PLANET VRT-420N User Manual

802.11N VPN Broadband Router

VRT-420N

Copyright  2011 by PLANET Technology Corp. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chem ical, manual or otherwise, without the prior written permission of PLANET.

PLANET makes no representations or warranties, either expressed or implied, with respect to the contents hereof and specifically disclaims any warranties, merchantability or fitness for any particular purpose. Any software described in this manual is sold or licensed "as is". Should the programs prove defective following their purchase, the buyer (and not this company, its distributor, or its dealer) assumes the entire cost of all necessary servicing, repair, and any incidental or consequential damages resulting from any defect in the software. Further, this company reserves the right to revise this publication and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

All brand and product names mentioned in this manual are trademarks and/or registered trademarks of their respective holders.

Federal Communication Commission Interference Statement

This equipment has been tested and found to comply with the lim its for a Class B digital device, pursu ant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequenc y energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or televisio n reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

1. Reorient or relocate the receiving antenna.

2. Increase the s eparation between the equipment and receiver.

3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

4. Cons ult the dealer or an experienced radio technician for help.

FCC Caution:

To assure Confirmed compliance, (example-use only shielded interface cables when connecting to computer or peripheral devices) any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.

This device complies with Part 15 of the FCC Rules. Operation is subject to the Following two conditions: (1) This device may not cause harmful interference, and (2) this D evice must accept any interference received, including interference that may cause undesired operation.

Federal Communication Commission (FCC) Radiation Exposure Statement

This equipment complies with FCC radiation exposure set forth for an unc ontrolled environment. In order to avoid the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antenna shall not be less than 20 cm (8 inches) during normal operation.

CE mark Warning

This is a class B device, in a domestic environment; this product may cause radio interference, in which case the user may be required to take adequate measures.

Energy Saving Note of the Device

This power required device does not support Stand by mode operation. For energy saving, please remove the DC-plug or push the hard ware Power Switch to OFF position to

disconnect the device from the power circuit.

Without remove the DC-plug or switch off the device, the device wills still consuming power from the power circuit. In the view of Saving the Energy and reduce the unnecessary power consuming, it is strongly suggested to switch off or remove the DC-plug for the device if this device is not intended to be active.

R&TTE Compliance Statement

This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal Equipment and the mutual recognition of their conformity (R&TTE).

The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal Equipment and Satellite Earth Station Equipment) As of April 8, 2000.

Safety

This equipment is designed with the utmost care for the safety of those who install and use it. Ho wever, special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment. All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment.

WEEE regulation

To avoid the potential effects on the environment and human health as a result of the presence of hazardous substances in electrical and electronic equipment, end users of electrical an d e lectroni c equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispos e of WEEE as unsorted municipal waste and have to collect such WEEE separately.

Wireless National restrictions

This device is intended for home and office use in all EU countries (and o ther countries following the EU directive 1999/5/EC) without any limitation except for the countries mentioned below:

Country Restriction Reason/remark

Bulgaria None

Outdoor use limited

France

Italy None

Luxembourg None

Norway Implemented Russian

Federation

to 10 mW e.i.r.p. within the band 2454-2483.5 MHz

None Only for indoor applications

General authorization required for outdoor use and

public service

Military Radiolocation use. Refarming of the 2.4 GHz band has been ongoing in recent years to allow current relaxed regulation. Full implementation planned 2012

If used outside of own premises, general authorization is required

General authorization required for network and service supply(not for spectrum)

This subsection does not apply for the geographical area within a radius of 20 km from the centre of Ny-Ålesund

Revision

User’s Manual for PLANET 802.11n VPN Broadband Router Model: VRT-420N Rev: 1.0 (June 2011)

TABLE OF CONTENTS

CHAPTER 1 INTRODUCTION.........................................................................................................6

1.1 PACKAGE CONTENTS .........................................................................................................6

1.2 FEATURES.........................................................................................................................6

1.3 SPECIFICATION ..................................................................................................................7

