3Com 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router User Manual Download Page 87

Page: 87 / 146

System Tools

DoS Detect Criteria

In the

Total incomplete TCP/UDP sessions HIGH

text box, enter the

number of unestablished sessions that will cause the software to start
deleting half-open sessions. The default is 300.

In the

Total incomplete TCP/UDP sessions LOW

text box, enter the

number of unestablished sessions that must be reached before the
software stops deleting half-open sessions. The default is 250.

In the

Incomplete TCP/UDP sessions (per min) HIGH

text box, enter the

maximum number of incomplete TCP/UDP sessions allowed per minute.
The default is 250 sessions.

In the

Incomplete TCP/UDP sessions (per min) LOW

text box, enter the

minimum number of incomplete TCP/UDP sessions allowed per minute.
The default is 200 sessions.

In the

Maximum incomplete TCP/UDP sessions number from the same

host

text box, enter the maximum number of incomplete sessions

allowed from the same host. The default is 10 sessions.

In the

Incomplete TCP/UDP sessions detect sensitive time period

text box,

enter the length of time that must elapse before an incomplete TCP/UDP
session is detected as incomplete. The default is 300 msec.

In the

Maximum half-open fragmentation packet number from the same

host

text box, enter the maximum number of half-open fragmentation

packets allowed from the same host. The default is 30 packets.

In the

Half-open fragmentation detect sensitive time period

text box,

enter the length of time that must elapse before a half-open
fragmentation session is detected as half-open. The default is 10000
msec.

In the

Flooding cracker block time

text box, enter the length of time that

must elapse between detection of a flood attack and blocking the attack.
The default is 300 seconds.

Click

Apply

to save the settings.

System Tools

The main frame of the System Tools screen includes four administration
items:

Restart, Time Zone, Configuration,

and

Upgrade

(

Figure 66

Summary of Contents for 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router

Page 1: ...http www 3com com Part No DUA0554 TAAA02 Published November 2004 OfficeConnect Wireless 11g Cable DSL Router User Guide 3CRWE554G72T 3CRWE554G72TU ...

Page 2: ...tion contained in or delivered to you in conjunction with this User Guide Unless otherwise indicated 3Com registered trademarks are registered in the United States and may or may not be registered in other countries 3Com OfficeConnect and the 3Com logo are registered trademarks of 3Com Corporation Intel and Pentium are registered trademarks of Intel Corporation Microsoft MS DOS Windows and Windows...

Page 3: ...ontents 13 Minimum System and Component Requirements 14 Front Panel 14 Rear Panel 16 2 HARDWARE INSTALLATION Introduction 19 Safety Information 19 Positioning the Router 19 Using the Rubber Feet 20 Stacking the Router 20 Wall Mounting 20 Before you Install your Router 21 Powering Up the Router 22 Connecting the Router 22 3 SETTING UP YOUR COMPUTERS Obtaining an IP Address Automatically 25 Windows ...

Page 4: ...Summary 42 5 ROUTER CONFIGURATION Navigating Through the Router Configuration Pages 45 Main Menu 45 Option Tabs 46 Welcome Screen 46 Notice Board 46 Password 47 Wizard 48 LAN Settings 48 Unit Configuration 48 DHCP Clients List 49 Wireless Settings 51 Configuration 52 Encryption 54 Configuring WPA Encryption 54 Configuring WEP Encryption 57 Connection Control 60 Client List 62 WDS 63 Profile 64 Int...

Page 5: ... DDNS 94 Security 96 Status and Logs 98 Status 98 Usage 99 Logs 100 Support Feedback 100 Support 100 Feedback 101 6 TROUBLESHOOTING Basic Connection Checks 103 Browsing to the Router Configuration Screens 103 Connecting to the Internet 104 Forgotten Password and Reset to Factory Defaults 105 Wireless Networking 105 Replacement Power Adapters 107 Alert LED 108 Recovering from Corrupted Software 108...

Page 6: ...e Network 113 IP Addresses and Subnet Masks 113 How does a Device Obtain an IP Address and Subnet Mask 115 DHCP Addressing 115 Static Addressing 115 Auto IP Addressing 115 C TECHNICAL SPECIFICATIONS D SAFETY INFORMATION E END USER SOFTWARE LICENSE AGREEMENT F ISP INFORMATION GLOSSARY INDEX REGULATORY NOTICES FOR THE WIRELESS 11G CABLE DSL ROUTER Industry Canada Class B 143 ...

Page 7: ...se note is shipped with the OfficeConnect Wireless 11g Cable DSL Router and contains information that differs from the information in this guide follow the information in the release note Most user guides and release notes are available in Adobe Acrobat Reader Portable Document Format PDF on the 3Com World Wide Web site http www 3com com Naming Convention Throughout this guide the OfficeConnect Wi...

Page 8: ...Caution Information that alerts you to potential loss of data or potential damage to an application system or device Warning Information that alerts you to potential personal injury Table 2 Text Conventions Convention Description The words enter and type When you see the word enter in this guide you must type something and then press Return or Enter Do not press Return or Enter when an instruction...

Page 9: ... address for technical support questions For information about contacting Technical Support please refer to the Support and Safety Information sheet Related Documentation In addition to this guide each Router document set includes one Installation Guide This guide contains the instructions you need to install and configure your Router ...

Page 10: ...10 ABOUT THIS GUIDE ...

Page 11: ... in your office connect them all to a single Internet outlet and harness the combined power of all of your computers OfficeConnect Wireless 11g Cable DSL Router The OfficeConnect Wireless 11g Cable DSL Router is designed to provide a cost effective means of sharing a single broadband Internet connection amongst several wired and wireless computers The Router also provides protection in the form of...

Page 12: ... your network Figure 2 it becomes your connection to the Internet Connections can be made directly to the Router or to an OfficeConnect Switch or Hub expanding the number of computers you can have in your network Figure 2 Example Network Using a Wireless 11g Cable DSL Router Wireless 11g Cable DSL Router ...

Page 13: ...erver to enable remote access to Web FTP and other services on your network Security Firewall protection against Internet hacker attacks and encryption to protect wireless network traffic Filtered access of inappropriate Web sites using the built in URL filter Package Contents The Router kit includes the following items One OfficeConnect Wireless 11g Cable DSL Router One power adapter for use with...

