November 2005
Document Part Number: 6218-A2-ZB23-10
Zhone Technologies
@Zhone Way
7001 Oakport Street
Oakland, CA 94621
USA
510.777.7000
www.zhone.com
info@zhone.com
COPYRIGHT 2000–2005 Zhone Technologies, Inc. All rights reserved.
This publication is protected by copyright law. No part of this publication may be copied,
distributed, displayed, modified, transmitted, stored in a retrieval system, or translated without
express written permission from Zhone Technologies, Inc.
Acculink, ADSL/R, Bitstorm, Comsphere, DSL the Easy Way, ETC, Etherloop, FrameSaver,
GranDSLAM, GrandVIEW, Hotwire, the Hotwire logo, iMarc, Jetstream, MVL, NextEDGE,
Net to Net Technologies, OpenLane, Paradyne, the Paradyne logo, Performance Wizard,
ReachDSL, StormPort, and TruePut are registered trademarks of Zhone Technologies, Inc.
BAN, Connect to Success, GigMux, Hotwire Connected, JetFusion, JetVision, MALC,
MicroBurst, PacketSurfer, Quick Channel, Raptor, Reverse Gateway, SLMS, Spectrum
Manager, StormTracker, Z-Edge, Zhone, ZMS, and the Zhone logo are trademarks of Zhone
Technologies, Inc.
All other products names or service marks mentioned herein are the trademarks, trade names
and service names of their respective owners.
Zhone Technologies makes no representation or warranties with respect to the contents hereof
and specifically disclaims any implied warranties of merchantability, noninfringement, or
fitness for a particular purpose. Further, Zhone Technologies reserves the right to revise this
publication and to make changes from time to time in the contents hereof without obligation of
Zhone Technologies to notify any person of such revision or changes.
!
Important Safety Instructions
1. Read and follow all warning notices and instructions marked on the
product or included in the manual.
2. Slots and openings in the cabinet are provided for ventilation. To ensure
reliable operation of the product and to protect it from overheating, these
slots and openings must not be blocked or covered.
3. Do not allow anything to rest on the power cord and do not locate the
product where persons will walk on the power cord.
4. Do not attempt to service this product yourself, as opening or removing
covers may expose you to dangerous high voltage points or other risks.
Refer all servicing to qualified service personnel.
5. General purpose cables are used with this product for connection to the
network. Special cables, which may be required by the regulatory
inspection authority for the installation site, are the responsibility of the
customer. Use a UL Listed, CSA certified, minimum No. 24 AWG line
cord for connection to the Digital Subscriber Line (DSL) network.
6. When installed in the final configuration, the product must comply with
the applicable Safety Standards and regulatory requirements of the
country in which it is installed. If necessary, consult with the appropriate
regulatory agencies and inspection authorities to ensure compliance.
7. A rare phenomenon can create a voltage potential between the earth
grounds of two or more buildings. If products installed in separate
buildings are interconnected, the voltage potential may cause a hazardous
condition. Consult a qualified electrical consultant to determine whether
or not this phenomenon exists and, if necessary, implement corrective
action prior to interconnecting the products.
8. Input power to this product must be provided by one of the following: (1)
a UL Listed/CSA certified power source with a Class 2 or Limited Power
Source (LPS) output for use in North America, or (2) a certified
transformer, with a Safety Extra Low Voltage (SELV) output having a
maximum of 240 VA available, for use in the country of installation.
9. In addition, since the equipment is to be used with telecommunications
circuits, take the following precautions:
— Never install telephone wiring during a lightning storm.
— Never install telephone jacks in wet locations unless the jack is
specifically designed for wet locations.
— Never touch uninsulated telephone wires or terminals unless the
telephone line has been disconnected at the network interface.
— Use caution when installing or modifying telephone lines.
— Avoid using a telephone (other than a cordless type) during an
electrical storm. There may be a remote risk of electric shock from
lightning.
— Do not use the telephone to report a gas leak in the vicinity of the
leak.
6218-I2 Wireless Router User’s Guide3
CE Marking
When the product is marked with the CE mark on the equipment label, a
supporting Declaration of Conformity may be downloaded from the Zhone
World Wide Web site at www.zhone.com.
