Page 1
2.4GHz IEEE802.11g 54Mbps WLAN
Broadband Router
BLW-54PM
Page 2
CONTENTS
Chapter 1 Introduction............................................................................................................. 4
1.1 BLW-54PM Features ....................................................................................................4
1.1.1 Internet Access Features...................................................................................... 4
1.1.2 Advanced Internet Functions............................................................................... 5
1.1.3 Wireless Features................................................................................................. 5
1.1.4 LAN Features ......................................................................................................6
1.1.5 Configuration & Management............................................................................. 6
1.1.6 Security Features .................................................................................................6
1.2 Package Contents ..........................................................................................................7
1.3 Physical Details ............................................................................................................. 8
1.3.1 Front-mounted LEDs........................................................................................... 8
1.3.2 Rear Panel............................................................................................................ 9
Chapter 2 Installation ............................................................................................................. 11
2.1 Requirements............................................................................................................... 11
2.2 Procedure..................................................................................................................... 11
Chapter 3 Setup....................................................................................................................... 13
3.1 Overview ..................................................................................................................... 13
3.2 Configuration Program................................................................................................ 14
3.2.1 Preparation......................................................................................................... 14
3.3 Setup Wizard............................................................................................................... 16
3.3.1 Common Connection Types .............................................................................. 16
3.3.2 Home Screen ..................................................................................................... 18
3.4 LAN Screen................................................................................................................. 19
3.4.1 DHCP ................................................................................................................20
3.5 Wireless Screen ........................................................................................................... 21
3.5.1 Wireless Security Screen ................................................................................... 24
3.6 Password Screen.......................................................................................................... 26
Chapter 4 Advanced Features................................................................................................ 27
4.1 Overview ..................................................................................................................... 27
4.2 Access Control ............................................................................................................27
4.2.1 Overview ...........................................................................................................27
4.2.2 Access Control Screen....................................................................................... 28
4.2.3 Group Members Screen..................................................................................... 30
4.2.4 Default Schedule Screen.................................................................................... 31
4.2.5 Services Screen.................................................................................................. 32
4.2.6 Access Control Log ........................................................................................... 33
4.3 Dynamic DNS (Domain Name Server)....................................................................... 34
4.3.1 Dynamic DNS Screen........................................................................................ 34
4.4 Advanced Internet Screen ...........................................................................................36
4.4.1 Communication Applications ............................................................................ 36
4.4.2 Special Applications .......................................................................................... 37
4.4.3 Special Applications Screen .............................................................................. 37
4.4.4 Using a Special Application .............................................................................. 38
4.4.5 Multi-DMZ ........................................................................................................ 38
4.4.6 URL Filter ......................................................................................................... 39
4.4.7 URL Filter Screen.............................................................................................. 39
4.5 Virtual Servers.............................................................................................................40
4.5.1 IP Address seen by Internet Users..................................................................... 40
4.5.2 Virtual Servers Screen ....................................................................................... 40
4.5.3 Defining your own Virtual Servers ................................................................... 42
2
Page 3
4.5.4 Connecting to the Virtual Servers ..................................................................... 43
4.6 WAN Port Configuration ............................................................................................ 44
Chapter 5 Advanced Administration ....................................................................................47
5.1 Overview ..................................................................................................................... 47
5.2 Config File................................................................................................................... 48
5.3 Logs............................................................................................................................. 49
5.4 Network Diagnostics ................................................................................................... 51
5.5 Options ........................................................................................................................ 52
5.6 PC Database ................................................................................................................54
5.6.1 PC Database Screen........................................................................................... 54
5.6.2 PC Database (Admin)........................................................................................ 56
5.7 Remote Admin ............................................................................................................58
5.8 Routing........................................................................................................................ 59
5.8.1 Overview ...........................................................................................................59
5.8.2 Routing Screen ..................................................................................................59
5.8.3 Configuring Other Routers on your LAN.......................................................... 61
5.8.4 Static Routing - Example................................................................................... 62
5.9 Security........................................................................................................................ 63
5.10 Upgrade Firmware..................................................................................................... 65
Chapter 6 Specifications ......................................................................................................... 66
6.1 Multi-Function BLW-54PM........................................................................................ 66
6.2 Wireless Interface........................................................................................................ 66
6.3 Safety Statement.......................................................................................................... 67
3
Page 4
Chapter 1
Introduction
This Chapter provides an overview of the BLW-54PM's features and capabilities.
Congratulations on the purchase of your new BLW-54PM. The BLW-54PM is a multifunction device providing the following services:
•
Shared Broadband Internet Access for all LAN users.
•
4-Port Switching Hub for 10BaseT or 100BaseT connections.
•
Wireless Access Point for 802.11b and 802.11g Wireless Stations.
BLW-54PM
DSL/Cable
Modem
Notebook Desktop PC
FX-08ES
Switch
GW-NS54GMZ
GW-US54GZ
Figure 1: BLW-54PM
1.1 BLW-54PM Features
The BLW-54PM incorporates many advanced features, carefully designed to provide sophisticated functions while being easy to use.
1.1.1 Internet Access Features
• Shared Internet Access. All users on the LAN or WLAN can access the Internet
through the BLW-54PM, using only a single external IP Address. The local (invalid) IP
Addresses are hidden from external sources. This process is called NAT (Network Address Translation).
•
DSL & Cable Modem Support. The BLW-54PM has a 10/100BaseT Ethernet port for
connecting a DSL or Cable Modem. All popular DSL and Cable Modems are supported.
SingTel RAS and Big Pond (Australia) login support is also included.
4
Page 5
•
PPPoE, PPTP, SingTel RAS and Telstra Big Pond Support. The Internet (WAN
port) connection supports PPPoE (PPP over Ethernet), PPTP (Peer-to-Peer Tunneling Protocol), SingTel RAS and Telstra Big Pond (Australia), as well as "Direct Connection" type
services. Unnumbered IP with PPPoE is also supported.
•
Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the BLW-
54PM supports both Dynamic IP Address (IP Address is allocated on connection) and
Fixed IP Address.
1.1.2 Advanced Internet Functions
• Communication Applications. Support for Internet communication applications, such
as interactive Games, Telephony, and Conferencing applications, which are often difficult
to use when behind a Firewall, is included.
•
Special Internet Applications. Applications which use non-standard connections or
port numbers are normally blocked by the Firewall. The ability to define and allow such
applications is provided, to enable such applications to be used normally.
•
Virtual Servers. This feature allows Internet users to access Internet servers on your
LAN. The required setup is quick and easy.
•
DDNS Support. DDNS (Dynamic DNS) allows Internet users to connect to Virtual
Servers on your LAN using a domain name, even if your IP address is not fixed.
•
Multi-DMZ. For each WAN (Internet) IP address allocated to you, one (1) PC on your
local LAN can be configured to allow unrestricted 2-way communication with Servers or
individual users on the Internet. This provides the ability to run programs which are incompatible with Firewalls.
•
URL Filter. Use the URL Filter to block access to undesirable Web sites by LAN users.
•
Internet Access Log. See which Internet connections have been made.
•
Access Control. Using the Access Control feature, you can assign LAN users to differ-
ent groups, and determine which Internet services are available to each group.
•
VPN Pass through Support. PCs with VPN (Virtual Private Networking) software
using PPTP, L2TP and IPSec are transparently supported - no configuration is required.
1.1.3 Wireless Features
• Standards Compliant. The BLW-54PM complies with the IEEE802.11g (DSSS)
specifications for Wireless LANs.
•
Supports both 802.11b and 802.11g Wireless Stations. The 802.11g standard
provides for backward compatibility with the 802.11b standard, so both 802.11b and
802.11g Wireless stations can be used simultaneously.
•
Speeds to 54Mbps. All speeds up to the 802.11g maximum of 54Mbps are supported.
•
Auto Link support. Auto Link is a new feature integrated in PLANEX GW-NS54GMZ
that offers users a simple way to configure a BLW-54PM in conjunction with the Configuration Utility.
•
WEP support. Support for WEP (Wired Equivalent Privacy) is included. Key sizes of
64 Bit and 128 Bit are supported.
•
Wireless MAC Access Control. The Wireless Access Control feature can check MAC
address (hardware address) of Wireless stations to ensure that only trusted Wireless Stations can access your LAN.
•
Simple Configuration. If the default settings are unsuitable, they can be changed
quickly and easily.
5
Page 6
1.1.4 LAN Features
• 4-Port Switching Hub. The BLW-54PM incorporates a 4-port 10/100BaseT switching
hub, making it easy to create or extend your LAN.
•
DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP
address to PCs and other devices upon request. The BLW-54PM can act as a DHCP
Server for devices on your local LAN and WLAN.
•
Multi Segment LAN Support. LANs containing one or more segments are supported,
via the BLW-54PM's RIP (Routing Information Protocol) support and built-in static routing table.
1.1.5 Configuration & Management
• Easy Setup. Use your WEB browser from anywhere on the LAN or WLAN for configu-
ration.
•
Configuration File Upload/Download. Save (download) the configuration data from
the BLW-54PM to your PC, and restore (upload) a previously-saved configuration file to
the BLW-54PM.
•
Remote Management. The BLW-54PM can be managed from any PC on your LAN.
