background image

 

76 

WEP Encryption 

This option specifies whether data sent over the network is encrypted. The same 
network key is used for data encryption and network authentication. Four network 
keys can be defined although only one can be used at any one time. Use the Current 
Network Key list box to select the appropriate network key.   
 
Security options include authentication and encryption services based on the wired 
equivalent privacy (WEP) algorithm.    WEP is a set of security services used to 
protect 802.11 networks from unauthorized access, such as eavesdropping; in this 
case, the capture of wireless network traffic.    When data encryption is enabled, 
secret shared encryption keys are generated and used by the source station and the 
destination station to alter frame bits, thus avoiding disclosure to eavesdroppers. 
 
Under shared key authentication, each wireless station is assumed to have received 
a secret shared key over a secure channel that is independent from the 802.11 
wireless network communications channel. 

Encryption Strength 

This drop-down list box will display when WEP Encryption is enabled.    The key 
strength is proportional to the number of binary bits comprising the key.    This 
means that keys with a greater number of bits have a greater degree of security and 
are considerably more difficult to crack.    Encryption strength can be set to either 
64-bit or 128-bit.    A 64-bit key is equivalent to 5 ASCII characters or 10 
hexadecimal numbers.    A 128-bit key contains 13 ASCII characters or 26 
hexadecimal numbers.    Each key contains a 24-bit header (an initiation vector) 
which enables parallel decoding of multiple streams of encrypted data. 

6.2.1 WPS 

Wi-Fi Protected Setup (WPS) is an industry standard that simplifies wireless security 
setup  for  certified  network  devices.  Every  WPS  certified  device  has  both  a  PIN 
number  and  a  push  button,  located  on  the  device  or  accessed  through  device 
software. The NEXUSLINK 3111u has both a WPS button on the device and a virtual 
button accessible from the web user interface (WUI). 
 
Devices  with  the  WPS  logo  (shown  here) 
support WPS. If the WPS logo is not present 
on  your  device  it  still may  support  WPS,  in 
this  case,  check  the  device  documentation 
for the phrase 

Wi-Fi Protected Setup

 

NOTE:

 

WPS  is  only  available  in  Open,  WPA-PSK,  WPA2-PSK  and  Mixed 
WPA2/WPA-PSK  network  authentication  modes.    Other  authentication 
modes do not use WPS so they must be configured manually. 

 
To configure security settings with WPS, follow the procedures below. You must 
choose either the Push-Button or PIN configuration method for Steps 6 and 7. 

I. Setup 

Step 1:

  Enable WPS by selecting 

Enabled

 from the drop down list box shown. 

 

 

 

PDF created with pdfFactory Pro trial version 

www.pdffactory.com

Summary of Contents for NEXUSLINK 3111u

Page 1: ...NEXUSLINK 3111u Multi DSL Bonded Router User Manual Version C1 1 May 8 2013 261113 00x PDF created with pdfFactory Pro trial version www pdffactory com...

Page 2: ...he power supply cord on elevated surfaces Allow it to lie freely There should be no obstructions in its path and no heavy items should be placed on the cord In addition do not walk on step on or mistr...

Page 3: ...liance could void the user s authority to operate the equipment To comply with the FCC RF exposure compliance requirements this device and its antenna must not be co located or operating to conjunctio...

Page 4: ...ontained in the packaging and the parts that make up this router can be recycled in accordance with regionally established regulations Never dispose of this electronic equipment along with your househ...

Page 5: ...ace 29 5 1 3 ETH INTERFACE 29 5 2 WAN SERVICE 30 5 3 LAN 31 5 4 IPV6 LAN AUTO CONFIGURATION 33 5 5 NAT 34 5 5 1 Virtual Servers 34 5 5 2 Port Triggering 35 5 5 3 DMZ Host 37 5 6 SECURITY 38 5 6 1 IP F...

Page 6: ...TTINGS 88 8 1 1 Backup Settings 88 8 1 2 Update Settings 88 8 1 3 Restore Default 89 8 2 SYSTEM LOG 90 8 3 SNMPAGENT 92 8 4 TR 069 CLIENT 93 8 5 INTERNET TIME 94 8 6 ACCESS CONTROL 95 8 6 1 Passwords...

Page 7: ...ss standards WPS Wi Fi Protected Setup and Wi Fi On Off buttons are positioned on the front panel for easy wireless network setup and control 1 1 Features Integrated 802 11n AP 802 11b g backward comp...

Page 8: ...7 1 2 Application The following diagrams depict typical applications of the NEXUSLINK 3111u PDF created with pdfFactory Pro trial version www pdffactory com...

