexxt Solutions - NexxtGate Wireless Access Point

Figure 4-63 Speed Test

•

Destination IP - The Remote device’s IP address.

•

User - Administrator password of the remote device. It should be ﬁlled correctly if you want to get a precise reading. Otherwise, leave this ﬁeld blank.

•

Advanced options - This command is used to display the advanced test options, when the precise reading is being selected.

Note:

If either User or Password is incorrect, only a basic test will be performed. In other words, none of the advanced options you set will take effect.

•

Direction - There are 3 options available for the trafﬁc direction while estimating the throughput

•

transmit - Estimates the outgoing throughput (TX).

•

receive - Estimates the ingoing throughput (RX).

•

both - Estimates the incoming throughput (Rx) ﬁrst, followed by the outgoing (Tx) throughput.

•

Duration - Use this box to specify how long the test should last.

•

Data amount - The maximum data amount to be sent out during the whole test.

Note:

If both Duration and Data amount are speciﬁed, the test will stop after any of them is met. Be sure to click the Run Test button to start a new test after you ﬁlled enough information. You can also stop a running test by clicking the Stop Test button at any time.

Page 68

Nexxt Solutions - NexxtGate Wireless Access Point

4.15.7 Reboot

Go to System Tools > Reboot in order to reset the device, as shown in the screen below.

Figure 4-64 Reboot the AP

Click Reboot to initialize the AP. Some device settings take effect only after the device is rebooted., which include:

•

Change LAN IP Address. (system will reboot automatically)

•

Upgrade the ﬁrmware of the AP (system will reboot automatically).

•

Restore the AP’s settings to factory default (system will reboot automatically).

•

DHCP service function.

•

Static address assignment of DHCP server.

4.15.8 Password

Go to System Tools > Password in order to change the router’s factory default user name and password, using the screen shown in Figure 4-65.

Figure 4-65 Password

It is strongly recommended that you change the factory default user name and password of the AP to more secure ones because they control access to the AP’s web-based utility. All users who try to access the AP’s web-based utility or Quick Setup will be prompted to type the AP’s user name and password.

Note:

The new user name and password must not exceed 14 characters in length and must not include any space. Enter the new Password twice to conﬁrm it. Click Save when ﬁnished. Click Clear All to delete all existing entries.

Page 69

Nexxt Solutions - NexxtGate Wireless Access Point

4.15.9 Syslog

Go to System Tools > System Log to query the logs in order to visualize the activity of the device, as shown in Figure 4-66.

Figure 4-66 System Log

The AP can keep logs of all trafﬁc. You can query the logs to see the activity in the AP. Click Refresh to show the latest log lists Click Clear All to delete all the log entries.

4.15.10 Statistics

The Statistics page (shown in Figure 4-67) displays the network trafﬁc of each PC on the LAN, including total trafﬁc and the trafﬁc of the last Packets Statistic interval in seconds.

Figure 4-67 Statistics

•

Current Statistics Status - Enabled or Disabled. The default value is disabled. To enable, click the Enable button. If disabled, the function of DoS protection in Security settings will be ineffective.

•

Packets Statistics Interval - The default value is 10. Select a value between 5 and 60 seconds from the pull-down list. This statistics interval deﬁnes the time between each transmission of data packets.

•

Sorted Rules - Select a rule from the pull-down list to display the corresponding statistics.

Page 70

Statistics Table:

Nexxt Solutions - NexxtGate Wireless Access Point

Total

Current

IP Address

Packets

Bytes

Packets

Bytes

ICMP Tx

UDP Tx

TCP SYN Tx

The IP Address displayed with statistics

The total amount of packets received and transmitted by the router.

The total amount of bytes received and transmitted by the router.

The total amount of packets received and transmitted in the last Packets Statistic interval seconds.

The total amount of bytes received and transmitted in the last Packets Statistic interval seconds.

The total amount of the ICMP packets transmitted to WAN in the last Packets Statistic interval seconds.

The total amount of the UDP packets transmitted to WAN in the last Packets Statistic interval seconds.

The total amount of the TCP SYN packets transmitted to WAN in the last Packets Statistic interval seconds.

Click the Save button to store the Packets Statistic interval value. Click the Auto-refresh checkbox to update the page automatically. Click the Refresh button to refresh the page immediately.