And, if the Internet connection exists, it can also (optionally) be configured via the Internet.
•
Network Diagnostics. You can use the BLW-54PM to perform a Ping or DNS lookup.
•
UPnP Support. UPnP (Universal Plug and Play) allows automatic discovery and con-
figuration of the BLW-54PM. UPnP is by supported by Windows ME, XP, or later.
1.1.6 Security Features
• Password - protected Configuration. Optional password protection is provided to
prevent unauthorized users from modifying the configuration data and settings.
•
Wireless LAN Security. WEP (Wired Equivalent Privacy) is supported, as well as
Wireless access control to prevent unknown wireless stations from accessing your LAN.
•
NAT Protection. An intrinsic side effect of NAT (Network Address Translation) tech-
nology is that by allowing all LAN users to share a single IP address, the location and
even the existence of each PC is hidden. From the external viewpoint, there is no network,
only a single device - the BLW-54PM.
•
Stateful Inspection Firewall. All incoming data packets are monitored and all incom-
ing server requests are filtered, thus protecting your network from malicious attacks from
external sources.
•
Protection against DoS attacks. DoS (Denial of Service) attacks can flood your
Internet connection with invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. The BLW-54PM
incorporates protection against DoS attacks.
6
Page 7
1.2 Package Contents
The following items should be included:
• BLW-54PM
• AC Adapter
• CD-ROM (User’s Manual)
• UTP Straight LAN Cable（1m）
• Quick Installation Guide
• Warranty Card
• Screws
If any of the above items are damaged or missing, please contact your dealer immediately.
7
Page 8
1.3 Physical Details
1.3.1 Front-mounted LEDs
Status LED
Power LED
LAN LEDs
Wireless LED
WAN LED
Figure 2: Front Panel
Power LED On - Power on.
Off - No power.
Status (Red)
LED
On - Error condition.
Off - Normal operation.
Blinking - This LED blinks during start up, and during a Firmware Up-
grade.
LAN LEDs
For each port, there are 2 LEDs
• Link/Act
• On - Corresponding LAN (hub) port is active.
• Off - No active connection on the corresponding LAN (hub) port.
• Flashing - Data is being transmitted or received via the corre-
sponding LAN (hub) port.
• 100
• On - Corresponding LAN (hub) port is using 100BaseT.
• Off - Corresponding LAN (hub) port connection is using
10BaseT, or no active connection.
WAN LED On - Connection to the Broadband Modem attached to the WAN (Inter-
net) port is established.
Off - No connection to the Broadband Modem.
Flashing - Data is being transmitted or received via the WAN port.
8
Page 9
Wireless LED On - Wireless connection available; Wireless Access Point is ready for
use.
Off - No Wireless connection available.
Flashing - Data is being transmitted or received via the Wireless access
point. Data includes "network traffic" as well as user data.
1.3.2 Rear Panel
Power Port
Antenna
Reset Button
WAN Port
LAN Port
Figure 3: Rear Panel
Power Port
Connect the supplied power adapter here.
LAN Port
(10/100BaseT)
Use standard LAN cables (RJ45 connectors) to connect your PCs to
these ports.
If required, any port can be connected to another hub. Any LAN port
will automatically function as an "Uplink" port when necessary.
WAN Port
(10/100BaseT)
Connect the DSL or Cable Modem here. If your modem came with a
cable, use the supplied cable. Otherwise, use a standard LAN cable.
9
Page 10
Reset Button
This button has two (2) functions:
• Reboot. When pressed and released, the BLW-54PM will
reboot (restart).
• Clear All Data. This button can also be used to clear ALL data
and restore ALL settings to the factory default values.
To Clear All Data and restore the factory default values:
1. Power Off.
2. Hold the Reset Button down while you Power On.
3. Keep holding the Reset Button for a few seconds, until the RED
LED has flashed TWICE.
4. Release the Reset Button. The BLW-54PM is now using the
factory default values.
10
Page 11
Chapter 2
Installation
This Chapter covers the physical installation of the BLW-54PM.
2.1 Requirements
• Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors.
• TCP/IP protocol must be installed on all PCs.
• For Internet Access, an Internet Access account with an ISP, and either of a DSL or Cable
modem (for WAN port usage)
• To use the Wireless Access Point, all Wireless devices must be compliant with the
IEEE802.11b or IEEE802.11g specifications.
2.2 Procedure
DSL/Cable
Modem
UTP Cable
Existing Connection
BLW-54PM
To PCs
Figure 4: Installation Diagram
2.2.1. Choose an Installation Site
Select a suitable place on the network to install the BLW-54PM.
Ensure the BLW-54PM and the DSL/Cable modem are powered OFF.
11
Page 12
Note:
For best Wireless reception and performance, the BLW-54PM should be positioned in
a central location with minimum obstructions between the BLW-54PM and the PCs.
Also, if using multiple Access Points, adjacent Access Points should use different Channels.
2.2.2. Connect LAN Cables
Use standard LAN cables to connect PCs to the Switching Hub ports on the BLW-54PM.
Both 10BaseT and 100BaseT connections can be used simultaneously.
If required, connect any port to a normal port on another Hub, using a standard LAN cable.
Any LAN port on the BLW-54PM will automatically function as an "Uplink" port when
required.
2.2.3. Connect WAN Cable
Connect the DSL or Cable modem to the WAN port on the BLW-54PM. Use the cable
supplied with your DSL/Cable modem. If no cable was supplied, use a standard cable.
2.2.4. Power Up
• Power on the Cable or DSL modem.
• Connect the supplied power adapter to the BLW-54PM and power up.
Use only the power adapter provided. Using a different one may cause hardware damage.
2.2.5. Check the LEDs
• The Power LED should be ON.
• The Status LED should flash, then turn Off. If it stays on, there is a hardware error.
• For each LAN (PC) connection, the LAN Link/Act LED should be ON (provided the PC is
also ON.)
• The WAN LED should be ON.
• The WLAN LED should be ON
For more information, refer to
Front-mounted LEDs in Chapter 1.
12
Page 13
Chapter 3
Setup
This Chapter provides Setup details of the BLW-54PM.
3.1 Overview
This chapter describes the setup procedure for:
• Internet Access
• LAN configuration
• Wireless setup
• Assigning a Password to protect the configuration data.
PCs on your local LAN may also require configuration.
Other configuration may also be required, depending on which features and functions of the
BLW-54PM you wish to use. Use the table below to locate detailed instructions for the required functions.
To Do this: Refer to:
Use any of the following Advanced features:
• Access Control
• Dynamic DNS
• Advanced Internet (Special Applications, DMZ, URL
Filter)
• Virtual Servers (Port Forwarding)
• WAN Port Setup
Chapter 4:
Advanced Features
Use any of the following Administration Configuration
settings or features:
• Config File download/upload
• Logs
• Network Diagnostics (Ping, DNS Lookup)
• Options (Backup DNS, TFTP, UpnP, Firewall)
• PC Database
• Remote Management
• Routing (RIP and static Routing)
• Security settings
• Firmware Upgrade
Chapter 5
Advanced Administration
13
Page 14
3.2 Configuration Program
The BLW-54PM contains an HTTP server. This enables you to connect to it, and configure it,
using your Web Browser. Your Browser must support JavaScript.
The configuration program has been tested on the following browsers:
• Netscape V4.08 or later
• Internet Explorer V4 or later
3.2.1 Preparation
Before attempting to configure the BLW-54PM, please ensure that:
• Your PC can establish a physical connection to the BLW-54PM. The PC and the BLW-
54PM must be directly connected (using the Hub ports on the BLW-54PM) or on the same
LAN segment.
• The BLW-54PM must be installed and powered ON.
• If the BLW-54PM's default IP Address (192.168.1.1) is already used by another device,
the other device must be turned OFF until the BLW-54PM is allocated a new IP Address
during configuration.
Using UPnP
If your Windows system supports UPnP, an icon for the BLW-54PM will appear in the system
tray, notifying you that a new network device has been found, and offering to create a new
desktop shortcut to the newly-discovered device.
• Unless you intend to change the IP Address of the BLW-54PM, you can accept the desk-
top shortcut.
• Whether you accept the desktop shortcut or not, you can always find UPnP devices in My
Network Places (previously called Network Neighborhood).
• Double - click the icon for the BLW-54PM (either on the Desktop, or in My Network
Places) to start the configuration. Refer to the following section
Setup Wizard for details
of the initial configuration process.
Using your Web Browser
To establish a connection from your PC to the BLW-54PM:
1. After installing the BLW-54PM in your LAN, start your PC. If your PC is already running,
restart it.
2. Start your WEB browser.
3. In the Address box, enter "HTTP://" and the IP Address of the BLW-54PM, as in this
example, which uses the BLW-54PM's default IP Address:
HTTP://192.168.1.1
Because the default password is blank, your will not be prompted for a password. However,
you should assign a password. See the
Password Screen section later in this chapter for details.
14
Page 15
If you can't connect
If the BLW-54PM does not respond, check the following:
• The BLW-54PM is properly installed, LAN connection is OK, and it is pow-
ered ON. You can test the connection by using the "Ping" command:
• Open the MS-DOS window or command prompt window.
• Enter the command:
ping 192.168.1.1
If no response is received, either the connection is not working, or your
PC's IP address is not compatible with the BLW-54PM's IP Address. (See
next item.)