CHAPTER 2 HARDWARE INSTALLATION / NETWORK SETUP.................................................9

2.1 OUTLOOK ..........................................................................................................................9

2.2 HARDWARE INSTALLATION ................................................................................................10

2.3 NETWORK SETUP.............................................................................................................12

CHAPTER 3 WEB LOGIN .............................................................................................................14

CHAPTER 4 SETUP......................................................................................................................16

4.1 SETUP.............................................................................................................................16

4.1.1 WAN..........................................................................................................................16

4.1.2 WAN Advance...........................................................................................................19

4.1.3 LAN...........................................................................................................................21

4.1.4 Routing......................................................................................................................21

4.1.5 DHCP Server............................................................................................................24

4.1.6 DDNS........................................................................................................................24

4.1.7 MAC Address Clone .................................................................................................26

4.2 WIRELESS .......................................................................................................................26

4.2.1 Basic .........................................................................................................................26

4.2.2 Wireless security mode WEP ...................................................................................27

4.2.3 Wireless security mode WPA PSK/WPA2 PSK........................................................28

4.2.4 Wireless security mode WPA Radius/WPA2 Radius ................................................28

4.2.5 Advance....................................................................................................................29

4.2.6 WDS..........................................................................................................................31

4.2.7 Universal Repeater...................................................................................................31

CHAPTER 5 SECURITY................................................................................................................33

5.1 FIREWALL........................................................................................................................33

5.2 ACCESS CONTROL...........................................................................................................34

5.3 MAC ACCESS CONTROL ..................................................................................................35

5.4 OPENDNS ......................................................................................................................37

5.5 WEB FILTER....................................................................................................................38

5.6 VPN PPTP.....................................................................................................................41

5.7 VPN IPSEC.....................................................................................................................42

5.8 BWM QOS......................................................................................................................46

CHAPTER 6 APPLICATION SETTINGS.......................................................................................50

6.1 APPLICATION SETTINGS..............................................................................................................50

6.2 V

6.3 S

6.4 UP

IRTUAL HOST............................................................................................................................52

TREAM VPN .............................................................................................................................53

NP / NAT PMP......................................................................................................................54

CHAPTER 7 ADMINISTRATOR ....................................................................................................56

7.1 MANAGEMENT..................................................................................................................56

7.2 SYSTEM UTILITY ..............................................................................................................57

7.3 TIME................................................................................................................................59

CHAPTER 8 STATUS ....................................................................................................................62

8.1 ROUTER...........................................................................................................................62

8.2 USER/DHCP ....................................................................................................................64

8.3 U

8.4 L

SER/ CURRENT ...............................................................................................................64

OG.................................................................................................................................65

CHAPTER 9 LOGOUT.................................................................................................................. 67

9.1 LOGOUT ..........................................................................................................................67

CHAPTER 10 TROUBLESHOOTING........................................................................................... 68

Chapter 1 Introduction

Thank you for purchasing VRT-420N. This manual guides you on how to install and properly use the VRT-420N in order to take full advantage of its features.

1.1 Package Contents

 VRT-420N x 1  Antenna  Ethernet Cable x 1  Power Adapter x 1  CD-ROM (included user’s manual) x 1  Quick Installation Guide x 1

Note: If any of the above items are missing, please contact your supplier for support.

1.2 Features

Router / NAT Features

 Access Private LAN Servers from the Public Network  Equipped with three LAN ports (10/100Mbps) and two WAN port (10/100Mbps),

Auto-MDI/MDI-X supported

 Supports DHCP Server  System status monitoring includes Active DHCP Client, Security Log and Device/Connection

Status

 Web-based GUI for and Wizard setup for easily configuration  Remote Management allows configuration and upgrades from a remote site  Supported Internet types: Dynamic / Static IP / PPPoE / PPTP / L2TP  Supports UPnP function

Firewall / Security Features

 MAC / IP filter access control, URL blocking ; SPI firewall + DoS prevention protection  Built in NAT firewall  Predefined/User-defined service database  Enable/disable VPN pass-through