Page 14: ...C A cable modem or DSL modem with an Ethernet port RJ 45 connector An active Internet access account A Web browser that supports JavaScript such as Netscape 4 7 or higher Internet Explorer 5 0 or higher or Mozilla 1 2 1 or higher Front Panel The front panel of the Router contains a series of indicator lights LEDs that help describe the status of various networking and connection operations Figure ...

Page 15: ...our network from the Internet Continuously on A fault has been detected with your Router during the start up process Refer to Chapter 6 Troubleshooting 2 Power LED Green Indicates that the Router is powered on 3 Wireless LAN WLAN Status LED Yellow If the LED is on it indicates that wireless networking is enabled If the LED is flashing data is being transmitted or received If the LED is off the Wir...

Page 16: ...outer Rear Panel 6 Wireless Antennae The antennae on the product should be placed in a V position when initially installed CAUTION Do not force the antennae beyond their mechanical stops Rotating the antennae further may cause damage 7 Power Adapter Socket Only use the power adapter supplied with this Router Do not use any other adapter 8 Power Adapter OK LED Green Indicates that the power adapter...

Page 17: ...cable used 10 Four 10 100 LAN ports Using suitable RJ 45 cable you can connect your Router to a computer or to any other piece of equipment that has an Ethernet connection for example a hub or a switch The LAN ports will automatically set themselves to MDI or MDIX depending on the device to which they are connected and the type of cable used ...

Page 18: ...18 CHAPTER 1 INTRODUCING THE ROUTER ...

Page 19: ...nes importantes de sécurité avant de mettre en route Positioning the Router You should place the Router in a location that is conveniently located for connection to the cable or DSL modem that will be used to connect to the Internet is centrally located to the wireless computers that will connect to the Router A suitable location might be on top of a high shelf or similar furniture to optimize wir...

Page 20: ...he Router If you are stacking your Router with other OfficeConnect units install the Router at the top of the stack Refer to the documentation supplied with your other OfficeConnect unit for details on using the stacking clip A stacking clip is not supplied with the Router Use the stacking clip supplied with another stackable OfficeConnect unit Wall Mounting There are two slots on the underside of...

Page 21: ...ation If you have a DSL connection and your ISP allocates IP information dynamically over PPPoE you need a User Name and Password You only need a PPPoE Service Name if your ISP requires one Do not enter anything if your ISP does not require this information If you have a DSL connection and your ISP allocates IP information dynamically over PPTP you need a User Name Password and PPTP Server Address...

Page 22: ... power up the Router 1 Plug the power adapter into the power adapter socket located on the back panel of the Router 2 Plug the power adapter into a standard electrical wall socket Connecting the Router The first step for installing your Router is to physically connect it to a cable or DSL modem and then connect it to a computer in order to be able to access the Internet See Figure 5 IP Address ___...

Page 23: ...he Router using a Category 5 twisted pair cable Check that the corresponding LAN status LED on the Router lights You have now completed the hardware installation of your Router Next you need to set up your computers so that they can make use of the Router to communicate with the Internet 3Com recommends that you perform the initial Router configuration from a computer that is directly connected to...

Page 24: ...24 CHAPTER 2 HARDWARE INSTALLATION To communicate wirelessly with your Router your wireless NIC should be set as follows Encryption none Service Area Name SSID 3Com Channel 11 ...

Page 25: ...ter CD ROM to detect and configure your Router Refer to Appendix A for information on using the Discovery program Obtaining an IP Address Automatically Refer to the section below which relates to your operating system for details on how to obtain an IP address automatically Windows 2000 If you are using a Windows 2000 based computer use the following procedure to change your TCP IP settings 1 From...

Page 26: ...l Area Properties Screen 6 Ensure that the options Obtain an IP Address automatically and Obtain DNS server address automatically are both selected as shown in Figure 7 Click OK Figure 7 Internet Protocol TCP IP Properties Screen 7 Restart your computer ...

Page 27: ...start your computer Windows 95 98 ME If you are using a Windows 95 98 ME computer use the following procedure to change your TCP IP settings 1 From the Windows Start Menu select Settings Control Panel 2 Double click on Network Select the TCP IP item for your network card and click on Properties 3 In the TCP IP dialog select the IP Address tab and ensure that Obtain IP address automatically is sele...

Page 28: ...creen similar to Figure 8 should be displayed 4 Select the Never Dial a Connection option Figure 8 Internet Properties Screen You may wish to remove the PPPoE client software from your computer to free resources as it is not required for use with the Router Disabling Web Proxy Ensure that you do not have a web proxy enabled on your computer Go to the Control Panel and click on Internet Options Sel...

Page 29: ...e that you have at least one computer connected to the Router Refer to Chapter 2 for details on how to do this 2 Launch your Web browser on the computer 3 Enter the following URL in the location or address field of your browser http 192 168 1 1 Figure 9 The Login screen displays Figure 9 Web Browser Location Field Factory Default 4 To log in as an administrator enter the password the default setti...

Page 30: ...ssword is correct the Country Selection screen will appear Select the country you wish to configure the Router for then click Apply Figure 11 If your purchased your Router in the United States you do not see this screen as it is automatically set Figure 11 Country Selection Screen ...

Page 31: ...e screen will appear Figure 12 Select the Wizard tab and click Wizard or If your Router has not been configured before the Wizard will launch automatically refer to Figure 13 7 Click Next 8 You will be guided step by step through a basic setup procedure Figure 12 Welcome Screen ...

Page 32: ...ange Administration Password screen Figure 14 appears type the Old Password then a new password in both the New Password and Confirm Password boxes 3Com recommends entering a new password when setting up the Router for the first time The Router is shipped from the factory with a default password admin 1 Password is case sensitive ...

Page 33: ...r time zone from the pull down menu check the daylight savings option if required and then click Next The Daylight Savings option advances the system clock by one hour It does not cause the system clock to be updated for daylight savings time automatically WAN Settings Figure 16 Internet Settings Screen This Internet Addressing Mode window allows you to set up the Router for the type of Internet c...

