PLANET makes no representations or warranties, either expressed or implied, with respect to the contents
hereof and specifically disclaims any warranties, merchantability or fitness for an y particular purpose. Any
software described in this manual is sold or licensed "as is". Should the programs prove defective following
their purchase, the buyer (and not this company, its distributor, or its dealer) assumes the entire cost of all
necessary servicing, repair, and any incidental or consequential damages resulting from any defect in the
software. Further, this company reserves the right to revise this publication and to make changes from time to
time in the contents hereof without obligation to notify any person of such revision or changes.
All brand and product names mentioned in this manual are trademarks and/or registered trademarks of their
respective holders.
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses, and can radiate radi o
frequency energy and, if not installed and used in accordance with the instructions, may cause
harmful interference to radio communications. However, there is no guarantee that interference will not occur in
a particular installation. If this equipment does cause harmful interference to radio or television reception, which
can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference
by one or more of the following measures:
1. Reorient or relocate the receiving antenna.
2. Increase the separation between the equipment and receiver.
3. Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
4. Consult the dealer or an experienced radio technician for help.
FCC Caution:
To assure continue d complia nc e, (example-u se only sh iel d ed interface c abl es when connecting to comp uter or
peripheral devices) any changes or modifications not expressly approved by the party responsible for
compliance could void the user’s authority to operate the equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the Following two conditions:
(1) This device may not cause harmful interference
(2) This Device must accept any interference received, including interference that may cause undesired
operation.
Any changes or modifications not expressly approved by the party responsible for compliance could
void the user’s authority to operate the equipment.
I
Page 3
Federal Communication Commission (FCC) Radiation Exposure Statement
This equipment complies with FCC radiation exposure set forth for an uncontrolled environment. In order to
avoid the possibility of exceeding the FCC radio frequenc y exposure limits, human proximity to the antenna
shall not be less than 20 cm (8 inches) during normal operation.
R&TTE Compliance Statement
This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN
PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal
Equipment and the mutual recognition of their conformity (R&TTE).
The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal
Equipment and Satellite Earth Station Equipment) As of April 8, 2000.
Safety
This equipment is designed with the utmost care for the safety of those who install and use it. However, special
attention must be paid to the dangers of electric shock and static electricity when working with electrical
equipment. All guidelines of this and of the computer m anufacture must therefore be allowed at all times to
ensure the safe use of the equipment.
National Restrictions
This device is intended for home and office use in all EU countries (and other countries following the EU
directive 1999/5/EC) without any limitation except for the countries mentioned below:
Country Restriction Reason/remark
Bulgaria None
Outdoor use limited to 10
France
Italy None
Luxembourg None
Norway Implemented
Russian
Federation
mW e.i.r.p. within the band
2454-2483.5 MHz
None Only for indoor applications
General authorization required for outdoor use and
public service
Military Radiolocation use. Refarming of the 2.4 GHz
band has been ongoing in recent years to allow current
relaxed regulation. Full implementation planned 2012
If used outside of own premises, general authorization is
required
General authorization required for network and service
supply(not for spectrum)
This subsection does not apply for the geographical area
within a radius of 20 km from the centre of Ny-Ålesund
Note: Please don’t use the product outdoors in France
WEEE regulation
To avoid the p otential effects on the environment and human health as a result of the presence of
hazardous substances in electrical and electronic equipment, end users of electrical an d electronic
equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of
WEEE as unsorted municipal waste and have to collect such WEEE separately.
II
Page 4
Revision
User’s Manual for PLANET 802.11n Wireless 3G Router
Model: WNRT-617G
Rev: 1.0 (March, 2011)
Part No. EM-WNRT617G_v1.0 (2081-E50210-000)
If there is any item missed or damaged, please contact the seller immediately.
1.2 Product Description
The Wireless 3G Router delivers exceptional range and speed, whic h can fully meet the need of Small
Office/Home Office (SOHO) networks and the users demanding higher networking performa nce.
3G/WAN Broadband Connection
The Wireless 3G Router, WNRT-617G, provides 3G and WAN (xDSL, static IP, or dynamic IP) two
kinds of broadband connection to get on the Internet. You can access the Internet no matter at home
or outside on business. Automatic 3G/WAN fail-over feature just provides non-stop internet
connection.
Multiple Wireless Network Technologies for Greater Access
PLANET WNRT-617G features 802.11n radio with 1T1R antenna technology compliant with
802.11b/g/n standards. Compared with general wireless routers, the WNRT-617G offers more
powerful and flexible capability for LAN client to access Internet with management functions.
Incredibly High Speed
Our 3G Router provides a speed of up to 150Mbps which is 3X fast of traditional 11g products,
surpassing 11g performance and enabling the use of high bandwidth-consuming applications such as
HD Videos.
Wide Range of Wireless Security Support
To secure the wireless communication, the WNRT-617G supports up-to-date encryption,
WPA-PSK/WPA2-PSK with TKIP/AES. In order to simplify the security settings, the WNRT-617G
supports Wi-Fi Protected Setup (WPS) configuration with PBC/PIN methods. By just clicking the
-1-
Page 9
User’s Manual of WNRT-617G
button, the secure connection between AP and wireless client will be built immediately.
Advanced Firewall Security
The WNRT -6 17G supports NAT function to allow multiple users to access Internet via a single legal IP.
It also provides Virtual Server for LAN PC to act as an application server and offer certain service to
the clients on Internet. Furthermore, the SPI (Stateful Packet Inspection) firewall protects your Intranet
PCs from unauthorized accesses and many kinds of DoS attacks from the Internet. In the aspect of
firewall, the WNRT-617G supplies IP-based and MAC-based access control, and prevent possible
hackers attack.
Easy Setup
The WNRT-617G provides a total solution for the home and the SOHO users. With the MIMO 11n
wireless technology, it’s easy to combine the wireless devices with existing wired network.
1.3 Product Features
¾ IEEE Compliant Wireless LAN & LAN
Compliant with IEEE 802.11n wireless technology capable of up to 150Mbps data rate
Backward compatible with 802.11b/g standard
Equipped with four LAN ports (10/100Mbps) and one WAN port (10/100Mbps), Auto
MDI/MDI-X supported
¾ 3G / 3.75G Mobile Internet Connection
Dual Network Interfaces: WAN port for cable or wired DSL service + 3G mobile
connection
Compatible with UMTS / HSPA / EVDO Mobile Network
¾ Fixed-network Broadband Router
Supported connection types: Dynamic IP/ Static IP / PPPoE / Telstra Big Pond / L2TP /
PPTP
Support Static Routing, WDS, UPnP, Dynamic DNS
¾ Secure Network Connection
Support Wi-Fi Protected Setup (WPS)
Advanced security: 64/128/152-bit WEP, WPA/WPA2 and
WPA-PSK/WPA2-PSK(TKIP/AES encryption), 802.1x
Support NAT firewall featur es, with SPI function to pro t ect against DoS attacks.
Support IP / Protocol-based access control and MAC Filtering
¾ Advanced Networking function for Specific Application
Support multiple sessions IPSec, L2TP and PPTP VPN pass-through
Support Virtual Server, ALG, DMZ and UPnP for various networking applications
Support DHCP Server
-2-
Page 10
¾ Easy Installation & Management
Web-based UI for and Quick setup for easy configuration
Remote Management allows configuration from a remote site
System status monitoring includes DHCP Client, System Log
1.4 Product Specification
User’s Manual of WNRT-617G
Product
Hardware Specification
Interface
Antenna
Power Button Power On/Off button at rear panel
WPS / Reset Button
LED Indicators PWR, SYS, WLAN, LAN x 4, WAN, 3G, WPS with green light
Material Plastic
Dimension (W x D x H) 174 x 110 x 23 mm
Weight 200g
Power Requirement 12V DC, 1A
Wireless interface Specification
WNRT-617G
150Mbps 802.11n Wireless 3G Router
WAN Port: 1 x 10/100Mbps Auto MDI/MDI-X RJ45 port
LAN Port: 4 x 10/100Mbps Auto MDI/MDI-X RJ45 ports
USB port
Gain:
Orientation: Omni-directional
WPS / Reset button at front panel
Push for above 5 seconds to reset to factory default setting
1 x USB 2.0 port
1 x Detachable RP-SMA Connector
1 x 5dBi SMA antenna included in the package
Standard Compliance with IEEE 802.11b/g/n
Frequency Band 2.4~2.4835GHz
Extend Frequency DSSS
Modulation Type DBPSK, DQPSK, QPSK, CCK and OFDM (BPSK/QPSK/16-QAM/ 64-QAM)
11n: 135/121.5/108/81/54/40.5/27/13.5Mbps
Data Transmission
Rates
Transmission
Distance
Channel
RF Power
130/117/104/78/52/39/26/13Mbps
65/58.5/52/39/26/19.5/13/6.5Mbps (Dynamic)
11g: 54/48/36/24/18/12/9/6Mbps (Dynamic)
11b: 11/5.5/2/1Mbps (Dynamic)
Indoor up to 100m
outdoor up to 300m (it is limited to the environment)
America/ FCC: 2.414~2.462GHz (11 Channels)
Europe/ ETSI: 2.412~2.472GHz (13 Channels)
Japan/ TELEC: 2.412~2.484GHz (14 Channels)
High: 18 dBm (max)
Middle: 15 dBm
-3-
Page 11
Low: 12 dBm
130M: -68dBm@10% PER
108M: -68dBm@10% PER
Receive Sensitivity
54M: -68dBm@10% PER
11M: -85dBm@8% PER
6M: -88dBm@10% PER
1M: -90dBm@8% PER
Wireless Management Features
User’s Manual of WNRT-617G
Wireless Operation
Mode
AP, WDS (AP+Bridge)
WEP (64/128/152-bit) encryption security
Encryption Security
WPA-PSK / WPA2-PSK (TKIP/AES)
WPA / WPA2 (TKIP/AES)
WPA / WPA2 enterprise mode (802.1x authentication)
Provide wireless LAN ACL (Access Control List) filtering
Wireless MAC address filtering
Wireless Security
Support WPS(WIFI Protected Setup )
Enable/Disable SSID Broadcast
Support 802.11e WMM (Wi-Fi Multimedia)
Wireless Advanced
Support Wireless Roaming
Provide Wireless Statistics
Router Features
Shares data and Internet access for users, supporting following internet access:
Internet Connection
Typ e
PPPoE / Russia PPPoE
Dynamic IP
Static IP
Telstra Big Pond
PPTP / Russia PPTP
L2TP / Russia L2TP
NAT firewall with SPI (Stateful Packet Inspection)
NAT with ALG (Application Layer Gateway)
Firewall
Built-in NAT server supporting Virtual Server, and DMZ
Built-in firewall with IP address filtering, Domain Name filtering, and MAC address filtering
Support ICMP-FLOOD, UDP-FLOOD, TCP-SYN-FLOOD filter, DoS protection
Built-in DHCP server supporting static IP address distributing
Support UPnP, Dynamic DNS
Support Flow Statistics
LAN
IP & MAC Binding
IP / Protocol-based Bandwidth Control
Session Number: Max 5210
-4-
Page 12
System Management
OS Compatibility
Standards Conformance
IEEE Standards
Others Protocols and
Standards
User’s Manual of WNRT-617G
Web-based (HTTP) management interface
Remote management
SNTP time synchronize
Easy firmware upgrade
System Log supports auto mail and save to local host
Windows 7(32-bit/64-bit)
Windows Vista (32-bit/64-bit)
Windows XP
Mac OS X 10.4 and higher
IEEE 802.11n (1T1R, up to 150Mbps)
IEEE 802.11g
IEEE 802.11b
IEEE 802.11i
IEEE 802.3 10Base-T
IEEE 802.3u 100Base-TX
IEEE 802.3x Flow Control
Please follow the instructions below to build the wireless net work connection between WNRT-617G and your
computers.
