3Com 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall... User Manual Download Page 71

Page: 71 / 146

Firewall

Figure 55

High Level Firewall Protection Screen

If you select high level of protection, you will need to configure additional
parameters for the firewall.

■

Fragmentation half-open wait - Configures the number of seconds
that a packet state structure remains active. When the timeout value
expires, the Router drops the un-assembled packet, freeing that
structure for use by another packet.

■

TCP SYN wait - Defines how long the software will wait for a TCP
session to synchronize before dropping the session.

■

TCP FIN wait - Specifies how long a TCP session will be maintained
after the firewall detects a FIN packet.

■

TCP connection idle timeout - The length of time for which a TCP
session will be managed if there is no activity.

■

UDP session idle timeout - The length of time for which a UDP session
will be managed if there is no activity.

■

H.323 data channel idle timeout - The length of time for which an
H.323 session will be managed if there is no activity.

Summary of Contents for 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall...

Page 1: ...http www 3Com com Part No 10015091 Rev AA Published March 2006 OfficeConnect ADSL Wireless 54 Mbps 11g Firewall Router User Guide WL 552 3CRWDR101A 75 3CRWDR101B 75 ...

Page 2: ...r documentation contained in or delivered to you in conjunction with this User Guide Unless otherwise indicated 3Com registered trademarks are registered in the United States and may or may not be registered in other countries 3Com and the 3Com logo are registered trademarks of 3Com Corporation Intel and Pentium are registered trademarks of Intel Corporation Microsoft MS DOS Windows and Windows NT...

Page 3: ... Minimum System and Component Requirements 14 Physical Features 14 2 INSTALLING THE ROUTER Introduction 17 Safety Information 17 Positioning the Router 17 Using the Rubber Feet 18 Wall Mounting 18 Powering Up the Router 19 Connecting the Router 19 3 SETTING UP YOUR COMPUTERS Obtaining an IP Address Automatically 23 Windows 2000 23 Windows XP 25 Windows 98 ME 25 Macintosh 25 Disabling PPPoE and PPT...

Page 4: ...ummary 38 5 CONFIGURING THE ROUTER Navigating Through the Router Configuration screens 39 Main Menu 39 Welcome Screen 39 Status 39 LAN Settings 40 LAN Settings 40 DHCP Clients List 41 Wireless Settings 43 Configuration 44 Encryption 45 Connection Control 50 Client List 51 WDS Settings 51 Advance 52 Profile 53 Internet Settings 54 ATM PVC 54 DNS 65 Hostname Clone MAC address 66 Firewall 67 SPI 67 S...

Page 5: ...RIP 87 DDNS 88 SNMP 90 Syslog 91 Proxy ARP 92 System Tools 93 Restart Router 93 Configuration 93 Upgrade 94 Time Zone 95 Ping 96 Traceroute 97 DNS Lookup 98 Status and Logs 99 Status 99 ADSL Status 99 ATM PVC Status 100 Routing Table 100 Logs 101 Support Feedback 102 Support 102 Feedback 102 6 TROUBLESHOOTING Basic Connection Checks 103 Browsing to the Router Configuration Screens 103 ...

Page 6: ...s 109 How does a Device Obtain an IP Address and Subnet Mask 111 DHCP Addressing 111 Static Addressing 111 Auto IP Addressing 111 B TECHNICAL SPECIFICATIONS OfficeConnect ADSL Wireless 54Mbps 11g Firewall Router 113 Standards 114 C SAFETY INFORMATION D END USER SOFTWARE LICENSE AGREEMENT E OBTAINING SUPPORT FOR YOUR PRODUCT Register Your Product 123 Purchase Value Added Services 123 Troubleshoot O...

Page 7: ...GLOSSARY REGULATORY NOTICES INDEX ...

Page 8: ......

Page 9: ...ipped with the 3Com OfficeConnect ADSL Wireless 54 Mbps 11g Firewall Router and contains information that differs from the information in this guide follow the information in the release note Most user guides and release notes are available in Adobe Acrobat Reader Portable Document Format PDF on the 3Com World Wide Web site http www 3Com com Naming Convention Throughout this guide the 3Com OfficeC...

Page 10: ...njury Table 2 Text Conventions Convention Description The words enter and type When you see the word enter in this guide you must type something and then press Return or Enter Do not press Return or Enter when an instruction simply says type Keyboard key names If you must press two or more keys simultaneously the key names are linked with a plus sign Example Press Ctrl Alt Del Words in italics Ita...

Page 11: ...title Document part number on the title page Page number if appropriate Example 3Com OfficeConnect ADSL Wireless 54Mbps 11g Firewall Router User Guide Part Number 10015091 Rev AA Page 24 Do not use this e mail address for technical support questions For information about contacting Technical Support please refer to Appendix C Related Documentation In addition to this guide each Router document set...

Page 12: ...10 ABOUT THIS GUIDE ...

Page 13: ... Router is designed to provide a cost effective means of sharing a single broadband Internet connection amongst several wired and wireless computers The Router also provides protection in the form of an electronic firewall preventing anyone outside of your network from seeing your files or damaging your computers The Router can also prevent your users from accessing Web sites which you find unsuit...

Page 14: ... you use the Router in your network Figure 2 it becomes your connection to the Internet Connections can be made directly to the Router or to an OfficeConnect Switch or Hub expanding the number of computers you can have in your network Figure 2 Example Network Using a Firewall Router ...

Page 15: ...twork address settings DHCP Acts as a Virtual server to enable remote access to Web FTP and other services on your network Security Firewall protection against Internet hacker attacks and encryption to protect wireless network traffic Package Contents The Router kit includes the following items One OfficeConnect ADSL Wireless 54Mbps 11g Firewall Router One power adapter for use with the Router Fou...

Page 16: ...s NIC An active ADSL subscription and connection A Web browser that supports JavaScript such as Netscape 4 7 or higher Internet Explorer 5 0 or higher or Mozilla 1 2 1 or higher Physical Features The front panel of the Router contains a series of indicator lights LEDs that help describe the state of various networking and connection operations Figure 3 Router Front Panel 1 Alert LED Orange Fast fl...