FCC Part 15 Declaration
An FCC Declaration of Conformity may be downloaded from the Zhone
World Wide Web site at www.zhone.com.
This device complies with Part 15 of the FCC Rules. Operation is subject to
the following two conditions: (1) this device may not cause harmful
interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
The authority to operate this equipment is conditioned by the requirement that
no modifications will be made to the equipment unless the changes or
modifications are expressly approved by the responsible party.
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are
designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or more
of the following measures:
nReorient or relocate the receiving antenna.
nIncrease the separation between the equipment and receiver.
nConnect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
nConsult the dealer or an experienced radio/TV technician for help.
Notice to Users of the United States Telephone Network
The following notice applies to versions of the modem that have been FCC
Part 68 approved.
This equipment complies with Part 68 of the FCC rules and the requirements
adopted by the Administrative Council for Terminal Attachment (ACTA). On
the bottom side of this equipment is a label that contains, among other
information, a product identifier in the format US:AAAEQ##TXXXX. If
requested, this number must be provided to the Telephone Company.
This equipment is intended to connect to the Public Switched Telephone
Network through a Universal Service Order Code (USOC) type RJ11C jack.
A plug and jack used to connect this equipment to the premises wiring and
telephone network must comply with the applicable FCC Part 68 rules and
requirements adopted by the ACTA. A compliant telephone cord and modular
46218-I2 Wireless Router User’s Guide
plug is provided with this product. It has been designed to be connected to a
compatible modular jack that is also compliant.
The Ringer Equivalence Number (or REN) is used to determine the number of
devices that may be connected to a telephone line. Excessive RENs on a
telephone line may result in the devices not ringing in response to an
incoming call. In most but not all areas, the sum of RENs should not exceed
five (5.0). To be certain of the number of devices that may be connected to a
line, as determined by the total RENs, contact the local Telephone Company.
The REN for this product is part of the product identifier that has the format
US:AAAEQ##TXXXX. The digits represented by ## are the REN without a
decimal point. For example, 03 represents a REN of 0.3.
If the modem causes harm to the telephone network, the Telephone Company
will notify you in advance that temporary discontinuance of service may be
required. But if advance notice is not practical, the Telephone Company will
notify the customer as soon as possible. Also, you will be advised of your
right to file a complaint with the FCC if you believe it is necessary.
The Telephone Company may make changes in its facilities, equipment,
operations or procedures that could affect the operation of the equipment. If
this happens, the Telephone Company will provide advance notice in order for
you to make necessary modifications to maintain uninterrupted service. If
trouble is experienced with the modem, refer to the repair and warranty
information in this document.
If the equipment is causing harm to the telephone network, the Telephone
Company may request that you disconnect the equipment until the problem is
resolved.
The user may make no repairs to the equipment.
Connection to party line service is subject to state tariffs. Contact the state
public utility commission, public service commission or corporation
commission for information.
If the site has specially wired alarm equipment connected to the telephone
line, ensure the installation of the modem does not disable the alarm
equipment. If you have questions about what will disable alarm equipment,
consult your Telephone Company or a qualified installer.
Notice to Users of the Canadian Telephone Network
NOTICE: This equipment meets the applicable Industry Canada Terminal
Equipment Technical Specifications. This is confirmed by the registration
number. The abbreviation IC before the registration number signifies that
registration was performed based on a Declaration of Conformity indicating
that Industry Canada technical specifications were met. It does not imply that
Industry Canada approved the equipment.
NOTICE: The Ringer Equivalence Number (REN) for this terminal
equipment is labeled on the equipment. The REN assigned to each terminal
equipment provides an indication of the maximum number of terminals
allowed to be connected to a telephone interface. The termination on an
interface may consist of any combination of devices subject only to the
6218-I2 Wireless Router User’s Guide5
requirement that the sum of the Ringer Equivalence Numbers of all the
devices does not exceed five.
If your equipment is in need of repair, contact your local sales representative,
service representative, or distributor directly.
!
