manualshive.com logo in svg

Allied Data Tornado 140, User Manual

Share
Download
Allied Data Tornado 140 User Manual Download Page 68

 

Figure 6: Authentication success 

 

4.2

DUT authenticate PC2 using PEAP-TLS. 

1.  PC2 choose the SSID of DUT as the Access Point. 

2.  Set authentication type of wireless client and RADIUS server both to   

PEAP_TLS. 

3.  Disable the wireless connection and enable again. 

4.The DUT will send the user's certificate to the RADIUS server, and then 

send the message of authentication result to PC2. 

5.  Windows XP will prompt that the authentication process is success or fail   

and end the authentication procedure. 

6.  Terminate the test steps when PC2 get dynamic IP and PING remote host   

successfully. 

 

Support Type:

 The router supports the types of    802.1x Authentication: 

                         

PEAP-CHAPv2 and PEAP-TLS. 

Note. 

1.PC1 is on Windows XP platform without Service Pack 1. 

2.PC2 is on Windows XP platform with Service Pack 1a. 

3.PEAP is supported on Windows XP with Service Pack 1 only. 

4.Windows XP with Service Pack 1 allows 802.1x authentication only when data encryption 

function is enable. 

 

68

Summary of Contents for Tornado 140

Page 1: ...and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against radio interference in a commerc...

Page 2: ...Correct Network Settings of Your Computer 9 Chapter 4 Configuring Wireless Broadband Router 10 4 1 Start up and Log in 11 4 2 Status 12 4 3 Wizard 13 4 4 Basic Setting 14 4 5 Forwarding Rules 24 4 6...

Page 3: ...ts from outside intruders are blocked to protect your Intranet DHCP server supported All of the networked computers can retrieve TCP IP settings automatically from this product Web based configuring C...

Page 4: ...ss or halting them based on the IP address of the source and destination Domain Filter Supported Let you prevent users under this device from accessing specific URLs URL Blocking Supported URL Blockin...

Page 5: ...er supports basic SNMP function Routing Table Supported Now the router supports static routing Schedule Rule supported Customers can control some functions like virtual server and packet filters when...

Page 6: ...tatus indicators Green Blinking M1 is flashed once per second to indicate system is alive On The WAN port is linked WAN WAN port activity Green Blinking The WAN port is sending or receiving data Wirel...

Page 7: ...Port Description PWR Power inlet WAN the port where you will connect your cable or DSL modem or Ethernet router Port 1 4 the ports where you will connect networked computers and other devices Reset To...

Page 8: ...LAN ports of this product b Wireless LAN connection locate this product at a proper position to gain the best transmit performance Figure 2 3 Setup of LAN and WAN connections for this product 3 Setup...

Page 9: ...ally that is via DHCP server of this product After installing the TCP IP communication protocol you can use the ping command to check if your computer has successfully connected to this product The fo...

Page 10: ...le e es s ss s s B B Br r ro o oa a ad d db b ba a an n nd d d R R Ro o ou u ut t te e er r r This product provides Web based configuration scheme that is configuring by your Web browser such as Netsc...

Page 11: ...is established you will see the web user interface of this product There are two appearances of web user interface for general users and for system administrator To log in as an administrator enter th...

Page 12: ...working status A WAN Port Status If the WAN port is assigned a dynamic IP there may appear a Renew or Release button on the Sidenote column You can click this button to renew or release IP manually B...

Page 13: ...4 3 Wizard Setup Wizard will guide you through a basic configuration procedure step by step Press Next Setup Wizard Select WAN Type For detail settings please refer to 4 4 1 primary setup 13...

Page 14: ...4 4 Basic Setting 4 4 1 Primary Setup WAN Type Virtual Computers 14...

Page 15: ...on to choose a correct one from the following four options A Static IP Address ISP assigns you a static IP address B Dynamic IP Address Obtain an IP address from ISP automatically C Dynamic IP Address...

Page 16: ...t want to change the password leave it empty 2 PPPoE Service Name optional Input the service name if your ISP requires it Otherwise leave it blank 3 Maximum Idle Time the amount of time of inactivity...

Page 17: ...connect to ISP automatically after system is restarted or connection is dropped 4 4 1 6 Virtual Computers 17...

Page 18: ...computers and devices in your network Fortunately DHCP Server provides a rather simple approach to handle all these settings This product supports the function of DHCP server If you enable this produc...