Page 9: ...sconnect all power cords and telephone lines from their outlets Reset Button Restore the default parameters of the device by pressing the Reset button for 5 to 10 seconds After the device has rebooted...

Page 10: ...POTS splitter FRONT PANEL The Wi Fi WPS buttons are located on the bottom left of the front panel as shown WiFi Switch Press this button to enable disable the wireless LAN WLAN WPS Button Press this...

Page 11: ...ycle when trying to detect carrier signal l Flashing at 4 Hz with a 50 duty cycle when the carrier has been detected and the modem is trying to train On The DSL2 link is established DSL2 Green Off The...

Page 12: ...d On Powered device connected to the associated port Off No activity modem power off no cable or no powered device connected to the associated port Yellow for 10 100 Blink Traffic is passing On Powere...

Page 13: ...tocols The factory default configuration can be restored either by pushing the reset button for more than five seconds until the power indicates LED blinking or by clicking the Restore Default Configu...

Page 14: ...13 STEP 4 Click OK to submit these settings If you experience difficulty with DHCP mode you can try static IP mode instead PDF created with pdfFactory Pro trial version www pdffactory com...

Page 15: ...on for further details STEP 1 From the Network Connections window open Local Area Connection You may also access this screen by double clicking the Local Area Connection icon on your taskbar Click the...

Page 16: ...dministration i e LAN access the PC running the browser must be attached to the Ethernet and not necessarily to the device For remote access i e WAN use the IP address shown on the Chapter 4 Device In...

Page 17: ...16 STEP 3 After successfully logging in for the first time you will reach this screen PDF created with pdfFactory Pro trial version www pdffactory com...

Page 18: ...s shown are based upon the configured connection s and user account privileges Device Info is the first selection on the main menu so it will be discussed first Subsequent chapters will introduce the...

Page 19: ...ction type VlanMuxId Shows 802 1Q VLAN ID IPv6 Shows WAN IPv6 address IGMP Shows Internet Group Management Protocol IGMP status MLD Shows Multicast Listener Discovery MLD status NAT Shows Network Addr...

Page 20: ...cs to perform a manual update 4 2 1 LAN Statistics This screen shows data traffic statistics for each LAN interface Heading Description Interface LAN interface s Received Transmitted Bytes Pkts Errs D...

Page 21: ...terface Heading Description Interface WAN interfaces Description WAN service label Received Transmitted Bytes Pkts Errs Drops Number of Bytes Number of Packets Number of packets with errors Number of...

Page 22: ...packets received over the interface Out Packets Number of packets transmitted over the interface In OAM Cells Number of OAM Cells received over the interface Out OAM Cells Number of OAM Cells transmit...

Page 23: ...stics screen displays information corresponding to the xDSL type The two examples below VDSL show this variation VDSL Click the Reset Statistics button to refresh this screen PDF created with pdfFacto...

Page 24: ...S Number of data symbols the RS codeword spans L Number of bits transmitted in each data symbol D The interleaver depth I The interleaver block size in bytes N RS codeword size Delay The delay in mill...

Page 25: ...ck xDSL BER Test on the xDSL Statistics screen to test the Bit Error Rate BER A small pop up window will open after the button is pressed as shown below Click Start to start the test or click Close to...

Page 26: ...ject route G use gateway H target is a host R reinstate route for dynamic routing D dynamically installed by daemon or redirect M modified from routing daemon or redirect Metric The distance to the ta...

Page 27: ...Field Description IP address Shows IP address of host pc Flags Complete Incomplete Permanent or Publish HW Address Shows the MAC address of host pc Device Shows the connection interface PDF created w...

Page 28: ...e Shows the device host PC network name MAC Address Shows the Ethernet MAC address of the device host PC IP Address Shows IP address of device host PC Expires In Shows how much time is left for each D...

Page 29: ...Interface Add or remove ATM interface connections here Click Add to create a new ATM interface see Appendix G NOTE Up to 8 ATM interfaces can be created and saved in flash memory To remove a connectio...

Page 30: ...INTERFACE This screen displays the Ethernet WAN Interface configuration NOTE This option only applies to models with an Ethernet WAN port Click Add to create a new connection see Appendix G Connectio...

Page 31: ...onnection Type Shows the connection type Vlan8021p VLAN ID is used for VLAN Tagging IEEE 802 1Q VlanMuxId Shows 802 1Q VLAN ID ConnId Connection ID IGMP Shows Internet Group Management Protocol IGMP s...

Page 32: ...Enable by ticking the checkbox Standard Mode In standard mode multicast traffic will flood to all bridge ports when no client subscribes to a multicast group even if IGMP snooping is enabled Blocking...