CANADA - EMI NOTICE:
This Class B digital apparatus meets all requirements of the Canadian
interference-causing equipment regulations.
Cet appareil numérique de la classe B respecte toutes les exigences du
règlement sur le matérial brouilleur du Canada.
Japan Notices
This is a Class B product based on the standard of the Voluntary Control
Council for Interference from Information Technology Equipment
(VCCI). If this is used near a radio or television receiver in a domestic
environment, it may cause radio interference. Install and use the
equipment according to the instruction manual.
66218-I2 Wireless Router User’s Guide
CONTENTS
Document Purpose and Intended Audience ............................................................11
Complete documentation for Zhone products is available online at
www.zhone.com.
Contacting Global Service and Support
Contact Global Service and Support (GSS) if you have any questions about
this or other Zhone products. Before contacting GSS, make sure you have the
following information:
zZhone product you are using
zSystem configuration
zSoftware version running on the system
zDescription of the issue
Technical Support
If you require assistance with the installation or operation of your product, or
if you want to return a product for repair under warranty, contact GSS. The
contact information is as follows:
E-mail
Telephone (North America)877-ZHONE20
Telephone (International)510-777-7133
Internetwww.zhone.com/support
If you purchased the product from an authorized dealer, distributor, Value
Added Reseller (VAR), or third party, contact that supplier for technical
assistance and warranty support.
Service Requirements
If the product malfunctions, all repairs must be performed by the
manufacturer or a Zhone-authorized agent. It is the responsibility of users
requiring service to report the need for service to GSS.
This chapter provides basic instructions for connecting the router to a
computer or a LAN and to the Internet using DSL. The first part provides
instructions to set up the hardware, and the second part describes how to
prepare your PC for use with the router.
It is assumed that you have already subscribed to DSL service with your
Internet service provider (ISP).
Shut down your PC and any other equipment before connecting it to the
router. To connect your router:
1 Verify that the router’s power switch is in the Off (outward) position.
Verify that any PCs and other LAN devices you will attach (such as hubs
or switches) are turned off.
2 Use the provided modular phone cable to connect the LINE jack of the
router to your RJ11 wall jack.
3 Use the provided Ethernet cable to connect your computer to the router.
Attach one end of the Ethernet cable to one of the LAN ports on the back
of the router and connect the other end to the Ethernet port or Network
Interface Card (NIC) in your PC.
Connect any other PCs, hubs, and switches to the remaining LAN ports.
Either a crossover or a straight-through Ethernet cable can be used: the
router determines the type of signal required.
4 Connect the cylindrical power plug into the POWER connector on the
back of the device. Next:
— If you have a wall-mount adapter, plug the AC adapter into a wall
— If you have a table-top adapter, use the AC power cord to connect the
outlet or a power strip.
adapter to a wall outlet or power strip.
The supplied power adapter may look different than the one illustrated
here.
5 Turn on your PC and any other LAN devices, such as hubs or switches.
6 Turn on the router using its power switch.
7 Verify that the router's LEDs are illuminated as shown in Table 3.
Before you can access the router over the LAN you have to configure your
PC's TCP/IP address to be 192.168.1.x (where x is any number between 3 and
254), with a subnet mask of 255.255.255.0. Your router's default IP address is
192.168.1.1.
If you know the version of Windows that you use, go to the appropriate
section below to learn how to set the IP address of your PC. To determine the
version of Windows running on your PC, click on the Windows Start button,
then click on Run... in the Start menu. Type winver in the Open selection box
and click on OK.
1 In the Windows task bar, click on the Start button, and then click on
Control Panel.
2 Double-click on the Network Connections icon.
3 In the LAN or High-Speed Internet window, right-click on the icon
corresponding to your network interface card (NIC), and select
Properties. (Often this icon is labeled Local Area Connection). The Local
Area Connection dialog box displays with a list of currently installed
network items.
4 Ensure that the check box to the left of the item labeled Internet Protocol
1 In the Windows task bar, click on the Start button, point to Settings, and
then click on Control Panel.
2 Double-click on the Network and Dial-up Connections icon.
3 In the Network and Dial-up Connections window, right-click on the Local
Area Connection icon, and then select Properties.