Page 71

Nexxt Solutions - NexxtGate Wireless Access Point

Appendix A: FAQ

Go to System Tools > System Log to query the logs in order to visualize the activity of the device, as shown in Figure 4-66.

1. How do I conﬁgure the router for ADSL users to access the Internet?

First, conﬁgure the ADSL Modem conﬁgured in RFC1483 bridge mode.

1. Connect the Ethernet cable from your ADSL Modem to the WAN port on the router.

2. The telephone cord plugs into the Line port of the ADSL modem. Login to the router, click the “Network” menu on the left of your browser, and click “WAN”

3. submenu. On the WAN page, select “PPPoE” for WAN Connection Type. Type user name in the “User Name” ﬁeld and password in the “Password” ﬁeld, ﬁnish by clicking on the “Connect” button.

Figure A-1 PPPoE Connection Type

If your ADSL lease is in “pay-according-time” mode, select “Connect on Demand” or

4. “Connect Manually” as your Internet connection mode. Type an appropriate value for “Max Idle Time” to avoid wasting paid time. Otherwise, you can select “Auto-connecting” as your Internet connection mode.

Figure A-2 PPPoE Connection Mode

Note:

Sometimes the connection cannot be terminated despite your setting of the ”Max Idle Time”

1. interval. This is due to some applications are continually linked to the internet in the background. If you are a Cable user, please conﬁgure the router following the above steps.

Page 72

Nexxt Solutions - NexxtGate Wireless Access Point

2. How do I conﬁgure the router for Ethernet users to access the Internet?

1. select “WAN” in the submenu. Once the WAN page opens, select “Dynamic IP” as the WAN Connection Type, and ﬁnish by clicking on the “Save” button. Some ISPs require that you register the MAC Address of your adapter, which is connected to your

2. cable/DSL Modem during installation. If your ISP requires MAC register, login to the router and click the “Network” menu link on the left of your browser, and then click “MAC Clone” submenu link. On the “MAC Clone” page, if your PC’s MAC address is proper MAC address, click the “Clone MAC Address” button and your PC’s MAC address will copied into the “WAN MAC Address” ﬁeld. Or you may type the MAC Address directly into the “WAN MAC Address” ﬁeld. The format for the MAC Address is XX-XX-XX-XX-XX-XX. Then click the “Save” button. It will take effect after rebooting.

Figure A-3 MAC Clone

3. I want to use Netmeeting, what do I need to do?

If you start Netmeeting as a host, you don’t need to do anything with the router.

1. If you start as a response, you need to conﬁgure Virtual Server or DMZ Host.

2. How to conﬁgure Virtual Server: Login to the router, click the “Forwarding” menu on the left of

3. your browser, and click “Virtual Servers” submenu. On the “Virtual Server” page, click Add New, then on the “Add or Modify a Virtual Server” page, enter “1720 in the “Service Port” blank ﬁeld, and your IP address in the corresponding ﬁeld, using 192.168.0.169 as an example. Remember to Enable and Save your settings at the end.

Figure A-4 Virtual Servers

Page 73

Nexxt Solutions - NexxtGate Wireless Access Point

Figure A-5 Add or Modify a Virtual server Entry

Note:

The caller on the other end should call your WAN IP, which is displayed on the “Status” page.

How to enable DMZ Host: Login to the router, click the “Forwarding” menu on the left of your

4. browser, and click “DMZ” submenu. On the “DMZ” page, click the “Enable” radio button and type your IP address into the “DMZ Host IP Address” ﬁeld, using 192.168.0.169 as an example. Remember to click the Save button when you are done.

4. I want to build a Web Server on the LAN, what should I do?

Because the Web Server port 80 will interfere with the Web management port 80 on the router,

you must change the Web management port number to avoid it. To change the Web management port number: Login to the router, click the “Security” menu on

the left of your browser, and select “Remote Management” submenu. On the “Remote Management” page, type any port number other than 80, such as 88, into the “Web Management Port” ﬁeld. Click “Save” and reboot the router.

Figure A-6 DMZ

Page 74

Nexxt Solutions - NexxtGate Wireless Access Point

Figure A-7 Remote Management

Note:

If the above conﬁguration takes effect, type http://192.168.0.1:88/ to access the router in the address ﬁeld of the Web browser (the router’s LAN IP address: Web Management Port).