2.1 Hardware Description
2.1.1 The Front Panel
The front panel provides a simple interface monitoring the router. Figure 2-1 shows the front panel of
WNRT-617G.
Front Panel
WPS/Reset Button
ACTIVE TIME
WPS
Reset Press and hold the button more than 8 seconds to the factory default setting
Figure 2-1 WNRT-617G Front Panel
Press and hold the button less than 5 seconds for WPS configuration
-6-
Page 14
User’s Manual of WNRT-617G
2.1.2 LED Indications
The LEDs on the front panel indicate instant status of port links, wireless data activity, system power;
and help monitor and troubleshoot when needed. Figure 2-2 and Table 2-1 show the LED indications
of the Wireless Router.
LED Definition
Figure 2-2 WNRT-617G Front Panel
LED Status Function
PWR
SYS
WLAN
LAN1-4
WAN
3G
WPS
On Power is on.
Off Power is off.
On The Router is initializing.
Flashing The Router is working properly.
Off The Router has a system error.
Flashing The Wireless function is enabled.
Off The Wireless function is disabled.
On A device is linked to the corresponding port but there is no activity.
Flashing An active device is linked to the corresponding port.
Off No device is linked to the corresponding port.
On A device is linked to the corresponding port but there is no activity.
Flashing An active device is linked to the corresponding port.
Off No device is linked to the WAN port.
On
The USB 3G modem is connected.
Flashing Data is received or sent through the 3G modem.
Off No device is linked to the USB port.
Slow Flashing
A wireless device is connecting to the network by WPS function. This
process will last for about 2 minutes.
On
Quick
Flashing
A wireless de vice has been succe ssfully added to the network by WPS
function. The LED will keep on for about 5 minutes.
A wireless device has failed to be added to the network by WPS
function.
Table 2-1 The LEDs indication
1. When a device ha s been successfully a dded to the network by WP S function, the WPS
LED will keep on for about 5 minutes and then turn off.
2. When pressing and holding the WPS/Reset Button for more than 5 seconds, you will
reset the router.
-7-
Page 15
The Rear Panel
User’s Manual of WNRT-617G
Figure 2-3 Rear Panel
Interface Function
POWER
The Power socket is where you will connect the power adapter.
Please use the power adapter provided with WNRT-617G.
ON/OFF The button of the power.
WAN Connect to the DSL/cable Modem, or Ethernet
1,2,3,4 (LAN) Connect to the user’s PC or network devices
USB Connect to the USB 3G modem
Table 2-2 The Interface indication
-8-
Page 16
User’s Manual of WNRT-617G
Chapter 3. Connecting the Router
3.1 System Requirements
Broadband Internet Access Service (DSL/Cable/Ethernet connection)
One DSL/Cable Modem that has an RJ-45 connector (not necessary if the Router is connected
directly to the Ethernet.)
PCs with a working Ethernet Adapter and an Ethernet cable with RJ-45 connectors PC of subscribers running Windows 98/ME, NT4.0, 2000/XP, Windows Vista / Win 7, MAC OS 9 or
later, Linux, UNIX or other platform compatible with TCP/IP protocols
Above PC installed with WEB Browser
It is recommended to use Internet Explore 7.0 or above to access the Router.
3.2 Installing the Router
Before installing the Router, make sure your PC is connected to the Internet through the broadband
service successfully at this moment. If there is any problem, please contact your local ISP. After that,
please install the Router according to the following steps. Don't forget to pull out the power plug and
keep your hands dry.
Step 1. Power off your PC, Cable/DSL Modem, and the Router.
Step 2. Locate an optimum location for the Router. The best place is usually at the center of your
wireless network.
Step 3. Adjust the direction of the antenna. Normally, upright is a good direction.
-9-
Page 17
User’s Manual of WNRT-617G
Figure 3-1 Adjust the direction of the antenna
Step 4. Connect the PC or Switch/Hub in your LAN to the LAN Ports (Y ello w port s) of the Router with
Ethernet cable, shown in Figure 3-2.
Figure 3-2 Hardware Installation of the WNRT-617G Wireless Router
Step 5. Connect the power adapter to the power socket on the Router, and the other end into an
electrical outlet. Then power on the Router.
Step 6. Power on your PC and Cable/DSL Modem.
-10-
Page 18
User’s Manual of WNRT-617G
Chapter 4. Quick Installation Guide
This chapter will show you how to configure the basic functions of your Wireless 3G Router using
Quick Setup within minutes.
A computer with wired Ethernet connection to the Wireless Router is required for the
first-time configuration.
4.1 Manual Network Setup - TCP/IP Configuration
The default IP address of the WNRT-617G is 192.168.1.1. And the default Subnet Mask is
255.255.255.0. These values can be changed as you desire. In this guide, we use all the default
values for description.
Connect the local PC to the LAN ports of the Router. And then you can configure the IP address for
your PC in the following two ways.
Obtain an IP address automatically
Configure the IP address manually
In the following sections, we’ll introduce how to install and configure the TCP/IP correctly in Windows
XP. First, make sure your Ethernet Adapter is working, and refer to the Ethernet adapter’s manual if
needed.
4.1.1 Obtain an IP Address Automatically
Summary:
Set up the TCP/IP Protocol in "Obtain an IP address automatically" mode on your PC.
Then the WNRT-617G built-in DHCP server will assign IP address to the PC automatically.
1. Install TCP/IP component
1) On the Windows taskbar, click the Start button, point to Settings, and then click Control
Panel.
2) Click the Network and Internet Connections icon, and then click on the Network
Connections tab in the appearing window.
3) Right click the icon shown below, select Properties on the prompt window.
-11-
Page 19
Figure 4-1
User’s Manual of WNRT-617G
4) In the prompt window shown below, double click on the Internet Protocol (TCP/IP).
Figure 4-2
5) The following TCP/IP Properties window will display and the IP Address tab is open on this
window by default.
-12-
Page 20
User’s Manual of WNRT-617G
2. Setting IP address automatically
Select Obtain an IP address automatically, Choose Obtain DNS server automatically, as shown in
the Figure below:
Figure 4-3
Now click OK to save your settings.
4.1.2 Configure the IP Address Manually
Summary:
Set up the TCP/IP Protocol for your PC.
Configure the network parameters. The IP address is 192.168.1.xxx ("xxx" is any number
from 2 to 254), Subnet Mask is 255.255.255.0, and Gateway is 192.168.1.1 (The Router's
default IP address)
1 Select Use the following IP address radio button.
2 If the Router's LAN IP address is 192.168.1.1, enter IP address 192.168.1.x (x is from 2 to 254),
and Subnet mask 255.255.255.0.
-13-
Page 21
User’s Manual of WNRT-617G
3 Enter the Router’s LAN IP address (the default IP is 192.168.1.1) into the Default gateway field.
4 Select Use the following DNS server addresses radio button. In the PreferredDNS Server
field, you can enter the DNS server IP address which has been provided by your ISP
Figure 4-4
Now click OK to save your settings.
Now, you can run the Ping command in the command prompt to verify the network connection
between your PC and the Router. The following example is in Windows XP OS. Please follow the
steps below:
1. Click on Start > Run.
-14-
Page 22
User’s Manual of WNRT-617G
Figure 4-5
2. In the run box type “cmd” and click OK. (Windows Vista users type “cmd” in the Start .Search
box.)At the prompt.
Figure 4-6
Open a command prompt, and type ping 192.168.1.1, and then press Enter.
If the result displayed is similar to Figure 4-7, it means the connection between your PC and
the Router has been established well.
-15-
Page 23
User’s Manual of WNRT-617G
Figure 4-7 Success result of Ping command
If the result displayed is similar to Figure 4-8, it means the connection between your PC and
the Router has failed.
Figure 4-8 Failure result of Ping command
If the address is 0.0.0.0, check your adapter installation, security settings, and the settings on your
router. Some firewall software programs may block a DHCP request on newly installed adapters.
-16-
Page 24
User’s Manual of WNRT-617G
1. The 1/2/3/4 LEDs of LAN ports which you link to on the Router and LEDs on your PC's
adapter should be lit.
2. If the Router's IP address is 192.168.1.1, your PC's IP address must be within the
range of 192.168.1.2 ~ 192.168.1.254.
-17-
Page 25
User’s Manual of WNRT-617G
4.2 Starting Setup in Web UI
It is easy to configure and manage the WNRT-617G with web browser.
Step 1. To access the configuration utility, open a web-browser and enter the default IP address
http://192.168.1.1 in the address field of the browser.
Figure 4-9 Login the Router
After a moment, a login window will appear. Enter admin for the User Name and Password, both in
lower case letters. Then click the OK button or press the Enter key.
Default User name: admin
Default Password: admin
Figure 4-10 Login Window
-18-
Page 26
User’s Manual of WNRT-617G
If the above screen does not pop up, it may mean that your web-browser has been set to a
proxy. Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that
appears, cancel the Using Proxy checkbox, and click OK to finish it.
After entering the username and password, the main screen app ears as Figure 4-11
Figure 4-11 WNRT-617G Web UI Screenshot
Step 2. After successfully login in, you can click the Quick Setup to quickly configure your Router.
Figure 4-12 Quick Setup
Click Next, and then Internet Access page will appear, shown in Figure 4-13.
-19-
Page 27
User’s Manual of WNRT-617G
Step 3. Select a desired Internet Access mode and then click Next. The configuration for each mode
is similar. Here we take 3G Preferred mode for example. Please refer to the procedures
below to configure the other modes.
Figure 4-13 Choose Internet Access Mode
The page includes the following fields:
Object Description
3G Preferred
In this mode, the router will try 3G access first. If 3G access fails and
WAN access is valid, or if no 3G USB modem is inserted, the router
would switch to WAN access. Once the router succeeds to connect to
the 3G network, the router would stop the WAN connection and switch
back to 3G access immediately.
3G Only
In this mode, the router will try 3G access only. WAN access is
disabled.
WAN Preferred
In this mode, the router will try WAN access first. If the WAN access
fails, and 3G access is valid, the router would switch to 3G access.
Once the router succeeds to connect to the WAN network, the router
WAN Only
would stop the 3G connection and switch back to WAN access
immediately.
In this mode, the router will try WAN access only. 3G access is
disabled.
-20-
Page 28
User’s Manual of WNRT-617G
Step 4. The next screen will appear as shown in Figure 4-16. After finishing the configuration on this
page, click Next to continue,
Please configure the PIN code of the 3G modem first and save the settings before
insert your USB 3G Modem to the router. Otherwise, the USB 3G modem will be
locked possibly for trying the wrong PIN code over three times.
The page includes the following fields:
Object Description
Location
Mobile ISP
Select the country where you're using the 3G modem.