VPN Features

 Site-to-site/Client-to-VPN gateway connection capability  IKE Keying Methods: Auto (Pre-shared Key), Manual Keying  Authentication: MD5/SHA-1  Encryption: DES/3DES/AES  Adjustable IKE SA Life time  PPTP VPN tunnels : 10  IPsec VPN tunnels : 25

Load balance

 Multi-WAN bandwidth aggregation  Round Robin  Weighted Round Robin  Multi-WAN failover  WAN failure detection

Wireless Features

 IEEE 802.11n wireless technology compliant with 802.11b/g standard  Supports Wi-Fi Protected Setup (WPS)

 Advanced security: 64/128-bit WEP, WPA –TKIP(PSK), WPA2-AES(PSK), 802.1x  Max WDS mode link cloud is set up to 4 sets.  Multiple SSID (Two SSID )and hidden S S ID broadcasting

1.3 Specification

Product Model Hardware Standard

Signal T ype

Modulation

WAN Port LAN Port Antenna connector LED Indicators Data Encryption

Output Power

Data Rate N Data Rate

Receiver Sensitivity

Software

Router Feature

Wireless Feature

VPN

802.11n VPN Broadband Router VRT-420N

IEEE 802.11b/g, 802.11n Draft 2.0, IEEE802.3u

11b mode: DSSS 11g mode: OF DM 11n mode: OFDM, MIMO

802.11b: DBPSK, DQPSK, CCK

802.11g: BPSK, QPSK, 16QAM, 64QAM

802.11n: BPSK, QPSK, 16QAM, 64QAM 2 x 10/100Base-TX, Auto-MDI/MDI-X 3 x 10/100Base-TX, Auto-MDI/MDI-X 1 x Detachable dipole 3 dBi Dipole Antenna PWR* 1, WLAN* 1, WAN * 2, LAN * 3 64 bit / 128 bit WEP, WPA-PSK, WPA, WPA2, 802.1x encryption 11b: 17 dBm

11g: 15 dBm 11n: 15dBm

IEEE 802.11b: 11/5.5/2/1Mbps IEEE 802.11g: 54/48/3 6/24/18/12/9/6Mbps

Please check Table (1)

11n 20/40MHz MCS7 ,10% PER, -67±2dBm 54Mbps OFDM, 10% PER, -72±2dBm 11Mbps CCK, 8% PER, -88±2dBm

Access Private LAN Servers from the Public Network Equipped with three LAN ports (10/100Mbps) and two WAN port (10/100Mbps), Supported Internet types: Dynamic / Static IP / PPPoE / PPTP / L2TP

802.1D ( Spanning Tree Protocol ) DHCP Server / Client UPnP and DDNS DMZ and Virtual Server SNTP Static Routing

IEEE 802.11n wireless technology compliant with 802.11b/g standard Supports Wi-Fi Protected Setup (WPS) Advanced security: 64/128-bit WEP, WPA –TKIP(PSK), WPA2-AES(PSK),

802.1x Max WDS mode link cloud is set up to 4 sets. Multiple SSID (Two SSID )and hidden SSID broadcasting

Site-to-site / Client-to-VPN gateway connection capability IKE Keying Methods: Auto (Pre-shared Key), Manual Keying Authentication: MD5/SHA-1 Encryption: DES/3DES/AES Adjustable IKE SA Life time PPTP VPN tunnels : 10 IPsec VPN tunnels : 25

Session

MPLANETum Clients 253 Virtual Host 32 Port forwarding rule 64

Security

Management

15000

Built-in NAT Firewall MAC / IP/ Port Filtering Content Filtering SPI Firewall support Password protection for system management

Web-based configuration

System status monitoring includes Active DHCP Client, Security Log and Device/Connection Status Web-based GUI for and Wizard setup for easily configuration

Remote Management allows configuration and upgrades from a remote site

N Data Rate Table (1)

MCS Index

0 7.2 15.0 1 14.4 30.0 2 21.7 45.0 3 28.9 60.0 4 43.3 90.0 5 57.8 120.0 6 65.0 135.0 7 72.2 150.0

HT20 HT40

Data rate (Mbps) @ 400ns GI

Chapter 2 Hardware Installation / Network Setup

Please follow the below instruction to build the wireless network connection bet ween VRT-420N and your computers.