3. Servers” submenu. On the “Virtual Server” page, click Add New, then on the “Add or Modify a Virtual Server” page, enter “80” into the blank ﬁeld next to “Service Port”, and your IP address next to the corresponding blank ﬁeld, taking 192.068.0.188 as an example. Remember to Enable and Save your settings at the end.

Figure A-8 Virtual Servers

5. The wireless stations cannot connect to the router.

Make sure the “Wireless Router Radio” is enabled.

1. Make sure that the wireless stations’ SSID matches the router’s SSID.

2. Make sure the wireless stations have chosen the right KEY for encryption when the router

3. is encrypted. If the wireless connection is ready, but you can’t access the router, check the IP Address

4. of your wireless stations.

A-9 Add or Modify a Virtual server Entry

Page 75

Nexxt Solutions - NexxtGate Wireless Access Point

Appendix B: Conﬁguring the PC

In this section, we will explain how to install and conﬁgure the TCP/IP correctly in Windows XP. First, make sure your Ethernet Adapter is working. Refer to the adapter’s manual for further information, if needed.

1. Conﬁgure TCP/IP component

On the Windows taskbar, click the Start button, and then click Control Panel.

1. After clicking the Network and Internet Connections icon, select the Network Connections tab

2. in the new window. Right click the icon displayed below, and select Properties on the popup menu.

Figure B-1

In the page displayed below, double click on Internet Protocol (TCP/IP).

Page 76

Nexxt Solutions - NexxtGate Wireless Access Point

Figure B-2

The following TCP/IP Properties window will be displayed, with the IP Address tab open by

5. default.

Now you have two ways to conﬁgure the TCP/IP protocol below:

•

Setting IP address automatically

Select Obtain an IP address automatically, and then choose Obtain DNS server automatically, as shown in the Figure below:

Page 77

Nexxt Solutions - NexxtGate Wireless Access Point

Figure B-3

Note: For Windows 98 OS or before, the PC and router may need to be restarted. Setting IP address manually

•

Select Use the following IP address radio button. The following items will be available.

1. If the Router’s LAN IP address is 192.168.0.1, type IP address 192.168. 0.x (whereby x is

2. any value from 1 to 253), and Subnet mask is 255.255.255.0. Type the router’s LAN IP address (the default IP is 192.168.0.1) into the Default gateway

3. ﬁeld. Select Use the following DNS server addresses. In the Preferred DNS Server ﬁeld you can

4. enter the same value as the Default gateway or type the local DNS server IP address.

Page 78

Nexxt Solutions - NexxtGate Wireless Access Point

Figure B-4

5. Click OK when done to save your settings.

Page 79

Nexxt Solutions - NexxtGate Wireless Access Point

Appendix C: Speciﬁcations

IEEE 802.3, 802.3u, 802.11b and 802.11g, TCP/IP, DHCPStandards and protocols

General

Interface

Beamwidth

Ports

Cabling Type

Modulation type

Receiver sensitivity

One 10/100M Auto-Sensing RJ45 Port(Auto MDI/MDIX), supporting Passive PoE

2.4-2.4835GHzFrequency range

12dBi Dual-Polarized Aluminum AntennaAntenna

Horizontal: 60° Vertical: 30°

One 10/100M Auto-Negotiation LAN RJ45 port, supporting passive PoE

10BASE-T: UTP category 3, 4, 5 cable (maximum 100m) EIA/TIA-568 100Ω STP (maximum 100m) 100BASE-TX: UTP category 5, 5e cable (maximum 100m) EIA/TIA-568 100Ω STP (maximum 100m)

IEEE 802.11b: DQPSK, DBPSK, DSSS, and CCK IEEE 802.11g: BPSK, QPSK, 16QAM, 64QAM, OFDM

802.11g54M: -76dBm 48M: -78dBm 36M: -82dBm 12M:

-91dBm 9M:-92dBm802.11b11M:-90dBm 5.5M:-92dBm 1M:-98dBm

Outdoor weatherproof ABSEnclosure

Grounding TerminalLighting protection

Output: 12VDC / 1A switching PSUPower supply

Dimensions

Working Temperature

Working Humidity

Storage Temperature

Storage Humidity

FCCCertifications

Wireless

54/48/36/24/18/12/9/6Mbps or 11/5.5/3/2/1MbpsWireless Data Rates

64/128/152-bit WEP, WPA/WPA2, WPA-PSK/WPA2-PSKWireless Encryptions

Physical and Environment

10.4 × 4.7 × 3.2 in. (265x120x83mm)