Page 17: ...king is enabled If the LED is flashing the link is OK and data is being transmitted or received If the LED is off the Wireless LAN has been disabled in the Router or there is a problem Refer to Chapter 6 Troubleshooting 6 LAN Status LEDs Green If the LED is on the link between the port and the next piece of network equipment is OK If the LED is flashing the link is OK and data is being transmitted...

Page 18: ...r is powered on the power adapter is working properly 10 Power Adapter Socket Only use the power adapter that is supplied with this Router Do not use any other adapter 11 Reset Button If you want to reset your Router to factory default settings and cannot access the web management interface for example due to a lost password then you may use this button Refer to Forgotten Password and Reset to Fac...

Page 19: ...lire attentivement la section Consignes importantes de sécurité avant de mettre en route Positioning the Router You should place the Router in a location that is conveniently located for connection to the telephone socket is centrally located to the wireless computers that will connect to the Router A suitable location might be on top of a high shelf or similar furniture to optimize wireless conne...

Page 20: ...Only stick the feet to the marked areas at each corner of the underside of your Router Wall Mounting There are two slots on the underside of the Router that can be used for wall mounting When wall mounting the unit ensure that it is within reach of the power outlet You will need two suitable screws to wall mount the unit To do this 1 Ensure that the wall you use is smooth flat dry and sturdy and m...

Page 21: ...g the Router 1 Run the provided telephone cable from the wall jack providing ADSL service to the ADSL port on your Router When inserting an ADSL RJ 11 plug be sure the tab on the plug clicks into position to ensure that it is properly seated If you are using splitterless ADSL service add low pass filters between the ADSL wall jack and your telephones These filters pass voice signals through but fi...

Page 22: ... provider will attach the outside ADSL line directly to your phone system In this case you can connect your phones and computer directly to the incoming ADSL line but you will have to add low pass filters to your phones as shown below Figure 7 Figure 6 Installing with a splitter Voice Data Residential Connection Point NID Plain Old Telephone System POTS or Ethernet hub or switch Splitter Router ...

Page 23: ...ration from a computer that is directly connected to one of the LAN ports If you configure the Router from a wireless computer note that you may lose contact with the Router if you change the wireless configuration To communicate wirelessly with your Router your wireless NIC should be set as follows Encryption none SSID 3Com Channel 11 Plain Old Telephone System POTS Filter or Ethernet hub or swit...

Page 24: ...22 CHAPTER 2 INSTALLING THE ROUTER ...

Page 25: ...is follow the instructions in this chapter Obtaining an IP Address Automatically Windows 2000 If you are using a Windows 2000 based computer use the following procedure to change your TCP IP settings 1 From the Windows Start Menu select Settings Control Panel 2 Double click on Network and Dial Up Connections 3 Double click on Local Area Connection 4 Click on Properties 5 A screen similar to Figure...

Page 26: ...l Area Properties Screen 6 Ensure that the options Obtain an IP address automatically and Obtain DNS server address automatically are both selected as shown in Figure 9 Click OK Figure 9 Internet Protocol TCP IP Properties Screen 7 Restart your computer ...

Page 27: ... 7 Restart your computer Windows 98 ME 1 From the Windows Start Menu select Settings Control Panel 2 Double click on Network Select the TCP IP item for your network card and click on Properties 3 In the TCP IP dialog select the IP Address tab and ensure that Obtain IP address automatically is selected Click OK Macintosh If you are using a Macintosh computer use the following procedure to change yo...

Page 28: ... similar to Figure 10 should be displayed 4 Select the Never dial a connection option Figure 10 Internet Properties Screen You may want to remove the PPPoE client software from your computer to free resources as it is not required for use with the Router Disabling Web Proxy Ensure that you do not have a web proxy enabled on your computer Go to the Control Panel and click on Internet Options Select...

Page 29: ...0 or higher or Mozilla 1 2 1 or higher To use the Setup Wizard 1 Ensure that you have at least one computer connected to the Router Refer to Chapter 2 for details on how to do this 2 Launch your Web browser on the computer 3 Enter the following URL in the location or address field of your browser http 192 168 1 1 Figure 11 The Login screen displays Figure 11 Web Browser Location Field Factory Defa...

Page 30: ...ogging in for the first time the Country Selection screen will appear Figure 13 Please select the country form the drop down menu and click Apply Figure 13 Country Selection Screen The Wizard will then launch automatically refer to Figure 16 You will be guided step by step through a basic setup procedure if the Router has been configured previously the Welcome screen will appear Figure 14 There ar...

Page 31: ...igure 15 Go to the Wizard tab to do a quick setup of the Router Figure 16 The password screen allows you to change the current password and set the login time limit to the Router s management interface Figure 15 Password Screen 1 To change the current password enter the password in the Current Password field 2 Enter the new password in the New Password field and enter it again in the Confirm New P...

Page 32: ...rs and not easily guessed by others To leave the current password unchanged leave the fields blank and click Next Figure 16 Change Password Screen Setup Wizard Time and Time Zone The Time and Time Zone screen allows you to set up the time for the Router Figure 17 Time and Time Zone Screen 1 If you want to automatically synchronize the Router with a public time server check the Enable box in the Us...

Page 33: ...n from your ISP ready Figure 18 Connection Type Screen Select a DSL mode from the following PPPoE PPP over Ethernet providing routing for multiple PCs see page 32 PPPoA PPP over ATM providing routing for multiple PCs see page 33 Bridge Mode for a single PC RFC1483 Bridged Mode for single PCs only see page 34 Routing Mode over ATM RFC1483 Routed Mode for multiple PCs see page 34 Dynamic Fixed IP in...

Page 34: ...ield 2 Enter your password in the Password field 3 Re type your password in the Retype Password field 4 Enter your VPI and VCI information in the VPI VCI fields 5 Select the encapsulation type LLC or VC MUX in the Encapsulation drop down menu This information should be provided to you by your ISP 6 Check all of your settings and then click Next The LAN Settings screen will then be displayed refer ...