Select the ISP (Internet Service Provider) you apply to for 3G service.
The router will show the default Dial Number and APN of that ISP. If
your ISP is not listed in the Mobile ISP, check the box before Set the
Figure 4-14
-21-
Page 29
User’s Manual of WNRT-617G
Dial Number and APNmanually and manually fill the Dial Number
and APN blanks below.
Set the Dial Number
and APN manually
SIM/UIM PIN
Message
Authentication Type
Dial Number & APN
Username & Password
Check the box and fill the Dial Number and APN blanks below if your
ISP is not listed in the Mobile ISP list or the default values are not the
latest ones.
Enter the PIN code if the SIM/UIM Protection is enabled. Please note
that 3 times of wrong PIN code will lock your SIM/UIM card. You need
to unlock it on the PC using PUK code.
The PIN information of your SIM/UIM card.
Some ISPs need a specific authentication type, so please confirm it
with your ISP or keep it Auto.
Fill these two parameters manually after Set the Dial Number and APN manually is checked.
Enter the Username and Password provided by your ISP. These fields
are optional but case-sensitive.
Step 5. You will then see the Figure 4-15. Select Auto-Detect, the Router will automatically detect
the connection type your ISP provides. Make sure the cable is plugged into the WAN port
before detection. The appropriate configuration page will be displayed when an active
Internet service is successfully detected by the Router.
Figure 4-15
-22-
Page 30
User’s Manual of WNRT-617G
If the connection type detected is PPPoE, the next screen will appear as shown in Figure 4-16.
Enter the User Name and Password provided by your ISP. These fields are case-sensitive. If
you have difficulty with this process, please contact your ISP.
Figure
4-16 Quick Setup – PPPoE
If the connection type detected is Dynamic IP, the next screen will appear as shown in Figure
4-18. Then you can go on with the wireless configuration.
If the connection type detected is Static IP, the next screen will appear as shown in Figure 4-17.
Enter the parameters in the corresponding blanks.
Figure 4-
17 Quick Setup - Static IP
Step 6. Click Next to continue, the Wireless settings page will appear as shown in Figure 4-18.
-23-
Page 31
User’s Manual of WNRT-617G
Figure 4-1
The page includes the following fields:
Object Description
Wireless Radio
Wireless Network
Name
Enable or disable the wireless radio choosing from the pull-down list.
Enter a value of up to 32 characters. The same Wireless Network Name
(SSID: Service Set Identification) must be assigned to all wireless devices in
your network. Considering your wireless network secu rity, the default SSID is
set to be default. This value is case-sensitive. For example, PLANET is NOT
the same as planet.
Region
Select your region from the pull-down list. This field specifies the region
where the wireless channel of the router can be used.
Channel
This field determines which operating frequency will be used. The default
5 Quick Setup – Wireless
Mode
Channel Width
Max Tx Rate
channel is set to Auto, so the router will choose the best channel
automatically. It is not necessary to change the wireless channel unless you
notice interference problems with another nearby access point.
This field determines the wireless mode which the Router works on.
Select any channel width from the pull-down list. The default setting is
automatic, which can adjust the channel width for your clients automatically.
You can limit the maximum transmission rate of the Router through this field.
-24-
Page 32
User’s Manual of WNRT-617G
Wireless Security
Disable Security
WPA-PSK/WPA2-PSK
The wireless security function can be enabled or
disabled. If disabled, the wireless stations will be
able to connect to the Router without encryption. It
is recommended strongly that you choose one of
following options to enable security.
WPA-PSK/WPA2-PSK - Select WPA based on
pre-shared passphrase.
PSK Password - You can enter ASCII or
Hexadecimal characters.
For ASCII, the key can be made up of any
numbers 0 to 9 and any letters A to Z, the length
should be between 8 and 63 characters.
For Hexadecimal, the key can be made up of any
numbers 0 to 9 and letters A to F, the length
should be between 8 and 64 characters.
Please also note the key is case-sensitive.
No Change
If you choose this option, wireless security
configuration will not change.
These settings are only for basic wireless parameters. For advanced settings, please refer to Section
5.6: “Wireless”.
Step 7. Click the Next button. You will then see the Finish page.
If you don’t make any change on the Wireless page, you will see the Finish page as shown in Figure
4-19. Click the Finish button to finish the Quick Setup.
-25-
Page 33
User’s Manual of WNRT-617G
Figure 4-16 Quick Setup – Finish
If there is something changed on the Wireless page, you will see the Finish page as shown in Figure
4-20. Click the Reboot button to make your wireless configuration to take effect and finish the Quick
Setup.
Figure 4-7 Quick Setup – Finish
After the rebooting, please check whether you can access the Internet or not in the 5.2 Status page.
-26-
Page 34
User’s Manual of WNRT-617G
Chapter 5. Configuring the Router
This chapter will show each Web page's key functions and the configuration way.
5.1 Login
After successfully login, you will see the fifteen main menus on the lef t of the W eb-ba se d utility. On the
right, there are the corresponding explanations and instructions.
Figure 5-1
The detailed explanations for each Web page’s key function are listed below.
5.2 Status
The Status page provides the current status information about the Router. All information is read-only.
-27-
Page 35
User’s Manual of WNRT-617G
Figure 5-2 Router Status
5.3 Quick Setup
Please refer to Section 4.2: Starting Setup in Web UI.
-28-
Page 36
User’s Manual of WNRT-617G
5.4 WPS
This section will guide you to add a new wireless device quickly to an existing network by WPS (Wi-Fi
Protected Setup) function.
Step 1. Choose menu “WPS”, you will see the next screen (shown in Figure 5-3 ).
The page includes the following fields:
Object Description
WPS Status
Current PIN
Enable or disable the WPS function here.
The current value of the Router's PIN displayed here. The default PIN
of the Router can be found in the label or User Guide.
Restore PIN
Gen New PIN
Restore the PIN of the Router to its default.
Click this button, and then you can get a new random value for the
Router's PIN. You can ensure the network security by generating a
new PIN.
Add device
You can add the new device to the existing network manually by
clicking this button.
Figure 5-3 WPS
Table 5-1
Step 2. To add a new device:
If the wireless adapter supports Wi-Fi Protected Setup (WPS), you can est ablish a wireless connection
between wireless adapter and Router using either Push Button Configuration (PBC) method or PIN
method.
-29-
Page 37
User’s Manual of WNRT-617G
To build a successful connection by WPS, you should also do the corresponding
configuration of the new device for WPS function meanwhile.
I. By Push Button Configuration (PBC)
If the wireless adapter supports Wi-Fi Protected Setup and the Push Button Configuration (PBC)
method, you can add it to the network by PBC with the following two methods.
Step 1: Press the WPS/Reset Button on the front panel of the Router.
Figure 5-4
Or you can keep the default WPS Status as Enabled and click the Add device button in Figure 5-3,
then the following screen will appear.
Figure 5-5
Choose Press the button of the new device in two minutes, and click Connect.
When pressing and holding the WPS/Reset Button on the router for more than 5
seconds, you will reset the router.
Step 2: Press and hold the WPS Button equipped on the adapter directly for 2 or 3 seconds. Or you
can click the WPS button with the same function in the configuration utility of the adapter.
-30-
Page 38
User’s Manual of WNRT-617G
Step 3: Wait for a while until the next screen appears. Click Finish to complete the WPS
configuration.
II. By PIN
If the new device supports Wi-Fi Protected Setup and the PIN method, you can add it to the network by
PIN with the following two methods.
Method One: Enter the PIN of your Wireless adapter into the configuration utility of the Router
Step 1: Keep the default WPS Status as Enabled and click the Add device button in Figure 5-3,
then the following screen will appear.
Figure 5-6
Step 2: Choose Enter the new device's PIN and enter the PIN code of the wireless adapter in the
field behind PIN in the above figure. Then click Connect.
The PIN code of the adapter is always displayed on the WPS configuration screen.
Step 3: For the configuration of the wireless adapter, please choose the option that you want to
enter PIN into the Router in theconfiguration utility of the WPS, and click Next.
Method Two: Enter the PIN of the Router into the configuration utility of your Wireless adapter
Step 1: Get the Current PIN code of the Router in Figure 5-3 (each Router has its unique PIN cod e).
-31-
Page 39
User’s Manual of WNRT-617G
Step 2: For the configuration of the wireless adapter, please choose the option that you want to
enter the PIN of the Router in theconfiguration utility of the Wireless adapter, and enter it
into the field. Then click Next.
The default PIN code of the Router can be found in WPS configuration screen as Figure 5-3.
Step 3. You will see the following screen when the new device has successfully connected to the
network.
Figure 5-7
1. The WPS LED on the Router will light green for about 5 minutes if the device has been
successfully added to the network.
2. The WPS function cannot be configured if the Wireless Function of the Router is disabled.
Please make sure the Wireless Function is enabled before configuring the WPS.
-32-
Page 40
User’s Manual of WNRT-617G
5.5 Network
There are five submenus under the Network menu (shown in Figure 5-8): Internet Access, 3G, WAN,
MAC Clone, LAN. Click any of them, and you will be able to configure the corresponding function.
Figure 5-8 The Network menu
5.5.1 Internet Access
Choose menu “Network→Internet Access”, you can configure the access mode on the screen below.
Figure 5-9 Internet Access Mode
The page includes the following fields:
Object Description
3G Preferred
In this mode, the router will try 3G access first;
When 3G access fails and WAN access is valid, or when no 3G USB
modem is inserted, the router would switch to WAN access;
When the router succeeds to connect to the 3G network, the router
would stop the WAN connection and switch back to 3G access
immediately.
-33-
Page 41
User’s Manual of WNRT-617G
3G Only
In this mode, the router will try 3G access only. WAN access is
disabled.
WAN Preferred
In this mode, the router will try WAN access first;
When the WAN access fails, and 3G access is valid, the router would
switch to 3G access;
When the router succeeds to connect to the WAN network, the router
would stop the 3G connection and switch back to WAN access
immediately.
WAN Only
In this mode, the router will try WAN access only. 3G access is
disabled.
Click the Save button to save your settings.
Table 5-2
-34-
Page 42
User’s Manual of WNRT-617G
5.5.2 3G
Choose menu “Network→3G”, you can configure parameters for 3G function on the screen below.
Please do not insert the 3G USB Modem to the router before configure the settings. When the USB
modem is unplugged, corresponding information will be shown as in Figure 5-10.
1. 3G settings are unavailable when the Internet Access mode is set to WAN Only
mode. Please change settings on Internet Access if you want to use 3G.
2. Please configure the PIN code of the 3G modem first and save the settings
before insert your USB 3G Modem to the router. Otherwise, the USB 3G modem
will be locked possibly for trying the wrong PIN code over three times.
There are already many kinds of 3G USB modem embedded in the router. The USB modem
parameters will be set automatically if it is supported by the Router. If your USB modem inserted is
supported by the Router, then its model name will be shown in the 3G USB Modem field. Otherwise,
“Unknown Modem” will be shown instead. Please visit our website to get the latest USB modems
compatibility list.
-35-
Page 43
The page includes the following fields:
Object Description
User’s Manual of WNRT-617G
Figure 5-10 3G
Location
Mobile ISP
Set the Dial Number
and APN manually
SIM/UIM PIN
Please select the location where you're enjoying the 3G Modem.