2.1 Outlook

Front Panel

WLAN ON/OFF & WPS Button

Active Time WLAN On/Off Press for less than 3 seconds for disable wireless configuration

WPS button Press for less than 3 seconds for WPS configuration

Reset Default

Press the WPS and WLAN buttons for longer than 3 seconds to the factory default setting

Back Panel

Item Name Antenna

1 -3 WAN1/WAN2 Power

Description Attached 3dBi dipole antenna.

Local Area Network (LAN) ports 1 to 3. Wide Area Network (WAN / Internet) port. Power connector, connects to power adapter.

2.2 Hardware Installation

1. Locate an optimum location fo r the VRT-420N. T h e be s t place for your VRT-420N is usually at

the center of your wireless network, with line of sight to all of your mobile stations.

2. Adjust the antennas of VRT-420N. Try to adjust them to a position that can best cover your wireless network. The antenna’s position will enhance the receiving sensitivity.

3. Connect all of your network devices to LAN port of VRT-420N. Connect all your computers, network devices (network-enabled consumer devices other than computers, like game console, or switch / hub).Connect one of the LAN ports on VRT-420N to your LAN switch/hub or a computer with a RJ-45 cable.

4. Plug in power adapter and connect to power source. After power on, VRT-420N will start to operate.

5. Please check all LEDs on the front panel. ‘Status’ LED should be steadily on. WAN and LAN LEDs should be on if the computer / network device connected to the res pective port of the router is powered on and correctly connected. If PWD LED is not on, or any LED you expected is not on, please recheck the cabling, or jump to ‘Troubleshooting’ for possible reasons and solution.

Note:

1. ONLY use the power adapter supplied wit h the VRT-420N. Otherwise, the product may be

damaged.

2. If you want to reset VRT-420N to default settings, press and hold the WLAN ON/OFF + USB

Eject button over 30 seconds and release. And then wait for VRT-420N restart.

2.3 Network Setup

After you install your VRT-420N, the TCP/IP settings should be set to obtain an IP address from a DHCP server (VRT-420N) automatically. To verify your IP address, please follow the steps below:

1. Click on Start > R un.

2. In the run box type “cmd” and click OK. (Windo ws Vista users type cmd in the Start .Search box.)At the prompt.

3. Type “ipconfig” and press Enter. It will display the IP addr ess, subnet mask, and the default gateway of adapter.

4. If the address is 0.0.0.0, check your adapter installation, security settings, and the settings on your router. Some firewall software programs may block a DHCP request on newly installed adapters.

Assign a static IP address

If you are not using a DHCP capable gateway/router, or you need to assign a static IP address, please follow the steps below:

1. - Windows Vista® - Click on Start > Control .Panel > Network .and .Internet

>Network .and .Sharing .Center > Manage Network Connections.

- Windows® XP - Click on Start > Control .Panel > Network Connections.

- Windows® 2000 - From the desktop, right-click My Network Places > Properties.

2. Right-click on the Local Area Connection which represents your network adapter and selects Properties.

3. Highlight Internet .Protocol. (TCP/IP) and click Properties.

4. Click Use .the .following .IP .address and enter an IP address that is on the same subnet as your

network or the LAN IP address on your router. Example: If LAN IP address of VRT-420N is 192.168.0.1, make your IP address 192.168.0.X where X is a number between 2 and 99. Make sure that the number you choose is not in use on the network. Set Default Gateway the same as the LAN IP address of your router (192.168.0.1). Set Primary DNS the same as the LAN IP address of your router (192.168.0.1). The Secondary DNS is not needed or you may enter a DNS server from your ISP.

5. Click OK twice to save your settings.

Chapter 3 Web Login

We suggest manage the VRT-420N. In the browser IE version 7 or later version.