Page 19: ...tion enables you to assign another gateway to your PC when DHCP server offers an IP to your PC 4 4 3 Wireless Setting and 802 1X setting Wireless settings allow you to set the wireless configuration i...

Page 20: ...A B F digits 5 Pass phrase Generator Since hexadecimal characters are not easily remembered this device offers a conversion utility to convert a simple word or phrase into hex 6 802 1X Setting 802 1X...

Page 21: ...WPA PSK 1 Select Preshare Key Mode 2 Fill in the key Ex 12345678 21...

Page 22: ...the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name RADIUS Shared Key Key value shared by the RADIUS server...

Page 23: ...4 4 4 Change Password You can change Password here We strongly recommend you to change the system password for security reason 23...

Page 24: ...4 5 Forwarding Rules 4 5 1 Virtual Server 24...

Page 25: ...o this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Sche...

Page 26: ...Special Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger...

Page 27: ...e exposed to unrestricted 2 way communication for Internet games Video conferencing Internet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP...

Page 28: ...4 6 Security Settings 28...

Page 29: ...vers or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can spec...

Page 30: ...An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule Each rule can be enabled o...

Page 31: ...1 2 3 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are all allowed After Inbound Packet Filter setting is configured click the save button Outboun...

Page 32: ...149 They are allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 192 168 123 10 192 168 123 20 They can do everything bl...

Page 33: ...2 168 123 100 192 168 123 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the sa...

Page 34: ...when someone accesses the specific URLs Privilege IPAddresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restric...

Page 35: ...will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www google com will be blocked but the action will not be record in l...

Page 36: ...nput a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Checked if you want to enable URL...

Page 37: ...will be record in log file 2 URL include sina will be blocked but the action will be record in log file 3 URL include cnnsi will not be blocked but the action will be record in log file 4 URL include...

Page 38: ...connect to this device If a client is denied to connect to this device it means the client can t access to the Internet either Choose allow or deny to allow or deny the clients whose MAC addresses are...

Page 39: ...heck C will allow the corresponding client to connect to this device A When Association control is checked check A will allow the corresponding client to associate to the wireless LAN In this page we...

Page 40: ...ess is 0 0 0 0 any host can connect to this product to perform administration task You can use subnet mask bits nn notation to specified a group of trusted IP addresses For example 10 1 2 0 24 NOTE Wh...

Page 41: ...4 7 Advanced Settings 41...

Page 42: ...ime by NTP Protocol Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates Set Date and Time manually Selected if you want to Set Date and Time...

Page 43: ...nable to enable this function E mail Alert Enable Check if you want to enable Email alert send syslog via email SMTP Server IP and Port Input the SMTP server IP and port which are concated with If you...

Page 44: ...to your current IP address which changes each time you connect your Internet service provider Before you enable Dynamic DNS you need to register an account on one of these Dynamic DNS servers that we...

Page 45: ...Password Key You will get this information when you register an account on a Dynamic DNS server Example After Dynamic DNS setting is configured click the save button 45...

Page 46: ...lues and monitoring network events Enable SNMP You must check either Local or Remote or both to enable SNMP function If Local is checked this device will response request from LAN If Remote is checked...

Page 47: ...ow packets to find proper routing path and allow different subnets to communicate with each other Routing Table settings are settings used to setup the functions of static Static Routing For static ro...

Page 48: ...3 103 1 So if for example the client3 wanted to send an IP data gram to 192 168 0 2 it would use the above table to determine that it had to go via 192 168 123 103 a gateway And if it sends Packets to...

Page 49: ...4 7 6 Schedule Rule You can set the schedule time to decide which service will be turned on or off Select the enable item Press Add New Rule 49...

Page 50: ...You can write a rule name and set which day and what time to schedule from Start Time to End Time The following example configure ftp time as everyday 14 10 to 16 20 50...

Page 51: ...want to Enable the Scheduler Edit To edit the schedule rule Delete To delete the schedule rule and the rule of the rules behind the deleted one will decrease one automatically Schedule Rule can be ap...

Page 52: ...Exanple1 Virtual Server Apply Rule 1 ftp time everyday 14 10 to 16 20 Exanple2 Packet Filter Apply Rule 1 ftp time everyday 14 10 to 16 20 52...

Page 53: ...4 8 Toolbox 53...

Page 54: ...4 8 1 System Log You can View system log by clicking the View Log button 54...

Page 55: ...4 8 2 Firmware Upgrade You can upgrade firmware by clicking Firmware Upgrade button 55...