Page 34: ... static IP address see page 36 PPTP is required some DSL users in Europe see page 37 L2TP is required some DSL users in Europe see page 39 and click Next For further information on selecting a mode see Internet Settings on page 65 PPPoE Mode Figure 17 PPPoE Screen To setup the Router for use with a PPP over Ethernet PPPoE connection use the following procedure 1 Enter your PPP over Ethernet user n...

Page 35: ...This is the amount of time without Internet activity that you want to allow before the Router ends the PPPoE session 6 Check all of your settings and then click Next Refer to LAN Settings on page 40 for more information Dynamic IP Address Mode To setup the Router for use with a dynamic IP address connection 1 Select the ISP provides configuration dynamically via DHCP and then click Next See Figure...

Page 36: ...e one that was previously connected directly to the cable modem choose Yes please clone the MAC address from the PC I m currently using Static IP Mode To setup the Router for use with a static IP address connection use the following procedure 1 Select ISP has provided a static IP address see Figure 16 and then click Next Figure 20 displays Figure 20 Static IP Mode Screen 2 Enter your IP Address in...

Page 37: ... with a PPTP connection use the following procedure 1 Enter your PPTP server address in the PPTP Server Address text box 2 Enter your PPTP user name in the PPTP User Name text box 3 Enter your PPTP password in the PPTP Password text box 4 Enter your Primary DNS Address and Secondary DNS address Your ISP may provide you with primary and secondary DNS addresses If they have been provided enter the a...

Page 38: ...sion 7 Check all of your settings and then click Next Figure 22 displays Figure 22 PPTP IP Settings 8 IP settings must be used when establishing a PPTP connection Fill in the Initial IP Address and the Initial Subnet Mask fields if your ISP has provided you with these settings Alternatively if the PPTP server is located in your DSL modem click Suggest to select an IP address on the same subnet as ...

Page 39: ...ry DNS Address and Secondary DNS address Your ISP may provide you with primary and secondary DNS addresses they have been provided enter the addresses in the appropriate text boxes If not leave 0 0 0 0 in the boxes 5 Enter the value supplied by your ISP in the MTU text box If your ISP has not supplied an MTU value leave this at the default value The default is 1440 6 Select an idle time from the M...

Page 40: ...ion DHCP server that can automatically configure the TCP IP settings of every computer on your network Figure 25 DHCP Server Setup Screen To activate the DHCP Server option select Enable the DHCP server with the following settings and specify the IP pool range The largest available continuous IP pool will be automatically entered if this is not appropriate make your required changes To disable DHC...

Page 41: ...trongly recommends that you change the SSID to something other than the default Click Next when you have finished If you are configuring the Router from a wireless computer any changes you make to the wireless configuration will result in communication between the Router and your computer being lost This is why 3Com strongly recommends that you configure the Router from a wired computer It is very...

Page 42: ... clients Summary Figure 27 Configuration Summary Screen When you complete the Setup Wizard a configuration summary will display 3Com recommends that you verify the configuration information of the Router and then print this page for your records Click Finish to display the Wizard completed screen shown in Figure 28 ...

Page 43: ...n options you may need to reconfigure the computer you are using in order to make contact with the Router again Your Router is now configured and ready for use For information on improving your Wireless network security see Wireless Settings on page 51 See Chapter 5 for a detailed description of the Router configuration screens ...

Page 44: ...44 CHAPTER 4 RUNNING THE SETUP WIZARD ...

Page 45: ...n part of the screen Welcome displays the firmware version of the Router allows you to change your password and launch the Wizard LAN Settings allows you to configure IP address and subnet mask information set up DHCP server parameters and display the DHCP client list Wireless Settings enables disables access from wireless computers configures WPA or WEP encryption and provides facilities for impr...

Page 46: ... provide sub sections which are accessed through the use of tabs see Figure 29 for example To access a sub section simply click on the required tab Getting Help On every screen a Help button is available which provides access to the context sensitive online help system Click Help for further assistance and guidance relating to the current screen Welcome Screen The Welcome section allows you to vie...

Page 47: ...n change the password to prevent unauthorized access to the Administration System To do this 1 Enter the current password in the Old Password field 2 Enter the new password in the New Password field 3 Enter the new password again in the Confirm Password field 4 Click Apply to save the new password The password is case sensitive If you have forgotten your password you need to reset the Router See F...

Page 48: ...e 31 Wizard Screen Click WIZARD to launch the configuration wizard Refer to Chapter 4 for information on how to run the wizard LAN Settings The LAN Settings menu provides the following options Unit Configuration Figure 32 Unit Configuration Screen ...

Page 49: ...ernatively you can change the address range by changing the last digit s of the IP Pool Start Address or the IP Pool End Address or both 4 If you use 3Com NBX telephones enter the IP address of the NBX call processor at 3Com NBX Call Processor 5 Check all of your settings and then click Apply The DHCP server will give out addresses to both wired and wireless clients DHCP Clients List Figure 33 DHC...

Page 50: ...x an association Clear the check box to remove the fixed association As you connect more devices the client list will grow to a maximum number of 253 clients The release button allows the lease time for the IP address that has been issued to a device to be cleared The lease time is set at 12 hours If a PC has been switched off using the Release button would allow the 12 hour lease time to be clear...

Page 51: ...Mapping in the MAC Address of client box The MAC Address must be entered as 6 hexadecimal pairs for example 12 34 56 78 90 ab 3 Click Apply to add the Fixed Mapping or Close to close the window without adding the Fixed Mapping The Fixed DHCP Mapping will be displayed in the DHCP Clients list as a Fixed Association Wireless Settings The Wireless Settings menu provides options described in the follo...

Page 52: ...er nearby is using the same Channel as you there will be a reduction in the performance of your network If this seems to be the case you should select a different channel number Usually the Wireless computers will scan to find the correct channel but if they don t you must configure them to use the same Channel number as the Router Choose the Clear Channel Select option to automatically choose the...

Page 53: ...hat the PC is included in the authorized Wireless PCs list if Connection Control is enabled See page 60 Enable Broadcast SSID Disable this feature after you have installed your wireless network to improve the security of your network When the check box is checked the Router will broadcast the Service Area Name SSID of your wireless network which reduces the security of your Router as it allows any...