Page 35: ... Enter your password in the Password field 3 Re type your password in the Retype Password field 4 Enter your VPI and VCI information in the VPI VCI fields 5 Select the encapsulation type LLC or VC MUX in the Encapsulation drop down menu This information should be provided to you by your ISP 6 Check all of your settings and then click Next The LAN Settings screen will then be displayed refer to Fig...

Page 36: ...tion in the VPI VCI fields 2 Select the encapsulation type LLC or VC MUX in the Encapsulation drop down menu This information should be provided to you by your ISP 3 Check all of your settings and then click Next The LAN Settings screen will then be displayed refer to Figure 24 Routing Mode over ATM To set up the Router for use with an RFC1483 routed connection use the following procedure Figure 2...

Page 37: ...ou by your ISP 7 Check all of your settings and then click Next The LAN Settings screen will then be displayed refer to Figure 24 Dynamic Fixed IP in 1483 Bridge Mode For Multiple PCs For bridge mode to work you need to assign an IP address to the Router You can either configure the Router to obtain an IP address automatically from a DHCP server or assign a fixed or static IP address to it Figure ...

Page 38: ... all of your settings and then click Next The LAN Settings screen will then be displayed refer to Figure 24 Setup Wizard LAN Settings The LAN Settings screen allows you to set the default IP address and DHCP client IP range for the Router Figure 24 The LAN Settings Screen 1 To change the Router s default IP address enter the new IP address in the IP Address field and then enter the subnet mask in ...

Page 39: ...radio channel used for the wireless connection Figure 25 Wireless Settings Screen 1 Select the channel you want to use from the Channel drop down menu 2 Specify the SSID to be used by your Wireless Network in the SSID field If there are other wireless networks in your area you should give your wireless network a unique name ...

Page 40: ...summary will appear Verify the configuration information of the Router and then click Apply to save your settings 3Com recommends that you print out this page for your records Figure 26 Configuration Summary Screen Your Router is now configured and ready for use See Chapter 5 for a detailed description of the Router configuration ...

Page 41: ...default IP is http 192 168 1 1 However if you changed the Router LAN IP address during initial configuration use the new IP address instead Enter your password to login to the management interface The default password is admin Main Menu The main menu is located on the left side as shown in Figure 27 When you click on an item from the main menu the corresponding screen will then appear in the cente...

Page 42: ...2 168 1 1 Change the Subnet Mask The default setting is 255 255 255 0 Enable Disable the DHCP Server Function The default is ON Enabled Specify the Starting and Ending IP Pool address The default is Starting 2 Ending 254 Specify the IP address Lease Time The default is Half day Specify a local Domain Name The default is NONE Specify the IP address of 3Com NBX call processor The Router will also pr...

Page 43: ...or each computer 5 Specify the Local Domain Name for your network this step is optional 6 Enter the IP address of the NBX Call Processor in the 3Com NBX Call Processor field this step is optional 7 Check all of your settings and then click Apply DHCP Clients List The DHCP Clients List provides details on the devices that have received IP addresses from the Router The list is only created when the ...

Page 44: ...ed to the Router by wired or wireless connection Check the Fix checkbox to permanently fix the IP address Click Release to release the displayed IP address Click New to allocate an IP address to a MAC address refer to Figure 30 Enter the required details and click Apply to save your settings Figure 30 Fixed Mapping Clients List Screen The DHCP server will give out addresses to both wired and wirel...

Page 45: ...You can enable or disable the wireless connection for your LAN When disabled no wireless PCs can gain access to either the Internet or other PCs on your wired or wireless LAN through this Router Figure 31 Wireless Settings Screen There are seven tabs available Configuration Encryption Connection Control Client List WDS Advance Profile ...

Page 46: ...our wireless network a unique name 4 Enable or disable SSID Broadcast A feature of many wireless network adapters is that a computer s SSID can be set to ANY which means it looks randomly for any existing wireless network The available networks are then displayed in a site survey and your computer can select a network By clicking Disable you can block this random search and set the computer s SSID...

Page 47: ...u want to use from the drop down menu and click Apply There are five selections Disabled see page 45 64 bit WEP see page 46 128 bit WEP see page 47 WPA PSK no server see page 48 WPA with RADIUS Server see page 49 Disabled In this mode wireless transmissions will not be encrypted and will be visible to everyone However when setting up or debugging wireless networks it is often useful to use this se...

Page 48: ...WEP key manually enter the WEP key as 5 pairs of hex digits 0 9 A F Or you can generate the 64 bit WEP key automatically enter a memorable passphrase in the Passphrase box and then click Generate to generate the hex keys from the passphrase For 64 bit WEP you can enter up to four keys in the fields Key 1 to Key 4 The radio button on the left hand side selects the key that is used in transmitting d...

Page 49: ...reen To enable 128 bit WEP 1 You can enter the 128 bit WEP key manually enter your WEP key as 13 pairs of hex digits 0 9 A F Or you can generate the 128 bit WEP key automatically enter a memorable passphrase in the Passphrase box and then click Generate to generate the hex keys from the passphrase The WEP keys on each device on the wireless network must be identical In 128 bit WEP mode only one WE...

Page 50: ...and Mixed mode 3 Select Encryption technique from the drop down menu four options are available TKIP AES Auto for WPA AES for WPA2 and AES for both WPA and WPA2 4 Enter the pre shared key in the Pre shared Key PSK field The pre shared key is a password in the form of a word phrase or series of letters and numbers The key must be between 8 and 63 characters long and can include spaces and symbols E...

Page 51: ...ted WPA WPA2 and Mixed mode 3 Select Encryption technique from the drop down menu four options are available TKIP AES Auto for WPA AES for WPA2 and AES for both WPA and WPA2 4 Enter the IP address of the RADIUS server on your network into the RADIUS Server field 5 Enter the port number that the RADIUS server is operating on in the RADIUS Port field 6 Enter the key for the RADIUS server in the RADI...

Page 52: ...registered MAC address field if you click Allow this means only the MAC addresses registered here in the list will be allowed to access the Router via wireless link if you click Deny this means the registered MAC addresses will not be able to access the Router via wireless link Use the MAC Address Filtering List to quickly copy the MAC addresses of the current wireless clients into the list table ...