The Local Area Connection Properties dialog box display a list of
currently installed network components. If the list includes Internet
Protocol (TCP/IP), the protocol has already been enabled; skip to Step 10.
4 If Internet Protocol (TCP/IP) does not appear as an installed component,
click on Install.
5 In the Select Network Component Type dialog box, select Protocol, and
then click on Add.
6 Select Internet Protocol (TCP/IP) in the Network Protocols list, and then
click on OK.
You may be prompted to install files from your Windows 2000
installation CD or other medium. Follow the instructions to install the
files.
Windows ME
7 If prompted, click on OK to restart your computer with the new settings.
8 After restarting your PC, double-click on the Network and Dial-up
Connections icon in the Control Panel.
9 In Network and Dial-up Connections window, right-click on the Local
Area Connection icon, and then select Properties.
10 In the Local Area Connection Properties dialog box, select Internet
Protocol (TCP/IP), and then click on Properties.
11 In the Internet Protocol (TCP/IP) Properties dialog box, click on the radio
button labeled Use the following IP address. Type an address between
192.168.1.3 and 192.168.1.254 in the IP Address field and 255.255.255.0
in the Subnet Mask field.
12 Click on OK twice to confirm and save your changes, and then close the
Control Panel.
1 In the Windows task bar, click on the Start button, point to Settings, and
then click on Control Panel.
2 Double-click on the Network and Dial-up Connections icon.
3 In the Network and Dial-up Connections window, right-click on the
The Network Properties dialog box displays a list of currently installed
network components. If the list includes Internet Protocol (TCP/IP), the
protocol has already been enabled; skip to Step 11.
4 If Internet Protocol (TCP/IP) does not appear as an installed component,
click on Add.
5 In the Select Network Component Type dialog box, select Protocol, and
then click on Add.
6 Select Microsoft in the Manufacturers box.
7 Select Internet Protocol (TCP/IP) in the Network Protocols list, and then
click on OK.
You may be prompted to install files from your Windows Me installation
CD or other media. Follow the instructions to install the files.
8 If prompted, click on OK to restart your computer with the new settings.
9 After restarting your PC, double-click on the Network and Dial-up
Connections icon in the Control Panel.
10 In Network and Dial-up Connections window, right-click on the Network
icon, and then select Properties.
11 In the Network Properties dialog box, select TCP/IP, and then click on
Properties.
12 In the TCP/IP Settings dialog box, click on the radio button labeled Use
the following IP address. Type an address between 192.168.1.3 and
192.168.1.254 in the IP Address field and 255.255.255.0 in the Subnet
Mask field.
13 Click on OK twice to confirm and save your changes, and then close the
Control Panel.
Windows 95 and Windows 98
1 In the Windows task bar, click on the Start button, point to Settings, and
then click on Control Panel.
2 Double-click on the Network icon.
The Network dialog box displays a list of currently installed network
components. If the list includes TCP/IP, the protocol has already been
enabled. Skip to step 9.
3 If TCP/IP does not appear as an installed component, click on Add. The
Select Network Component Type dialog box appears.
4 Select Protocol, and then click on Add.
The Select Network Protocol dialog box appears.
5 Click on Microsoft in the Manufacturers list box, and then click on TCP/
IP in the Network Protocols list box.
6 Click on OK to return to the Network dialog box, and then click on OK
You may be prompted to install files from your Windows 95/98
installation CD. Follow the instructions to install the files.
7 Click on OK to restart the PC and complete the TCP/IP installation.
8 After restarting your PC, open the Control Panel window, and then click
on the Network icon.
9 Select the network component labeled TCP/IP, and then click on
Properties.
If you have multiple TCP/IP listings, select the listing associated with
your network card or adapter.
10 In the TCP/IP Properties dialog box, click on the IP Address tab.
11 Click in the radio button labeled Use the following IP address. Type an
address between 192.168.1.3 and 192.168.1.254 in the IP Address field
and 255.255.255.0 in the Subnet Mask field.
12 Click on OK twice to confirm and save your changes. You will be
prompted to restart Windows. Click on Yes.
1 In the Windows NT task bar, click on the Start button, point to Settings,
and then click on Control Panel.
2 In the Control Panel window, double click on the Network icon.
3 In the Network dialog box, click on the Protocols tab.
The Protocols tab displays a list of currently installed network protocols.
If the list includes TCP/IP, the protocol has already been enabled. Skip to
Step 9.
4 If TCP/IP does not appear as an installed component, click on Add.
5 In the Select Network Protocol dialog box, select TCP/IP, and then click
on OK.
You may be prompted to install files from your Windows NT installation
CD or other medium. Follow the instructions to install the files.
After all files are installed, a window appears to inform you that a TCP/IP
service called DHCP can be set up to dynamically assign IP information.
6 Click on Yes to continue, and then click on OK, if prompted, to restart
your computer.
7 After restarting your PC, open the Control Panel window, and then
double-click on the Network icon.
8 In the Network dialog box, click on the Protocols tab.
9 In the Protocols tab, select TCP/IP, and then click on Properties.
10 In the Microsoft TCP/IP Properties dialog box, click on the radio button
labeled Use the following IP address. Type an address between
The ADSL Bit Error Rate (BER) test determines the quality of the ADSL
connection. The test is performed by transferring idle cells containing a
known pattern and comparing the received data with this known pattern to
check for any errors (Figure 18 and Figure 19).
Auto-connect will automatically detect the first usable PVC and automatically
detect PPPoE, PPPoA, and Bridge Protocol (with DHCP Server available). To
use auto-connect:
1 Select Quick Setup. The Quick Setup initial screen appears.
8 Enter the settings specified by your ISP and click on Next. The Device
Setup screen appears.
Figure 29: Device Setup
9 If desired, configure configure the DSL Router IP address and Subnet
Mask for the LAN interface to correspond to your LAN's IP Subnet. If
you want the DHCP server to automatically assign IP addresses, then
enable the DHCP server and enter the range of IP addresses that the
DHCP server can assign to your computers. Disable the DHCP server if
you would like to manually assign IP addresses.
If you have a second IP address and subnet mask for the LAN interface,
click on the checkbox to configure it.
10 Click on Next to continue. The WAN Setup Summary screen displays all
WAN settings that you have made. Check that the settings are correct
before clicking on the Save / Reboot button. Clicking on Save / Reboot
saves your settings and restarts your router.
If you want to add a new rule for the WAN interface, click on the Add button.
The ATM PVC Configuration screen appears. The ATM PVC Configuration
screen allows you to configure an ATM PVC identifier (VPI and VCI) and
select a service category.
Figure 32: ATM PVC Configuration Screen
Verify the following values with your ISP before you change them.
zVPI (Virtual Path Identifier) – The valid range is 0 to 255.
zVCI (Virtual Channel Identifier) – The valid range is 32 to 65535.
zService Category – Five classes of traffic defined are defined:
— UBR Without PCR (Unspecified Bit Rate without Peak Cell Rate)
— UBR With PCR (Unspecified Bit Rate with Peak Cell Rate) – UBR
service is suitable for applications that can tolerate variable delays
and some cell loss, such as data transfer, messaging, distribution, and
retrieval, and remote terminal applications such as telecommuting.
— CBR (Constant Bit Rate) – Used by applications that require a fixed
data rate that is continuously available during the connection time. It
is commonly used for uncompressed audio and video information
such as videoconferencing, interactive audio (telephony), and audio
and video distribution and retrieval.
— Non-Realtime VBR (Non-Real-time Variable Bit Rate) – Can be used
for data transfers that have critical response-time requirements such
as airline reservations, banking transactions, and process monitoring.
— Realtime VBR (Real-time Variable Bit Rate) – Used for
time-sensitive applications such as real-time video. Rt-VBR service
allows the network more flexibility than CBR.
1 Make sure that the settings on the WAN Setup - Summary screen match
the settings provided by your ISP. If all settings are correct, click on the
Save button to save these settings; if not, click on the Back button to make
any modifications. If you want to change any item after saving, click on
the Edit button to make any modifications.