Page 54: ...ted Access WPA is a 256 bit encryption method with keys that change over time WEP Wireless Equivalent Privacy WEP is a 64 bit or 128 bit encryption method with user configurable fixed keys WPA provides a higher level of security provided by its longer key and dynamic changes made to the key over time 3Com recommends that you use WPA with any clients which support it If you enable encryption on the...

Page 55: ...y as a 256 bit series of hexadecimal digits refer to Using Manual Pre Shared Key on page 56 To set up the pre shared key manually as a pass phrase refer to Using Pre Shared Passphrase on page 57 Using Enterprise Mode Figure 36 WPA Encryption Screen Enterprise Mode To set up Enterprise Mode as the WPA Type 1 Select Enterprise Mode from the WPA Type drop down box The screen shown in Figure 36 displa...

Page 56: ...Click Apply to generate the key Using Manual Pre Shared Key Figure 37 WPA Encryption Screen Manual Pre shared Key To set up Manual Pre shared Key as the WPA Type 1 Select Manual Pre shared Key from the WPA Type drop down box The screen shown in Figure 37 displays 2 Enter a pair of hexadecimal digits in each of the 32 Key fields Each field can contain a hexadecimal number from 00 to ff for example ...

Page 57: ... down box The screen shown in Figure 38 displays 2 Enter a phrase of between 8 and 63 characters in length in the Passphrase field This passphrase will be used to generate a 256 bit key 3 Click Apply to generate the key Configuring WEP Encryption There are two levels of WEP encryption available 64 bit sometimes referred to as 40 bit and 128 bit Use the WEP Encryption Type box to select the desired...

Page 58: ...it Encryption Keys Screen WEP Configuration A Key is a hexadecimal 0 9 A F number used to encrypt and decrypt the data There can be up to 4 keys and each key can be as long as 26 digits The Router also offers a number of methods for converting plain text into hex keys The text is much easier to remember than hex keys but it relies ...

Page 59: ...n contain any alphanumeric characters and must be between 6 and 30 characters long A single string will automatically generate 4 unique keys for 64 or 128 bit WEP ASCII This method is supported by some adapter cards running under Windows XP The string must be exactly 5 characters for 64 bit WEP and 13 characters for 128 bit WEP You must enter a separate string for each of the 4 Keys You can leave ...

Page 60: ...ion Control Screen A higher level of security can be achieved for your wireless network if in addition to using encryption you specify that only certain wireless computers can connect to the Router By default any wireless computer that has the same Service Area Name SSID channel and encryption settings as the Router can connect to it To specify that only certain wireless computers can connect to t...

Page 61: ... will contain the MAC addresses of all Wireless PCs that are in range currently operating and have the same Service Area Name SSID channel and encryption settings as the Router You will find this screen easier to use if you set up and make a note of all of your wireless PC s on your network first You may also add the entries manually if you know the MAC address To add a MAC address that is not in ...

Page 62: ...fy the MAC address 3 Press Apply to accept the changes Figure 43 MAC Address Table Click Close to discard all changes Deleting a MAC Address The connection rights for a Wireless PC listed in the table can be removed by pressing Delete for that entry in the table Once an entry has been deleted it cannot be undone Please wait 30 seconds for changes to take effect Client List Figure 44 Client List Sc...

Page 63: ... Wireless LAN the client list will grow to a maximum of 32 the maximum number of wireless devices that the Router can support WDS Figure 45 WDS Screen The Router supports the Wireless Distribution System WDS repeater mode WDS repeating enables one or more Access Points to rebroadcast received signals to extend range and reach though this can affect the overall throughput of data To enable wireless...

Page 64: ...ess Settings option Encryption settings from the Router This is configured on the Encryption tab under the Wireless Settings option Profile Name This is used to identify the profile once it has been imported into the Wireless Network Adapter configuration software To set up a profile once the Service Area Name SSID and Encryption settings have been configured in the Router 1 Enter a Profile Name u...

Page 65: ...llocation method used by your ISP There are four different ways that ISPs can allocate IP information as described below 1 Static IP Address DSL or Cable The ISP provides the IP addressing information for you to enter manually To configure the Router you will need to know the following IP Address Subnet Mask ISP Router DNS address es 2 Dynamic IP Address DSL or Cable Dynamic IP addressing or DHCP ...

Page 66: ... Internet Service Providers ISPs Check with your ISP to make sure L2TP is supported before selecting this option To configure the Router you will need to know the following User name Password L2TP Server address Connection to ISP Before beginning this section ensure you have the required information from your ISP See Before you Install your Router on page 21 Select Internet Settings from the main ...

Page 67: ...rmation in this screen should be provided to you by your ISP If the information is already entered your ISP has pre configured your Router and you should go to step 7 3 Enter your subnet mask in the Subnet Mask text box 4 Enter your ISP Router address in the ISP Gateway Address text box 5 Enter your primary DNS address in the Primary DNS Address text box 6 Enter your secondary DNS address in the S...

Page 68: ...ld Figure 48 2 Enter your Primary DNS Address and Secondary DNS address Your ISP may provide you with primary and secondary DNS addresses If they have been provided enter the addresses in the appropriate text boxes If not leave 0 0 0 0 in the boxes 3 Enter the Host Name optional Some ISPs require a host name If your ISP has this requirement enter the host name in the Host Name text box 4 If you us...

Page 69: ...s and click Apply PPP over Ethernet Figure 49 PPPoE Setup Screen To setup the Router for use with a PPP over Ethernet connection use the following procedure 1 Select PPP over Ethernet in the IP Allocation Mode field Figure 49 2 Enter your Primary DNS Address and Secondary DNS address Your ISP may provide you with primary and secondary DNS addresses If they have been provided enter the addresses in...

Page 70: ...equires this 7 Enter the MTU value supplied by your ISP If you do not know this leave it at the default value The default is 1454 8 Select an idle time from the Maximum Idle Time drop down list This value will correspond to the amount of idle time no Internet activity that will pass before the Router automatically ends your PPP over Ethernet session Since the Router contains its own PPPoE client y...

Page 71: ... it at the default value The default is 1460 7 Select an idle time from the Maximum Idle Time drop down list This value will correspond to the amount of idle time no Internet activity that will pass before the Router automatically ends your PPTP session 8 IP settings must be used when establishing a PPTP connection To obtain an IP address either Check the Get IP By DHCP check box if you want to ob...