Page 53: ...DS Settings The Router supports WDS Wireless Distribution System WDS enables one or more Access Points to rebroadcast received signals to extend range and reach though this can affect the overall throughput of data Figure 40 Wireless WDS Settings Screen 1 Check the Enable WDS Function checkbox 2 To refresh the list of available access points click Rescan Wireless Networking ...

Page 54: ...n Enter the MAC address es of one or more access points in the AP MAC Address table and click Apply Advance The Advance screen allows you to configure detailed settings for your wireless connection Figure 42 Wireless Advanced Setting screen There are six parameters that you can configure Beacon Interval this represents the amount of time between beacon transmissions ...

Page 55: ...equest to Send this parameter controls what size data packet the low level RF protocol issues to an RTS packet CTS Protection Mode CTS stands for Clear to Send CTS Protection Mode boosts the Router s ability to intercept 802 11b 802 11g transmissions Conversely CTS Protection Mode decreases performance Leave this feature disabled unless you encounter severe communication difficulties between the R...

Page 56: ... that s been configured using the Wizard in the initial setup If you want to change that information or set up other connection click Edit There are six options available for the DSL connection mode PPPoE PPP over Ethernet providing routing for multiple PCs see page 55 PPPoA PPP over ATM providing routing for multiple PCs see page 57 Bridge Mode RFC1483 Bridged Mode for single PCs only see page 59...

Page 57: ... password assigned to you by your ISP in the Password field Re enter your password in the Confirm Password field 4 Select the connection type from the Connect Type drop down menu Always Connected means that Internet connection to your ISP is always on Auto Triggered by Traffic means your Router will automatically connect to your ISP every time a PC needs to access the Internet Manual Start in Disc...

Page 58: ...d to you by your ISP 11 Select the type of Quality of Service CBR UBR or VBR in the QoS field CBR constant bit rate the CBR service class is intended for real time applications for example those requiring tightly constrained delay and delay variation such as voice and video applications The consistent availability of a fixed quantity of bandwidth is considered appropriate for CBR service VBR varia...

Page 59: ...elect Yes if your ISP assigns your IP address dynamically and proceed to next step If your ISP has assigned you a fixed or static IP address select No in the IP assigned by ISP field Then enter the IP address and Subnet Mask information provided by your ISP into the IP address and Subnet Mask fields 3 Enter the user name assigned to you by your ISP in the Username field And enter the password assi...

Page 60: ...leave it at the default value 7 The Router supports the IP Control Protocol IPCP Subnet Mask Support feature check the IPCP subnet checkbox to enable it 8 To use the IPCP Subnet Mask Support for the DHCP clients check the IPCP Subnet Populate DHCP Server checkbox 9 Enter the VPI and VCI parameters provided to you by your ISP in the VPI and VCI fields You can click Auto Search to automatically find...

Page 61: ...the Internet to specific computers this means that traffic to from these computers only will be forwarded In this case Bridge Mode is used to connect to the ISP The ISP will generally give one Internet account and limit only one computer to access the Internet Check with your ISP to determine if this mode is used for your DSL connection To configure the settings correctly you should obtain the inf...

Page 62: ... networks VBR is subdivided into a real time RT class and non real time NRT class VBR RT is used for connections in which there is a fixed timing relationship between samples VBR NRT is used for connections in which there is no fixed timing relationship between samples but that still need a guaranteed QoS Compare with ABR CBR and UBR UBR unspecified bit rate the UBR service class is intended for d...

Page 63: ...ress Subnet Mask and Default Gateway fields 3 Check the DNS Automatic from ISP checkbox if your ISP automatically configure DNS However if you need to configure DNS manually enter the IP address in the DNS Address field If your ISP uses a secondary DNS enter the IP address in the Secondary DNS Address field 4 Enter the host name in the Host Name filed 5 If your ISP uses DHCP to automatically assig...

Page 64: ...networks VBR is subdivided into a real time RT class and non real time NRT class VBR RT is used for connections in which there is a fixed timing relationship between samples VBR NRT is used for connections in which there is no fixed timing relationship between samples but that still need a guaranteed QoS Compare with ABR CBR and UBR UBR unspecified bit rate the UBR service class is intended for de...

Page 65: ... Default Gateway fields 3 Check the DNS Automatic from ISP checkbox if your ISP automatically configures DNS However if you need to configure DNS manually enter the IP address in the DNS Address field If your ISP uses a secondary DNS enter the IP address in the Secondary DNS Address field 4 Enter the host name in the Host Name field 5 If your ISP uses DHCP to automatically assign IP addresses chec...

Page 66: ... NRT class VBR RT is used for connections in which there is a fixed timing relationship between samples VBR NRT is used for connections in which there is no fixed timing relationship between samples but that still need a guaranteed QoS Compare with ABR CBR and UBR UBR unspecified bit rate the UBR service class is intended for delay tolerant or non real time applications for example those which do ...

Page 67: ...P for information on this screen Figure 51 DNS Screen If the DNS information is automatically provided by your ISP every time you connect to it check the Automatic from ISP checkbox If your ISP provided you with specific DNS addresses to use enter them into the appropriate fields on this screen and click Apply Many ISPs do not require you to enter this information into the Router If you are using ...

Page 68: ...ress Screen 1 Some ISPs require a host name If your ISP has this requirement enter the host name in the Host Name field 2 Three different ways to configure the WAN MAC Address If your ISP requires an assigned MAC address enter the values in the WAN MAC address field or If the computer you are now using is the one that was previously connected directly to the cable modem click Clone or To reset the...

Page 69: ...affic at the WAN port This feature is called a stateful packet inspection because it examines the contents of the packet to determine the state of the communications i e it ensures that the stated destination computer has previously requested the current communication This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources th...

Page 70: ...For high level of firewall protection refer to Figure 55 Figure 54 Low and Medium Level Firewall Protection Screen When abnormal network activity occurs an alerting email will be sent out to you Enter the following information to receive the email Your E mail Address SMTP Server Address User name Password ...