Please select the ISP (Internet Service Provider) you apply to for 3G
service. The router will show the default Dial Number and APN of that
ISP.
Check the box and fill the Dial Number and APN blanks below if your
ISP is not listed in the Mobile ISP list or the default values are not the
latest ones.
Enter the PIN code if the SIM/UIM Protection is enabled. Please note
that 3 times of wrong PIN code will lock your SIM/UIM card. You need
to unlock it on the PC using PUK code.
Note:
)
No matter how many digits of the PIN code you input, there are always
eight digits displayed in this field after saving the settings.
Message
Dial Number
APN
Username/Password
The PIN information of your SIM/UIM card.
Enter the Dial Number provided by your ISP.
Enter the APN (Access Point Name) provided by your ISP.
Enter the Username and Password provided by your ISP. These fields
are case-sensitive.
Click the Connect button to connect to your 3G network.
-36-
Page 44
User’s Manual of WNRT-617G
Connection Mode
Connect on
Demand
Connect
Automatically
Connect Manually
You can configure the Router to disconnect your
Internet connection after a specified period of
the Internet connectivity (Max Idle Time). If your
Internet connection has been terminated due to
inactivity, Connect on Demand enables the
Router to automatically re-establish your
connection as soon as you attempt to access
the Internet again. If you want your Internet
connection to remain active at all times, enter 0
in the Max Idle Time field. Otherwise, enter the
number of minutes you want to have elapsed
before your Internet connection terminates.
Connect automatically after the Router is
disconnected.
You can configure the Router to make it connect
or disconnect manually. After a specified period
Authentication Type
MTU Size
of inactivity (Max Idle Time), the Router will
disconnect your Internet connection, and not be
able to re-establish your connection
automatically as soon as you attempt to access
the Internet again. If you want your Internet
connection to remain active at all times, enter 0
in the Max Idle Time field. Otherwise, enter the
number in minutes that you wish to have the
Internet connecting last unless a new link
requested.
Some ISPs need a specific authentication type, so please confirm it
with your ISP or keep it Auto.
The default MTU (Maximum Transmission Unit) size is 1480 bytes,
which is usually fine. For some ISPs, you need modify the MTU.
This should not be done unless you are sure it is necessary for your
Use the following DNS
Servers
ISP.
If your ISP specifies a DNS server IP address for you, click the
checkbox, and fill the Primary DNS and Secondary DNS blanks
below. The Secondary DNS is optional. Otherwise, the DNS
servers will be assigned dynamically from ISP.
-37-
Page 45
User’s Manual of WNRT-617G
Table 5-3
Click the Save button to save your settings.
Click the Modem Settings button if your 3G USB Modem is not supported by the Router, and then you
will see the screen as shown in Figure 5-11. Parameters of your USB modem can be configured on
this page.
Sometimes the connection cannot be disconnected although you specify a time to
Max Idle Time because some applications visit the Internet continually in the
background.
Figure 5-11 3G USB Modem Settings
There are already many kinds of 3G USB modem embedded in the router. The USB modem
parameters will be set automatically if it is supported by the router. But when the router finds the 3G
USB modem "unknown", it will prompt you to set these parameters. The router can identify your
"unknown" 3G modem if the correct parameters are in the list. We suggest you do the “3G USB
Modem Setting” only in such circumstance.
To add 3G USB Modem entries, follow the steps below.
1. Download the most recent 3G USB modem configuration file from our website.
2. Click the Add New... button in Figure 5-11, and then you will see Figure 5-12.
3. Click Browse… to select the path name where you save the downloaded file on the computer
into the File blank.
-38-
Page 46
User’s Manual of WNRT-617G
4. Click the Upload button to upload the configuration.
Figure 5-12 Add or Modify a 3G USB Modem Entry
5.5.3 WAN
Choose menu “Network→WAN”, you can configure the IP parameters of the WAN on the screen
below.
If you don't know how to choose the appropriate connection type, click the Detect button to
allow the Router to automatically search your Internet connection for servers an d proto cols.
The connection type will be reported when an active Internet service is successfully
detected by the Router. This detect result is for your reference only. To make sure the
connection type your ISP provides, please refer to the ISP. The various types of Internet
connections that the Router can detect are as follows:
PPPoE - Connections which use PPPoE that requires a user name and password.
Dynamic IP - Connections which use dynamic IP address assignment.
Static IP - Connections which use static IP address assignment.
The Router can not detect PPTP / L2TP / BigPond connections with your ISP. If your ISP
uses one of these protocols, then you must configure your connection manually.
Dynamic IP
1. If your ISP provides the DHCP service, please choose Dynamic IP type, and the Router will
automatically obtain IP parameters from your ISP. You can see the page as follows (Figure
5-13):
-39-
Page 47
User’s Manual of WNRT-617G
Figure 5-13 WAN - Dynamic IP
This page displays the WAN IP parameters assigned dynamically by your ISP, including IP address,
Subnet Mask, Default Gateway, etc. Click the Renew button to renew the IP parameters from your ISP.
Click the Release button to release the IP parameters.
Object Description
MTU Size
The normal MTU (Maximum Transmission Unit) value for most
Ethernet networks is 1500 Bytes. It is not recommended that you
change the default MTU Size unless required by your ISP.
Use These DNS Servers
If your ISP gives you one or two DNS addresses, select Use These DNS Servers and enter the primary and secondary addresses into the
correct fields. Otherwise, the DNS servers will be assigned
dynamically from your ISP.
Host Name
This option specifies the Host Name of the Router.
Get IP with Unicast
A few ISPs' DHCP se rvers do not suppor t the broadcast appli cations. If
you cannot get the IP Address normally, you can choose this option. (It
-40-
Page 48
User’s Manual of WNRT-617G
DHCP
is rarely required.)
Table 5-4
If you get “Address not found” error when you access a Website, it is likely that your DNS
servers are set up improperly. You should contact your ISP to get the correct DNS server
address.
Static IP
2. If your ISP provides a static or fixed IP Address, Subnet Mask, Gateway and DNS setting,
select Static IP. The Static IP settings page will appear, shown in Figure 5-1.
Figure 5-14 WAN - Static IP
The page includes the following fields:
Object Description
IP Address
Subnet Mask
Enter the IP address in dotted-decimal notation provided by your ISP.
Enter the subnet Mask in dotted-decimal notation provided by your ISP,
usually is 255.255.255.0
Default Gateway
(Optional) Enter the gateway IP address in dotted-decimal notation
-41-
Page 49
provided by your ISP.
User’s Manual of WNRT-617G
MTU Size
The normal MTU (Maximum Transmission Unit) value for most Ethernet
networks is 1500 Bytes. It is not recommended that you change the
default MTU Size unless required by your ISP.
Primary/Secondary DNS
(Optional) Enter one or two DNS addresses in dotted-decimal notation
provided by your ISP.
Table 5-5
PPPoE / Rusia PPPoE
3. If your ISP provides a PPPoE / Russia PPPoE connection, select PPPoE/Russia PPPoE option.
And enter the following parameters (Figure 5-1):
Figure 5-15 WAN – PPPoE
-42-
Page 50
The page includes the following fields:
Object Description
User’s Manual of WNRT-617G
User Name/Password
Secondary Connection
Connect on Demand
Enter the User Name and Password provided by your ISP. These fields
are case-sensitive.
Disabled
The Secondary Connection is disabled by
default, so there is PPPoE connection only.
This is recommended.
Dynamic IP
Static IP
You can check this radio button to use Dynamic
IP as the secondary connection to connect to
the local area network provided by ISP.
You can check this radio button to use Static
IP as the secondary connection to connect to
the local area network provided by ISP.
In this mode, the Internet connection can be terminated
automatically after a specified inactivity period (Max Idle Time) and
be re-established when you attempt to access the Internet again. If
you want your Internet connection to keep active all the time,
please enter “0” in the Max Idle Time field. Otherwise, enter the
number of minutes you want to have elapsed before your Internet
Connect Automatically
Time-based Connecting
Connect Manually
access disconnects.
The connection can be re-established automatically when it was
down.
The connection will only be established in the period from the start time
to the end time (both are in HH:MM format).
Note:
)
Only when you have configured the system time on System Tools
-> Time page can the Time-based Connecting function take
effect.
You can click the Connect/ Disconnect button to
connect/disconnect immediately. This mode also supports the Max
Idle Time function as Connect on Demand mode. The Internet
connection can be disconnected automatically after a specified
inactivity period and re-established when you attempt to access the
Internet again.
Table 5-6
Sometimes the connection cannot be terminated although you specify a time to Max
Idle Time, since some applications are visiting the Internet continually in the
background.
-43-
Page 51
User’s Manual of WNRT-617G
If you want to do some advanced configurations, please click the Advanced button, and the page
shown in Figure 5-16 will then appear:
Figure 5-16 PPPoE Advanced Settings
The page includes the following fields:
Object Description
MTU Size The default MTU size is “1480” bytes, which is usually fine. It is not
recommended that you change the default MTU Size unless required
by your ISP.
Service Name/AC Name The service name and AC (Access Concentrator) name, which should
not be configured unless you are sure it is necessary for your ISP. In
most cases, leaving these fields blank will work.
ISP Specified IP
Address
If your ISP does not automatically assign IP addresses to the Router
during login, please click “Use IP address specified by ISP” check
box and enter the IP address provided by your ISP in dotted-decimal
notation.
Detect Online IntervalThe Router will detect Access Concentrator online at every interval.
The default value is “0”. You can input the value between “0” and “120”.
The value “0” means no detect.
DNS IP addressIf your ISP does not automatically assign DNS addresses to the Router
during login, please click “Use the following DNS servers” check box
and enter the IP address in dotted-decimal notation of your ISP’s
primary DNS server. If a secondary DNS server address is available,
enter it as well.
Table 5-7
-44-
Page 52
User’s Manual of WNRT-617G
Click the Save button to save your settings.
BigPond Cable
If your ISP provides BigPond Cable (or Heart Beat Signal) connection, please select BigPond
4.
Cable. And you should enter the following parameters (Figure 5-17):
The page includes the following fields:
Object Description
User Name/Password
Enter the User Name and Password provided by your ISP. These fields
are case-sensitive.
Auth Server
Auth Domain
Enter the authenticating server IP address or host name.
Type in the domain suffix server name based on your location.
e.g.
NSW / ACT - nsw.bigpond.net.au
VIC / TAS / WA / SA / NT - vic.bigpond.net.au
Figure 5-17
-45-
Page 53
QLD - qld.bigpond.net.au
User’s Manual of WNRT-617G
MTU Size
Connect on Demand
Connect Automatically
Connect Manually
The normal MTU (Maximum Transmission Unit) value for most
Ethernet networks is 1500 Bytes. It is not recommended that you
change the default MTU Size unless required by your ISP.
In this mode, the Internet connection can be terminated automatically
after a specified inactivity period (Max Idle Time) and be
re-established when you attempt to access the Internet again. If you
want your Internet connection to keep active all the time, please enter
“0” in the Max Idle Time field. Otherwise, enter the number of minutes
you want to have elapsed before your Internet access disconnects.
The connection can be re-established automatically when it was down.
You can click the Connect/Disconnect button to connect/disconnect
immediately. This mode also supports the Max Idle Time function as
Connect on Demand mode.