Page 72: ...box 5 Enter your Primary DNS Address and Secondary DNS Address Your ISP may provide you with primary and secondary DNS addresses If they have been provided enter the addresses in the appropriate text boxes If not leave 0 0 0 0 in the boxes 6 Enter the MTU value supplied by your ISP If you do not know this leave it at the default value The default is 1440 7 Select an idle time from the Maximum Idle...

Page 73: ...L modem click Suggest to select an IP address on the same subnet as the L2TP server Check all of your settings and then click Apply Firewall On the main frame of the Firewall setup screen is a menu with six tabs Virtual Servers Special Applications PCs Privileges URL Filter Content Filter and SPI Virtual Servers Selecting the Firewall option on the main menu displays the Virtual Servers setup scre...

Page 74: ...n FTP server allowing others outside of your office network to download files of your choosing Or if you have created a Web site you can configure one of your computers as a Web server so that others can view your Web site To configure a virtual server 1 Click New on the right side of the screen to open the Virtual Server Settings dialogue box Figure 53 2 Enter the last digit s of the IP address o...

Page 75: ...tivated Special Applications Figure 55 Special Applications Screen Select Special Apps tab to display Authorized Application setup screen Figure 55 Some software applications require special or multiple connections to the Internet and these would normally be blocked by the firewall For example Internet Telephony or Video conferences require multiple connections So that these special applications c...

Page 76: ...Figure 56 Figure 56 Special Application Settings Screen 2 Either Select the application from the Choose Application drop down list or Select Other to specify an Application Name for the special application and then enter a value in the Trigger Port and Incoming Ports text boxes Figure 57 These values correspond to the outbound port numbers issued by the application The port numbers are specified u...

Page 77: ...tion at any one time PC Privileges Figure 58 PC Privileges Screen Select PC Privileges to display the PC Privilege setup screen Figure 58 Access from the local network to the Internet can be controlled on a computer by computer basis In the default configuration the Router will allow all connected computers unlimited access to the Internet PC Privileges allows you to assign different access rights...

Page 78: ...Allow all other services or allow all other services with exceptions or Block all other services or block all other services with exceptions To do this select Allow or Block from the drop down menu and if required enter the exceptions into the text box The port numbers are specified using a comma separated list with hyphens to denote port number ranges So for example entering 2 3 5 7 would cause p...

Page 79: ...dividual PCs Setup Screen 3 Enter the last digit s of the IP address of the computer in the PC s IP Address text box 4 If required check the Bypass URL Filter check box to override the URL Filter settings Refer to URL Filter on page 80 5 Select authorized services by clicking in the appropriate check box es 6 In addition to the four authorized services listed you can choose to allow or block acces...

Page 80: ...URL Filter has three settings Disabled Users can browse all Web sites None will be filtered Deny List Users can browse all Web sites apart from those sites listed in the deny list and those whose URLs contain keywords listed in the deny list See Deny List on page 80 Allow List Users are unable to browse any Web sites except of those listed in the allow list and those whose URLs contain keywords li...

Page 81: ...adsite com the keyword badsite com would block searches that mentioned badsite com in their domain name for example www notabadsite com To filter a generic keyword enter it into one of the fields You should exercise caution when choosing a keyword as many keywords are contained within other words For example filtering the word sex would filter the following example URLs www sussex com www thisexam...

Page 82: ...ually by entering this goodsite com in one field and that goodsite com in another or Allow them by entering the keyword goodsite com into one of the fields This will allow all URLs containing the string goodsite com As well as allowing this goodsite com and that goodsite com the keyword goodsite com would allow sites that had the string goodsite com in their URL for example xxxgoodsite com To filt...

Page 83: ...ilter You can subscribe to the 3Com Content Filter Service which enables you to block or allow the URLs of a number of pre defined categories The Router comes with a 14 day free trial of the 3Com Content Filter Service To activate the 14 day free trial of the service you must first register your Router at www 3com com To continue using the service after the trial period you must purchase the full ...

Page 84: ... milliseconds 3 seconds 5 Select Allow or Deny for each displayed category as required Click Apply to save the settings SPI Stateful Packet Inspection SPI inspects and if required blocks packets at the application layer SPI also maintains TCP and UDP session information including timeouts and the number of active sessions and provides the ability to detect and prevent certain types of network atta...

Page 85: ... 65 SPI Screen lower section Intrusion Detection Feature The Intrusion Detection feature limits access for incoming traffic at the WAN ports 2 Check the Enable SPI and Anti DoS firewall protection check box to enable SPI When this feature is enabled all incoming packets will be blocked except for those types that you allow in the Stateful Packet Inspection section ...

Page 86: ... the Fragmentation half open wait text box enter the length of time in seconds that you want an unassembled packet to remain active before the Router drops it The default is 10 seconds 10 In the TCP SYN wait text box enter the length of time in seconds that you want the Router to wait for a TCP session to synchronize before it drops the session The default is 30 seconds 11 In the TCP FIN wait text...

Page 87: ...umber of incomplete sessions allowed from the same host The default is 10 sessions 20 In the Incomplete TCP UDP sessions detect sensitive time period text box enter the length of time that must elapse before an incomplete TCP UDP session is detected as incomplete The default is 300 msec 21 In the Maximum half open fragmentation packet number from the same host text box enter the maximum number of ...

Page 88: ...information will be lost but the log files will be erased This function may be of use if you are experiencing problems and you wish to re establish your Internet connection Any network users who are currently accessing the Internet will have their access interrupted whilst the restart takes place and they may need to reboot their computers when the restart has completed and the Router is operation...

Page 89: ...orrect time from NTP servers on the Internet and sets its system clock accordingly The Daylight Savings option merely advances the system clock by one hour It does not cause the system clock to be updated for daylight savings time automatically Configuration Figure 68 Configuration Screen Select the Configuration tab to display the Configuration screen Figure 68 Backup Configuration Click BACKUP t...

Page 90: ...ication with the Router Upgrade Figure 69 Upgrade Screen The Upgrade facility allows you to install on the Router any new releases of system software that 3Com may make available To install new software you first need to download the software from the 3Com support web site to a folder on your computer Once you have done this select Browse to tell your web browser where this file is on your compute...