Page 71: ...e by another packet TCP SYN wait Defines how long the software will wait for a TCP session to synchronize before dropping the session TCP FIN wait Specifies how long a TCP session will be maintained after the firewall detects a FIN packet TCP connection idle timeout The length of time for which a TCP session will be managed if there is no activity UDP session idle timeout The length of time for wh...

Page 72: ...W Minimum number of allowed incomplete TCP UDP sessions per minute Maximum incomplete TCP UDP sessions number from same host Maximum number of incomplete TCP UDP sessions from the same host Incomplete TCP UDP sessions detect sensitive time period Length of time before an incomplete TCP UDP session is detected as incomplete Maximum half open fragmentation packet number from same host Maximum number...

Page 73: ...nsferred to the row that you specified Click Apply to save the setting for that application If your application is not listed you will need to check with the application vendor to determine which ports need to be configured You can manually enter the port information into the Router To manually enter the port information 1 Specify the trigger port the one used by the application when it is initial...

Page 74: ... you need The maximum number of virtual servers that can be configured is 20 Figure 57 Virtual Servers Screen A list of popular servers has been included to choose from Select the server from the Popular servers drop down menu Then click Add your selection will be added to the table If the server that you want to use is not listed in the drop down menu you can manually add the virtual server to th...

Page 75: ...ideo conferencing application Figure 58 DMZ Screen Use this feature on a temporary basis The computer in the DMZ is not protected from hacker attacks To put a computer in the DMZ 1 Check the Enable 1 to 1 NAT checkbox 2 Enter the last digits of the LAN IP address in the Client PC IP Address field Enter the IP address if known that will be accessing the DMZ PC into the Public IP Address field so th...

Page 76: ... define the rules in the PC Privileges screen see page 75 Figure 59 Schedule Rule Screen 1 Click Add Rule to add a schedule rule a screen similar to Figure 60 will appear Figure 60 Add Schedule Rule Screen 2 Enter a name and comment for the schedule rule in the Name and Comment fields 3 Specify the schedule rules for the required days and times note that all times should be in 24 hour format 4 Cli...

Page 77: ... or multiple computers You can define the traffic type permitted or not permitted to the Internet Figure 61 PC Privileges Screen To edit or delete specific existing filtering rules click on Edit or Delete for the appropriate filtering rule To configure a new filtering rule 1 Check the Enable Filtering Function checkbox 2 Click Add PC a screen similar to Figure 62 will appear Figure 62 PC Privilege...

Page 78: ...een will not be filtered out 5 Select the services to be blocked A list of popular services is given on this screen to block a particular service check the appropriate Blocking checkbox If the service to be restricted is not listed here you can enter a custom range of ports at the bottom of the screen under User Defined Blocked Ports 6 If you want the restriction to apply only at certain times sel...

Page 79: ...ilter Screen 1 Check the Enable URL Filtering Function checkbox 2 Enter the URL address or keywords in the URL Keyword field 3 Select Denied or Allowed from the Mode drop down menu To complete this configuration you will need to create or modify the filtering rule in the PC Privileges screen see page 75 From the PC Privileges Add PC screen Figure 62 if you check the two options Bypass URL Filter a...

Page 80: ... license Figure 64 Content Filter Screen To configure the Content Filter feature 1 Check the Enable Content Filtering Function checkbox 2 Select the server that you want to use from the Content Filter Server drop down menu If the server you want to use is not listed enter the server address manually 3 Define the time in the Server Timeout field the default value is 3000ms If the Content Filter Ser...

Page 81: ...ecific subject matter Content with a specific subject matter will not be filtered out if the Allow option is checked 6 Click Apply for the changes to take effect Server Control The Router can be configured to restrict access to the Internet email or other network services at specific days and times Restriction can be set for the servers You can define the traffic type permitted or not permitted to...

Page 82: ...ervices that will be allowed A list of popular services is given on this screen to unblock a particular service check the appropriate Allowed checkbox If the service to be allowed is not listed here you can enter a custom range of ports at the bottom of the screen under User Defined Service Ports 3 Select the time that the rule will be enforced from the Scheduling Rule drop down menu 4 Click Apply...

Page 83: ...e performance of critical network applications such as VoIP gaming and VPN This QoS function allows you to classify traffic of applications and provides them with differentiated services Diffserv Figure 67 QoS Settings Screen Define the minimum percentage of bandwidth for each type of traffic Traffic Mapping You can define up to 16 rules to classify traffic into Diffserv forwarding groups and outg...

Page 84: ...e see Figure 69 Figure 69 Add New Traffic Class Rule Screen Traffic Statistics This screen shows the WAN outbound traffic statistics of all the Diffserv forwarding groups in the last 12 hours This screen automatically updates every 5 minutes Figure 70 Traffic Statistics Screen ...

Page 85: ...AT Before you enable NAT Network Address Translation make sure you have changed the administrator password NAT is the method by which the Router shares the single IP address assigned by your ISP with the computers on your network This function should only be disabled by advanced users and if your ISP assigns you multiple IP addresses or you need NAT disabled for an advanced system configuration If...

Page 86: ...niversal Plug and Play compliant and want to take advantage of the Universal Plug and Play features you can enable this feature Simply check the Enable Universal Plug and Play checkbox Click Apply to save the change WAN Ping Blocking Computer hackers use what is known as Pinging to find potential victims on the Internet By pinging a specific IP address and receiving a response from the IP address ...

Page 87: ...uter s settings from anywhere on the Internet Four options are available If you do not want to use this feature select Disable Remote Administration Select Enable administration from a single Internet Host and enter the IP address to allow only one computer to use the remote administration This is more secure as only the specified IP address will be able to manage the Router Select Enable administ...

Page 88: ...reen shows a list of current static route entries For each entry the following information is displayed Index the index of the entry Network Address the network address of the route Subnet Mask the subnet mask of the route A network address of 0 0 0 0 and a subnet mask of 0 0 0 0 indicates the default route Gateway the router used to route data to the network specified by the network address After...

Page 89: ...fied routing data to other RIP enabled devices rather than full routing data 3 Select the Operation Mode Disabled RIP is not enabled for the WAN or LAN interface Enabled RIP is enabled for the WAN or LAN interface The router will transmit RIP update information to other RIP enabled devices Silent RIP is enabled however the Router only receives RIP update messages it will not transmit any messages ...