The Internet connection can be disconnected automatically after a
specified inactivity period and re-established when you attempt to
access the Internet again.
Click the Connect button to connect immediately.
Click the Disconnect button to disconnect immediately.
Click the Save button to save your settings.
Sometimes the connection cannot be terminated although you specify a time to Max Idle Time, since some applications are visiting the Internet continually in the
background.
Table 5-8
-46-
Page 54
User’s Manual of WNRT-617G
L2TP / Russia L2TP
If your ISP provides L2TP / Russia L2TP connection, please select L2TP/Russia L2TP option.
5.
And enter the following parameters (Figure 5-18):
Figure 5-18 L2TP Settings
The page includes the following fields:
Object Description
User Name/Password Enter the User Name and Password prov ided by your ISP. These fields
are case-sensitive.
Dynamic IP/ Static IPChoose either as you are given by your ISP. Click the Connect button
to connect immediately.
Click the Disconnect button to disconnect immediately.
Connect on DemandYou can configure the Router to disconnect from your Internet
connection after a specified period of inactivity (Max Idle Time). If your
Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your
connection as soon as you attempt to access the Internet again. If you
-47-
Page 55
User’s Manual of WNRT-617G
wish to activate Connect on Demand, click the radio button. If you
want your Internet connection to remain active at all times, enter 0 in
the Max Idle Time field. Otherwise, enter the number of minutes you
want to have elapsed before your Internet connection terminates.
Connect AutomaticallyConnect automatically after the Router is disconnected. To use this
option, click the radio button.
Connect ManuallyYou can configure the Router to make it connect or disconnect
manually. After a specified period of inactivity (Max Idle Time), the
Router will disconnect from your Internet connection, and you will not
be able to re-establish your connection automatically as soon as you
attempt to access the Internet again.
To use this option, click the radio button.
If you want your Internet connection to remain active at all times, enter
"0" in the Max Idle Time field. Otherwise, enter the number in minutes
that you wish to have the Internet connecting last unless a new link is
requested.
Click the Save button to save your settings.
Sometimes the connection cannot be terminated although you specify a time to Max Idle Time, since some applications are visiting the Internet continually in the
background.
Table 5-9
-48-
Page 56
User’s Manual of WNRT-617G
PPTP / Russia PPTP
If your ISP provides PPTP / Russia PPTP connection, please select PPTP/Russia PPTP option.
6.
And enter the following parameters (Figure 5-19):
Figure 5-19 PPTP Settings
The page includes the following fields:
Object Description
User Name/Password
Enter the User Name and Password provided by your ISP. These fields
are case-sensitive.
Dynamic IP/ Static IP
Choose either as you are given by your ISP and enter the ISP’s IP
address or the domain name.
If you choose static IP and enter the domain name, you should also
enter the DNS assigned by your ISP. And click the Save button.
Click the Connect button to connect immediately. Click the
Disconnect button to disconnect immediately.
Connect on Demand
You can configure the Router to disconnect from your Internet
connection after a specified period of inactivity (Max Idle Time). If your
-49-
Page 57
User’s Manual of WNRT-617G
Internet connection has been terminated due to inactivity, Connect on
Demand enables the Router to automatically re-establish your
connection as soon as you attempt to access the Internet again.
If you wish to activate Connect on Demand, click the radio button.
If you want your Internet connection to remain active at all times, enter
0 in the Max Idle Time field. Otherwise, enter the number of minutes
you want to have elapsed before your Internet connection terminates.
Connect Automatically
Connect Manually
Sometimes the connection cannot be terminated although you specify a time to Max
Idle Time, since some applications are visiting the Internet continually in the
background.
Connect automatically after the Router is disconnected. To use this
option, click the radio button.
You can configure the Router to make it connect or disconnect
manually. After a specified period of inactivity (Max Idle Time), the
Router will disconnect from your Internet connection, and you will not
be able to re-establish your connection automatically as soon as you
attempt to access the Internet again. To use this option, click the radio
button. If you want your Internet connection to remain active at all
times, enter "0" in the Max Idle Time field. Otherwise, enter the
number in minutes that you wish to have the Internet connecting last
unless a new link is requested.
Table 5-10
-50-
Page 58
User’s Manual of WNRT-617G
5.5.4 LAN
Choose menu “Network→LAN”, you can configure the IP parameters of the LAN on the screen as
below.
Figure 5-20 LAN
The page includes the following fields:
Object Description
MAC Address
The physical address of the Router, as seen from the LAN. The value
can't be changed.
IP Address
Enter the IP address of your Router or reset it in dotted-decimal notation
(factory default: 192.168.1.1).
Subnet Mask
An address code that determines the size of the network. Normally use
255.255.255.0 as the subnet mask.
1. If you change the IP Address of LAN, you must use the new IP Address to login the
Router.
2. If the new LAN IP Address you set is not in the same subnet, the IP Address pool of the
DHCP server will change accordingly at the same time,while the Virtual Server and
Table 5-11
DMZ Host will not take effect until they are re-configured.
-51-
Page 59
User’s Manual of WNRT-617G
5.5.5 MAC Clone
Choose menu “Network→MAC Clone”, you can configure the MAC address of the WAN on the
screen below, Figure 5-21
:
Figure 5-21 MAC Address Clone
Some ISPs require that you register the MAC Address of your adapter. Changes are rarely needed
here.
The page includes the following fields:
Object Description
WAN MAC Address
This field displays the current MAC address of the WAN port. If your
ISP requires you to register the MAC address, please enter the correct
MAC address into this field in XX-XX-XX-XX-XX-XX format(X is any
hexadecimal digit).
Click Restore Factory MAC to restore the MAC address of WAN port
to the factory default value.
Your PC's MAC
Address
This field displays the MAC address of the PC that is managing the
Router. If the MAC address is required, you can click the Clone MAC
Address button and this MAC address will fill in the WAN MAC
Address field.
Click the Save button to save your settings.
Table 5-12
Only the PC on your LAN can use the MAC Address Clone function.
-52-
Page 60
User’s Manual of WNRT-617G
5.6 Wireless
There are five submenus under the Wireless menu (shown in Figure 5-22): Wireless Settings,
Wireless Security, Wireless MAC Filtering, Wireless Advanced and Wireless Statistics. Click any
of them, and you will be able to configure the corresponding function.
Figure 5-22 Wireless menu
5.6.1 Wireless Settings
Choose menu “Wireless→Wireless Settings”, you can configure the basic settings for the wireless
network on this page.
Figure 5-23 Wireless Settings
-53-
Page 61
The page includes the following fields:
Object Description
User’s Manual of WNRT-617G
Wireless Network Name
(SSID)
Region
Enter a value of up to 32 characters. The same name of SSID (Service
Set Identification) must be assigned to all wireless devices in your
network. Considering your wireless network security, the default SSID is
set to be default. This value is case-sensitive. For example, PLANET is
NOT the same as planet.
Select your region from the pull-down list. This field specifies the region
where the wireless function of the Router can be used. It may be illegal to
use the wireless function of the Router in a region other than one of those
specified in this field. If your country or region is not listed, please contact
your local government agency for assistance.
When you select your local region from the pull-down list, click
the Save button, then the Note Dialog appears. Click OK.
Channel
Mode
Note Dialog
Note:
)
Limited by local law regulations, version for North America does not have
region selection option.
This field determines which operating frequency will be used. The default
channel is set to Auto, so the AP will choose the best channel
automatically. It is not necessary to change the wireless channel unless
you notice interference problems with another nearby access point.
Select the desired mode. The default setting is 11bgn mixed.
It is strongly recommended that you set the Mode to 802.11b&g&n, and
all of 802.11b, 802.11g, and 802.11n wireless stations can connect to the
Router.
Channel width
Select any channel width from the pull-down list. The default setting is
automatic, which can adjust the channel width for your clients
automatically.
-54-
Page 62
User’s Manual of WNRT-617G
Max Tx Rate
Enable Wireless Router
Radio
Enable SSID Broadcast
If 11b only, 11g only, or 11bg mixed is selected in the Mode field, the Channel Width
selecting field will turn grey and the value will become 20M, which is unable to be
changed.
Object Description
You can limit the maximum tx rate of the Router through this field.
The wireless radio of this Router can be enabled or disabled to allow
wireless stations access.
When wireless clients survey the local area for wireless networks to
associate with, they will detect the SSID broadcast by the Router. If you
select the Enable SSID Broadcast checkbox, the Wireless Router will
broadcast its name (SSID) on the air.
Table 5-13
Enable WDS
Check this box to enable WDS. With this function, the Router can bridge
two or more WLANs. If this checkbox is selected, you will have to set the
following parameters as shown below. Make sure the following settings
are correct.
Table 5-14
The page includes the following fields:
Figure 5-24
-55-
Page 63
User’s Manual of WNRT-617G
Object Description
SSID(to be bridged)
BSSID(to be bridged)
Search
Key type
WEP Index
Auth Type
Password
The SSID of the AP your Router is going to connect to as a client. You
can also use the search function to select the SSID to join.
The BSSID of the AP your Router is going to connect to as a client.
You can also use the search function to select the BSSID to join.
Click this button, you can search the AP which runs in the current
channel.
This option should be chosen according to the AP's security
configuration. It is recommended that the security type is the same as
your AP's security type.
This option should be chosen if the key type is WEP(ASCII) or
WEP(HEX).It indicates the index of the WEP key.
This option should be chosen if the key type is WEP(ASCII) or
WEP(HEX).It indicates the authorization type of the Root AP.
If the AP your Router is going to connect needs p assword, you need to fill
the password in this blank.
Table 5-15
5.6.2 Wireless Security
Choose menu “Wireless→ Wireless Security”, you can configure the security settings of your
wireless network.
There are five wireless security modes supported by the Router:
WEP (Wired Equivalent Privacy)
WPA (Wi-Fi Protected Access)
WPA2 (Wi-Fi Protected Access 2)
WPA-PSK (Pre-Shared Key)
WPA2-PSK (Pre-Shared Key)
-56-
Page 64
User’s Manual of WNRT-617G
The page includes the following fields:
Object Description
Disable Security
If you do not want to use wireless security, select this check box, but it’s
strongly recommended to choose one of the following modes to enable
security.
Figure 5-2
Table 5-16
-57-
Page 65
User’s Manual of WNRT-617G
Figure 5-3
Object Description
WEP
Type
WEP Key Format
WEP Key
Key Type
It is based on the IEEE 802.11 standard. If you select this check box,
you will find a notice in red as show in Figure 5-3.
you can choose the type for the WEP security on the pull-down list. The
default setting is Automatic, which can select Open System or
Shared Key authentication type automatically based on the wireless
station's capability and request.
Hexadecimal and ASCII formats are provided. Hexadecimal format stands
for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length.
ASCII format stands for an y combination of keyboard characters in the
specified length.
Select which of the four keys will be used and enter the matching WEP
key that you create. Make sure these values are identical on all wireless
stations in your network.
You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for
encryption.
"Disabled" means this WEP key entry is invalid.
64-bitYou can enter 10 hexadecimal digits (any
combination of 0-9, a-f, A-F, zero key is not
promoted) or 5 ASCII characters.
128-bitYou can enter 26 hexadecimal digits (any
combination of 0-9, a-f, A-F, zero key is not
promoted) or 13 ASCII characters.