Page 91: ...from the main menu displays the following five tabs in your Web browser window Static Route RIP Routing Table DDNS and Security Static Route The Router supports static route functionality Select the Static Route tab to display the screen shown in Figure 70 Figure 70 Static Route screen The following information is displayed for each static route Index the index of the static route Network Address ...

Page 92: ...on on one RIP enabled device and have that routing information replicated to all RIP enabled devices on the network LAN and WAN interfaces can be configured independently of each other Select the RIP tab to display the screen shown in Figure 71 Figure 71 RIP screen Setting Up RIP Check the Enable Auto Summary check box if you want the Router to send simplified routing data to other RIP devices ins...

Page 93: ...ate messages 2 Select either 1 for RIPv1 or 2 for RIPv2 from the Version drop down list 3Com recommends that you use RIPv1 if there is any RIP enabled device on your network that does not support RIPv2 In all other case select RIPv2 3 Select either Enable or Disable from the Poison Reverse drop down list Poison Reverse is a feature that helps prevent data loops 4 Select one of None Password or MD5...

Page 94: ...the format shown in Figure 73 Figure 73 Routing Table screen DDNS Dynamic Domain Name Server DDNS enables you to map a static domain name to a dynamic IP address The Router supports two DDNS providers TZO com and DYNDNS org Before you can set up DDNS you must obtain an account password and static domain name from your DDNS provider DDNS is disabled by default ...

Page 95: ...ame text box enter the domain name 2 In the Username E mail text box enter the account name 3 In the Key text box enter the account password 4 In the Refresh Time box enter how often you want the service to automatically refresh in days The default is three days 5 Click Apply to make this service active DynDNS org If you select DYNDNS org 1 In the Host Name text box enter the host name 2 In the Us...

Page 96: ...endly and have no intention of breaking into stealing from or damaging your network However there are hackers who may try to break into your network The options in the Security tab features help you to protect your network Using Advanced Settings The Advanced Settings section of the Security screen displays the following options Enable universal plug and play Universal plug and play allows compati...

Page 97: ...onfiguration If you have a single IP address and your turn NAT off the computers on your network will not be able to access the Internet Other problems may also occur Check on the check box to disable NAT and then select Apply 3Com recommends that you leave this feature enabled for maximum security Enabling Remote Administration It is possible to administer the Router remotely Select one of the fo...

Page 98: ...e found at the bottom of the screen See Figure 75 Status and Logs Selecting Status and Logs from the main menu displays the Status Usage and Logs screens in your Web browser window Status The Status screen displays a tabular representation of your network and Internet connection Figure 76 and Figure 77 Figure 76 Status Screen upper section ...

Page 99: ...ower section Usage Usage displays an approximate count of the traffic since the Router was last reset Figure 78 The counts are approximate and should be used as a guide only Contact your ISP for accurate logging information Figure 78 Usage Screen ...

Page 100: ...ts logged by the Router Figure 79 Logs Screen You may be asked to refer to the information on the Status and Logs screens if you contact your supplier for technical support Support Feedback Selecting Support Feedback from the main menu displays the Support and Feedback screens Support Figure 80 Support Screen ...

Page 101: ...of Internet links that provide information and support concerning the Router Figure 80 Feedback Figure 81 Feedback Screen Selecting the Feedback option displays the Feedback screen and allows you to provide feedback to 3Com on the operation of your Router Figure 81 This screen should not be used to obtain technical support ...

Page 102: ...102 CHAPTER 5 ROUTER CONFIGURATION ...

Page 103: ... connected your Router and computers together but cannot browse to the Router configuration screens check the following Confirm that the physical connection between your computer and the Router is OK and that the LAN Status LEDs on the Router and NIC are illuminated and indicating the same speed 10Mbps or 100Mbps Some NICs do not have status LEDs in which case a diagnostic program may be available...

Page 104: ...tion screens but cannot access sites on the Internet check the following Confirm that the physical connection between the Router and the cable DSL modem is OK and that the link status LEDs on both Router and modem are illuminated Confirm that the connection between the modem and the cable DSL interface is OK Ensure that you have entered the correct information into the Router configuration screens...

Page 105: ... flash as the Router starts up and after approximately 30 seconds will start to flash more slowly typically 2 seconds on 2 seconds off Once the Alert LED has started to flash slowly remove power from the Router 5 Remove the cable connecting the Cable DSL port to the LAN port and reconnect one of your computers to one of the Router LAN ports 6 Re apply power to the Router and when the start up sequ...

Page 106: ...tenna vertically and one horizontally to improve coverage Additionally consider moving the wireless computer closer to the Router to confirm that the building structure or fittings are not adversely affecting the connectivity If this resolves the problem consider relocating the Wireless computer or the Router or trying a different channel on the Router Sources of interference The 2 4Ghz ISM band i...

Page 107: ...ower LED or Power Adapter OK LED Not Lit Check that your Router is receiving power by looking at the status of the Power LED on the front panel and the Power Adapter OK LED on the rear panel If both LEDs are lit green then the unit is receiving power If both LEDs are unlit then no power is being supplied to the unit Check that the power adapter is plugged into a working mains outlet and that the m...

Page 108: ...ing from Corrupted Software below If this does not fix the problem contact your supplier for further advice During normal operation you may notice the Alert LED lighting briefly from time to time This indicates that the Router has detected a hacker attack from the Internet and has prevented it from harming your network You need take no specific action on this unless you decide that these attacks a...

Page 109: ...computer and re apply power to the Router 4 Using the Web browser on the computer enter the following URL in the location bar http 192 168 1 1 This will connect you to the Microcode Recovery utility in the Router 5 Follow the on screen instructions Enter the path and filename of the software image file 6 When the upload has completed the Router will restart run the self test and if successful resu...

Page 110: ...more information or visit http www 3com com Does the Router support virtual private networks VPNs The Router supports VPN passthrough which allows VPN clients on the LAN to communicate with VPN hosts on the Internet It is also possible to set up VPN hosts on your LAN that clients elsewhere on the Internet can connect to but this is not a recommended configuration Where can I download software upda...

Page 111: ...on 95 98 2000 Me NT 1 Insert the Router CD ROM in the CD ROM drive on your computer A menu will appear select Router Discovery Discovery will find the Router even if it is unconfigured or misconfigured Figure 82 Discovery Welcome Screen 2 When the Welcome screen is displayed click on Next and wait until the application discovers the Routers connected to your LAN ...

Page 112: ...d Router Screen 3 Figure 84 shows an example Discovered Devices screen Highlight the Cable DSL Router by clicking on it and press Next Figure 84 Discovery Finish Screen 4 Click on Finish to launch a web browser and display the login page for the Router ...

Page 113: ...vice over the network the Router must be correctly configured with the following IP information An IP address A Subnet Mask IP Addresses and Subnet Masks Each device on your network must have a unique IP address to operate correctly An IP address identifies the address of the device to which data is being sent and the address of the destination network IP addresses have the format n n n x where n ...

Page 114: ...ne 192 168 100 identifies the network on which the device resides Part two 8 identifies the device within the network This type of IP Address operates on a subnet mask of 255 255 255 0 See Table 4 for an example about how a network with three computers and a Router might be configured Table 4 IP Addressing and Subnet Masking Type Two In larger networks where there are more devices the IP address o...

Page 115: ...h gets reallocated once you disconnect from the network DHCP will work on any client Operating System such as Windows 95 Windows 98 or Windows NT 4 0 Also using DHCP means that the same IP address and subnet mask will never be duplicated for devices on the network DHCP is particularly useful for networks with large numbers of users on them Static Addressing You must enter an IP Address and the sub...

Page 116: ... x with a subnet mask of 255 255 0 0 If two devices allocate themselves the same address the conflict is detected and one of the devices allocates itself a new address Automatic IP addressing support was introduced by Microsoft in the Windows 98 operating system and is also supported in Windows 2000 ...

Page 117: ...sion rate 54Mbps automatic fallback to 48 36 24 18 12 or 6 Mbps Maximum channels 14 Range up to 304 8m 1000ft Frequency US Canada Europe 2 400 2 4835 GHz Sensitivity 6 12 18 24 36 48 Mbps 85 dBm 54 Mbps 66 dBm typical Modulation CCK BPSK QPSK OFDM Encryption 40 64 bit WEP 128 bit WEP WPA Maximum clients 128 O P Power 18dBm Standard IEEE 802 11b Direct Sequence Spread Spectrum DSSS Transmission rat...

Page 118: ...sions Width 220 mm 8 7 in Depth 135 mm 5 3 in Height 24 mm 1 in Weight Approximately 500 g 1 1 lbs Standards Functional ISO 8802 3 IEEE 802 3 IEEE 802 11b 802 11g Wi Fi Safety UL60950 CSA 22 2 60950 IEC 60950 EN 60950 EMC EN 55022 Class B EN 55024 CISPR 22 FCC Part 15 Class B ICES 003 Class B CNS 13438 Class A ETSI EN 301 489 17 Radio CFR 47 FCC Part 15 207 15 209 15 247 and 15 249 ETS 300 328 2 4...

Page 119: ... XP Mac OS 8 5 or higher Unix Ethernet Performance The Router complies to the IEEE 802 3i u and x specifications Wireless Performance The Router has been designed to conform to the Wi Fi interoperability test standard Cable Specifications The Router supports the following cable types and maximum lengths Category 3 Ethernet or Category 5 Fast Ethernet or Dual Speed Ethernet Twisted Pair shielded an...

Page 120: ...120 APPENDIX C TECHNICAL SPECIFICATIONS ...

Page 121: ...WARNING Only stack the Router with other OfficeConnect units WARNING To ensure compliance with international safety standards only use the power adapter that is supplied with the unit WARNING The socket outlet must be near to the unit and easily accessible You can only remove power from the unit by disconnecting the power cord from the outlet WARNING This unit operates under SELV Safety Extra Low ...

Page 122: ...bei den zuständigen Stellen ob die Verwendung von Funkfrequenz in dem Bereich in dem der Bluetooth Access Point eingesetzt werden soll erlaubt ist VORSICHT Bei der Installation und beim Ausbau des Geräts ist mit höchster Vorsicht vorzugehen VORTSICHT Stapeln Sie das Geräts nur mit anderen OfficeConnect Gerätes zusammen VORSICHT Aufgrund von internationalen Sicherheitsnormen darf das Gerät nur mit ...

Page 123: ... toutes les consignes Nous vous demandons de lire attentivement les consignes suivantes de sécurité avant d installer ou de retirer l appareil AVERTISSEMENT La Router fournit et utilise de l énergie radioélectrique radio fréquence rf L utilisation de l énergie radioélectrique est interdite dans certains environnements L utilisateur devra se renseigner sur l autorisation de cette énergie dans la zo...

Page 124: ...ilisateurs ou entretenues par les utilisateurs à l intérieur du moyeu Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des problèmes dans ce guide contacter votre fournisseur AVERTISSEMENT Débranchez l adaptateur électrique avant de retirer cet appareil AVERTISSEMENT Ports RJ 45 Il s agit de prises femelles blindées de données RJ 45 Vous...

Page 125: ...t notices in the same form as on the original You agree not to remove or deface any portion of any legend provided on any licensed program or documentation delivered to you under this Agreement ASSIGNMENT NO REVERSE ENGINEERING You may transfer the Software Documentation and the licenses granted herein to another party in the same country in which you obtained the Software and Documentation if the...

Page 126: ... portions in any form LIMITED WARRANTIES AND LIMITATION OF LIABILITY All warranties and limitations of liability applicable to the Software are as stated on the Limited Warranty Card or in the product manual whether in paper or electronic form accompanying the Software Such warranties and limitations of liability are incorporated herein in their entirety by this reference GOVERNING LAW This Agreem...

Page 127: ... ComCast Cox Excite Rogers Shaw Insight Videotron PPPoE DSL Usually special software installed on PC MacPOET WinPOET EnterNet 300 The Router has this software built in and you can remove it from your PC You will need to enter the user name and password that your ISP provided to you in the PPPoE page of the Router Leave the service name blank unless your ISP requires it Bell Century Tel Citizens Pr...