Page 90: ...the specified interface Password An unencrypted text password that needs to be set on all RIP enabled devices connected to this Router RIP information is not shared between devices whose passwords do not match 7 In the Authentication Code field enter the password that is required if the Password option has been selected 8 Click Apply DDNS The Router provides a list of dynamic DNS providers for you...

Page 91: ...ssword or key and static domain name from your DDNS provider DDNS is disabled by default Figure 74 Dynamic Domain Name Server DDNS Screen 1 Check Enable DDNS 2 Select the provider and then enter the necessary information provided by your DDNS provider 3 Click Apply ...

Page 92: ...mn enter the name of the SNMP communication channel Your SNMP management agent needs to be configured with this name so that it can communicate with your Router 2 In the Access column select Read to allow the management agent to collect data for example bandwidth usage from your Router Select Write to allow the management agent to change the configuration of your Router 3 Check the appropriate Val...

Page 93: ...NMP communication channel to which you want your Router to send status messages 3 Set the Version field to match the version of trap messaging that your SNMP management agent supports The Router supports V1 and V2c trap messaging Syslog Using third party syslog software this Syslog Server tool will automatically download the Router log to the specified server IP address Figure 76 Syslog Server Scr...

Page 94: ...ers ARP requests intended for another machine By faking its identity the Router accepts responsibility for routing packets to the real or intended destination This heightens the security for your network Figure 77 Proxy ARP Screen Enter the corresponding IP address in the IP Address From and IP Address To fields ...

Page 95: ... may be necessary to restart or reboot the Router Restarting the Router from this screen will not delete any of your configuration settings Click the Restart the Router button to restart the Router Figure 78 Restart Router Screen Configuration Use this configuration screen to backup restore or reset the configuration details of the Router Figure 79 Configuration Screen ...

Page 96: ...nfiguration file using the Browse button and click Restore Reset to Factory Default Using this option will reset all of the settings in the Router to the factory default settings It is recommended that you backup your settings before you restore all of the defaults To restore the factory default settings click Reset Upgrade From time to time 3Com may release new versions of the Router s firmware F...

Page 97: ...ty log and control client filtering Select the time zone that you reside in If you reside in an area that observes Daylight Saving then check the checkbox for Enable Daylight Saving The system clock may not update immediately Allow at least 15 minutes for the Router to contact the time servers on the Internet and get a response You cannot set the clock yourself You can specify which NTP servers th...

Page 98: ... network is working properly Figure 82 Ping Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field and click Ping 2 Select from the Number of times to Ping drop down menu 3 The Router keeps a log of the ping test click Clear Log to delete the records ...

Page 99: ...a given server might be poor and can often help you figure out where exactly the problem is It also shows you how systems are connected to each other letting you see how your ISP connects to the Internet as well as how the target system is connected Figure 83 Traceroute Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field and click Traceroute 2 The Router keeps a log...

Page 100: ...ving an IP address i e 192 168 11 137 to a host name i e xxxcompany net Figure 84 DNS Lookup Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field and click Dns lookup 2 The Router keeps a log of the DNS lookup test click Clear Log to delete the records ...

Page 101: ...umbers for your Router s software and hardware and check the status of connections to WAN LAN and WLAN interfaces Status Figure 85 Status Screen This screen shows Router status and statistics ADSL Status Figure 86 ADSL Status Screen This screen shows ADSL modem status and statistics ...

Page 102: ...ATM PVC status and statistics Click Release to release the IP address from your ISP Click Renew to obtain the IP address from your ISP Routing Table This screen displays details for the default routing used by your Router and any routing created using Static Routing or RIP Figure 88 Routing Table Screen ...

Page 103: ...ctivities Figure 89 Logs Screen Click Help to view the help file Click Save to save the log to the hard disk as a text file When prompted for a location to save the file to specify a filename and location and then click OK Click Clear to clear the log note that all current entries will be erased Click Refresh to update the record ...

Page 104: ...in support and help and also provide feedback to 3Com Support Figure 90 Support Screen This screen shows support information Feedback To provide feedback to 3Com please click Provide Feedback and this will connect you to the 3Com Web site Figure 91 Feedback Screen This screen shows feedback information ...

Page 105: ...Router configuration screens check the following Confirm that the physical connection between your computer and the Router is OK and that the LAN Status LEDs on the Router and network adapter are illuminated and indicating the same speed 10Mbps or 100Mbps Some NICs do not have status LEDs in which case a diagnostic program may be available that can give you this information Ensure that you have co...

Page 106: ...nsure that you have entered the correct information into the Router configuration screens as required by your Internet Service Provider Use the Internet Settings screen to verify this Check that the PPPoE or PPPoA user name and password are correct Ensure that your computers are not configured to use a Web proxy On Windows computers this can be found under Control Panel Internet Options Connection...

Page 107: ...oc mode The Router contains an Access Point that is designed to operate in Infrastructure mode Ad Hoc mode is not supported by the Router If you have a wired and a wireless NIC in the same computer ensure that the wired NIC is disabled Check the status of the WLAN LED it should be lit if wireless is enabled and will flash when there is wireless activity If not lit go to Wireless Settings on page 4...

Page 108: ...e wireless Router If a wireless computer has not located the Router then try initiating a search manually if the client software supports this feature or manually set the channel on your wireless computer to correspond to the Router channel number Please refer to your wireless computer adapter documentation and vendor to do this Speed of connection The 802 11b and 802 11g standards will automatica...

Page 109: ...will need to reconfigure this computer to obtain an IP address automatically see Obtaining an IP Address Automatically on page 23 3 Restart the computer and re apply power to the Router 4 Using the Web browser on the computer enter the following URL in the location bar http 192 168 1 1 This will connect you to the Recovery utility in the Router 5 Follow the on screen instructions Enter the path an...

Page 110: ...bs switches and wireless access points connected to the Router 3Com wireless access points and hubs and switches provide a simple reliable means of expanding your network contact your supplier for more information or visit http www 3com com Does the Router support virtual private networks VPNs The Router supports VPN passthrough which allows VPN clients on the LAN to communicate with VPN hosts on ...