Remove Function
Figure 35: WAN Setup Summary
2 Activate this WAN interface by clicking on the Finish button and further
configuring services over this interface. The router supports up to five
WAN connections.
If you want to delete a connection from the listed WAN setup, click in the
Remove check box next to the item, then click on the Remove button.
You can configure the DSL Router IP address and Subnet Mask for the LAN
interface to conform your LAN's IP Subnet.
The Save button only saves the LAN configuration data. The Save/Reboot
button saves the LAN configuration data and reboots the router to make the
new configuration effective.
You can configure the Virtual Server, Port Triggering, and DMZ Host when
NAT is enabled.
A virtual server allows you to direct incoming traffic from the WAN side to a
specific IP address on the LAN side. Click on the Add button to add a virtual
server.
The Port Triggering list screen appears after you save your selections. You
can delete an entry by clicking in the Remove column then clicking on the
Remove button.
Figure 44: Port Triggering List
DMZ Host
You can define the IP address of the DMZ Host on this screen. Enter the IP
address and click on Save/Apply.
Incoming filter filters the traffic from the WAN side to the LAN side. Click on
Add to add incoming filter settings.
Figure 48: IP Filtering – Incoming Filter Setup Page
Enter a filter name, information about the source address (from the WAN
side), and information about the destination address ( to the LAN side). Select
the protocol and WAN interface. Then click on Save/Apply to add the setting.
MAC filtering can forward or block traffic by MAC address. You can change
the policy or add settings to the MAC filtering table using the MAC Filtering
Setup screen.
Firewall
Figure 50: IP Filtering - MAC Filtering Setup
If you click on Change Policy, a confirmation dialog lets you verify your
change.
Figure 51: IP Filtering - MAC Filtering Policy Change Confirmation
If you want to add a setting to the MAC filtering table, enter the Source and
Destination MAC address, and select protocol type, frame direction, and
WAN interface. Then click on Save/Apply to save it.
If you want to specify the default gateway address, then uncheck the box as
seen below. Enter the default gateway address and, optionally, the WAN
interface you will use. Click on Save / Apply to save the settings.
If you add or change the default gateway address, you must reboot the router
to put the new default gateway IP address into effect.
Figure 58: Default Gateway Setup
Routing – Static Route
Use the Routing - Static Route screen to add a static route to the routing table.
Use the DNS Server screen to request automatic assignment of a DNS or to
specify a primary and secondary DNS.
Figure 62: DNS Setup
Dynamic DNS
Use the Dynamic DNS screen to alias a dynamic IP address to a static
hostname, allowing your router to be easily accessed from anywhere on the
Internet.
The following modulation methods are supported by the 6218 wireless router:
zG.dmt Enabled
zG.lite Enabled
zT1.413 Enabled
zADSL Enabled
zAnnex L Enabled
zADSL2+ Enabled.
Do not change this setting unless so directed by your ISP.
Phone Line Pair
The 6218 wireless router supports phone lines on pins 2 and 3 or pins 1 and 4
to connect your ADSL line. If your phone system uses pins 2 and 3, attach a
normal RJ11 cable to the router and select "Inner pair" on the screen; if your
phone system uses pins 1 and 4, attach the phone with the supplied RJ11 cable
and select "Outer pair" on the screen.
Do not change these settings unless so directed by your ISP.
DSL Advanced Settings
Do not change the DSL Advanced Settings unless so directed by your ISP. To
view the DSL Advanced Settings screen, click on the Advanced Settings
button on the DSL Settings screen (see Figure 65).
DSL Advanced Settings
Figure 66: DSL Advanced Settings
There are five test modes between the router and your ISP:
zNormal test: Puts the router in a test mode in which it only sends a
Normal signal.
zReverb test: Puts the router in a test mode in which it only sends a Reverb
signal.
zMedley test: Puts the router in a test mode in which it only sends a
zNo Retrain: In this mode the router will try to establish a connection as in
normal mode, but once the connection is up it will not retrain if the signal
is lost.
zL3: Puts the router into the L3 power state.