152-bitYou can enter 32 hexadecimal digits (any
combination of 0-9, a-f, A-F, zero key is not
promoted) or 16 ASCII characters.
Table 5-17
-58-
Page 66
User’s Manual of WNRT-617G
If you do not set the key, the wireless security function is still disabled even if you
have selected Shared Key as Authentication Type.
Figure 5-4 WPA/WPA2 Configuration Screenshot
The page includes the following fields:
Object Description
WPA/WPA2
Version
It is based on Radius Server.
you can choose the version of the WPA security on the pull-down list.
The default setting is Automatic, which can select WPA (Wi-Fi
Protected Access) or WPA2 (WPA version 2) automatically based on
the wireless station's capability and request.
Encryption
Radius Server IP
Radius Port
Radius Password
Group Key Update
Period
You can select either Automatic, or TKIP or AES.
Enter the IP address of the Radius Server.
Enter the port that radius service used.
Enter the password for the Radius Server.
Specify the group key update interval in seconds. The value should be
30 or above. Enter 0 to disable the update.
Table 5-18
If you check the WPA/WPA2 radio button and choose TKIP encryption, you will find a
notice in red as shown in Figure 5-4.
-59-
Page 67
The page includes the following fields:
Object Description
User’s Manual of WNRT-617G
Figure 5-5
WPA-PSK/WPA2-PSK
Version
Encryption
PSK Password
Group Key Update
Period
It’s the WPA/WPA2 authentication type based on pre-shared
passphrase.
you can choose the version of the WPA-PSK security on the
drop-down list. The default setting is Automatic, which can select
WPA-PSK (Pre-shared key of WPA) or WPA2-PSK (Pre-shared key of
WPA) automatically based on the wireless station's capability and
request.
When WPA-PSK or WPA is set as the Authentication Type, you can select
either Automatic, or TKIP or AES as Encryption.
You can enter ASCII characters between 8 and 63 characters or 8 to
64 Hexadecimal characters.
Specify the group key update interval in seconds. The value should be
30 or above. Enter 0 to disable the update.
Table 5-19
If you check the WPA-PSK/WPA2-PSK radio button and choose TKIP encryption,
you will find a notice in red as shown in Figure 5-28.
Be sure to click the Save button to save your settings on this page.
-60-
Page 68
User’s Manual of WNRT-617G
5.6.3 Wireless MAC Filtering
Choose menu “Wireless→MAC Filtering”, you can control the wireless access by configuring the
Wireless MAC Address Filtering function, shown in Figure 5-6.
Figure 5-6 Wireless MAC address Filtering
To filter wireless users by MAC Address, click Enable. The default setting is Disable.
Object Description
MAC Address
Status
Description
The wireless station's MAC address that you want to filter.
The status of this entry either Enabled or Disabled.
A simple description of the wireless station.
Table 5-20
To Add a Wireless MAC Address filtering entry, click the Add New… button. The "Add or Modify
Wireless MAC Address Filtering entry" page will appear, shown in Figure
5-7:
-61-
Page 69
User’s Manual of WNRT-617G
Figure
5-7 Add or Modify Wireless MAC Address Filtering entry
To add or modify a MAC Address Filtering entry, follow these instructions:
Step 1. Enter the appropriate MAC Address into the MAC Address field. The format of the MAC
Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). For example:
00-30-4F-11-22-33.
Step 2. Enter a simple description of the wireless station in the Description field. For example:
Wireless station A.
Step 3. Status - Select Enabled or Disabled for this entry on the Status pull-down list.
Step 4. Click the Save button to save this entry.
To modify or delete an existing entry:
Step 1. Click the Modify in the entry you want to modify. If you want to delete the entry, click the
Delete.
Step 2. Modify the information.
Step 3. Click the Save button.
Click the Enable All button to make all entries enabled
Click the Disabled All button to make all entries disabled.
Click the Delete All button to delete all entries
Click the Next button to go to the next page
Click the Previous button to return to the previous page.
-62-
Page 70
User’s Manual of WNRT-617G
For example: If you desire that the wireless station A with MAC address 00-30-4F-11-22-33 and the
wireless station B with MAC address 00-30-4F-1A-2B-3C are able to access the Router, but all the
other wireless stations cannot access the Router, you can configure the Wireless MAC Address
Filtering list by following these steps:
Step 1. Click the Enable button to enable this function.
Step 2. Select the radio button: Deny the stations not specified by any enabled entries in the list
to access for Filtering Rules.
Step 3. Delete all or disable all entries if there are any entries already.
Step 4. Click the Add New... button and enter the MAC address 00-30-4F-11-22-33
/00-30-4F-1A-2B-3C in the MAC Address field, then enter wireless station A/B in the
Description field, while select Enabled in the Status pull-down list. Finally, click the Save and
the Back button.
The filtering rules that configured should be similar to the following list:
Figure 5-31
-63-
Page 71
User’s Manual of WNRT-617G
5.6.4 Wireless Advanced
Choose menu “Wireless→Wireless Advanced”, you can configure the advanced settings of your
wireless network.
Figure 5-8 Wireless Advanced
The page includes the following fields:
Object Description
Transmit Power
Here you can specify the transmit power of Router. You can select
High, Middle or Low which you would like. High is the default setting
and is recommended.
Beacon Interval
Enter a value between 20-1000 milliseconds for Beacon Interval
here. The beacons are the packets sent by the router to
synchronize a wireless network. Beacon Interval value determines
the time interval of the beacons. The default value is 100.
RTS Threshold
Here you can specify the RTS (Request to Send) Threshold. If the
packet is larger than the specified RTS Threshold size, the router will
send RTS frames to a particular receiving station and negotiate the
Fragmentation
Threshold
sending of a data frame. The default value is 2346.
This value is the maximum size determining whether packets will be
fragmented. Setting the Fragmentation Threshold too low may result in
poor network performance since excessive packets. 2346 i s the default
-64-
Page 72
setting and is recommended.
User’s Manual of WNRT-617G
DTIM Interval
Enable WMM
Enable Short GI
Enabled AP Isolation
This value determines the interval of the Delivery Traffic Indication
Message (DTIM). A DTIM field is a countdown field informing clients of
the next window for listening to broadcast and multicast messages.
When the Router has buffered broadcast or multicast messages for
associated clients, it sends the next DTIM with a DTIM Interval value.
You can specify the value between 1-255 Beacon Intervals. The
default value is 1, which indicates the DTIM Interval is the same as
Beacon Interval.
WMM function can guarantee the packets with high- priority messages
being transmitted preferentially. It is strongly recommended enabled.
This function is recommended for it will increase the data capacity by
reducing the guard interval time.
This function can isolate wireless stations on your network from each
other. Wireless devices will be able to communicate with the Router
but not with each other. To use this function, check this box. AP
Isolation is disabled by default.
Table 5-21
If you are not familiar with the setting items in this page, it's strongly recommended to keep the
provided default values; otherwise it may result in lower wireless network performance.
-65-
Page 73
User’s Manual of WNRT-617G
5.6.5 Wireless Statistics
Choose menu “Wireless→Wireless Statistics”, you can see the MAC Address, Current Status,
Received Packets and Sent Packets for each connected wireless station.
Figure 5-9 The Router attached wireless stations
The page includes the following fields:
Object Description
MAC Address
Current Status
Received Packets
Sent Packets
The connected wireless station's MAC a ddress
The connected wireless station's running status, one of STA-AUTH /
You cannot change any of the values on this page. To update this page and to show the current
connected wireless stations, click on the Refresh button.
If the numbers of connected wireless stations go beyond one page, click the Next button to go to
the next page and click the Previous button to return the previous page.
This page will be refreshed automatically every 5 seconds.
-66-
Page 74
User’s Manual of WNRT-617G
5.7 DHCP
There are three submenus under the DHCP menu (shown in Figure 5-10): DHCP Settings, DHCP
Clients List and Address Reservation. Click any of them, and you will be able to configure the
corresponding function.
Figure 5-10 The DHCP menu
5.7.1 DHCP Settings
Choose menu “DHCP→DHCP Settings”, you can configure the DHCP Server on the page (shown in
Figure 5-1 1 ).The Router is set up by default as a DHCP (Dynamic Ho st Configuration Protocol ) server,
which provides the TCP/IP configuration for all the PC(s) that are connected to the Router on the LAN.
Figure 5-11 DHCP Settings
The page includes the following fields:
Object Description
DHCP Server
Enable or Disable the DHCP server. If you disable the Server, you must
have another DHCP server within your network or else you must
-67-
Page 75
configure the computer manually.
User’s Manual of WNRT-617G
Start IP Address
End IP Address
Address Lease Time
Default Gateway
Default Domain
Primary DNS
Specify an IP address for the DHCP Server to start with when assigning IP
addresses. 192.168.1.100 is the default start address.
Specify an IP address for the DHCP Server to end with when assigning
IP addresses. 192.168.1.199 is the default end address.
The Address Lease Time is the amount of time a network user will be
allowed connection to the Router with their current dynamic IP Address.
Enter the amount of time in minutes and the user will be "leased" this
dynamic IP Address. After the time is up, the user will be automatically
assigned a new dynamic IP address. The range of the time is 1 ~ 2880
minutes. The default value is 120 minutes.
(Optional.) Suggest to input the IP address of the LAN port of the
Router, default value is 192.168.1.1
(Optional.) Input the domain name of your network.
(Optional.) Input the DNS IP address provided by your ISP. Or consult
your ISP.
Secondary DNS
(Optional.) Input the IP address of another DNS server if your ISP
provides two DNS servers.
Table 5-23
To use the DHCP server function of the Router, you must configure all computers on
the LAN as "Obtain an IP Address automatically" mode.
5.7.2 DHCP Clients List
Choose menu “DHCP→DHCP Clients List”, you can view the information about the clients attached
to the Router in the next screen (shown in Figure 5-12).
-68-
Page 76
Figure 5-12 DHCP Clients List
The page includes the following fields:
Object Description
User’s Manual of WNRT-617G
ID
Client Name
MAC Address
Assigned IP
Lease Time
The index of the DHCP Client
The name of the DHCP client
The MAC address of the DHCP client
The IP address that the Router has allocated to the DHCP client.
The time of the DHCP client leased. After the dynamic IP address has
expired, a new dynamic IP address will be automatically assigned to the
user.
Table 5-24
You cannot change any of the values on this page. To update this page and to show the current
attached devices, click the Refresh button.
5.7.3 Address Reservation
Choose menu “DHCP→Address Reservation”, you can view and add a reserved addresses for
clients via the next screen (shown in Figure 5-13).When you specify a reserved IP addre ss for a PC on
the LAN, that PC will always receive the same IP address each time when it accesses the DHCP
server. Reserved IP addresses should be assigned to the servers that require permanent IP settings.
-69-
Page 77
Figure 5-13 Address Reservation
The page includes the following fields:
User’s Manual of WNRT-617G
Object Description
MAC Address
Assigned IP Address
Status
The MAC address of the PC for which you want to reserve IP address.
The IP address of the Router reserved.
The status of this entry either Enabled or Disabled.
Table 5-25
To Reserve IP addresses:
Step 1. Click the Add New … button.
Step 2. Enter the MAC address (in XX-XX-XX-XX-XX-XX format.) and IP address in dotted-decimal
notation of the computer you wish to add.