Page 111: ...vice over the network the Router must be correctly configured with the following IP information An IP address A Subnet Mask IP Addresses and Subnet Masks Each device on your network must have a unique IP address to operate correctly An IP address identifies the address of the device to which data is being sent and the address of the destination network IP addresses have the format n n n x where n ...

Page 112: ...ne 192 168 100 identifies the network on which the device resides Part two 8 identifies the device within the network This type of IP address operates on a subnet mask of 255 255 255 0 See Table 3 for an example about how a network with three computers and a Router might be configured Table 3 IP Addressing and Subnet Masking Type Two In larger networks where there are more devices the IP address o...

Page 113: ...cated once you disconnect from the network DHCP will work on any client Operating System such as Windows 95 Windows 98 Windows NT 4 0 Windows 2000 and Windows XP Also using DHCP means that the same IP address and subnet mask will never be duplicated for devices on the network DHCP is particularly useful for networks with large numbers of users on them Static Addressing You must enter an IP Address...

Page 114: ... a subnet mask of 255 255 0 0 If two devices allocate themselves the same address the conflict is detected and one of the devices allocates itself a new address Automatic IP addressing support was introduced by Microsoft in the Windows 98 operating system and is also supported in Windows 2000 and Windows XP ...

Page 115: ...54 Mbps automatic fallback to 48 36 24 18 12 or 6 Mbps Maximum channels 13 Range up to 304 8m 1000ft Sensitivity 6 12 18 24 36 48 Mbps 85 dBm 54 Mbps 66 dBm typical Modulation CCK BPSK QPSK OFDM Encryption 40 64 bit WEP 128 bit WEP WPA Maximum clients 128 O P Power 18dBm Standard IEEE 802 11b Direct Sequence Spread Spectrum DSSS Transmission rate 11Mbps automatic fallback to 5 5 2 or 1 Mbps Maximu...

Page 116: ... in Depth 133 mm 5 2 in Height 38 mm 1 5 in Weight Approximately 550 g 1 1 lbs Standards Functional ISO 8802 3 IEEE 802 3 IEEE 802 11b 802 11g Safety EN 60950 1 2001 UL 60950 1 IEC 60950 1 2001 EMC FCC Part15 B EN 55022 EN 55024 EN 61000 EN 301 489 1 ICES 003 Radio FCC Part 15 C RSS 210 EN 300 328 Environmental EN 60068 IEC 68 See Regulatory Notices for conditions of operation ...

Page 117: ...dows ME Windows 2000 Windows XP Mac OS 8 5 or higher Unix Ethernet Performance The Router complies to the IEEE 802 3i u and x specifications Cable Specifications The Router supports the following cable types and maximum lengths Category 3 Ethernet or Category 5 Fast Ethernet or Dual Speed Ethernet Twisted Pair shielded and unshielded cable types Maximum cable length of 100m 327 86 ft ...

Page 118: ...116 APPENDIX B TECHNICAL SPECIFICATIONS ...

Page 119: ...WARNING To ensure compliance with international safety standards only use the power adapter that is supplied with the unit WARNING The socket outlet must be near to the unit and easily accessible You can only remove power from the unit by disconnecting the power cord from the outlet WARNING This unit operates under SELV Safety Extra Low Voltage conditions according to IEC 60950 The conditions are ...

Page 120: ... Sie sich bei den zuständigen Stellen ob die Verwendung von Funkfrequenz in dem Bereich in dem der Bluetooth Access Point eingesetzt werden soll erlaubt ist VORSICHT Bei der Installation und beim Ausbau des Geräts ist mit höchster Vorsicht vorzugehen VORSICHT Aufgrund von internationalen Sicherheitsnormen darf das Gerät nur mit dem mitgelieferten Netzadapter verwendet werden VORSICHT Die Netzsteck...

Page 121: ... Nous vous demandons de lire attentivement les consignes suivantes de sécurité avant d installer ou de retirer l appareil AVERTISSEMENT La Router fournit et utilise de l énergie radioélectrique radio fréquence rf L utilisation de l énergie radioélectrique est interdite dans certains environnements L utilisateur devra se renseigner sur l autorisation de cette énergie dans la zone prévue AVERTISSEME...

Page 122: ...du moyeu Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des problèmes dans ce guide contacter votre fournisseur AVERTISSEMENT Débranchez l adaptateur électrique avant de retirer cet appareil AVERTISSEMENT Ports RJ 45 Il s agit de prises femelles blindées de données RJ 45 Vous ne pouvez pas les utiliser comme prise de téléphone Branchez...

Page 123: ...INEERING You may transfer the Software Documentation and the licenses granted herein to another party in the same country in which you obtained the Software and Documentation if the other party agrees in writing to accept and be bound by the terms and conditions of this Agreement If you transfer the Software and Documentation you must at the same time either transfer all copies of the Software and...

Page 124: ...of liability applicable to the Software are as stated on the Limited Warranty Card or in the product manual whether in paper or electronic form accompanying the Software Such warranties and limitations of liability are incorporated herein in their entirety by this reference GOVERNING LAW This Agreement shall be governed by the laws of the State of California U S A excluding its conflicts of laws p...

Page 125: ...vice Request If you have trouble registering your product please contact 3Com Global Services for assistance Purchase Value Added Services To enhance response times or extend warranty benefits contact 3Com or your authorized 3Com reseller Value added services like 3Com ExpressSM and GuardianSM can include 24x7 telephone technical support software upgrades onsite assistance or advance hardware repl...

Page 126: ...duct Support heading at www 3com com Software Upgrades are the feature releases that follow the software version included with your original product In order to access upgrades and related documentation you must first purchase a service contract from 3Com or your reseller Telephone Technical Support and Repair To enable telephone support and other service benefits you must first register your prod...

Page 127: ... directory of contact information posted on the 3Com Web site at http csoweb4 3com com contactus Country Telephone Number Country Telephone Number Asia Pacific Rim Telephone Technical Support and Repair Australia Hong Kong India Indonesia Japan Malaysia New Zealand Pakistan 1 800 678 515 800 933 486 61 2 9424 5179 or 000800 650 1111 001 803 61009 00531 616 439 or 03 3507 5984 1800 801 777 0800 446...