Select a test mode and click on Apply. Then click on Tone Selection.
To view the ADSL Tone Settings screen, click on the Tone Selection button of
the DSL Advanced Settings screen (see Figure 66).
The frequency band of ADSL is split up into 256 separate tones, each spaced
4.3125 kHz apart. With each tone carrying separate data, the technique
operates as if 256 separate modems were running in parallel. The tone range is
from 0 to 31 for upstream and from 32 to 255 for downstream.
Do not change these settings unless so directed by your ISP.
The Wireless screens let you configure the settings for wireless access,
security, and protocols.
The Wireless - Basic screen lets you enable or disable Wi-Fi capability in the
router. The default setting for wireless is enabled. From this screen you can
also hide the access point so others cannot see your ID on the network.
Wireless - Security
Figure 68: Wireless – Basic
The next screen is the Wireless - Security screen which allows you to select
the network authentication method and to enable or disable WEP encryption.
Note that depending on the network authentication that is selected, the screen
will change accordingly so additional fields can be configured for the specific
authentication method.
Network authentication methods include the following-
zOpen – Anyone can access the network. The default is a disabled WEP
encryption setting.
zShared – WEP encryption is enabled and encryption key strength of
64-bit or 128-bit needs to be selected. Click on Set Encryption Keys to
manually set the network encryption keys. Up to 4 different keys can be
set and you can come back to select which one to use at any time.
z802.1X – Requires mutual authentication between a client station and the
router by including a RADIUS-based authentication server. Information
about the RADIUS server such as its IP address, port and key must be
entered. WEP encryption is also enabled and the encryption strength must
also be selected.
zWPA (Wi-Fi Protected Access) – Usually used for the larger enterprise
environment, it uses a RADIUS server and TKIP (Temporal Key Integrity
Protocol) encryption (instead of WEP encryption, which is disabled).
TKIP uses 128-bit dynamic session keys (per user, per session, and per
packet keys).
zWPA-PSK (Wi-Fi Protected Access - Pre-Shared Key) – WPA for home
and SOHO environments using the same strong TKIP encryption,
per-packet key construction, and key management that WPA provides in
the enterprise environment. The main difference is that the password is
entered manually. A Group Re-Key Interval time is also required.
zWPA2 (Wi-Fi Protected Access 2) – Second generation of WPA, which
uses AES (Advanced Encryption Standard) instead of TKIP as its
encryption method. Network Re-Auth Interval is the time in which
another key needs to be dynamically issued.
home and SOHO environments, WPA2-PSK uses AES encryption and
requires you to enter a password and a re-key interval time.
zMixed WPA2 / WPA – During transitional times for upgrades in the
enterprise environment, this mixed authentication method allows
upgraded users and users not yet upgraded to access the network via the
router. RADIUS server information must be entered for WPA as well as a
group re-key interval time. Both TKIP and AES are used.
zMixed WPA2 / WPA-PSK – Useful during transitional times for upgrades
in the home or SOHO environment, a pre-shared key must be entered
along with the group re-key interval time. Both TKIP and AES are also
used.
The MAC filter screen allows you to manage MAC address filters. Add the
MAC addresses that you want to manage and then select the mode that you
want to use to manage them. You can disable this feature or you can allow or
deny access to the MAC addresses that you add to the list.
Wireless
Figure 70: Wireless – MAC Filter
The following screen appears when you want to add a MAC address to the
filter. Enter a MAC address in the form xx-xx-xx-xx-xx-xx where each xx is a
two-digit hexadecimal number (for example, 00-05-13-ba-c8-01), then click
on the Save / Apply button.
The Wireless - Bridge screen lets you determine whether the router acts as an
access point or a wireless bridge.