Step 3. Click the Save button when finished.
-70-
Page 78
User’s Manual of WNRT-617G
Figure
5-14 Add or Modify an Address Reservation Entry
To modify or delete an existing entry:
Step 1. Click the Modify in the entry you want to modify. If you want to delete the entry, click the
Delete.
Step 2. Modify the information.
Step 3. Click the Save button.
Click the Enable/ Disabled All button to make all entries enabled/disabled
Click the Delete All button to delete all entries
Click the Next button to go to the next page and Click the Previous button to return the previous
page.
5.8 Forwarding
There are four submenus under the Forwarding menu (shown in Figure 5-15): Virtual Servers, Port
Triggering, DMZ and UPnP. Click any of them, and you will be able to configure the corresponding
function.
Figure 5-15 The Forwarding menu
-71-
Page 79
User’s Manual of WNRT-617G
5.8.1 Virtual Servers
Choose menu “Forwarding→Virtual Servers”, you can view and add virtual servers in the next
screen (shown in Figure 5-16). Virtual servers can be used for setting up pu blic services on your LAN,
such as DNS, Email and FTP. A virtual server is defined as a service port, and all requests from the
Internet to this service port will be redirected to the computer specified by the server IP. Any PC that
was used for a virtual server must have a static or reserved IP Address because its IP Address may
be changed when using the DHCP function.
Figure 5-16 Virtual Servers
The page includes the following fields:
Object Description
Service Port
The numbers of External Ports. You can type a service port or a range of
service ports (in XXX – YYY format, XXX is the start port number, YYY is
the end port number).
IP Address
Protocol
Status
The IP Address of the PC providing the service application.
The protocol used for this application, either TCP, UDP, or All (all protocols
supported by the Router).
The status of this entry either Enabled or Disabled.
Table 5-26
To setup a virtual server entry:
Step 1. Click the Add New… button.
-72-
Page 80
User’s Manual of WNRT-617G
Step 2. Select the service you want to use from the Common Service Port list. If the Common
Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port box.
Step 3. Type the IP Address of the computer in the IP Address box.
Step 4. Select the protocol used for this application, either TCP or UDP, or All.
Step 5. Select the Enable check box to enable the virtual server.
Step 6. Click the Save button.
Figure 5-17 Add or Modify a Virtual Server Entry
If your computer or server has more than one type of available service, please select
another service, and enter the same IP Address for that computer or server.
To modify or delete an existing entry:
Step 1. Click the Modify in the entry you want to modify. If you want to delete the entry, click the
Delete.
Step 2. Modify the information.
Step 3. Click the Save button.
Click the Enable/ Disabled All button to make all entries enabled/ disabled.
Click the Delete All button to delete all entries.
-73-
Page 81
User’s Manual of WNRT-617G
Click the Next button to go to the next page and click the Previous button to return the previous
page.
If you set the service port of the virtual server as 80, you must set the Web
management port on System Tools –> Remote Management page to be any other
value except 80 such as 8080. Otherwise there will be a conflict to disable the virtual
server.
-74-
Page 82
User’s Manual of WNRT-617G
5.8.2 Port Triggering
Choose menu “Forwarding→Port Triggering”, you can view and add port triggering in the next
screen (shown in Figure 5-18). Some applications require multiple connections, like Internet games,
video conferencing, Internet calling and so on. These applications cannot work with a pure NAT Router.
Port Triggering is used for some of these applications that can work with an NAT Router.
Figure 5-18 Port Triggering
Once the Router is configured, the operation is as follows:
1. A local host makes an outgoing connection using a destination port number defined in the
Trigger Port field.
2. The Router records this connection, opens the incoming port or ports associated with this entry
in the Port Triggering table, and associates them with the local host.
3. When necessary the external host will be able to connect to the local host using one of the ports
defined in the Incoming Ports field.
The page includes the following fields:
Object Description
Trigger Port
The port for outgoing traffic. An outgoing connection using this port will
"Trigger" this rule.
Trigger Protocol
The protocol used for Trigger Port s, either TCP, UDP, or All (all protocols
Incoming Ports Range
supported by the Router).
The port or port range used by the remote system when it responds to the
outgoing request. A response using one of these ports will be forwarded to the
PC that triggered this rule. You can input at most 5 groups of ports (or port
section). Every group of ports must be set apart with ",". For example,
2000-2038, 2050-2051, 2085, 3010-3030.
-75-
Page 83
User’s Manual of WNRT-617G
Incoming Protocol
The protocol used for Incoming Ports Range, either TCP or UDP, or ALL
(all protocols supported by the Router).
Status
The status of this entry either Enabled or Disabled.
Table 5-27
To add a new rule, follow the steps below.
Step 1. Click the Add New… button, the next screen will pop up as shown in Figure 5-19.
Step 2. Select a common application from the Common Applications drop-down list, then the
Trigger Port field and the Incoming Ports field will be automatically filled. If the Common
Applications do not have the application you need, enter the Trigger Port and the
Incoming Ports manually.
Step 3. Select the protocol used for Trigger Port from the Trigger Protocol drop-down list, either
TCP, UDP, or All.
Step 4. Select the protocol used for Incoming Ports from the Incoming Protocol drop-down list,
either TCP or UDP, or All.
Step 5. Select Enable in Status field.
Step 6. Click the Save button to save the new rule.
Figure 5-19 Add or Modify a Triggering Entry
-76-
Page 84
User’s Manual of WNRT-617G
To modify or delete an existing entry:
1. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete.
2. Modify the information.
3. Click the Save button.
Click the Enable All button to make all entries enabled
Click the Disabled All button to make all entries disabled.
Click the Delete All button to delete all entries
1) When the trigger connection is released, the according opening ports will be closed.
2) Each rule allowed to be used only by one host on LAN synchronously. The trigger
connection of other hosts on LAN will be refused.
3) Incoming Port Range cannot overlap each other.
5.8.3 DMZ
Choose menu “Forwarding→DMZ”, you can view and configure DMZ host in the screen (shown in
Figure 5-20).The DMZ host feature allows one local host to be exposed to the Internet for a
special-purpose service such as Internet gaming or videoconferencing. DMZ host forwards all the
ports at the same time. Any PC whose port is being forwarded must have its DHCP client function
disabled and should have a new static IP Address assigned to it because its IP Address may be
changed when using the DHCP function.
Figure 5-20 DMZ
To assign a computer or server to be a DMZ server:
Step 1. Click the Enable radio button
-77-
Page 85
User’s Manual of WNRT-617G
Step 2. Enter the local host IP Address in the DMZ Host IP Address field
Step 3. Click the Save button.
After you set the DMZ host, the firewall related to the host will not work.
5.8.4 UPnP
Choose menu “Forwarding→UPnP”, you can view the information about UPnP(Universal Plug and
Play) in the screen (shown in Figure 5-21).The UPnP feature allows the devices, such as Internet
computers, to access the local host resources or devices as needed. UPnP devices can be
automatically discovered by the UPnP service application on the LAN.
Figure 5-21 UPnP Setting
The page includes the following fields:
Object Description
Current UPnP Status
UPnP can be enabled or disabled by clicking the Enable or Disable
button. As allowing this may present a risk to security, this feature is
enabled by default.
Current UPnP Settings
This table displays the current UPnP information.
List
App Description -The description provided by the application
in the UPnP request
External Port - External port, which the router opened for the
-78-
Page 86
application.
Protocol - Shows which type of protocol is opened. Internal Port - Internal port, which the router opened for local
host.
IP Address - The UPnP device that is currently accessing the
router.
Status - The port’s status displayed here. “Enabled” means that
port is still active. Otherwise, the port is inactive.
Table 5-28
Click Refresh to update the Current UPnP Settings List.
User’s Manual of WNRT-617G
5.9 Security
There are four submenus under the Security menu as shown in Figure 5-22: Basic Security,
Advanced Security, Local Management and Remote Management. Click any of them, and you will
be able to configure the corresponding function.
Figure 5-22 The Security menu
5.9.1 Basic Security
Choose menu “Security → Basic Security”, you can configure the basic security in the next screen.
-79-
Page 87
User’s Manual of WNRT-617G
Figure 5-23 Basic Security
The page includes the following fields:
Object Description
Firewall
A firewall protects your network from the outside world. Here you can
enable or disable the Router’s firewall.
SPI Firewall - SPI (Stateful Packet Inspection, also known as
dynamic packet filtering) helps to prevent cyber attacks by
tracking more state per session. It validates that the traffic
passing through the session conforms to the protocol. SPI
Firewall is enabled by factory default. If you want all the
computers on the LAN exposed to the outside world, you can
disable it.
VPN
VPN Passthrough must be enabled if you want to allow VPN tunnels
using IPSec, PPTP, or L2TP protocols to pass through the Router’s
firewall.
allows the Point-to-Point Protocol (PPP) to be tunneled through
an IP network. To allow PPTP tunnels to pass through the
Router, keep the default, Enabled.
L2TP Passthrough - Layer 2 Tunneling Protocol (L2TP) is the
method used to enable Point-to-Point sessions via the Internet on
the Layer 2 level. To allow L2TP tunnels to pass through the
Router, keep the default, Enabled.
IPSec Passthrough - Internet Protocol Security (IPSec) is a suite
of protocols for ensuring private, secure communications over
Internet Protocol (IP) networks, through the use of cryptographic
security services. To allow IPSec tunnels to pass through the
Router, keep the default, Enabled.
ALG
It is recommended to enable Application Layer Gateway (ALG)
because ALG allows customized Network Address Translation (NAT)
traversal filters to be plugged into the gateway to support address and
port translation for certain application layer "control/data" protocols
such as FTP, TFTP, H323 etc.
FTP ALG - To allow FTP clients and servers to transfer data
across NAT, keep the default Enable.
TFTP ALG - To allow TFTP clients and servers to transfer data
across NAT, keep the default Enable.
H323 ALG - To allow Microsoft NetMeeting clients to
communicate across NAT, keep the default Enable.
Click the Save button to save your settings.
Table 5-29
5.9.2 Advanced Security
Choose menu “Security → Advanced Security”, you can protect the Router from being attacked by
TCP-SYN Flood, UDP Flood and ICMP-Flood in the screen as shown in Figure 5-24.
-81-
Page 89
User’s Manual of WNRT-617G
Figure 5-24 Advanced Security
The page includes the following fields:
Object Description
Packets Statistics
Interval (5~60)
The default value is 10. Select a value between 5 and 60 seconds from
the drop-down list. The Packets Statistics Interval value indicates the
time section of the packets statistics. The result of the statistics is used
for analysis by SYN Flood, UDP Flood and ICMP-Flood.
DoS Protection
Denial of Service protection. Check the Enable or Disable button to
enable or disable the DoS protection function. Only when it is enabled,
will the flood filters be enabled.
Enable ICMP-FLOOD
Enable or Disable the ICMP-FLOOD Attack Filtering.
Attack Filtering
ICMP-FLOOD Packets
The default value is 50. Enter a value between 5 ~ 3600. When the
current ICMP-FLOOD Packets number is beyond the set value, the
-82-
Page 90
User’s Manual of WNRT-617G
Threshold (5~3600)
Enable UDP-FLOOD
Filtering
UDP-FLOOD Packets
Threshold (5~3600)
Enable TCP-SYN-FLOOD
Attack Filtering
TCP-SYN-FLOOD
Packets Threshold
(5~3600)
Ignore Ping Packet From
WAN Port
Router will startup the blocking function immediately.
Enable or Disable the UDP-FLOOD Filtering.
The default value is 500. Enter a value between 5 ~ 3600. When the
current UPD-FLOOD Packets number is beyond the set value, the
Router will startup the blocking function immediately.
Enable or Disable the TCP-SYN-FLOOD Attack Filtering.
The default value is 50. Enter a value between 5 ~ 3600. When the
current TCP-SYN-FLOOD Packets numbers is beyond the set value,
the Router will startup the blocking function immediately.
Enable or Disable Ignore Ping Packet From WAN Port. The default
setting is disabled. If enabled, the ping packet from the Internet cannot
access the Router.
Forbid Ping Packet From
LAN Port
Enable or Disable Forbid Ping Packet From LAN Port. The default
setting is disabled. If enabled, the ping packet from LAN cannot access
the Router. This function can be used to defend against some viruses.
Table 5-30
Click the Save button to save the settings.
Click the Blocked DoS Host List button to display the DoS host table by blocking.
DoS Protection will take effect only when the Traffic Statistics in “System Tool →
Traffic Statistics” is enabled.
5.9.3 Local Management
Choose menu “Security → Local Management”, you can configure the management rule in the
screen as shown in Figure 5-25. The management feature allows you to deny computers in LAN from
accessing the Router.
-83-
Page 91
User’s Manual of WNRT-617G
Figure 5-25 Local Management
By default, the radio button “All the PCs on the LAN are allowed to access the Router's Web-Based Utility” is checked. If you want to allow PCs with specific MAC Addresses to access the
Setup page of the Router's Web-Based Utility locally from inside the network, check the radio button
“Only the PCs listed can browse the built-in web pages to perform Administrator tasks”, and
then enter each MAC Address in a separate field. The format for the MAC Address is
XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). Only the PCs with MAC address listed can use the
password to browse the built-in web pages to perform Administrator tasks while all the others will be
blocked.
After click the Add button, your PC's MAC Address will be placed in the list above.
Click the Save button to save your settings.
If your PC is blocked but you want to access the Router again, use a pin to press and
hold the Reset Button (hole) on the back panel for about 5 seconds to reset the
Router’s factory defaults on the Router’s Web-Based Utility.
5.9.4 Remote Management
Choose menu “Security → Remote Management”, you can configure the Remote Management
function in the screen as shown in Figure 5-26. This feature allows you to manage your Router from a
remote location via the Internet.
-84-
Page 92
Figure 5-26 Remote Management
The page includes the following fields:
Object Description
User’s Manual of WNRT-617G
Web Management Port
Remote Management IP
Address
To access the Router, you should type your Router's WAN IP address into your browser's
address (in IE) or Location (in Navigator) box, followed by a colon and the custom port
number. For example, if your Ro uter's WAN address is 210.66.155.14, and the port number
used is 8080, please enter http://210.66.155.14:8080 in your browser. Later, you may be
asked for the Router's password. After successfully entering the username and password,
you will be able to access the Router's web-based utility.
Be sure to change the Router's default password to a very secure password.
Web browser access normally uses the standard HTTP service port
80. This Router's default remote management web port number is 80.
For greater security, you can change the remote management web
port to a custom port by entering that number in the box provided.
Choose a number between 1 and 65534 but do not use the number of
any common service port.
This is the current address you will use when accessing your Router
from the Internet. This function is disabled when the IP address is set
to the default value of 0.0.0.0. To enable this function change 0.0.0.0 to
a valid IP address. If set to 255.255.255.255, then all the hosts can
access the Router from internet.
Table 5-31
-85-
Page 93
User’s Manual of WNRT-617G
5.10 Parental Control
Choose menu “Parental Control”, and you can configure the parental control in the screen as shown
in Figure 5-27. The Parental Control function can be used to control the internet activities of the child,
limit the child to access certain websites and restrict the time of surfing.
Figure 5-27 Parental Control Settings
The page includes the following fields:
Object Description
Parental Control
Check Enable if you want this function to take effect, otherwise
check Disable.
MAC Address of
Parental PC
MAC Address of Your
PC
In this field, enter the MAC address of the controlling PC, or you can
make use of the Copy To Above button below.
This field displays the MAC address of the PC that is managing this
Router. If the MAC Address of your adapter is registered, you can
click the Copy To Above button to fill this address to the MAC
Address of Parental PC field above.
Website Description
Description of the allowed website for the PC controlled.
Schedule
The time period allowed for the PC controlled to access the Internet.
-86-
Page 94
User’s Manual of WNRT-617G
For detailed information, please go to “Access Control →
Schedule”.
Modify
Here you can edit or delete an existing entry.
Table 5-32
To add a new entry, please follow the steps below.
Step 1. Click the Add New… button and the next screen will pop-up as shown in Figure 5-28.
Step 2. Enter the MAC address of the PC (e.g. 00-11-22-33-44-AA) you’d like to control in the
MAC Address of Child PC field. Or you can choose the MAC address from the All Address
in Current LAN drop-down list.
Step 3. Give a description (e.g. Allow Google) for the website allowed to be accessed in the
Website Description field.
Step 4. Enter the allowed domain name of the website, either the full name or the keywords (e.g.
google) in the Allowed Domain Name field. Any domain name with keywords in it
(www.google.com
, www.google.com.tw) will be allowed.
Step 5. Select from the Effective Time drop-down list the schedule (e.g. Schedule_1) you want
the entry to take effect. If there are not suitable schedules for you, click the Schedule in
red below to go to the Advance Schedule Settings page and create the schedule you
need.
Step 6. In the Status field, you can select Enabled or Disabled to enable or disable your entry.
Step 7. Click the Save button.
Click the Enable All button to enable all the rules in the list.
Click the Disable All button to disable all the rules in the list.
Click the Delete All button to delete all the entries in the table.
Click the Next button to go to the next page, or click the Previous button return to the previous page.
-87-
Page 95
User’s Manual of WNRT-617G
Figure 5-28 Add or Modify Parental Control Entry
For example: If you desire that the child PC with MAC address 00-11-22-33-44-AA can access
www.google.com
on Saturday only while the parent PC with MAC address 00-11-22-33-44-BB is
without any restriction, you should follow the settings below.
Step 1. Click “Parental Control” menu on the left to enter the Parental Control Settings page.
Check Enable and enter the MAC address 00-11-22-33-44-BB in the MAC Address of
Parental PC field. Then click Save button.
Step 2. Click “Access Control → Schedule” on the left to enter the Schedule Settings page.
Click Add New... button to create a new schedule with Schedule Description is
Schedule_1, Day is Sat and Time is all day-24 hours. Then click Save button.
Step 3. Click “Parental Control” menu on the left to go back to the Add or Modify Parental
Control Entry page:
Click Add New... button. Enter 00-11-22-33-44-AA in the MAC Address of Child PC field. Enter “Allow Google” in the Website Description field.
-88-
Page 96
User’s Manual of WNRT-617G
Enter “www.google.com” in the Allowed Domain Name field. Select “Schedule_1” you create just now from the Effective Time drop-down list. In Status field, select Enable.
Step 4. Click Save to complete the settings.
Then you will go back to the Parental Control Settings page and see the following list, as shown in
Figure 5-29.
Figure 5-29 Parental Control Settings
-89-
Page 97
User’s Manual of WNRT-617G
5.11 Access Control
There are four submenus under the Access Control menu as shown in Figure 5-30: Rule, Host,
Target and Schedule. Click any of them, and you will be able to configure the corresponding function.
Figure 5-30 Access Control
5.11.1 Rule
Choose menu “Access Control → Rule”, you can view and set Access Control rules in the screen as
shown in Figure 5-31.
Figure 5-31 Access Control Rule Management
The page includes the following fields:
-90-
Page 98
User’s Manual of WNRT-617G
Object Description
Enable Internet Access
Control
Rule Name
Host
Target
Schedule
Action
Status
Modify
Select the check box to enable the Internet Access Control function, so
the Default Filter Policy can take effect.
Here displays the name of the rule and this name is unique.
Here displays the host selected in the corresponding rule.
Here displays the target selected in the corresponding rule.
Here displays the schedule selected in the corresponding rule.
Here displays the action the Router takes to deal with the packets. It
could be Allow or Deny. Allow means that the Router permits the
packets to go through the Router. Deny means that the Router rejects
the packets to go through the Router.
This field displays the status of the rule. Enabled means the rule will
take effect, Disabled means the rule will not take effect.
Here you can edit or delete an existing rule.
Table 5-33
To add a new rule, please follow the steps below.
Step 1. Click the Add New… button and the next screen will pop-up as shown in Figure 5-32.
Step 2. Give a name (e.g. Rule_1) for the rule in the Rule Name field.
Step 3. Select a host from the Host drop-down list or choose “Click Here To Add New Host
List”.
Step 4. Select a target from the Target drop-sown list or choose “Click Here To Add New Target
List”.
Step 5. Select a schedule from the Schedule drop-down list or choose “Click Here To Add New
Schedule”.
Step 6. In the Action field, select Deny or Allow.
Step 7. In the Status field, select Enabled or Disabled to enable or disable your entry.
Step 8. Click the Save button.
Click the Enable All button to enable all the rules in the list.
Click the Disable All button to disable all the rules in the list.
Click the Delete All button to delete all the entries in the table.
-91-
Page 99
User’s Manual of WNRT-617G
You can change the entry’s order as desired. Fore entries a re before hind entries. Enter the I D number
in the first box you want to move and another ID number in second box you want to move to, and then
click the Move button to change the entry’s order.
Click the Next button to go to the next page, or click the Previous button return to the previous page.
Figure 5-32 Add or Modify Internet Access Control Entry
For example: If you desire to allow the host with MAC address 00-11-22-33-44-AA to access
www.google.com
only from 18:00 to 20:00 on Saturday and Sunday, and forbid other hosts in the
LAN to access the Internet, you should follow the settings below:
Step 1. Click “Access Control → Host” in the left to enter the Host Settings page. Add a new entry
with the Host Description is Host_1 and MAC Address is 00-11-22-33-44-AA.
Step 2. Click “Access Control → Target” in the left to enter the Target Settings page. Add a new
entry with the Target Description is Target_1 and Domain Name is www.google.com.
Step 3. Click “Access Control → Schedule” in the left to enter the Schedule Settings page. Add a
new entry with the Schedule Description is Schedule_1, Day is Sat and Sun, Start Time is
1800 and Stop Time is 2000.
Step 4. Click “Access Control → Rule” in the left to return to the Access Control Rule
Management page. Select “Enable Internet Access Control” and choose "Deny the
packets not specified by any access control policy to pass through the Router".
Step 5. Click Add New... button to add a new rule as follows:
In Rule Name field, create a name for the rule. Note that this name should be unique,
for example Rule_1.
-92-
Page 100
User’s Manual of WNRT-617G
In Host field, select Host_1.
In Target field, select Target_1.
In Schedule field, select Schedule_1.
In Action field, select Allow.
In Status field, select Enable.
Click Save to complete the settings.
Then you will go back to the Access Control Rule Management page and see the following list.
Figure 5-57
-93-
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.