Page 128: ...00 133 266 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 57 1 592 5000 800 011 3266 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 Guadalupe Guatemala Guyana Haiti Honduras Jamaica Mexico Local Number Mexico Mexico Monserrat Nicaragua Panama Paraguay Peru Puerto Rico Saba Anquila St Kitts Neive...

Page 129: ...Contact Us 127 US and Canada Telephone Technical Support and Repair 1 800 876 3266 Country Telephone Number Country Telephone Number ...

Page 130: ...128 APPENDIX E OBTAINING SUPPORT FOR YOUR PRODUCT ...

Page 131: ...s Point An access point is a device through which wireless clients connect to other wireless clients and which acts as a bridge between wireless clients and a wired network such as Ethernet Wireless clients can be moved anywhere within the coverage area of the access point and still connect with each other If connected to an Ethernet network the access point monitors Ethernet traffic and forwards ...

Page 132: ...of Twisted Pair TP cabling defined by the EIA TIA 586 standard Category 5 can be used in Ethernet 10BASE T and Fast Ethernet networks 100BASE TX and can transmit data up to speeds of 100 Mbps Category 5 cabling is better to use for network cabling than Category 3 because it supports both Ethernet 10 Mbps and Fast Ethernet 100 Mbps speeds Channel Similar to any radio device the Wireless Cable DSL r...

Page 133: ...o levels of encryption 40 64 bit and 128 bit 128 bit is a more powerful level of encryption than 40 64 bit ESSID Extended Service Set Identifier The ESSID is a unique identifier for your wireless network You must have the same ESSID entered into the Router and each of it s wireless clients Ethernet A LAN specification developed jointly by Xerox Intel and Digital Equipment Corporation Ethernet netw...

Page 134: ... your Router see also Ad Hoc mode IP Internet Protocol IP is a Layer 3 network protocol that is the standard for sending data through a network IP is part of the TCP IP set of protocols that describe the routing of packets to addressed devices An IP address consists of 32 bits divided into two or three fields a network number and a host number or a network number a subnet number and a host number ...

Page 135: ...dress The NAT capability of the Router allows you to access the Internet from any computer on your home network without having to purchase more IP addresses from your ISP Network A network is a collection of computers and other computer equipment that is connected for the purpose of exchanging information or sharing resources Networks vary in size some are within a single room others span continen...

Page 136: ...s used to create IP address numbers used only within a particular network as opposed to valid IP address numbers recognized by the Internet which must assigned by InterNIC Subnets A network that is a component of a larger network Switch A device that interconnects several LANs to form a single logical LAN that comprises of several LAN segments Switches are similar to bridges in that they connect L...

Page 137: ... to extend range and reach though this can affect the overall throughput of data WECA Wireless Ethernet Compatibility Alliance An industry group formed to certify cross vendor interoperability and compatibility of 802 11b and 802 11g wireless networking products and to promote the standard for enterprise small business and home environments see also 802 11b 802 11g Wi Fi WEP Wired Equivalent Priva...

Page 138: ...WLAN is a group of computers and devices connected together by wireless in a relatively small area such as a house or office WPA Wi Fi Protected Access A dynamically changing encryption mechanism for wireless networking Encryption strength is 256 bit ...

Page 139: ... B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that in...

Page 140: ... successful communication To prevent radio interference to the licensed service this device is intended to be operated indoors and away from windows to provide maximum shielding Equipment or its transmit antenna that is installed outdoors is subject to licensing Pour empecher que cet appareil cause du brouillage au service faisant l objet d une licence il doit etre utilize a l interieur et devrait...

Page 141: ...tion declares that this RLAN device is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC Español Spanish Por medio de la presente 3Com Corporation declara que el RLAN device cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999 5 CE Ελληνική Greek ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ 3Com Corporation ΗΛΩΝΕΙ ΟΤ...

Page 142: ...Nederlands Dutch Hierbij verklaart 3Com Corporation dat het toestel RLAN device in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999 5 EG Malti Maltese Hawnhekk 3Com Corporation jiddikjara li dan RLAN device jikkonforma mal htigijiet essenzjali u ma provvedimenti ohrajn relevanti li hemm fid Dirrettiva 1999 5 EC Magyar Hungarian Alulírott 3Com Corporat...

Page 143: ...141 前項合法通信指依電信規定作業之無線電信低功率射頻電機須忍受合法通信或工業科學及醫療用電波輻射性電機設備之干擾 RTTE01 1 本機限在不干擾合法電台與不受被干擾保障條件下於室內使用 2 為減少電波干擾請妥適使用 ...

Page 144: ...142 ...

Page 145: ... icons About This Guide 8 text About This Guide 8 D DDNS 70 DHCP 87 DHCP Clients List 42 DHCP server 25 42 disabling 26 DMZ Screen 67 DNS 24 DNS Screen 55 DSL mode 29 Dynamic Domain Server DDNS Screen 70 Dynamic IP Address 34 Dynamic Fixed IP for Bridge Mode Screen 35 55 DYNDNS 70 E Editing DHCP Clients List Screen 42 Encryption Screen 44 Encryption disabling 45 F Firewall Screen 59 Forgotten Pass...

Page 146: ...ng Table Screen 59 S Schedule Rule Screen 65 Setup Wizard 27 SNMP Community Screen 71 SNMP Trap Screen 72 Special Applications Screen 60 Specifications technical 89 SSID 31 32 33 35 36 43 Static Addressing 87 Static Route Parameters Screen 57 Status Screen 28 40 Subnet Mask 85 T TCP IP 23 25 85 Technical specifications 89 standards 89 Time and Time Zone screen 76 TZO com 70 U Universal Plug and Pl...

Search results

Summary of Contents for 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall...

Reviews:

Related manuals for 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall...

Brands by name

Popular brands

3Com 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall..., User Manual

Search results

Summary of Contents for 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall...

Reviews:

Related manuals for 3CRWDR101A-75-US - OfficeConnect ADSL Wireless 54 Mbps 11g Firewall...

Brands by name

Popular brands