Figure 72: Wireless – Bridge
Wireless - Advanced
The Wireless - Advanced screen lets you configure advanced features of the
wireless LAN network:
zAP Isolation – If you select enable, then each of your wireless clients will
zBand – The default setting is 2.4GHz - 802.11g
zChannel – 802.11b and 802.11g use channels to limit interference from
zMulticast Rate – The rate at which a message is sent to a specified group
zBasic Rate – The set of data transfer rates that all the stations will be
zFragmentation Threshold – Used to fragment packets which help improve
not be able to communicate with each other.
other devices. If you are experiencing interference with another 2.4 Ghz
device such as a baby monitor, security alarm, or cordless phone, then
change the channel on your router.
of recipients.
capable of using to receive frames from a wireless medium.
performance in the presence of radio frequency (RF) interference.
zRTS Threshold (Request to Send Threshold) – Determines the packet size
of a transmission through the use of the router to help control traffic flow.
zDTIM Interval – Sets the Wake-up interval for clients in power-saving
zBeacon Interval – A packet of information that is sent from a connected
device to all other devices where it announces its availability and
readiness. A beacon interval is a period of time (sent with the beacon)
before sending the beacon again. The beacon interval may be adjusted in
milliseconds (ms).
zXpress Technology – A technology that utilizes standards based on
framebursting to achieve higher throughput. With Xpress Technology
enabled, aggregate throughput (the sum of the individual throughput
speeds of each client on the network) can improve by up to 25 percent in
802.11g only networks and up to 75 percent in mixed networks
comprising 802.11g and 802.11b equipment.
z54g Mode – 54g is a proprietary Wi-Fi technology that provides higher
speed, reach, and security.
z54g Protection – The 802.11g standards provide a protection method so
802.11g and 802.11b devices can co-exist in the same network without
"speaking" at the same time. Do not disable 54g Protection if there is a
possibility that a 802.11b device may need to use your wireless network.
In Auto Mode, the wireless device will use RTS/CTS (Request to Send /
Clear to Send) to improve 802.11g performance in mixed 802.11g/
802.11b networks. Turn protection off to maximize 802.11g throughput
under most conditions.
Wireless
zWMM (Wi-Fi Multimedia) – WMM provides QoS functionality for
Wi-Fi multimedia applications by prioritizing traffic demands from
different applications on the network.
The configuration of your router can be backed up to a file, and also can be
restored from a file. You can also restore the router to its factory default
configuration.
Backing Up Configuration Settings
To back up your settings, select Management -> Settings -> Backup Settings.
If the log is enabled, the system will log selected events: Emergency, Alert,
Critical, Error, Warning, Notice, Informational, and Debugging. All events
above or equal to the selected log levels will be logged (maintained in the
system log file) and displayed.
If the selected mode is Remote or Both, events will be sent to the specified IP
address and UDP port of a remote system log server. If the selected mode is
Local or Both, events will be recorded in the local memory.
Figure 86: System Log Configuration
Select the desired values and click on the "Save/Apply" button to configure
the system log options.
Simple Network Management Protocol (SNMP) allows a management
application to retrieve statistics and status from the SNMP agent in the router.
Use the SNMP screen to set up parameters for SNMP access.
Figure 87: SNMP Screen
Select the desired values and click on Save/Apply to configure the SNMP
options.
Use the Internet Time screen to specify whether the router uses Simple
Network Time Protocol (SNTP) to obtain the time of day from NTP servers
on the Internet.
To set up the router to obtain time from an NTP server:
1 Select “Automatically synchronize with Internet time servers”. The SNTP
fields appear.
Figure 88: Internet Time Screen
2 Select NTP servers.
3 Specify the time zone offset for your router’s location.
You can enable or disable some services of your router by LAN or WAN. If no
WAN connection is defined, only the LAN side can be configured.
Access Control – Services
Figure 89: Services Setup
Access Control – IP Addresses
Web access to the router can be limited when Access Control Mode is
enabled. The IP addresses of allowed hosts can be added using Access
Control -> IP Address.
To assign the IP address of the management station that is permitted to access
the local management services, enter the IP address in the box and click on the
Save/Apply button.
Figure 91: Access Control – IP Address Add Screen
Access Control – Passwords
Use Access Control -> Passwords to change a password. Select an account
and enter the current password and the new password. Then click on Save/
Apply.
Select Management -> Reboot Router to reboot the router using the web
interface. The router will save the current configuration and reboot itself using
the new configuration. The rebooting process takes about two minutes to
complete.