Page 128: ... the Internet Settings page CableSpeed Cnet Direct Link Drizzle DSL Extreme Earthlink Wireless Fast Point Flashcom GTE WhirlWind Heavenet HSA Corp I 55 InterAccess LinkLine Mission Nauticom NAS Omitel Onterra Phatpipe Rhythms Speakeasy Sterling XO Zyan Static Cable Cable Modem Always on ISP assigns specific IP information which needs to be entered on the Fixed IP page of the Router Cox Cable Sprin...

Page 129: ... to other wireless clients and which acts as a bridge between wireless clients and a wired network such as Ethernet Wireless clients can be moved anywhere within the coverage area of the access point and still connect with each other If connected to an Ethernet network the access point monitors Ethernet traffic and forwards appropriate Ethernet messages to the wireless network while also monitorin...

Page 130: ... Fast Ethernet networks 100BASE TX and can transmit data up to speeds of 100 Mbps Category 5 cabling is better to use for network cabling than Category 3 because it supports both Ethernet 10 Mbps and Fast Ethernet 100 Mbps speeds Channel Similar to any radio device the OfficeConnect Cable DSL Router allows you to choose different radio channels in the wireless spectrum A channel is a particular fr...

Page 131: ...e data at high speeds Encryption A method for providing a level of security to wireless data transmissions The OfficeConnect Cable DSL Router and Wireless Cable DSL Router offer a choice of encryption methods See WPA and WEP for details ESSID Extended Service Set Identifier The ESSID is a unique identifier for your wireless network You must have the same ESSID entered into the Router and each of i...

Page 132: ...ons for TCP IP networks In the network management area this group is responsible for the development of the SNMP protocol Infrastructure mode Infrastructure mode is the wireless configuration supported by the Router You will need to ensure all of your clients are set up to use infrastructure mode in order for them to communicate with the Access Point built into your Router see also Ad Hoc mode IP ...

Page 133: ...etwork MAC addresses are 6 bytes long NAT Network Address Translation NAT enables all the computers on your network to share one IP address The NAT capability of the Router allows you to access the Internet from any computer on your home network without having to purchase more IP addresses from your ISP Network A Network is a collection of computers and other computer equipment that are connected ...

Page 134: ...rough the firewall This way un requested attempts to access the network will be denied SSID Service Set Identifier Some vendors of wireless products use SSID interchangeably with ESSID Subnet Address An extension of the IP addressing scheme that allows a site to use a single IP network address for multiple physical networks Subnet mask A subnet mask which may be a part of the TCP IP information pr...

Page 135: ...URL Filter is a feature of a firewall that allows it to stop its clients form browsing inappropriate Web sites WAN Wide Area Network A network that connects computers located in geographically separate areas for example different buildings cities or countries The Internet is an example of a wide area network WDS Wireless Distribution System A system that can be comprised of a bridging and or a rep...

Page 136: ...network Wireless LAN Service Area Another term for ESSID Extended Service Set Identifier Wizard A Windows application that automates a procedure such as installation or configuration WLAN Wireless Local Area Network A WLAN is a group of computers and devices connected together by wireless in a relatively small area such as a house or office WPA Wi Fi Protected Access A dynamically changing encrypt...

Page 137: ...111 DMZ 73 DNS 26 37 39 68 69 71 72 primary 37 39 67 secondary 37 39 67 DoS attacks 84 DOS detect criteria configuring 87 Dynamic 65 Dynamic IP Address 35 65 73 dynamic IP address 65 E encryption 54 WEP 54 WPA 54 F Firewall 73 Intrustion Detection 85 SPI 84 Forgotten Password 105 I Internet addresses 113 Internet Addressing Mode 33 Internet Settings 65 dynamic IP address 65 L2TP 66 PPPoE 65 PPTP 6...

Page 138: ...PI 84 Static Addressing 115 Static IP Address 65 67 static IP address 65 static route 91 Status 98 Subnet Mask 36 40 113 Summary 42 Support Information 100 Support Links 101 T TCP IP 25 27 40 113 Technical specifications 117 standards 117 Time Zone 33 88 U Unit Configuration 48 Upgrade 90 URL Filter 80 V Virtual Servers 73 74 W WAN 33 WDS 63 Web Proxy 28 Wireless authorized PCs 61 channel selectio...

Page 139: ...onfigured Table 5 Channels The channels available for use in France depend on the region in which you are located Channels Country 1 13 Australia Austria Bahrain Belarus Belgium Chile China Costa Rica Croatia Cyprus Czech Republic Denmark Finland France Germany Greece Hong Kong Hungary Iceland India Indonesia Ireland Italy Liechtenstein Lithuania Luxembourg Malaysia Netherlands New Zealand Norway ...

Page 140: ...g measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This devic...

Page 141: ...Commission helpful How to Identify and Resolve Radio TV Interference Problems This booklet is available from the U S Government Printing Office Washington DC 20402 Stock No 004 000 00345 4 In order to meet FCC emissions limits this equipment must be used only with cables which comply with IEEE 802 3 FCC Declaration of Conformity We declare under our sole responsibility that the Model Description 3...

Page 142: ...SA Statement This Class B digital apparatus meets all requirements of the Canadian Interference Causing Equipment Regulations Cet appareil numérique de la classe B respecte toutes les exigences du Règlement sur le matériel brouilleur du Canada BSMI Statement FCC CAUTION To assure continued compliance any changes or modifications not expressly approved by the party responsible for compliance could ...

Page 143: ...censing Industry Canada Class B This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled Digital Apparatus ICES 003 of Industry Canada Cet appareil numérique respecte les limites de bruits radioélectriques applicables aux appareils numériques de Classe B prescrites dans la norme sur...

Page 144: ...144 ...

Page 145: ......

Page 146: ...rvices visit our World Wide Web site at www 3com com All specifications are subject to change without notice Copyright 2004 3Com Corporation All rights reserved 3Com and OfficeConnect are registered trademarks of 3Com Corporation All other company and product names may be trademarks of their respective companies DUA0554 TAAA02 ...

Search results

Summary of Contents for 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router

Reviews:

Related manuals for 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router

Brands by name

Popular brands

3Com 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router, User Manual

Search results

Summary of Contents for 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router

Reviews:

Related manuals for 3CRWE554G72T - OfficeConnect Wireless 11g Cable/DSL Router

Brands by name

Popular brands