-30ºC~70ºC

10% ~ 90% RH, Non-condensing

-40ºC~70ºC(-40ºF~158ºF)

5% ~ 90% RH, Non-condensing

Page 80

Nexxt Solutions - NexxtGate Wireless Access Point

Appendix D: Glossary

2x to 3x eXtended Range™ WLAN Transmission Technology - The WLAN device with 2x to 3x

eXtended Range™ WLAN transmission technology is able to increase its sensitivity up to 105 dB, providing a robust, longer-range wireless connection in the coverage area. With this range-enhancing technology, a 2x to 3x eXtended Range™ based-client and access point can maintain up to three times the transmission distance of traditional 802.11b and 802.11g solutions. While the typical transmission distance of 802.11b and 802.11g devices is about 300m, a 2x to 3x eXtended Range™ based client and access point is able to maintain a much higher transmission range of nearly 830m.

802.11b - The 802.11b standard speciﬁes a wireless networking at 11 Mbps using direct-sequence spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.4GHz, and WEP encryption for security. 802.11b networks are also referred to as Wi-Fi networks.

802.11g - speciﬁcation for wireless networking at 54 Mbps using direct-sequence spread-spectrum (DSSS) technology, using OFDM modulation and operating in the unlicensed radio spectrum at 2.4GHz, and backward compatibility with IEEE 802.11b devices, and WEP encryption for security. DDNS (Dynamic Domain Name System) - The capability of assigning a ﬁxed host and domain name to a dynamic Internet IP Address. DHCP (Dynamic Host Conﬁguration Protocol) - A protocol that automatically conﬁgure the TCP/IP parameters for the all the PC(s) that are connected to a DHCP server. DMZ (Demilitarized Zone) - A Demilitarized Zone allows one local host to be exposed to the Internet for a special-purpose service such as Internet gaming or videoconferencing. DNS (Domain Name System) – An Internet Service that translates the names of websites into IP addresses.

Domain Name - A descriptive name for an address or group of addresses on the Internet. DoS (Denial of Service) - A hacker attack designed to prevent your computer or network from

operating or communicating. DSL (Digital Subscriber Line) - A technology that allows data to be sent or received over existing traditional phone lines.

ISP (Internet Service Provider) - A company that provides access to the Internet. MTU (Maximum Transmission Unit) - The size in bytes of the largest packet that can be

transmitted. NAT (Network Address Translation) - NAT technology translates IP addresses of a local area network to a different IP address for the Internet. PPPoE (Point to Point Protocol over Ethernet) - PPPoE is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection. SSID - A Service Set Identiﬁcation is a thirty-two character (maximum) alphanumeric key identifying a wireless local area network. For the wireless devices in a network to communicate with each other, all devices must be conﬁgured with the same SSID. This is typically the conﬁguration parameter for a wireless PC card. It corresponds to the ESSID in the wireless Access Point and to the wireless network name. WEP (Wired Equivalent Privacy) - A data privacy mechanism based on a 64-bit or 128-bit or 152-bit shared key algorithm, as described in the IEEE 802.11 standard. Wi-Fi - is a trademark of the Wi-Fi Alliance, founded in 1999 as Wireless Internet Compatibility Alliance (WICA), comprising more than 300 companies, whose products are certiﬁed by the Wi-Fi Alliance, based on the IEEE 802.11 standards (also called Wireless LAN (WLAN) and Wi-Fi). This certiﬁcation warrants interoperability between different wireless devices. WISP - Wireless Internet Service Providers (WISPs) are Internet service providers with networks built around wireless networking. The technology used ranges from commonplace Wi-Fi mesh networking or proprietary equipment designed to operate over open 900MHz, 2.4GHz, 4.9, 5.2,

5.4, and 5.8GHz bands or licensed frequencies in the UHF or MMDS bands. WLAN (Wireless Local Area Network) - A group of computers and associated devices communicate with each other wirelessly, which network serving users are limited in a local area.