Page 33: ...aximum of 32 entries can be configured To add an entry enter MAC address and Static IP and then click Save Apply To remove an entry tick the corresponding checkbox in the Remove column and then click...

Page 34: ...s information that IPv6 clients can use for autoconfiguration according to the Neighbour Discovery for IPv6 protocol RFC2461 Enable MLD Snooping Enable by ticking the checkbox Standard Mode In standar...

Page 35: ...port to the Internal server with private IP addresses on the LAN side The Internal port is required only if the external port needs to be converted to a different port number used by the server on the...

Page 36: ...number when you select Custom Server When a service is selected the port ranges are automatically configured Internal Port End Enter the internal port ending number when you select Custom Server When...

Page 37: ...ly configured Trigger Port End Enter the ending trigger port number when you select custom application When an application is selected the port ranges are automatically configured Trigger Protocol TCP...

Page 38: ...the applications configured in the Virtual Servers table to the DMZ host computer To Activate the DMZ host enter the DMZ host IP address and click Save Apply To Deactivate the DMZ host clear the IP a...

Page 39: ...each applies at least one limiting condition For individual IP packets to pass the filter all conditions must be fulfilled OUTGOING IP FILTER By default all outgoing IP traffic is allowed but IP traf...

Page 40: ...ut destination IP address Destination Port port or port port Input destination port number or range INCOMING IP FILTER By default all incoming IP traffic is blocked but IP traffic can be allowed with...

Page 41: ...number or range Destination IP address Enter destination IP address Destination Port port or port port Enter destination port number or range At the bottom of this screen select the WAN and LAN Inter...

Page 42: ...yer frames will be FORWARDED except those matching the MAC filter rules BLOCKED means that all MAC layer frames will be BLOCKED except those matching the MAC filter rules The default MAC Filtering Glo...

Page 43: ...ies the filter to the selected bridge interface 5 7 Parental Control This selection provides WAN access control functionality 5 7 1 Time Restriction This feature restricts access from a LAN device to...

Page 44: ...s of another LAN device Days of the Week The days the restrictions apply Start Blocking Time The time the restrictions start End Blocking Time The time the restrictions end 5 7 2 URL Filter This scree...

Page 45: ...begin with www as shown in this example A maximum of 100 entries can be added to the URL Filter list Tick the Exclude radio button to deny access to the websites listed Tick the Include radio button t...

Page 46: ...QoS and DSCP Mark are defined as follows Quality of Service QoS This provides different priority to different users or data flows or guarantees a certain level of performance to a data flow in accord...

Page 47: ...rface and precedence on the next screen Click Save Reboot on this screen to activate it Click Enable to activate the QoS Queue Click Add to display the following screen Name Identifier for this Queue...

Page 48: ...k Remove This screen creates a traffic class rule to classify the upstream traffic assign queuing priority and optionally overwrite the IP header DSCP byte A rule consists of a class name and at least...

Page 49: ...ination MAC Address of its header binary AND to the Destination MAC Mask must equal to the result that this field binary AND to the Destination MAC Mask Destination MAC Mask This is the mask used to d...

Page 50: ...n but ineffective 5 9 1 Default Gateway Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the f...

Page 51: ...Remove to delete a static route After clicking Add the following screen will display Select the IP Version from the drop down menu Input the Destination IP Address select the interface and input the G...

Page 52: ...configuration of static routes by policy Click Add to create a routing policy or Remove to delete one On the following screen complete the form and click Save Apply to create a policy PDF created wit...

Page 53: ...To activate RIP configure the RIP version operation mode and select the Enabled checkbox for at least one WAN interface before clicking Save Apply PDF created with pdfFactory Pro trial version www pd...

Page 54: ...enter static DNS server IP addresses for the system In ATM mode if only a single PVC with IPoA or static IPoE protocol is configured Static DNS server IP addresses must be entered Click Apply Save to...

Page 55: ...e in any of many domains allowing the NEXUSLINK 3111u to be more easily accessed from various locations on the Internet To add a dynamic DNS service click Add The following screen will display Consult...

Page 56: ...list Hostname Enter the name of the dynamic DNS server Interface Select the interface from the list Username Enter the username of the dynamic DNS server Password Enter the password of the dynamic DN...

Page 57: ...2 Downstream 12 Mbps Upstream 1 0 Mbps AnnexL Supports longer loops but with reduced transmission rates ADSL2 Downstream 24 Mbps Upstream 1 0 Mbps AnnexM Downstream 24 Mbps Upstream 3 5 Mbps MULTI DSL...