• If your PC is using a fixed IP Address, its IP Address must be within the range
192.168.1.2 to 192.168.1.254 to be compatible with the BLW-54PM's default
IP Address of 192.168.1.1. Also, the Network Mask must be set to
255.255.255.0.
• Ensure that your PC and the BLW-54PM are on the same network segment. (If
you don't have a router, this must be the case.)
• Ensure you are using the wired LAN interface. The Wireless interface can only
be used if its configuration matches your PC's wireless settings.
15
Page 16
3.3 Setup Wizard
The first time you connect to the BLW-54PM, the Setup Wizard will run automatically. (The
Setup Wizard will also run if the BLW-54PM's default setting are restored.)
1. Step through the Wizard until finished.
• You need to know the type of Internet connection service used by your ISP. Check
the data supplied by your ISP.
• The common connection types are explained in the tables below.
2. On the final screen of the Wizard, run the test and check that an Internet connection can be
established.
3. If the connection test fails:
• Check your data, the Cable/DSL modem, and all connections.
• Check that you have entered all data correctly.
• If using a Cable modem, your ISP may have recorded the MAC (physical) address of
your PC. Run the Wizard, and on the Cable Modem screen, use the Clone MAC address button to copy the MAC address from your PC to the BLW-54PM.
3.3.1 Common Connection Types
Cable Modems
Type Details ISP Data required
Dynamic
IP Address
Your IP Address is allocated
automatically, when you
connect to you ISP.
Usually, none.
However, some ISP's may
require you to use a particular
Hostname, Domain name, or
MAC (physical) address.
Static (Fixed)
IP Address
Your ISP allocates a permanent IP Address to you.
IP Address allocated to you.
Some ISP's may also require
you to use a particular Hostname, Domain name, or MAC
(physical) address.
DSL Modems
Type Details ISP Data required
Dynamic
IP Address
Your IP Address is allocated
automatically, when you
connect to you ISP.
None.
Static (Fixed)
IP Address
Your ISP allocates a permanent IP Address to you.
IP Address allocated to you.
PPPoE You connect to the ISP only
when required. The IP address
is usually allocated automatically.
User name and password.
16
Page 17
PPTP PPTP is mainly used in
Europe.
You connect to the ISP only
when required. The IP address
is usually allocated automatically, but may be Static
(Fixed).
• Server IP Address.
• User name and password.
• IP Address allocated to
you, if Static (Fixed).
Other Modems (e.g. Broadband Wireless)
Type Details ISP Data required
Dynamic
IP Address
Your IP Address is allocated
automatically, when you connect to you ISP.
None.
Static (Fixed)
IP Address
Your ISP allocates a permanent
IP Address to you.
IP Address allocated to you.
Big Pond (Australia)
For this connection method, the following data is required:
• User Name
• Password
• Big Pond Server IP address
SingTel RAS
For this connection method, the following data is required:
• User Name
• Password
• RAS Plan
17
Page 18
3.3.2 Home Screen
After finishing the Setup Wizard, you will see the Home screen. When you connect in future,
you will see this screen when you connect. An example screen is shown below.
Figure 5: Home Screen
Navigation & Data Input
• Use the menu bar on the left of the screen, and the Back button on your Browser, for
navigation.
• Changing to another screen without clicking Save does NOT save any changes you may
have made. You must Save before changing screens or your data will be ignored.
Note:
On each screen, clicking the Help button will display help for that screen.
From any help screen, you can access the list of all help files (help index).
18
Page 19
3.4 LAN Screen
Use the LAN link on the main menu to reach the LAN screen. An example screen is shown
below.
Figure 6: LAN Screen
Data - LAN Screen
TCP/IP
IP Address
IP address for the BLW-54PM, as seen from the local LAN. Use the
default value unless the address is already in use or your LAN is using
a different IP address range. In the latter case, enter an unused IP
Address from within the range used by your LAN.
Subnet Mask The default value 255.255.255.0 is standard for small (class C) net-
works. For other networks, use the Subnet Mask for the LAN segment
to which the BLW-54PM is attached (the same value as the PCs on
that LAN segment).
DHCP Server
• If Enabled, the BLW-54PM will allocate IP Addresses to PCs
(DHCP clients) on your LAN when they start up. The default (and
recommended) value is Enabled.
• If you are already using a DHCP Server, this setting must be
Disabled, and the existing DHCP server must be re-configured to
treat the BLW-54PM as the default Gateway. See the following
section for further details.
• The Start IP Address and Finish IP Address fields set the values
used by the DHCP server when allocating IP Addresses to DHCP
clients. This range also determines the number of DHCP clients
supported.
See the following section for further details on using DHCP.
Buttons
Save
Save the data on screen.
Cancel The Cancel button will discard any data you have entered and reload
the file from the BLW-54PM.
19
Page 20
3.4.1 DHCP
What DHCP Does
A DHCP (Dynamic Host Configuration Protocol) Server allocates a valid IP address to a
DHCP Client (PC or device) upon request.
• The client request is made when the client device starts up (boots).
• The DHCP Server provides the Gateway and DNS addresses to the client, as well as
allocating an IP Address.
• The BLW-54PM can act as a DHCP server.
• Windows 95/98/ME and other non-Server versions of Windows will act as a DHCP client.
This is the default Windows setting for the TCP/IP network protocol. However, Windows
uses the term Obtain an IP Address automatically instead of DHCP Client.
• You must NOT have two (2) or more DHCP Servers on the same LAN segment. (If your
LAN does not have other Routers, this means there must only be one (1) DHCP Server on
your LAN.)
Using the BLW-54PM's DHCP Server
This is the default setting. The DHCP Server settings are on the LAN screen. On this screen,
you can:
• Enable or Disable the BLW-54PM's DHCP Server function.
• Set the range of IP Addresses allocated to PCs by the DHCP Server function.
Note:
You can assign Fixed IP Addresses to some devices while using DHCP, provided that the
Fixed IP Addresses are NOT within the range used by the DHCP Server.
Using another DHCP Server
You can only use one (1) DHCP Server per LAN segment. If you wish to use another DHCP
Server, rather than the BLW-54PM's, the following procedure is required.
1. Disable the DHCP Server feature in the BLW-54PM. This setting is on the LAN screen.
2. Configure the DHCP Server to provide the BLW-54PM's IP Address as the Default
Gateway.
20
Page 21
3.5 Wireless Screen
The BLW-54PM's settings must match the other Wireless stations.
Note that the BLW-54PM will automatically accept both 802.11b and 802.11g connections,
and no configuration is required for this feature.
To change the BLW-54PM's default settings for the Wireless Access Point feature, use the
Wireless link on the main menu to reach the Wireless screen. An example screen is shown
below.
Figure 7: Wireless Screen
Data - Wireless Screen
Identification
Station name
On your PC, some Wireless status screens may display this name as the
Access Point in use.
Region
Select your region from the drop-down list. This field displays the
region of operation for which the wireless interface is intended. It may
not be legal to operate the router in a region other than the region
shown here. If your country or region is not listed, please check with
your local government agency for more information on which channels
you are allowed to use, and select a region which allows those channels. (The channel list changes according to the selected region.)
21
Page 22
SSID
• If using an ESS (Extended Service Set, with multiple access
points) this ID is called an ESSID (Extended Service Set Identifier).
• To communicate, all Wireless stations should use the same
SSID/ESSID.
Options
Mode
Select the desired mode:
• g & b - Both 802.11.g and 802.11b Wireless stations will be able
to use the BLW-54PM.
• g only - Only 802.11g Wireless stations can use the BLW-54PM.
• b only - Only 802.11b connections are available. 802.11g Wire-
less Stations will only be able to use the BLW-54PM if they are
fully backward-compatible with the 802.11b standard.
Channel No.
This selection determines which operating frequency will be used. The
channel list changes according to the selected region.
Select the desired channel. Adjacent Access Points should use different
channels to avoid interference.
AutoLink
Auto Link is a new feature integrated in PLANEX GW-NS54GMZ
that offers users a simple way to configure a BLW-54PM in conjunction with the Configuration Utility.
Broadcast SSID
If Enabled, the SSID will broadcast its name to all Wireless Stations.
Stations which have no SSID (or a null value) can then adopt the
correct SSID for connections to this Access Point.
Current Setting
• Status - This will display Off, 64 Bit Encryption, 128 Bit En-
cryption or WPA-PSK.
• Configure - Click this button to access the Wireless Security sub-
screen.
Access Point
Enable Access
Point
• If Enabled, wireless stations will be able to locate and use this
Access Point.
• If Disabled, the wireless interface is disabled, and will neither
transmit nor receive wireless traffic.
• The Wireless (WLAN) LED on the front panel will remain OFF if
the Wireless interface is disabled.
Allow LAN
access by …
• All Wireless Stations - All wireless stations can use the access
point to access your LAN.
• Selected Wireless stations only - Only selected wireless stations
access your LAN. To select the required wireless stations, click
the Select Stations button.
Allow Internet
access by …
• All Wireless Stations - All wireless stations can use the access
point to access the Internet.
• Selected Wireless stations only - Only selected wireless stations
use the access point to access the Internet. To select the required
wireless stations, click the Select Stations button.
Buttons
Configure
Click this button to view the Wireless Security sub-screen.
22
Page 23
Select Stations
Click this button to select the required PCs.
Save
Save the data on screen.
Cancel The Cancel button will discard any data you have entered since the last
Save operation.
23
Page 24
3.5.1 Wireless Security Screen
This screen is accessed by clicking the Configure button on the Wireless screen.
Figure 8: Wireless Security Screen
Data – Wireless Security Screen
System
Security System
Select the desired option, and then enter the settings for the selected
method:
• Disable - No security is used. Anyone using the correct SSID can
connect to your network.
• WEP - The 802.11b standard. Data is encrypted before transmis-
sion, but the encryption system is not very strong.
• WPA-PSK - Like WEP, data is encrypted before transmission.
WPA is more secure than WEP, and should be used if possible.
WPA-PSK is the version of WPA which does NOT require a Radius Server on your LAN.
WEP
Authentication Normally this can be left at the default value of Automatic. If that
fails, select the appropriate value - Open System or Shared Key.
Check your wireless card's documentation to see what method to use.
Data Key Size
Select the WEP Encryption level:
• 64-bit (sometimes called 40-bit) encryption
• 128-bit (sometimes called 104-bit) encryption
Keys
• Use the radio buttons to select the default key.
• Enter the key value you wish to use. Other stations must have the
same key values.
• Keys must be entered in Hex. Hex characters are the digits ( 0 ~
9 ) and the letters A ~ F.
24
Page 25
Passphrase
Enter a word or group of printable characters in the Passphrase box
and click the Generate button to automatically configure the WEP
Key(s). If encryption strength is set to 64 bit, then each of the four key
fields will be populated with key values. If encryption strength is set to
128 bit, then only the selected WEP key field will be given a key
value.
WPA-PSK
PSK
Enter the Keyword key value. Data is encrypted using a key derived
from the network key. Other Wireless Stations must use the same
network key. The PSK must be from 8 to 63 characters in length.
Key Lifetime
This determines how often the encryption key is changed. Enter the
desired value.
WPA Encryption
Select the desired option. Wireless Stations must use the same method.
Buttons
Save
Save the data on screen.
Cancel The Cancel button will discard any data you have entered since the last
Save operation.
25
Page 26
3.6 Password Screen
The password screen allows you to assign a password to the BLW-54PM.
Figure 9: Password Screen
Once you have assigned a password to the BLW-54PM (on the Password screen above) you
will be prompted for the password when you connect, as shown below. (If no password has
been set, this dialog will not appear.)
Figure 10: Password Dialog
• Leave the User Name blank.
• Enter the password for the BLW-54PM, as set on the Password screen above.
26
Page 27
Chapter 4
Advanced Features
This Chapter explains when and how to use the BLW-54PM's Advanced Features.
4.1 Overview
The following advanced features are provided.
• Access Control
• Dynamic DNS
• Advanced Internet
• Communication Applications
• Special Applications
• Multi-DMZ
• URL filter
• Virtual Servers
• WAN Port
4.2 Access Control
This feature is accessed by the Access Control link on the Advanced menu.
4.2.1 Overview
The Access Control feature allows administrators to restrict the level of Internet Access available to PCs on your LAN. With the default settings, everyone has unrestricted Internet access.
To use this feature:
1. Set the desired restrictions on the Default group. All PCs are in the Default group unless
explicitly moved to another group.
2. Set the desired restrictions on the other groups (Group 1, Group 2, Group 3 and Group
4) as needed.
3. Assign PC to the groups as required.
Note:
Restrictions are imposed by blocking Services, or types of connections. All common Services
are pre-defined. If required, you can also define your own Services.
27
Page 28
4.2.2 Access Control Screen
To view this screen, select the Access Control link on the Advanced menu.
Figure 11: Access Control Screen
Data - Access Control Screen
Group
Group
Select the desired Group. The screen will update to display the
settings for the selected Group. Groups are named Default, Group
1, Group 2, Group 3 and Group 4, and cannot be re-named.
"Members" Button
Click this button to add or remove members from the current
Group.
• If the current group is Default, then members can not be added
or deleted. This group contains PCs not allocated to any other
group.
• To remove PCs from the Default Group, assign them to an-
other Group.
• To assign PCs to the Default Group, delete them from the
Group they are currently in.
See the following section for details of the Group Members
screen.
28
Page 29
Internet Access
Restrictions
Select the desired options for the current group:
• None - Nothing is blocked. Use this to create the least restric-
tive group.
• Block all Internet access - All traffic via the WAN port is
blocked. Use this to create the most restrictive group.
• Block selected Services - You can select which Services are to
block. Use this to gain fine control over the Internet access for
a group.
Block by Schedule
If Internet access is being blocked, you can choose to apply the
blocking only during scheduled times. (If access is not blocked, no
Scheduling is possible, and this setting has no effect.)
Define Schedule
Button
Clicking this will open a sub-window where you can define or
modify the Schedule.
Services
This lists all defined Services. Select the Services you wish to
block. To select multiple services, hold the CTRL key while
selecting. (On the Macintosh, hold the SHIFT key rather than
CTRL.)
Edit Service List
Button
If you wish to define additional Services, or manage the Service
list, click this button to open the Services screen.
Buttons
Members
Click this button to add or remove members from the current
Group.
If the current group is Default, then members can not be added or
deleted. This group contains PCs not allocated to any other group.
See the following section for details of the Group Members screen.
Define Schedule
Click this to open a sub-window where you can define or modify
the Schedule.
Edit Service List
If you wish to define additional Services, or manage the Service
list, click this button to open the Services screen.
Save
Save the data on screen.
Cancel Reverse any changes made since the last Save.
View Log Click this to open a sub-window where you can view the Access
Control log. This log shows attempted Internet accesses which
have been blocked by the Access Control feature.
Clear Log Click this to clear and restart the Access Control log, making new
entries easier to read.
Refresh
Update the data on screen.
29
Page 30
4.2.3 Group Members Screen
This screen is displayed when the Members button on the Access Control screen is clicked.
Figure 12: Group Members
Use this screen to add or remove members (PCs) from the current group.
• The Del >> button will remove the selected PC (in the Members list) from the current
group.
• The << Add button will add the selected PC (in the Other PCs list) to the current group.
Note:
PCs not assigned to any group will be in the Default group.
PCs deleted from any other Group will be added to the Default group.
30
Page 31
4.2.4 Default Schedule Screen
This screen is displayed when the Define Schedule button on the Access Control screen is
clicked.
• This schedule can be (optionally) applied to any Access Control Group.
• Blocking will be performed during the scheduled time (between the Start and Finish
times.)
• Two (2) separate sessions or periods can be defined.
• Times must be entered using a 24 hr clock.
• If the time for a particular day is blank, no action will be performed.
Figure 13: Default Schedule Screen
Data - Default Schedule Screen
Day
Each day of the week can scheduled independently.
Session 1
Session 2
Two (2) separate sessions or periods can be defined. Session 2 can be
left blank if not required.
Start Time
Enter the start using a 24 hr clock.
Finish Time
Enter the finish time using a 24 hr clock.
31
Page 32
4.2.5 Services Screen
This screen is displayed when the Edit Service List button on the Access Control screen is
clicked.
Figure 14: Access Control - Services
Data - Services Screen
Available Services
Available Services
This lists all the available services.
"Delete" button
Use this to delete any Service you have added. Pre-defined Services
can not be deleted.
Add New Service
Name
Enter a descriptive name to identify this service.
Type
Select the protocol (TCP, UDP, ICMP) used to the remote system or
service.
Start Port
For TCP and UDP Services, enter the beginning of the range of port
numbers used by the service. If the service uses a single port number,
enter it in both the Start and Finish fields.
Finish Port
For TCP and UDP Services, enter the end of the range of port numbers used by the service. If the service uses a single port number,
enter it in both the Start and Finish fields.
ICMP Type
For ICMP Services, enter the type number of the required service.
Buttons
Delete
Delete the selected service from the list.
32
Page 33
Save Add a new entry to the Service list, using the data shown in the Add
New Service area on screen.
Cancel Clear the Add New Service area, ready for entering data for a new
Service.
4.2.6 Access Control Log
To check the operation of the Access Control feature, an Access Control Log is provided.
Click the View Log button on the Access Control screen to view this log.
This log shows attempted Internet accesses which have been blocked by the Access Control
function.
Data shown in this log is as follows:
Date/Time
Date and Time of the attempted access.
Name
If known, the name of the PC whose access was blocked.
Source IP address
The IP Address of the PC or device whose access request was
blocked
MAC address
The hardware or physical address of the PC or device whose access
request was blocked
Destination
The destination URL or IP address
33
Page 34
4.3 Dynamic DNS (Domain Name Server)
This free service is very useful when combined with the Virtual Server feature. It allows
Internet users to connect to your Virtual Servers using a URL, rather than an IP Address.
This also solves the problem of having a dynamic IP address. With a dynamic IP address, your
IP address may change whenever you connect, which makes it difficult to connect to you.
The Service works as follows:
1. You must register for the service at one of the listed DDNS Service Providers.
2. After registration, follow the service provider's procedure to request a Domain Name and
have it allocated to you.
3. Enter your DDNS data on the BLW-54PM's DDNS screen.
4. The BLW-54PM will then automatically ensure that your current IP Address is recorded at
the DDNS server.
If the DDNS Service provides software to perform this IP address update; you should
disable the Update function, or not use the software at all.
5. From the Internet, users will be able to connect to your Virtual Servers (or DMZ PC)
using your Domain Name.
4.3.1 Dynamic DNS Screen
Select Advanced on the main menu, then Dynamic DNS, to see a screen like the following:
Figure 15: DDNS Screen
Data - Dynamic DNS Screen
DDNS Service
DDNS Service
• Select the desired DDNS Service Provider from the list. You
must register for the service at one of the listed Service Providers. You can reach the Service provider's Web Site by selecting
them in the list and clicking the Web Site button.
34
Page 35
• Apply for a Domain Name, and ensure it is allocated to you.
• Details of your DDNS account (Name, password, Domain name)
must then be entered and saved on this screen.
• This device will then automatically ensure that your current IP
Address is recorded by the DDNS Service Provider. (You do
NOT need to use the Client program provided by some DDNS
Service providers.)
• From the Internet, users will now be able to connect to your
Virtual Servers (or DMZ PC) using your Domain name.
DDNS Data
User Name
Enter your Username for the DDNS Service.
Password/Key
Enter your current password for the DDNS Service.
Domain Name
Enter the domain name allocated to you by the DDNS Service. If you
have more than one name, enter the name you wish to use.
DDNS Status
• This message is returned by the DDNS Server
• Normally, this message should be Update successful
• If the message is No host or some other error message, you need
to connect to the DDNS Service provider and correct the problem.
35
Page 36
4.4 Advanced Internet Screen
This screen allows configuration of all advanced features relating to Internet access.
• Communication Applications
• Special Applications
• Multi-DMZ
• URL filter
An example screen is shown below.
Figure 16: Internet Screen
4.4.1 Communication Applications
Most applications are supported transparently by the BLW-54PM. But sometimes it is not clear
which PC should receive an incoming connection. This problem could arise with the Com-
munication Applications listed on this screen.
If this problem arises, you can use this screen to set which PC should receive an incoming
connection, as described below.
36
Page 37
Communication Applications
Select an Application
This lists applications which may generate incoming connections,
where the destination PC (on your local LAN) is unknown.
Send incoming calls to
This lists the PCs on your LAN.
• If necessary, you can add PCs manually, using the PC
Database option on the advanced menu.
• For each application listed above, you can choose a destina-
tion PC.
• There is no need to Save after each change; you can set the
destination PC for each application, then click Save.
4.4.2 Special Applications
If you use Internet applications which use non-standard connections or port numbers, you may
find that they do not function correctly because they are blocked by the BLW-54PM's firewall.
In this case, you can define the application as a Special Application.
4.4.3 Special Applications Screen
This screen can be reached by clicking the Special Applications button on the Internet screen.
You can then define your Special Applications. You will need detailed information about the
application; this is normally available from the supplier of the application.
Also, note that the terms Incoming and Outgoing on this screen refer to traffic from the client
(PC) viewpoint
Figure 17: Special Applications Screen
37
Page 38
Data - Special Applications Screen
Checkbox
Use this to Enable or Disable this Special Application as required.
Name
Enter a descriptive name to identify this Special Application.
Incoming
Ports
• Type - Select the protocol (TCP or UDP) used when you receive data
from the special application or service. (Note: Some applications use
different protocols for outgoing and incoming data).
• Start - Enter the beginning of the range of port numbers used by the
application server, for data you receive. If the application uses a single
port number, enter it in both the Start and Finish fields.
• Finish - Enter the end of the range of port numbers used by the applica-
tion server, for data you receive.
Outgoing
Ports
• Type - Select the protocol (TCP or UDP) used when you send data to
the remote system or service.
• Start - Enter the beginning of the range of port numbers used by the
application server, for data you send to it. If the application uses a single port number, enter it in both the Start and Finish fields.
• Finish - Enter the end of the range of port numbers used by the applica-
tion server, for data you send to it. If the application uses a single port
number, enter it in both the Start and Finish fields.
4.4.4 Using a Special Application
• Configure the Special Applications screen as required.
• On your PC, use the application normally. Remember that only one (1) PC can use each
Special application at any time. Also, when 1 PC is finished using a particular Special Application, there may need to be a Time-out before another PC can use the same Special
Application. The Time-out period may be up to 3 minutes.
Note:
If an application still cannot function correctly, try using the DMZ feature.
4.4.5 Multi-DMZ
This feature, if enabled, allows the DMZ computer or computers on your LAN to be exposed
to all users on the Internet.
• This allows almost any application to be used on the DMZ PC.
• The DMZ PC will receive all Unknown connections and data.
• If the DMZ feature is enabled, you must select the PC to be used as the DMZ PC.
If you have multiple Internet IP addresses, you can assign one DMZ PC for each Internet IP
address.
If you only have 1 WAN IP address, only DMZ 1 can be used, and only one (1) PC can be the
DMZ PC. The current WAN IP address is displayed. If this address is assigned upon connection, and no connection currently exists, then this address will be blank or 0.0.0.0.
Note:
The DMZ PC is effectively outside the Firewall, making it more vulnerable to attacks. For this
reason, you should only enable the DMZ feature when required.
38
Page 39
4.4.6 URL Filter
The URL Filter allows you to block access to undesirable Web site
• To use this feature, you must define filter strings. If the filter string appears in a re-
quested URL, the request is blocked.
• Enabling the URL Filter also affects the Internet Access Log. If Enabled, the Destination
field in the log will display the URL. Otherwise, it will display the IP Address.
4.4.7 URL Filter Screen
Click the Configure URL Filter button on the Internet screen to access the URL Filter
screen. An example screen is shown below.
Figure 18: URL Filter Screen
Data - URL Filter Screen
Filter Strings
Current Entries
This lists any existing entries. If you have not entered any values, this
list will be empty.
Add Filter String To add an entry to the list, enter it here, and click the Add button.
An entry may be a Domain name (e.g. www.trash.com) or simply a
string. (e.g. ads/ )
Any URL which contains ANY entry ANYWHERE in the URL will
be blocked.
Buttons
Delete/Delete All
Use these buttons to delete the selected entry or all entries, as required.
Multiple entries can be selected by holding down the CTRL key while
selecting.(On the Macintosh, hold the SHIFT key while selecting.)
Add
Use this to add the current Filter String to the site list.
39
Page 40
4.5 Virtual Servers
This feature, sometimes called Port Forwarding, allows you to make Servers on your LAN
accessible to Internet users. Normally, Internet users would not be able to access a server on
your LAN because:
• Your Server does not have a valid external IP Address.
• Attempts to connect to devices on your LAN are blocked by the firewall in this device.
The Virtual Server feature solves these problems and allows Internet users to connect to your
servers, as illustrated below.
Figure 19: Virtual Servers
4.5.1 IP Address seen by Internet Users
Note that, in this illustration, both Internet users are connecting to the same IP Address, but
using different protocols.
To Internet users, all virtual Servers on your LAN have the same IP Address.
This IP Address is allocated by your ISP.
This address should be static, rather than dynamic, to make it easier for Internet users to
connect to your Servers.
However, you can use the DDNS (Dynamic DNS) feature to allow users to connect to your
Virtual Servers using a URL, instead of an IP Address.
4.5.2 Virtual Servers Screen
The Virtual Servers screen is reached by the Virtual Servers link on the Advanced screen.
An example screen is shown below.
40
Page 41
Figure 20: Virtual Servers Screen
This screen lists a number of pre-defined Servers, and allows you to define your own Servers.
Details of the selected Server are shown in the Properties area.
Data - Virtual Servers Screen
Servers
Servers
This lists a number of pre-defined Servers, plus any Servers you
have defined. Details of the selected Server are shown in the
Properties area.
Properties
Enable
Use this to Enable or Disable support for this Server, as required.
• If Enable, any incoming connections will be forwarded to the
selected PC.
• If Disable, any incoming connection attempts will be blocked.
PC (Server)
Select the PC for this Server. The PC must be running the appropriate Server software.
Protocol
Select the protocol (TCP or UDP) used by the Server.
Internal Port No.
Enter the port number which the Server software is configured to
use.
External Port No.
The port number used by Internet users when connecting to the
Server. This is normally the same as the Internal Port Number. If it
is different, this device will perform a mapping or translation
function, allowing the server to use one port address, while clients
use a different port address.
41
Page 42
Buttons
Defaults
This will delete any Servers you have defined, and set the predefined Servers to use their default port numbers.
Disable All This will cause the Enable setting of all Virtual Servers to be set
OFF.
Update Selected
Server
Update the current Virtual Server entry, using the data shown in the
Properties area on screen.
Add as new Server
Add a new entry to the Virtual Server list, using the data shown in
the Properties area on screen. The entry selected in the list is
ignored, and has no effect.
Delete
Delete the current Virtual Server entry. Note that the pre-defined
Servers can not be deleted. Only Servers you have defined yourself
can be deleted.
Clear Form Clear all data from the Properties area, ready for input of a new
Virtual Server entry.
Note:
For each entry, the PC must be running the appropriate Server software.
4.5.3 Defining your own Virtual Servers
If the type of Server you wish to use is not listed on the Virtual Servers screen, you can
define and manage your own Servers:
Create a new Server: 1. Click Clear Form
2. Enter the required data, as described above.
3. Click Add.
4. The new Server will now appear in the list.
Modify (Edit) a Server:
1. Select the desired Server from the list
2. Make any desired changes (for example, change the
Enable/Disable setting).
3. Click Update to save changes to the selected Server.
Delete a Server:
1. Select the entry from the list.
2. Click Delete.
Note: You can only delete Servers you have defined. Pre-
defined Server cannot be deleted.
Note:
From the Internet, ALL Virtual Servers have the IP Address allocated by your ISP.
42
Page 43
4.5.4 Connecting to the Virtual Servers
Once configured, anyone on the Internet can connect to your Virtual Servers. They must use
the Internet IP Address (the IP Address allocated to you by your ISP).
e.g.
http://203.70.212.52
ftp://203.70.212.52
It is more convenient if you are using a Fixed IP Address from your ISP, rather than Dynamic.
However, you can use the Dynamic DNS feature, described in the following section, to allow
users to connect to your Virtual Servers using a URL, rather than an IP Address.
43
Page 44
4.6 WAN Port Configuration
The WAN Port option is on the Advanced menu.
Figure 21: WAN Port Screen
Data – WAN Port Screen
Identification
Hostname
Normally, there is no need to change the default name, but if your
ISP requests that you use a particular Hostname, enter it here.
Domain Name
If your ISP provided a domain name, enter it here. Otherwise, this
may be left blank.
WAN Port MAC
Address
Also called Network Adapter Address or Physical Address. This
is a low-level identifier, as seen from the WAN port.
Normally there is no need to change this, but some ISPs require a
particular value, often that of the PC initially used for Internet access.
You can use the Copy from PC button to copy your PC's address
into this field, the Default button to insert the default value, or enter
a value directly.
44
Page 45
IP Address
Automatic
Also called Dynamic IP Address. This is the default, and the most
common.
Leave this selected if your ISP allocates an IP Address to the BLW54PM upon connection.
Specified IP
Address
Also called Static IP Address. Select this if your ISP has allocated
you a fixed IP Address. If this option is selected, the following data
must be entered.
• IP Address
The IP Address allocated by the ISP.
• Network Mask (Not required for PPPoE)
This is also supplied by your ISP. It must be compatible with the
IP Address above.
• Gateway IP Address (Not required for PPPoE)
The address of the router or gateway, as supplied by your ISP.
DNS
Automatically
obtain from Serve
The DNS (Domain Name Server) address will be obtained automatically from your ISP's server.
Note that if using a fixed IP address, with no login (login is set to
None), then no Server is used, so this option cannot be used.
Use this DNS
If this option is selected, you must enter the IP address of the DNS
(Domain Name Server) you wish to use.
Note: If the DNS is unavailable, the Backup DNS, entered on the
Options screen, will be used
Login
Login Method
If your ISP does not use a login method (username, password) for
Internet access, leave this at the default value None (Direct connec-
tion). Otherwise, check the documentation from your ISP, select the
login method used, and enter the required data.
• PPPoE - this is the most common login method, widely used
with DSL modems. Normally, your ISP will have provided some
software to connect and login. This software is no longer required, and should not be used.
• PPPoE (Unnumbered IP) - this can only be used if your ISP
supports this system, and has allocated you multiple IP addresses. If selected, you must also select Specified IP Address
above and enter one of the IP addresses allocated to you by your
ISP.
• PPTP - this is mainly used in Europe. You need to know the
PPTP Server address as well as your name and password.
• L2TP - this is not widely used. You need to know the PPTP
Server address as well as your name and password.
• Big Pond Cable - for Australia only.
• SingTel RAS - for Singapore only.
Login User Name
The User Name (or account name) provided by your ISP.
45
Page 46
Login Password
Enter the password for the login name above.
RAS Plan
For SingTel customers only, select the RAS plan you are on.
Server Address
This is not required for PPPoE or SingTel RAS.
For PPTP, L2TP and BPA, enter the Server address as provided by
your ISP.
Connection
Behavior
Select the desired option:
• Automatic Connect/Disconnect
An Internet connection is automatically made when required,
and disconnected when idle for the time period specified by the
Auto-disconnect Idle Time-out.
• Manual Connect/Disconnect
You must manually establish and terminate the connection.
• Keep alive (maintain connection)
The connection will never be disconnected by this device. If disconnected by your ISP, the connection will be re-established
immediately. (However, this does not ensure that your Internet
IP address will remain unchanged.)
Auto-disconnect
Idle Time-out
This field has no effect unless using the Automatic Connect/Disconnect setting.
If using this setting, enter the desired idle time-out period (in
minutes). After the connection to your ISP has been idle for this
time period, the connection will be terminated.
Buttons
Default
Inserts the default MAC address into the MAC address field. You
must click Save to actually change the address used.
Copy from PC
Inserts the MAC address from your PC into the MAC address field.
You must click Save to actually change the address used.
Save
Save your changes to the BLW-54PM.
Cancel
Reverse any changes made since the last Save.
46
Page 47
Chapter 5
Advanced Administration
This Chapter explains the settings available via the Administration section of
the menu.
5.1 Overview
Normally, it is not necessary to use these screens, or change any settings. These screens and
settings are provided to deal with non-standard situations, or to provide additional options for
advanced users.
The available settings and features are:
Config File
Backup or restore the configuration file for the BLW-54PM. This file
contains all the configuration data.
Logs
View or clear all logs, set E-Mailing of log files.
Network
Diagnostics
Ping, DNS Lookup.
Options
Various options, such as backup DNS, UPnP, and enable TFTP firmware upgrade option.
PC Database This is the list of PCs shown when you select the DMZ PC or a Virtual
Server. This database is maintained automatically, but you can add and
delete entries for PCs which use a Fixed (Static) IP Address.
Remote
Administration
Allow settings to be changed from the Internet..
Routing
Only required if your LAN has other Routers or Gateways.
Security
Firewall and other security-related settings. Normally, the default settings do not need to be changed.
Firmware
Upgrade
Upgrade the Firmware (software) installed in your BLW-54PM.
47
Page 48
5.2 Config File
This feature allows you to download the current settings from the BLW-54PM, and save them
to a file on your PC.
You can restore a previously-downloaded configuration file to the BLW-54PM, by uploading
it to the BLW-54PM.
This screen also allows you to set the BLW-54PM back to its factory default configuration.
Any existing settings will be deleted.
An example Config File screen is shown below.
Figure 22: Config Screen
Data - Config File Screen
Backup Config
Use this to download a copy of the current configuration, and store the
file on your PC. Click Download to start the download.
Restore Config
This allows you to restore a previously-saved configuration file back to
the BLW-54PM.
Click Browse to select the configuration file, then click Restore to
upload the configuration file.
WARNING !
Uploading a configuration file will destroy (overwrite) ALL of the
existing settings.
Default Config Clicking the Restore Defaults button will reset the BLW-54PM to its
factory default settings.
WARNING !
This will delete ALL of the existing settings.
48
Page 49
5.3 Logs
The Logs record various types of activity on the BLW-54PM. This data is useful for troubleshooting, but enabling all logs will generate a large amount of data and adversely affect
performance.
Since only a limited amount of log data can be stored in the BLW-54PM, log data can also be
E-mailed to your PC.
Figure 23: Logs Screen
Data - Logs Screen
Enable Logs
Outgoing Connections
If selected, Outgoing Internet connections are logged. Normally,
the (Internet) Destination will be shown as an IP address. But if
the URL Filter is enabled, the Destination will be shown as a
URL.
Access Control
If enabled, the log will include attempted outgoing connections
which have been blocked by the Access Control feature.
DoS Attacks
If enabled, this log will show details of DoS (Denial of Service)
attacks which have been blocked by the built-in Firewall.
Timezone
Select the correct Timezone for your location. This is required for
the date/time shown on the logs to be correct.
E-Mail Reports
Send E-mail alert
If enabled, an E-mail will be sent immediately if a DoS (Denial of
Service) attack is detected. If enabled, the E-mail address information must be provided.
49
Page 50
E-mail Logs
You can choose to have the logs E-mailed to you, by enabling
either or both checkboxes. If enabled, the Log will be sent to the
specified E-mail address. The interval between E-mails is determined by the Send setting.
Send
Select the desired option for sending the log by E-mail.
• When log is full - The time is not fixed. The log will be sent
when the log is full, which will depend on the volume of traffic.
• Every day, Every Monday ... - The log is sent on the
interval specified.
• If Every day is selected, the log is sent at the time speci-
fied.
• If the day is specified, the log is sent once per week, on
the specified day.
• Select the time of day you wish the E-mail to be sent.
• If the log is full before the time specified to send it, it
will be sent regardless.
E-Mail Address
E-mail Address
Enter the E-mail address the Log is to be sent to. The E-mail will
also show this address as the Sender's address.
Subject Enter the text string to be shown in the Subject field for the E-
mail.
SMTP Server
Enter the address or IP address of the SMTP (Simple Mail Transport Protocol) Server you use for outgoing E-mail.
Port No.
Enter the port number used to connect to the SMTP Server. The
default value is 25.
50
Page 51
5.4 Network Diagnostics
This screen allows you to perform a Ping or a DNS lookup. These activities can be useful in
solving network problems.
An example Network Diagnostics screen is shown below.
Figure 24: Network Diagnostics Screen
Data - Network Diagnostics Screen
Ping
Ping this
IP Address
Enter the IP address you wish to ping. The IP address can be on your
LAN, or on the Internet. Note that if the address is on the Internet,
and no connection currently exists, you could get a "Timeout" error.
In that case, wait a few seconds and try again.
Ping Button After entering the IP address, click this button to start the Ping
procedure. The results will be displayed in the Ping Results pane.
DNS Lookup
Domain
name/URL
Enter the Domain name or URL for which you want a DNS (Domain
Name Server) lookup. Note that if the address in on the Internet, and
no connection currently exists, you could get a "Timeout" error. In
that case, wait a few seconds and try again.
Lookup Button
After entering the Domain name/URL, click this button to start the
DNS Lookup procedure. The results will be displayed in the DNS
Lookup Results pane.
51
Page 52
5.5 Options
This screen allows advanced users to enter or change a number of settings. For normal operation, there is no need to use this screen or change any settings.
An example Options screen is shown below.
Figure 25: Options Screen
Data - Options Screen
Backup DNS
IP Address
Enter the IP Address of the DNS (Domain Name Servers) here. These
DNS will be used only if the primary DNS is unavailable.
TFTP
Enable Firmware Upgrade
using TFTP
• If enabled, TFTP (Trivial FTP) can be used to upgrade the firm-
ware in this device. This is normally not required; a Windows
utility is available for this purpose.
• You must obtain the firmware upgrade file first; instructions for
using TFTP will be available with the upgrade.
UPnP
Enable UPnP
Services
• UPnP (Universal Plug and Play) allows automatic discovery and
configuration of equipment attached to your LAN. UPnP is by
supported by Windows ME, XP, or later.
• If Enable, this device will be visible via UPnP.
• If Disable, this device will not be visible via UPnP.
Allow Configuration...
• If checked, then UPnP users can change the configuration.
• If Disabled, UPnP users can only view the configuration. But
currently, this restriction only applies to users running Windows
XP, who access the Properties via UPnP. (e.g. Right - click the
BLW-54PM in My Network Places, and select Properties)
52
Page 53
Allow Internet
access to be
disabled
• If checked, then UPnP users can disable Internet access via this
device.
• If Disabled, UPnP users can NOT disable Internet access via this
device. But currently, this restriction only applies to users running
Windows XP, who access the Properties via UPnP. (e.g. Right click the BLW-54PM in My Network Places, and select Proper-
ties)
MTU
MTU size
MTU (Maximum Transmission Unit) value should only be changed if
advised to do so by Technical Support.
• Enter a value between 1 and 1500.
• This device will still auto-negotiate with the remote server, to set
the MTU size. The smaller of the 2 values (auto-negotiated, or entered here) will be used.
• For direct connections (not PPPoE or PPTP), the MTU used is
always 1500.
53
Page 54
5.6 PC Database
The PC Database is used whenever you need to select a PC (e.g. for the DMZ PC). It eliminates the need to enter IP addresses. Also, you do not need to use fixed IP addresses on your
LAN.
5.6.1 PC Database Screen
An example PC Database screen is shown below.
Figure 26: PC Database
• PCs which are DHCP Clients are automatically added to the database, and updated as
required.
• By default, non-Server versions of Windows act as DHCP Clients; this setting is called
Obtain an IP Address automatically.
• The BLW-54PM uses the Hardware Address to identify each PC, not the name or IP
address. The Hardware Address can only change if you change the PC's network card or
adapter.
• This system means you do NOT need to use Fixed (static) IP addresses on your LAN.
However, you can add PCs using Fixed (static) IP Addresses to the PC database if required.
54
Page 55
Data - PC Database Screen
Known PCs This lists all current entries. Data displayed is name (IP Address)
type. The type indicates whether the PC is connected to the LAN.
Name
If adding a new PC to the list, enter its name here. It is best if this
matches the PC's hostname.
IP Address Enter the IP Address of the PC. The PC will be sent a ping to deter-
mine its hardware address. If the PC is not available (not connected, or
not powered On) you will not be able to add it.
Buttons
Add This will add the new PC to the list. The PC will be sent a ping to
determine its hardware address. If the PC is not available (not connected, or not powered On) you will not be able to add it.
Delete
Delete the selected PC from the list. This should be done in 2 situations:
• The PC has been removed from your LAN.
• The entry is incorrect.
Refresh
Update the data on screen.
Generate Report
Display a read-only list showing full details of all entries in the PC
database.
Advanced
Administration
View the Advanced version of the PC database screen - PC Database
(Admin). See below for details.
55
Page 56
5.6.2 PC Database (Admin)
This screen is displayed if the Advanced Administration button on the PC Database is
clicked. It provides more control than the standard PC Database screen.
Figure 27: PC Database (Admin)
Data - PC Database ( Admin) Screen
Known PCs This lists all current entries. Data displayed is name (IP Address)
type. The type indicates whether the PC is connected to the LAN.
PC Properties
Name
If adding a new PC to the list, enter its name here. It is best if this
matches the PC's hostname.
56
Page 57
IP Address
Select the appropriate option:
• Automatic - The PC is set to be a DHCP client (Windows: Ob-
tain an IP address automatically). The BLW-54PM will allocate
an IP address to this PC when requested to do so. The IP address
could change, but normally won't.
• DCHP Client - Reserved IP Address - Select this if the PC is set
to be a DCHP client, and you wish to guarantee that the BLW54PM will always allocate the same IP Address to this PC.
Enter the required IP address. Only the last field is required; the
other fields must match the BLW-54PM's IP address.
• Fixed IP Address - Select this if the PC is using a Fixed (Static)
IP address. Enter the IP address allocated to the PC. (The PC must
be configured to use this IP address.)
MAC Address
Select the appropriate option
• Automatic discovery - Select this to have the BLW-54PM contact
the PC and find its MAC address. This is only possible if the PC is
connected to the LAN and powered On.
• MAC is - Enter the MAC address on the PC. The MAC address is
also called the Hardware Address, Physical Address, or Net-
work Adapter Address. The BLW-54PM uses this to provide a
unique identifier for each PC. Because of this, the MAC address
can NOT be left blank.
Buttons
Add as New
Entry
Add a new PC to the list, using the data in the Properties box.
If Automatic discovery (for MAC address) is selected, the PC will be
sent a ping to determine its hardware address. This will fail unless the
PC is connected to the LAN, and powered on.
Update Selected
PC
Update (modify) the selected PC, using the data in the Properties box.
Clear Form Clear the Properties box, ready for entering data for a new PC.
Refresh
Update the data on screen.
Generate Report
Display a read-only list showing full details of all entries in the PC
database.
Standard Screen Click this to view the standard PC Database screen.
57
Page 58
5.7 Remote Admin
If enable, this feature allows you to manage the BLW-54PM via the Internet.
Figure 28: Remote Administration Screen
Data - Remote Administration Screen
Remote Administration
Enable Remote
Management
Enable to allow management via the Internet. If Disabled, this device
will ignore management connection attempts from the Internet.
Port Number
Enter a port number between 1024 and 65535 (8080 is recommended). This port number must be specified when you connect (see
below).
Note: The default port number for HTTP (Web) connections is port
80, but using port 80 here will prevent the use of a Web Virtual
Server on your LAN. (See Advanced Internet - Virtual Servers)
Current IP Address
You must use this IP Address to connect (see below).
This IP Address is allocated by your ISP. But if using a Dynamic IP
Address, this value can change each time you connect to your ISP.
So it is better if your ISP allocates you a Fixed IP Address.
To connect from a remote PC via the Internet
1. Ensure your Internet connection is established, and start your Web Browser.
2. In the Address bar, enter HTTP:// followed by the Internet IP Address of the BLW-54PM.
If the port number is not 80, the port number is also required. (After the IP Address, enter :
followed by the port number.)
e.g.
HTTP://123.123.123.123:8080
This example assumes the WAN IP Address is 123.123.123.123, and the port number is 8080.
58
Page 59
5.8 Routing
5.8.1 Overview
• If you don't have other Routers or Gateways on your LAN, you can ignore the Routing
page completely.
• If the BLW-54PM is only acting as a Gateway for the local LAN segment, ignore the
Routing page even if your LAN has other Routers.
• If your LAN has a standard Router (e.g. Cisco) on your LAN, and the BLW-54PM is to
act as a Gateway for all LAN segments, enable RIP (Routing Information Protocol) and
ignore the Static Routing table.
• If your LAN has other Gateways and Routers, and you wish to control which LAN seg-
ments use each Gateway, do NOT enable RIP (Routing Information Protocol). Configure
the Static Routing table instead. (You also need to configure the other Routers.)
• If using Windows 2000 Data center Server as a software Router, enable RIP on the BLW-
54PM, and ensure the following Windows 2000 settings are correct:
• Open Routing and Remote Access
• In the console tree, select Routing and Remote Access , [server name], IP Routing,
RIP.
• In the Details pane, right-click the interface you want to configure for RIP version 2,
and then click Properties.
• On the General tab, set Outgoing packet protocol to RIP version 2 broadcast, and
Incoming packet protocol to RIP version 1 and 2.
5.8.2 Routing Screen
The routing table is accessed by the Routing link on the Administration menu.
Using this Screen
Generally, you will use either RIP (Routing Information Protocol) OR the Static Routing Table,
as explained above, although is it possible to use both methods simultaneously.
Static Routing Table
• If RIP is not used, an entry in the routing table is required for each LAN segment on your
Network, other than the segment to which this device is attached.
• The other Routers must also be configured. See Configuring Other Routers on your LAN
later in this chapter for further details and an example.
59
Page 60
Figure 29: Routing Screen
Data - Routing Screen
RIP
Enable RIP
Check this to enable the RIP (Routing Information Protocol) feature
of the BLW-54PM. The BLW-54PM supports RIP 1 only.
Static Routing
Static Routing
Table Entries
This list shows all entries in the Routing Table.
• The Properties area shows details of the selected item in the list.
• Change any the properties as required, then click the Update
button to save the changes to the selected entry.
Properties
• Destination Network - The network address of the remote LAN
segment. For standard class C LANs, the network address is the
first 3 fields of the Destination IP Address. The 4th (last) field
can be left at 0.
• Network Mask - The Network Mask for the remote LAN
segment. For class C networks, the default mask is
255.255.255.0
• Gateway IP Address - The IP Address of the Gateway or
Router which the BLW-54PM must use to communicate with the
destination above. (NOT the router attached to the remote segment.)
• Metric - The number of hops (routers) to pass through to reach
the remote LAN segment. The shortest path will be used. The
default value is 1.
Buttons
Save
Save the RIP setting. This has no effect on the Static Routing Table.
60
Page 61
Add
Add a new entry to the Static Routing table, using the data shown in
the Properties area on screen. The entry selected in the list is ignored, and has no effect.
Update
Update the current Static Routing Table entry, using the data shown
in the Properties area on screen.
Delete
Delete the current Static Routing Table entry.
Clear Form Clear all data from the Properties area, ready for input of a new
entry for the Static Routing table.
Generate Report
Generate a read-only list of all entries in the Static Routing table.
5.8.3 Configuring Other Routers on your LAN
It is essential that all IP packets for devices not on the local LAN be passed to the BLW-54PM,
so that they can be forwarded to the external LAN, WAN, or Internet. To achieve this, the
local LAN must be configured to use the BLW-54PM as the Default Route or Default Gate-
way.
Local Router
The local router is the Router installed on the same LAN segment as the BLW-54PM. This
router requires that the Default Route is the BLW-54PM itself. Typically, routers have a
special entry for the Default Route. It should be configured as follows.
Destination IP Address
Normally 0.0.0.0, but check your router documentation.
Network Mask
Normally 0.0.0.0, but check your router documentation.
Gateway IP Address
The IP Address of the BLW-54PM.
Metric
1
Other Routers on the Local LAN
Other routers on the local LAN must use the BLW-54PM's Local Router as the Default Route.
The entries will be the same as the BLW-54PM's local router, with the exception of the Gate-
way IP Address.
• For a router with a direct connection to the BLW-54PM's local Router, the Gateway IP
Address is the address of the BLW-54PM's local router.
• For routers which must forward packets to another router before reaching the BLW-
54PM's local router, the Gateway IP Address is the address of the intermediate router.
61
Page 62
5.8.4 Static Routing - Example
Figure 30: Routing Example
For the BLW-54PM's Routing Table
For the LAN shown above, with 2 routers and 3 LAN segments, the BLW-54PM requires 2
entries as follows.
Entry 1 (Segment 1)
Destination IP Address 192.168.1.0
Network Mask 255.255.255.0 (Standard Class C)
Gateway IP Address 192.168.0.100 (BLW-54PM's local Router)
Metric 2
Entry 2 (Segment 2)
Destination IP Address 192.168.2.0
Network Mask 255.255.255.0 (Standard Class C)
Gateway IP Address 192.168.0.100
Metric 3
For Router A's Default Route
Destination IP Address 0.0.0.0
Network Mask 0.0.0.0
Gateway IP Address 192.168.0.1 (BLW-54PM's IP Address)
For Router B's Default Route
Destination IP Address 0.0.0.0
Network Mask 0.0.0.0
Gateway IP Address 192.168.1.80 (BLW-54PM's local router)
62
Page 63
5.9 Security
This screen allows you to set Firewall and other security-related options.
Figure 31: Security Screen
Data - Security Screen
Firewall
Enable DoS
Firewall
If enabled, DoS (Denial of Service) attacks will be detected and
blocked. The default is enabled. It is strongly recommended that this
setting be left enabled.
Note:
• A DoS attack does not attempt to steal data or damage your PCs,
but overloads your Internet connection so you can not use it - the
service is unavailable.
• This device uses "Stateful Inspection" technology. This system
can detect situations where individual TCP/IP packets are valid,
but collectively they become a DoS attack.
Threshold
This setting affects the number of half-open connections allowed.
• A half-open connection arises when a remote client contacts the
Server with a connection request, but then does not reply to the
Server's response.
• While the optimum number of half-open connections allowed (the
Threshold) depends on many factors, the most important factor is
the available bandwidth of your Internet connection.
• Select the setting to match the bandwidth of your Internet connec-
tion.
63
Page 64
Options
Respond to
ICMP
The ICMP protocol is used by the ping and traceroute programs, and
by network monitoring and diagnostic programs.
• If checked, the BLW-54PM will repond to ICMP packets received
from the Internet.
• If not checked, ICMP packets from the Internet will be ignored.
Disabling this option provides a slight increase in security.
Allow IPsec
The IPSec protocol is used to establish a secure connection, and is
widely used by VPN (Virtual Private Networking) programs.
• If checked, IPSec connections are allowed.
• If not checked, IPSec connections are blocked.
Allow PPTP
PPTP (Point to Point Tunneling Protocol) is widely used by VPN
(Virtual Private Networking) programs.
• If checked, PPTP connections are allowed.
• If not checked, PPTP connections are blocked.
Allow L2TP
L2TP is a protocol developed by Cisco for VPNs (Virtual Private
Networks).
• If checked, L2TP connections are allowed.
• If not checked, L2TP connections are blocked.
64
Page 65
5.10 Upgrade Firmware
The firmware (software) in the BLW-54PM can be upgraded using your Web Browser.
You must first download the upgrade file, then select Upgrade on the Administration menu.
You will see a screen like the following.
Figure 32: Upgrade Firmware Screen
To perform the Firmware Upgrade:
3. Click the Browse button and navigate to the location of the upgrade file.
4. Select the upgrade file. Its name will appear in the Upgrade File field.
5. Click the Start Upgrade button to commence the firmware upgrade.
Note:
The BLW-54PM is unavailable during the upgrade process, and must restart when the upgrade
is completed. Any connections to or through the BLW-54PM will be lost.
65
Page 66
Chapter 6
Specifications
6.1 Multi-Function BLW-54PM
Model BLW-54PM
Dimensions 39mm(W) * 100mm(D) * 160mm(H)
Operating Temperature
0° C to 40° C
Storage Temperature
-10° C to 70° C
Network Protocol: TCP/IP
Network Interface: 5 Ethernet:
4 * 10/100BaseT (RJ45) LAN connection
1 * 10/100BaseT (RJ45) for WAN
LEDs 12
Power Adapter 12 V DC External
6.2 Wireless Interface
Standards IEEE802.11g WLAN, JEIDA 4.2, roaming support
Frequency 2.4 to 2.4835GHz (Industrial Scientific Medical Band )
Channels Maximum 14 Channels, depending on regulatory authorities
Modulation DSSS BPSK/QPSK/CCK, OFDM/CCK
Data Rate Up to 54 Mbps
Coverage Area Indoors : 15m @54Mbps, 120m @6Mbps or lower
Outdoors : 40m @54Mbps, 300m @6Mbps or lower
WEP 64Bit, 128Bit
Output Power 13dBm (typical)
Receiver Sensitivity -80dBm Min.
66
Page 67
6.3 Safety Statement
CE Statements
This device has bee tested and found to comply with the requirements set up
in the council directive on the approximation of the law of member states
relating to EMC Directive 89/336/EEC, Low Voltage Directive 73/23/EEC and
R&TTE Directive 99/5/EC.
FCC Safety Statements
This device complies with Part 15 of the FCC rules. Operation is subject to the
following two conditions:
1. This device may not cause harmful interference.
2. This device must accept m\any interference received, including interference
that may cause undesired operation.
The radiated output power is far below the FCC Radio frequency exposure limits.
Nevertheless, this device should be used in such a manner that the potential for
human contact during normal operation is minimized.
Warning: Change or modifications made to this equipment not expressly
approved by the manufacturer. May void the FCC authorization to operate this
equipment.
Important
This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential installation.
This equipment generates uses and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful
interference to radio communication. However, there is no guarantee that interference
will not occur in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the interference by one
or more of the following measures:
- Reorient or relocate the receiving antenna.
- Increase the separation between the equipment and receiver.
- Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
- Consult the dealer or an experienced radio/TV technician for help.
67
Loading...