VRT-420N with an assigned IP address allows you to monitor and configure via web browser (e.g., MS Internet Explorer or Netscape).

1. Open your web browser.

2. Enter the IP address of your VRT-420N in the address field (default IP address is

http://192.168.0.1

3. Please enter your User Name and Password in the dialog box. Default User Name and Password are both “admin”. Click OK.

4. Then you will see the VRT-420N HOME screen as below.

Chapter 4 Setup

This section describes the basic configuration of the VRT-420N and allows you to connect to Internet easily.

4.1 Setup

4.1.1WAN

The WAN Settings screen allows you to specify the type of Internet connection. The WAN settings offer the following selections for the router’s WAN port, Dynamic IP, Static IP, PPPoE, VPN client and WISP. Please select one of the connection types and click “More Configuration” button or select the option on the left window for configuration. If Dynamic IP is selected, your ISP will automatically give you an IP address. Some ISP’s may also require that you fill in additional information such as Host Name, Domain Name and MAC address. If Static IP is selected, your ISP should provide all the information required in this screen. If you’re ISP requires PPPoE protocol to connect to the Internet. Your ISP should provide all the information required in this section.

If you choose the VPN Client option, you will see the following PPTP and L2TP settings information.

Select PPTP if your ISP requires the PPTP protocol to connect to the Internet. Your ISP should provide all the information required in this section.

In this WISP mode, the wireless client will connect to ISP access point. The NAT is enabl ed and PCs in Ethernet ports share the same IP to ISP through wireless LAN. You must set the WAN port to WISP mode first and connect to the ISP AP in Site-Survey page. The connection type can be setup in WAN page by using PPPOE, DHCP client, PPTP client or static IP.

Please the Click “Next” button to proceed to the next step.

4.1.2WAN Advance

1.Configure the [Setup] -[WAN Advanc e] following the instructions below.

Parameters Description

Detection Interval Load balance detection interval. (seconds) Connection mode Choose Always on/Backup to define this WAN is for load balance

always on, or just for backup. Backup WAN None Load Balance Weight The priority is set from 1 to 10. “1” indicates the lowest priority, and “10”

indicates the highest. The system would route according to the ratio of

priority. Wait Time The time to re-send the request.(seconds) External Connection Detection Choose Enable/Disable to enable/disable connection detection. Connection Detection Threshold The system will generate a PING packet to detect whether the

connection is still connected. If the Host is not response for this

threshold value, the system is considered to be WAN lost. Detection time out How long Load balance detection will seems time out. Detection Type If gateway is chosen, the system will generate a PING packet to detect

whether the connection is still connected.

If custom host is chosen, the system will generate an ARP broadcast

request to detect whether the connection is still connected. Custom Detection Host Enter the IP address or domain name of the host to be detected.

4.1.3LAN

The LAN Port screen below allows you to specify a private IP address for your router’s LAN interface.

Parameters Description Internal IP address

IP Address

Subnet Mask

Spanning T ree Protocol

MTU MPLANETum Transmission Unit

Please input the IP address of this router.

Designate the Access Point’s IP Address. This IP Address should be

unique in your network. The default IP Address is 192.168.0.1.

Specify a Subnet Mask for your LAN segment. The Subnet Mask of the

Access Point is fixed and the value is 255.255.255.0.

If it is enabled, this router will use the spanning tree protocol to prevent

from network loop happened in the LAN ports.

4.1.4Routing

Click on [Setup] – [Routing] tab. You will see the following screen.

Configure Security Settings following the instructions below. Routing Choose Enable/Disable to enable/disable routing policy.

Add Routing Rule

Click on [Add] tab. You will see the following screen.

Configure the Routing rule following the instructions below.

Parameters Description

Sequence Number This defines the sequence of the Routing rules. If a packet fits the

conditions set by the Routing rules, the packet will then be sorted

according to the first Routing rule from the top of the list. Rule Name Name of the Routing rule. Enable Enable/Disable this Routing rule

+ 49 hidden pages