Page 56: ...n file Once you want to restore these settings please click Firmware Upgrade button and use the bin file you saved 4 8 4 Reset to default You can also reset this product to factory default by clicking...

Page 57: ...to power up a networked device remotely In order to enjoy this feature the target device must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 22 33 44 55 Clicking...

Page 58: ...mputer If not please refer to your network card manual Moreover the Section B 2 tells you how to set TCP IP values for working with this NAT Router correctly A 1 Install TCP IP Protocol into Your PC 1...

Page 59: ...P IP Protocol for Working with NAT Router 1 Click Start button and choose Settings then click Control Panel 2 Double click Network icon Select the TCP IP line that has been associated to your network...

Page 60: ...a Select Obtain an IP address automatically in the IP Address tab b Don t input any value in the Gateway tab 60...

Page 61: ...Configure IP manually a Select Specify an IP address in the IP Address tab The default IP address of this product is 192 168 123 254 So please use 192 168 123 xxx xxx is between 1 and 253 for IP Addre...

Page 62: ...ress of this product default IP is 192 168 123 254 in the New gateway field and click Add button c In the DNS Configuration tab add the DNS values which are provided by the ISP into DNS Server Search...

Page 63: ...out Service Pack 1 Wireless LAN adapter PC2 Microsoft Windows XP Professional with Service Pack 1a Wireless LAN USB adapter Authentication Server Windows 2000 RADIUS server with Service Pack 3 and Hot...

Page 64: ...on RADIUS server according to the test condition 3 1 2 Setup DUT 1 Enable the 802 1X check the Enable checkbox 2 Enter the RADIUS server IP 3 Enter the shared key The key shared by the RADIUS server a...

Page 65: ...4 We will change EAP type to fit the variable test condition Figure 2 Enable IEEE 802 1X access control 65...

Page 66: ...Point 3 Set authentication type of wireless client and RADIUS server both to EAP_TLS 4 Disable the wireless connection and enable again 5 The DUT will send the user s certificate to the RADIUS server...

Page 67: ...Figure 4 Certificate information on PC1 Figure 5 Authenticating 67...

Page 68: ...5 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure 6 Terminate the test steps when PC2 get dynamic IP and PING remote host successfully Su...

Page 69: ...K K a a an n nd d d W W WP P PA A A Wireless Router LAN IP 192 168 123 254 WAN IP 192 168 122 216 Radius Server 192 168 122 1 UserA XP Wireless Card Ti 11g Tool Odyssey Client Manager Refer to www fu...

Page 70: ...y Radius Server the client and wireless Router authenticate by themselves Method1 1 Go to the Web manager of Wireless Router to configure like below 2 Go to Odyssey Client Manager first choose Network...

Page 71: ...3 Add and edit some settings 71...

Page 72: ...ch windows XP and have to install Service package 1 Patch http www microsoft com downloads details aspx displaylang en FamilyID 503 9ef4a 61e0 4c44 94f0 c25c9de0ace9 2 Then reboot 3 Setting on the rou...

Page 73: ...Choose View available Wireless Networks like below Advanced choose 123kk 73...

Page 74: ...ke 802 1x The above is our environment Method 1 1 The UserA or UserB have to get certificate from Radius first http 192 168 122 1 certsrv account fae1 passwd fae1 2 Then Install this certificate and f...

Page 75: ...4 Go to Odyssey Client Manager choose Profiles and Setup Profile name as 1 Login name and passwd are fae1 and fae1 Remember that you get certificate from Radius in Step1 75...

Page 76: ...5 Then Choose certificate like above 76...

Page 77: ...6 Then go to Authentication and first Remove EAP TLS and Add EAP TLS again 77...

Page 78: ...7 Go Network and Select 1 and ok 78...

Page 79: ...t 123kk If successfully the wireless client has to authenticate with Radius Server like below 9 Result Method 2 1 The UserA or UserB have to get certificate from Radius first http 192 168 122 1 certsr...

Page 80: ...2 Then Install this certificate and finish 3 Setting on the router and client Router 80...

Page 81: ...wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Select WirelessCA and Enable in Trusted root certificate authority Then if the wireless client wants to assoc...

Page 82: ...f the router and press the RESET button in And then power on the router and push the RESET button down until the M1 and or M2 LED or Status LED start flashing then remove the finger If LED flashes abo...

Reviews:

No comments

Brands by name

Popular brands

Load more brands