Page 58: ...creen you can select a test mode or modify tones by clicking Tone Selection Click Apply to implement these settings and return to the previous screen On this screen you select the tones you want activ...

Page 59: ...5 12 DSL Bonding This page allows you to enable disable DSL Bonding NOTE This configuration doesn t take effect until router is rebooted PDF created with pdfFactory Pro trial version www pdffactory c...

Page 60: ...59 5 13 UPnP Select the checkbox provided and click Apply Save to enable UPnP protocol PDF created with pdfFactory Pro trial version www pdffactory com...

Page 61: ...swers from the DNS server it replies to the LAN clients Configure DNS proxy with the default setting when the PC gets an IP via DHCP the domain name Home will be added to PC s DNS Suffix Search List a...

Page 62: ...K 3111u can provide printer support through an optional USB2 0 host port If your device has this port refer to Appendix F Printer Server for detailed setup instructions PDF created with pdfFactory Pro...

Page 63: ...AN and WAN interfaces using the Add button The Remove button removes mapping groups returning the ungrouped interfaces to the Default group Only the default group has an IP interface To add an Interfa...

Page 64: ...0 38 VPI VCI 0 33 is for PPPoE while the other PVCs are for IP set top box video The LAN interfaces are ENET1 ENET2 ENET3 and ENET4 The Interface Grouping configuration will be 1 Default ENET1 ENET2...

Page 65: ...ing configuration will automatically change to the following 1 Default ENET2 ENET3 and ENET4 2 Video nas_0_36 nas_0_37 nas_0_38 and ENET1 5 17 IP Sec You can add edit or remove IPSec tunnel mode conne...

Page 66: ...or Subnet IP Address Subnet Mask for VPN If you chose Single please enter the host IP address for VPN If you chose Subnet please enter the subnet information for VPN Key Exchange Method Select from Au...

Page 67: ...DES 3DES AES 128 192 256 Integrity Algorithm MD5 SHA1 Select Diffie Hellman Group 768 8192 bit Key Life Time Enter your own or use the default 1 hour The Manual key exchange method options are summar...

Page 68: ...FICATE REQUEST Click Create Certificate Request to generate a certificate signing request The certificate signing request can be submitted to the vendor ISP ITSP to apply for a certificate Some inform...

Page 69: ...lly qualified domain name for the machine Organization Name The exact legal name of your organization Do not abbreviate State Province Name The state or province where your organization is located It...

Page 70: ...the certificate content and the private key provided by your vendor ISP ITSP into the corresponding boxes shown below Input a certificate name and click Apply to import the local certificate PDF creat...

Page 71: ...s to sign and issue certificates in order to prove that these certificates are valid Click Import Certificate to paste the certificate content of your trusted CA The CA certificate content will be pro...

Page 72: ...71 5 19 Multicast Input new IGMP protocol configuration fields if you want modify default values shown Then click Apply Save PDF created with pdfFactory Pro trial version www pdffactory com...

Page 73: ...s or disables the wireless LAN interface When selected a set of basic wireless options will appear Hide Access Point Select Hide Access Point to protect the access point from detection by wireless act...

Page 74: ...ependent BSS or ad hoc networks the BSSID is generated randomly Country A drop down menu that permits worldwide and specific national settings Local regulations limit channel range US worldwide Japan...

Page 75: ...SID Select the wireless network name from the drop down box SSID stands for Service Set Identifier All stations must be configured with the correct SSID to access the WLAN If the SSID does not match t...

Page 76: ...75 The settings for WPA authentication are shown below The settings for WPA PSK authentication are shown next PDF created with pdfFactory Pro trial version www pdffactory com...

Page 77: ...f security and are considerably more difficult to crack Encryption strength can be set to either 64 bit or 128 bit A 64 bit key is equivalent to 5 ASCII characters or 10 hexadecimal numbers A 128 bit...

Page 78: ...on to check its capabilities In addition using Windows Vista you can add an external registrar using the StartAddER button Appendix E WSC External Registrar has detailed instructions II NETWORK AUTHEN...

Page 79: ...or 2 minutes If the router stops searching before you complete Step 7 return to Step 6 Step 6 First method WPS button Press the WPS button on the rear panel of the router The WPS LED will blink to sho...

Page 80: ...ect the PIN radio button in the WSC Setup section of the Wireless Security screen as shown in A or B below and then click the appropriate button based on the WSC AP mode selected in step 2 A For Confi...

Page 81: ...tablished successfully You can also double click the Wireless Network Connection icon from the Network Connections window or the system tray to confirm the status of the new connection PDF created wit...

Reviews: