manualshive.com logo in svg

Cradlepoint MBR95, Product Manual, Page: 56 / 137

Share
Download
Cradlepoint MBR95 Product Manual Download Page 56

CRADLEPOINT 

MBR95| USER MANUAL Firmware ver. 3.6.3 

 

NETWORK SETTINGS 

→ CONTENT FILTERING

 

© 2011 

CRADLEPOINT, INC.                                        PLEASE VISIT 

HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/

 FOR MORE HELP AND RESOURCES 

 

 

 

  PAGE 54  

 

OpenDNS network. In order for Custom settings to work you need to login to 

DNS-O-MATIC

 using your OpenDNS 

credentials and "Add A Service" for the network specified above. 

Enable OpenDNS ISP Filter Bypass Algorithm:

 It is possible that your Internet Service Provider (ISP) uses the port that 

OpenDNS is configured to access, port 53, which will prevent OpenDNS filtering. If OpenDNS does not appear to be 
working correctly, enabling this will attempt to bypass those ports when using an OpenDNS content filtering level.  

 

Summary of Contents for MBR95

Page 1: ......

Page 2: ... Feb 21 2012 Updated release for Firmware version 3 4 1 Jeremy Cramer 1 2 July 31 2012 Updated release for Firmware version 3 6 3 Jeremy Cramer Trademarks CradlePoint and the CradlePoint logo are registered trademarks of CradlePoint Inc in the United States and other countries All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies ...

Page 3: ...VS INTERNET 28 5 STATUS 29 5 1 CLIENT LIST 30 5 2 DASHBOARD 32 5 3 GPS 35 5 4 INTERNET CONNECTIONS 36 5 5 STATISTICS ADVANCED MODE ONLY 47 5 6 SYSTEM LOGS 50 6 NETWORK SETTINGS 51 6 1 CONTENT FILTERING 52 6 2 DHCP SERVER ADVANCED MODE ONLY 55 6 3 DNS ADVANCED MODE ONLY 56 6 4 FIREWALL ADVANCED MODE ONLY 59 6 5 MAC FILTER 64 6 6 ROUTING ADVANCED MODE ONLY 65 6 7 WIFI LOCAL NETWORKS 66 7 INTERNET 81...

Page 4: ...ADLEPOINT MBR95 USER MANUAL Firmware ver 3 6 3 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 2 10 2 WARRANTY INFORMATION 132 10 3 SPECIFICATIONS 133 ...

Page 5: ...ed Internet Explorer v6 0 or higher Firefox v2 0 or higher Safari v1 0 or higher 1 3 MBR95 Overview Create a WiFi hotspot anywhere you have broadband signal Create secure instant networks anywhere you receive mobile broadband signal The most powerful feature of the MBR95 is its ability to use USB Mobile Broadband Data Modems to create instant secure networks plus traditional wired networking optio...

Page 6: ...reless Virgin Mobile as well as most Cable DSL and Satellite providers ENHANCED WIFI 600 feet of WiFi Range Wireless N WiFi 802 11n legacy 802 11b g 2x2 MIMO Internal Antenna system Enhanced performance around walls and other obstructions Maximum security with both Private and Guest networks ADDITIONAL FEATURES 2x2 MIMO Internal Antenna Subsystem dual SSIDs Plug and Play support for over 120 broad...

Page 7: ...CRADLEPOINT MBR95 USER MANUAL Firmware ver 3 6 3 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 5 2 HARDWAREOVERVIEW ...

Page 8: ...CRADLEPOINT MBR95 USER MANUAL Firmware ver 3 6 3 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 6 2 1 Ports Buttons and Switches ...

Page 9: ...95 USER MANUAL Firmware ver 3 6 3 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 7 2 2 LEDs Power The MBR95 must be powered using an approved 12V DC power source ...

Page 10: ...configured correctly or the router may not be turned on WPS WiFi Protected Setup When you press the WPS button for five seconds it allows you to use WPS for your WiFi security Blinking Blue WPS setting is in progress Solid Blue WPS is active Wireless Broadcast Indicates activity on the WiFi broadcast for the 2 4 GHz band Blue 2 4 GHz WiFi is on and operating normally Red Error with 2 4 GHz connect...

Page 11: ... active 4G connection Blinking Blue Modem is connecting to 4G Green Modem has established an active 3G connection Blinking Green Modem is connecting to 3G Amber Modem is not active Blinking Amber Data connection error No modem connection possible Blinking Red Modem is in the process of resetting 4G 3G Modem Signal Strength Blue LED bars indicate the active modem s signal strength Press WPS button ...

Page 12: ... port or connect to an available WiFi source For Failover Failback functionality you will need at least two of these sources for example an Ethernet source and a USB modem 1 2 Connect to a Power Source Connect the 12v DC power adapter to the router and a power source Flip the power switch to the ON position this should illuminate the green Power Status LED 1 Data Modem Not Included This Product Re...

Page 13: ... select this network 2 Log in You will need to input the Default Password when prompted The Default Password is provided on the product label found on the bottom of your router this password is the last eight digits of the router s MAC address which can be found on the product box or on the product label NOTE If more than one MBR95 wireless router is visible you can find the correct unit by checki...

Page 14: ... the MBR95 you will need to log in to the administration pages Access your router s Administrator Login screen by opening a web browser window and typing cp your router s default hostname or the IP address 192 168 0 1 into the address bar Enter your Default Password This password can be found on the bottom of the MBR95 Then click the LOGIN button When you log in for the first time you will be auto...

Page 15: ...he WiFi Network Name or the Security Mode password If so you will need to reconnect to the MBR95 network Find the network Look for your new personalized network name or the default SSID of the form MBR95 xxx Log in using your new personalized WiFi security password or the Default Password found the bottom of the router Your network should now be up and running and users who have the security passw...

Page 16: ...ing to the MBR95 Insert your USB data modem into your PC and access the Internet using the software provided by your cellular carrier Follow the directions provided to complete the update Once you have updated your USB data modem reconnect the cellular device to your CradlePoint router and connect to the Internet If you are using a 4G WiMAX modem you need to set the WiMAX Realm This can be done on...

Page 17: ...may need to plug your modem directly into your computer if you don t have another way to access the Internet to download the latest firmware for the router go to http www cradlepoint com support mbr95 and scroll over firmware at the bottom of the page Then log in to the router administration pages and manually upload the firmware Go to System Settings System Software and click on Manual Firmware U...

Page 18: ...tatus LEDs of your router will give you an indication whether or not a proper connection is being made See the LED STATUS definitions below If the USB data modem LEDs are not illuminated your modem is not connected and online You may need to update firmware Refer to the previous section Your USB Modem Does Not Work With The Router If you are still not online after updating call CradlePoint Technic...

Page 19: ...ge the IP address of the MBR95 router from 192 168 0 1 A suggested IP address is 192 168 10 1 Change the IP address by going to Network Settings WiFi Local Networks Find the IP address under IP Settings and type the alternate IP address Click Submit to save the settings NOTE To access the router administration pages after changing the IP address you will need to go to the new IP address in your In...

Page 20: ...The MBR95 has a Web interface for configuration and administration of all features The interface is organized with a button for toggling between Basic Mode and Advanced Mode and 5 tabs at the top of the screen Getting Started Status Network Settings Internet System Settings Click on any of the 5 tabs to open a dropdown menu with further options for the administration of the MBR95 ...

Page 21: ...n To access the administration pages open a Web browser and type the hostname cp or IP address http 192 168 0 1 into the address bar The Administrator Login page will appear Log in using your administrator password Initially this password can be found on the bottom of the MBR95 unit as the Default Password This password is also the last eight digits of the unit s MAC address ...

Page 22: ...ss and hold the reset button on the router unit until the lights flash 10 seconds You can then log in using the Default Password 4 1 1 Router Details The Administrator Login page includes a section that shows the following Router Details Wireless Details Model Number MBR95 Status Enabled Disabled Clients The number of attached users Channel The channel number Name The name of the primary network I...

Page 23: ... MBR95 1 Open a browser window and type cp or 192 168 0 1 into the address bar Press enter return 2 When prompted for your password type the eight character Default Password found on the product label on the bottom of the MBR95 this is also the last 8 digits of the router s MAC address 3 When you log in for the first time you will be automatically directed to the FIRST TIME SETUP WIZARD Otherwise ...

Page 24: ...evices and is the most secure but may not connect to older devices or some handheld devices such as a PSP GOOD WPA1 WPA2 Select this option if your wireless adapters support WPA or WPA2 This is the most compatible with modern devices and PCs POOR WEP Select this option if your wireless adapters only support WEP This should only be used if a legacy device that only supports WEP will be connected to...

Page 25: ...t devices to the router s WiFi broadcast once the security settings have been saved WPA Password The WPA Password must be between 8 and 64 characters long A combination of upper and lower case letters along with numbers and special characters is recommended to prevent hackers from gaining access to your network WEP Key A WEP Key must be either a hexadecimal value of 5 or 13 characters or a text va...

Page 26: ...ures that the modem when attached to the router will properly connect to your carrier s wireless broadband service The MBR95 will default to the Sprint Realm Select your carrier from the dropdown menu options shown below Clear clearwire wmx net Rover rover wmx net Sprint 3G 4G sprintpcs com Xohm xohm com BridgeMAXX bridgeMAXX com Time Warner Cable mobile rr com Comcast mob comcast net NOTE If you ...

Page 27: ...sword and WPA password or WEP key Move your mouse over the passwords to selectively reveal each password Please record these settings for future access You may need this information to configure other wireless devices NOTE If you are currently using the MBR95 WiFi network reconnect your devices to the network using the new wireless network name and security password Click APPLY to save the setting...

Page 28: ...about the router The black bar across the top provides quick access to important information and controls Internet Connection This links to the Internet Connections Status page Status Internet Connections where you can view information about your Internet sources Click on the image of four signal bars to open a Modem Connection Quality popup window that shows the strength of your Internet signal W...

Page 29: ...anced Mode Getting Started Status Network Settings Internet System Settings Basic Mode First Time Setup WiFi Protected Setup Client List Dashboard GPS Internet Connections System Logs Content Filtering MAC Filter WiFi Local Networks Connection Manager Administration System Control System Software Advanced Mode also includes all options in Basic Mode Statistics DHCP Server DNS Firewall Routing Data...

Page 30: ...outer s source of Internet while the Network Settings tab broadly refers to the network created by the router The following chart highlights this difference Network Settings tab Internet output Network created by MBR95 LAN Local Area Network Internet tab Internet input Source for MBR95 WAN Wide Area Network Examples If you want to change the content filtering settings for the network created by th...

Page 31: ...P KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 29 5 STATUS The Status tab displays information about many different aspects of the router It provides access to 6 submenu options Client List Dashboard GPS Internet Connections Statistics System Logs Statistics Advanced Mode only ...

Page 32: ...ample 802 11n 20 MHz 130 Mbps 26 dBm 802 11n The transmission standard being used by the client Possible values include 802 11b 802 11g and 802 11n 802 11n is the newest and best standard but some older devices may not support it 20 MHz This is the channel width that defines the theoretical data rate in megahertz that the attached computer or device can send to or receive from the router The chann...

Page 33: ...to one milliwatt This expresses theoretical best quality The value is given as a negative exponent 20 is a very good value while 80 is relatively poor Signal quality can be reduced by distance by interference from other radio frequency sources such as cordless telephones or neighboring wireless networks and by obstacles between the router and the wireless device Time Online Simply the amount of ti...

Page 34: ...depth information and or configuration options click on the Detailed Info link beside the category title For each category this links to Router Information o System Settings Administration Internet o Internet Connection Manager Local Networks o Network Settings WiFi Local Networks WiFi Networks o Network Settings WiFi Local Networks After the initial setup of the router every time you log in you w...

Page 35: ... Manager State Connected Disconnected Signal Strength Expressed as a percentage Signal Strength is not included if Ethernet is the WAN type WAN Type Ethernet Modem or WiFi as WAN Connected Time The time the current Internet source WAN has been connected IP Address Gateway DNS Servers For general configuration options see Internet Connection Manager For more in depth Internet source configuration o...

Page 36: ...4 GHz 36 40 44 48 149 153 157 161 or 165 for 5 GHz Transmit Power Expressed as a percentage For each WiFi network the following information is displayed SSID Service Set Identifier an identifier for a wireless network o Security WPA2 WPA1 WEP Personal or Open Isolated Clients o Network The name of the local network To configure WiFi network settings see Network Settings WiFi Local Networks 5 2 1 R...

Page 37: ...l show a graphical view of your router s location See the GPS section in System Settings Administration to enable GPS support GPS information is only displayed if 1 the modem supports GPS 2 your carrier allows the GPS functionality and 3 the modem has sufficient GPS signal strength If no information is displayed check that both the modem and your carrier support GPS If GPS is supported make sure t...

Page 38: ...R95 Select one of these devices to see detailed information about that particular device For each type of device different information will be included in the Device Information section Possible devices include Ethernet WiFi GSM Modem EVDO Modem WiMAX Modem LTE Modem Depending on the device possible information will be in the following sections Diagnostics General Information IP Information and St...

Page 39: ...EPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 37 5 4 1 Ethernet General Information Unique Identifier Model Type ethernet Port number IP Information DNS Servers IP Address Gateway Statistics Incoming Bytes Outgoing Bytes Connection Uptime secs ...

Page 40: ...1 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 38 5 4 2 WiFi as WAN Diagnostics Connection State connected idle etc General Information Product Wireless As WAN Unique Identifier Type wwan IP Information Netmask IP Address Gateway ...

Page 41: ...kia Datacard Diagnostics Signal Error Rate Modem Firmware Version Battery Status Battery Level Carrier Status Signal Strength dBm PIN Status Connection State connected idle etc General Information Product Nokia Datacard Protocol PPP Unique Identifier ESN IMEI Model Nokia Internet Stick CS 18 Type modem Port Manufacturer Nokia IP Information Netmask IP Address Gateway Statistics Outgoing Bits Secon...

Page 42: ...95 USER MANUAL Firmware ver 3 6 3 STATUS INTERNET CONNECTIONS 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 40 Incoming Bits Second Incoming Bytes Outgoing Bytes ...

Page 43: ...gnostics Modem Firmware Version PRL Version Service Display EVDO Carrier Status Signal Strength dBm Connection Type CDMA Connection State connected idle etc General Information Product MC760 COMCAST Protocol PPP Unique Identifier ESN IMEI Model MC760 COMCAST Type modem Port Manufacturer Novatel Wireless Inc IP Information Netmask IP Address Gateway Statistics Outgoing Bits Second Incoming Bits Sec...

Page 44: ...CRADLEPOINT MBR95 USER MANUAL Firmware ver 3 6 3 STATUS INTERNET CONNECTIONS 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 42 Outgoing Bytes ...

Page 45: ... effects on how much data the router can download or send You can place the router in different locations to see where you get better signal You can also see a LED display of the current signal strength Pressing the router s WPS button will toggle the LED display on and off Base Station ID BSID Signal Strength dBm Center Frequency Calibration Status Don t worry if this says the modem is not calibr...

Page 46: ...NET CONNECTIONS 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 44 Type WiMAX Port Manufacturer Franklin Wireless Corporation Statistics Outgoing Bits Second Incoming Bits Second Incoming Bytes Outgoing Bytes ...

Page 47: ... PANTECH UML290 Diagnostics MN HA SPI Modem Firmware Version Battery Status CGSN MN HA SS Network Address Identifier NAI SINR Service Display LTE MN AAA SS Carrier Status MN AAA SPI PIN Status GSN Home Address Product Pantech UML290 Signal Strength dBm DEFPOP Model UML290VW Manufacturer Pantech Incorporated Rev Tun Battery Level Secondary Home Agent Service Display LTE Primary Home Agent Profile ...

Page 48: ... CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 46 General Information Unique Identifier Port usb1 Model UML290VW Type lte IP Information DNS Servers IP Address Gateway Statistics Incoming Bytes Outgoing Bytes Connection Uptime secs ...

Page 49: ...SOURCES PAGE 47 5 5 Statistics Advanced Mode only The Statistics submenu option displays basic traffic statistics Wireless Statistics View the signal strength and other wireless modem information The wireless device s signal strength will only be displayed as long as it supports Live Diagnostics Sample rate and size can be adjusted from the dropdown boxes ...

Page 50: ...11 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 48 Data Usage A measure of amount of information that is currently being sent or received through the network Sample rate and size can be adjusted from the dropdown boxes ...

Page 51: ...NC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 49 Failover Failback Load Balance An easy way to view current connective states of the devices plugged into the router as compared to the past Sample rate and size can be adjusted from the dropdown boxes ...

Page 52: ... easily find relevant messages This router also has external Syslog Server support so you can send the log files to a computer on your network that is running a Syslog utility Auto Update The logs automatically refresh whenever the router creates a new message Update Click to check for new router messages Clear log Clear the log file Save Log This will open a dialog in your browser that will allow...

Page 53: ...NETWORKSETTINGS The Network Settings tab provides access to 7 submenu options for administering the following functions tasks These functions are all related to controlling the LAN Local Area Network the network you set up with the MBR95 Content Filtering DHCP Server DNS Firewall MAC Filter Routing WiFi Local Networks DHCP Server DNS Firewall and Routing Advanced Mode only ...

Page 54: ...elist By default Domain URL filters allow you to block access from your network to any external domain or website Enabling this as a Whitelist instead will allow access to only those sites in the list blocking all other websites Some sites use multiple domains so each of them would need to be added to the list to get full site functionality The default behavior enables the Whitelist for URLs only ...

Page 55: ...nudity sexuality and tasteless content Best Filters more nudity sexuality and tasteless content Selecting Best will filter all content that is deemed adult content by OpenDNS Custom Custom OpenDNS settings See below for more information In addition to the standard filtering levels you have the following options for filter control Custom OpenDNS To use the Custom OpenDNS setting you need to first c...

Page 56: ...eed to login to DNS O MATIC using your OpenDNS credentials and Add A Service for the network specified above Enable OpenDNS ISP Filter Bypass Algorithm It is possible that your Internet Service Provider ISP uses the port that OpenDNS is configured to access port 53 which will prevent OpenDNS filtering If OpenDNS does not appear to be working correctly enabling this will attempt to bypass those por...

Page 57: ...n the network Reservations This option lets you reserve IP addresses you can assign the same IP address to the network device with the specified MAC address any time it requests an IP address This is almost the same as when a device has a static IP address except that the device must still request an IP address from the router The router will provide the device the same IP address every time DHCP ...

Page 58: ...on Allows you to map a name xbox nas toaster etc to an IP address of a device on the network 6 3 1 DNS Settings You have the option to choose specific DNS servers for your network instead of using the DNS servers assigned by your Internet provider The default DNS servers are usually adequate You may want to assign DNS servers if the default DNS servers are performing poorly if you want WiFi client...

Page 59: ... When you use a Dynamic DNS service provider you can enter your host name to connect to your server no matter what your IP address is Enable Dynamic DNS Enable this option only if you have purchased your own domain name and registered with a Dynamic DNS service provider Server Type Select a Dynamic DNS service provider from the pull down list www DynDNS org www DNSomatic com www ChangeIP com www N...

Page 60: ...ewall or router the network s external IP address will have to be manually configured in this field You may find out what your external IP address is by going to http myip dnsomatic com in a web browser 6 3 4 Known Hosts Configuration The Known Hosts Configuration feature allows you to map a name printer scanner laptop etc to an IP address of a device on the network This assigns a new hostname tha...

Page 61: ... needs of specific types of applications 6 4 1 Port Forwarding Rules A port forwarding rule allows traffic from the Internet to reach a computer on the inside of your network For example a port forwarding rule might be used to run a Web server Exercise caution when adding new rules as they impact the security of your network Click Add to create a new port forwarding rule or select an existing rule...

Page 62: ...cal Port s field to open a port for a Web server on a computer within your network The Internet Port s field could then also be 80 or you could choose another port number that will be used across the Internet to access your Web server If you choose a number other than 80 for the Internet Port connections to that number will be mapped to 80 and therefore the Web server within your network Protocol ...

Page 63: ...estrict remote access to a specified host or network range For example in order to host a server you might have opened ports with a port forwarding rule that could expose your LAN to cyber attacks With an incoming IP filter rule you can restrict the access to your LAN to only known devices Name Name your rule Enabled Selected by default Direction Any Incoming or Outgoing Action Allow or Deny Proto...

Page 64: ...s will be included IP Source and IP Destination options can be used to differentiate between the directions that packets go You could permit packets to come from particular IP addresses but then not allow packets to return to those addresses Example of an IP Filter Rule Suppose you have opened a port in your firewall in order to run a server Someone Johnny is abusing that opening so you would like...

Page 65: ...rity of your network Only use DMZ as a last resort 6 4 4 Firewall Options Anti Spoof Anti Spoof checks help protect against malicious users faking the source address in packets they transmit in order to either hide themselves or to impersonate someone else Once the user has spoofed their address they can launch a network attack without revealing the true source of the attack or attempt to gain acc...

Page 66: ...ed Click to allow MAC Filter options Whitelist Select either Whitelist or Blacklist from a dropdown menu In Whitelist mode the router will restrict WiFi access to all computers except those contained in the MAC Filter List panel In Blacklist mode listed devices are completely blocked from WiFi access MAC Filter List Whitelist or Blacklist Add devices to either your whitelist or blacklist simply by...

Page 67: ... specify the type of the target Network Host Netmask The Netmask along with the IP address defines the network the computer belongs to and which other IP addresses the computer can see in the same LAN An IP address of 192 168 0 1 along with a Netmask of 255 255 255 0 defines a network with 256 available IP addresses from 192 168 0 0 to 192 168 0 255 NOTE 255 255 255 255 is used to signify only the...

Page 68: ...ction They will have to reconnect to the network The user can set up multiple networks each with its own unique configuration and its own selection of interfaces Each local network can be attached to either of the following types of interfaces WiFi Ethernet For example one network might be just an isolated WiFi hotspot for guests while another might be the main network with administrative access t...

Page 69: ...ETWORK SETTINGS WIFI LOCAL NETWORKS 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 67 Click Add to configure a new network or select an existing network and click Edit to view configuration options ...

Page 70: ...s through the new hostname IP Address This is the address used by the router for local area network communication Changes to this parameter may require a restart to computers on this network Each network must have a distinct IP address Most users will want an address from one of the following private IP ranges 10 0 0 1 10 255 255 1 172 16 0 1 172 31 255 1 192 168 0 1 192 168 255 1 NOTE The final n...

Page 71: ...ou will not select this option unless you have a specific reason to bypass NAT Disabled Disable this network Interfaces Select network interfaces to attach to this network Choose from WiFi and Ethernet port interfaces Double click on any of the interfaces shown on the left in the Available section to move them to the Selected section on the right or highlight an interface and click the button To d...

Page 72: ...trol settings of this network to match the intended use Simply select or deselect any of the following LAN Isolation When checked this network will NOT be allowed to communicate with other local networks UPnP Gateway Select the UPnP Universal Plug and Play option if you want to enable the UPnP Gateway service for computers on this network Admin Access When enabled users may access these administra...

Page 73: ...operly Range Start and Range End These designate the range of values in the reserved pool of IP addresses for the DHCP server Values within this range will be given to any DHCP enabled computers on your network The default values are almost always sufficient default 72 to 200 as in 192 168 0 72 to 192 168 0 200 Example The MBR1400 uses an IP address of 192 168 0 1 for its primary network by defaul...

Page 74: ...ns available One of the more common uses is to assign a VoIP phone server using option 66 Server name Option Select an option from the dropdown list or manually enter the number of an option A complete list of options is available from IANA Value Generally this field should be a string IP address or numeric value Some fields can accept both IP addresses and hostnames in these cases you may need to...

Page 75: ...to a network in the Local Network Editor see above Select from the following tabs Wireless WiFi Network Settings Ethernet Port Configuration Wireless WiFi Network Settings The MBR1400 can broadcast as many as four SSIDs service set identifiers the names for WiFi networks One primary WiFi network is enabled by default while you may have enabled a second guest network when using the First Time Setup...

Page 76: ...asts its SSID It is somewhat harder for hackers to find and attack a router that is not broadcasting its SSID which adds to the wireless security but it is also more difficult for friendly users to attach to a WiFi network with a hidden SSID Isolate Select this to isolate all wireless clients so they cannot directly communicate with each other on the wireless network WMM WiFi Multimedia This is a ...

Page 77: ...ect there are different setup options Personal security modes require passwords WPA2 Personal forces AES as the WPA Cipher WPA WPA2 and WPA Personal allow AES TKIP AES and TKIP WEP Auto requires a WEP Key Open has no password or other security measures In order to protect your network from hackers and unauthorized users CradlePoint highly recommends WPA2 AES for security if your attached devices c...

Page 78: ... and Link Speed Additional controls for WAN ports are available in Internet Ethernet Settings Mode WAN or LAN Default setting is WAN Wide Area Network for the blue port and LAN Local Area Network for the four yellow ports Internet WAN is used to connect to another network such as a hotel or office wired network The WAN connection is used as a possible source of Internet for the MBR1400 Local Netwo...

Page 79: ...Default Scans to determine the lowest interference WiFi channel Channel Selection Schedule When using the Smart channel selection this controls whether the router will periodically rescan for a better channel and change to it Select from Once Daily Weekly or Monthly Note that there may be a momentary WiFi disconnection while the channel changes Optimize WiFi WiMAX coexistence Shows if Smart Select...

Page 80: ... TX Power Normally the wireless transmitter operates at 100 power In some circumstances however there might be a need to isolate specific frequencies to a smaller area By reducing the power of the radio you can prevent transmissions from reaching beyond your corporate home office or designated wireless area RTS Threshold When an excessive number of wireless packet collisions are occurring wireless...

Page 81: ...ption forces all clients to use a longer backoff check and thus may reduce network throughput while reducing the number of transmission collisions Wireless Mode Select the WiFi clients the router will be compatible with Greater compatibility is a tradeoff with better performance For greatest compatibility with all WiFi devices select 802 11 b g n For best performance connect with only other 802 11...

Page 82: ...ADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 80 Greenfield Mode Greenfield mode uses an 802 11n only preamble to transmit packets that older wireless clients cannot interpret Use of greenfield mode in a mixed 802 11 environment may result in degraded performance but can improve performance if all devices in the area are 802 11n compatible ...

Page 83: ...SE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 81 7 INTERNET The Internet tab provides access to 3 submenu items for managing a variety of Internet connection options Connection Manager Data Usage WiFi as WAN Data Usage and WiFi as WAN Advanced Mode only ...

Page 84: ...s This is a list of the available interfaces used to access the Internet You can enable stop or start devices from this section By using the priority arrows the arrows in the boxes to the left these show if you have more than one available interface you can set the interface the router uses by default and the order that it allows failover In the example shown Ethernet is set as the primary Interne...

Page 85: ...ice Configuration Clicking on a device reveals the following information State Connected Available etc Port UID Unique identifier This could be a name or number letter combination IP Address Gateway Netmask Stats bytes in bytes out Uptime in seconds Click Edit to view configuration options for the selected device For USB modems click Control to view options to activate or update the device ...

Page 86: ...T HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 84 7 1 3 General Settings Enabled Select deselect to enable disable MTU Maximum transmission unit This is the size of the largest protocol data unit that the device can pass Range 46 to 1500 Bytes Hostname This only shows for certain devices ...

Page 87: ...ormal Rate 20 KB s Time Period 90 seconds Low Rate 10 KB s Time Period 240 seconds Custom Rate range 1 100 KB s Time Period range 10 300 seconds Time Fail back only after a set period of time Default 90 seconds Range 10 300 seconds This is a good setting if you have a primary wired WAN connection and only use a modem for failover when your wired connection goes down This ensures that the higher pr...

Page 88: ...g Clone Your PC s MAC Address Connect Method Select the connection type that you need for this WAN connection You may need to check with your ISP or system administrator for this information DHCP Dynamic Host Configuration Protocol is the most common configuration Your router s Ethernet ports are automatically configured for DHCP connection DHCP automatically assigns dynamic IP addresses to device...

Page 89: ...ANAGER 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 87 Static Manual IP Address Subnet Mask Gateway IP Primary DNS Server Secondary DNS Server PPPoE Username Password Password Confirm Service Auth Type None PAP CHAP ...

Page 90: ...odem connection If the Internet has been unreachable for a period of time a reset of the modem will occur in attempt to re establish the connection LTE Connection Mode Specify how the LTE Multi Mode modem should connect to the network Auto Let the modem decide which network to use Auto EVDO 1xRTT Connect to CDMA letting the modem decide which 3G network to use Do not attempt to connect to LTE Forc...

Page 91: ...RCES PAGE 89 AT CGDCONT 2 IP isp cingular ATCT 99 2 PPP Authentication Protocol Set this only if your service provider requires a specific protocol and the Auto option chooses the wrong one Auto PAP Password Authentication Protocol CHAP Challenge Handshake Authentication Protocol PPP Password Password for PPP authentication PPP Username Username for PPP authentication ...

Page 92: ...wn list The following fields can be left blank If left blank they will remain unchanged in the modem NAI Username realm Network Access Identifier NAI is a standard system of identifying users who attempt to connect to a network AAA Shared Secret Password Authentication Authorization and Accounting password Verify AAA Shared Secret HA Shared Secret Home Agent shared secret Primary HA Secondary HA A...

Page 93: ...E 91 SIM APN Settings SIM PIN PIN number for a GSM modem with a locked SIM Access Point Name APN Some wireless carriers provide multiple Access Point Names that a modem can connect to Some APN examples are isp cingular and vpn com Default Let the router choose an APN automatically Manual Enter an APN by hand Select Select from a dropdown menu of the profiles already on the SIM ...

Page 94: ...X com Time Warner Cable mobile rr com Comcast mob comcast net TTLS Authentication Mode TTLS inner authentication protocol Select from the following dropdown options MSCHAPv2 MD5 Microsoft Challenge Handshake Authentication Protocol version2 Message Digest Algorithm 5 PAP Password Authentication Protocol CHAP Challenge Handshake Authentication Protocol TTLS Username Username for TTLS authentication...

Page 95: ...e Activation or FUMO The modem supports Update Activate methods A message will display showing options for each supported method Modem Activation Update Activate Reactivate or Upgrade Configuration Preferred Roaming List PRL Update Firmware Update Management Object FUMO Click the appropriate icon to start the process If the modem is connected when you start an operation the router will automatical...

Page 96: ... can be general or very specific For example you could create a rule that applies to all WiMAX modems or a rule that only applies to an Internet source with a particular MAC address The Configuration Rules list shows all rules that you have created as well as all of the default rules These are listed in the order they will be applied The most general rules are listed at the top and the most specif...

Page 97: ...by setting the Filter Criteria if you are creating a new rule Create a name for your rule and the condition for which the rule applies Rule Name Create a name meaningful to you This name is optional Select each of the following to create a condition for your rule When Port Select by the port that you are plugging the modem into Manufacturer Select by the manufacturer such as Sierra Wireless Model ...

Page 98: ...will be of the following form When is is not value For example Type is not WiMAX Port is USB Port 1 Once you have established the condition for your configuration rule choose from the other tabs to set the desired configuration Use the arrow buttons along the top to reveal more tab options All of the tab options General Settings Ethernet Settings Modem Settings WiMAX Settings CDMA Settings and SIM...

Page 99: ...n set a rule to shut down use of a modem and or send a message when you reach a data usage amount you set Enable Data Usage Enabled Disabled Default Disabled When you select Enabled you will see the Data Usage Agreement shown to the right The purpose of this agreement is to ensure that you understand that the data numbers for the MBR95 may not perfectly match those of your carrier CradlePoint cann...

Page 100: ...ayed Rule Name Enabled True False Date for Rule Reset Cycle Type Daily Weekly or Monthly Cap Amount in MB Current Usage Shown as an amount in MB as a percentage of the cap and in a bar graph Click Add to configure a new Data Usage Rule Data Usage Rule page 1 Rule Name Give your rule a name for later recognition WAN Selection Select from the dropdown list of currently attached WAN devices Assigned ...

Page 101: ...rule will reset Shutdown WAN on Cap If selected the WAN device will shut down when the assigned usage is reached A cycle reset or a rule deletion will re enable the device Send Alert on Cap An email alert will be generated and sent when the assigned usage is reached WARNING The SMTP mail server must be configured in System Settings Device Alerts Extra Email Alert When checked you enable a second e...

Page 102: ... data modems that causes your router to send an alert after 1000 MB of usage in a month When you attach a new 4G USB modem your template will immediately create a new Data Usage Rule for the attached modem that sends the alert as specified Click Add to configure a new Template rule Create a Template Name that you can recognize The template will apply to one of the following WAN types All WAN All E...

Page 103: ...each attached WAN source that has an assigned Data Usage Rule The graph shows the usage trend for one day Click Add Usage to manually input additional usage for an attached data source You might do this if you used your modem while not attached to your router and you want to keep an accurate count of your data usage Enter the date of usage by using the pop up calendar Then enter the total data in ...

Page 104: ...ttempt to set up WiFi as WAN and there is an IP conflict you need to change the IP address The router is attempting to use the same IP address for both WAN and LAN which is impossible Go to Network Settings Local Network In the LAN Settings section you can change the IP address For example you might change 192 168 0 1 to 192 168 1 1 Saved Profiles This is a list of WiFi networks that have already ...

Page 105: ...al when connecting to a visible network Auth Mode The type of encryption that is used by the network None WEP Auto WEP Open WEP Shared WPA1 Personal WPA2 Personal WPA1 WPA2 Personal Channel The channel the network is using 7 3 2 Profile Editor You have the option to manually add network profiles but it is usually much easier to import them from Site Survey Either click on Add under Saved Profiles ...

Page 106: ...ES PAGE 104 7 3 3 Wireless Scan Settings Scan Interval How often WiFi as WAN scans the environment for updates Default 60 seconds Range 5 3600 seconds Scan While Connected Continue to scan for WiFi as WAN profile updates when connected Each time a scan occurs the wireless communication of the router will be temporarily interrupted Normally this should be disabled ...

Page 107: ...CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 105 8 SYSTEMSETTINGS The System Settings tab has 5 submenu items that provide access to tools for broad administrative control of the MBR95 Administration Device Alerts Managed Services System Control System Software Device Alerts and Managed Services Advanced Mode only ...

Page 108: ...ystem Clock Local Management Remote Management GPS Syslog Settings 8 1 1 Router Security Advanced Security Mode When the router is configured to use the advanced security mode several aspects of the router s configuration and networking functionality will be extended to support high security environments This includes support for multiple user accounts increased password security and additional ne...

Page 109: ...ble NTP then the router time will be based on when the router firmware was built which is guaranteed to be wrong Whenever the Internet connection is re established and once a week thereafter the router will ask the server for the current time so it can correct itself You then have the option of selecting an NTP server and adjusting the NTP server port Select the NTP server from the dropdown list A...

Page 110: ...en you will just get the usual browser timeout In the normal case when the router is connected to the Internet you don t see them at all Local Domain The local domain is used as the suffix for DNS entries of local hosts This is tied to the hostnames of DHCP clients as DHCP_HOSTNAME LOCAL_DOMAIN System Identifier This is a customizable identity that will be used in router reporting and alerting The...

Page 111: ...cal network to access the administration website For security remote access is usually done via a non standard http port Additionally encrypted connections can be required for an added level of security Require HTTPS Connection Requiring a secure https connection is recommended HTTP Port Default 8080 This option is disabled if you select Require Secure Connection Secure HTTPS Port Default 8443 Ena...

Page 112: ... a fix contact your carrier and ensure that GPS is supported Enable GPS support Enables support for querying GPS information from supported modems Enable GPS server on WAN Enables a TCP server on the WAN side of the firewall which will periodically send GPS NMEA sentences to connected clients Enable GPS server on LAN Enables a TCP server on the LAN side of the firewall which will periodically send...

Page 113: ...tem Fix Data Name Example Data Description Sentence Identifier GPGGA Global Positioning System Fix Data Time 170834 17 08 34 Z Latitude 4124 8963 N 41d 24 8963 N or 41d 24 54 N Longitude 08151 6838 W 81d 51 6838 W or 81d 51 41 W Fix Quality 0 Invalid 1 GPS fix 2 DGPS fix 1 Data is from a GPS fix Number of Satellites 05 5 Satellites are in view Horizontal Dilution of Precision HDOP 1 5 Relative acc...

Page 114: ...x xx x x x x M x x M x x xxxx hhmmss ss UTC of position llll ll latitude of position a N or S yyyyy yy Longitude of position a E or W x GPS Quality indicator 0 no fix 1 GPS fix 2 Dif GPS fix xx number of satellites in use x x horizontal dilution of precision x x Antenna altitude above mean sea level M units of antenna altitude meters x x Geoidal separation M units of geoidal separation meters x x ...

Page 115: ...tion Diff between WGS 84 earth ellipsoid and mean sea level geoid is below WGS 84 ellipsoid 12 Meters Units of geoidal separation 13 Age in seconds since last update from diff reference station 14 Diff reference station ID 15 Checksum 8 1 7 Syslog Settings Enabling this option will send log messages to a specified Syslog server After enabling type the Hostname or IP address of the Syslog server or...

Page 116: ...ce has changed status The possible statuses are plugged unplugged connected and disconnected Configuration Change A change to the router configuration Login Failure A failed login attempt has been detected Full System Log The system log has filled This alert contains the contents of the system log Recurring System Log The system log is sent periodically This alert contains all of the system events...

Page 117: ...Password Your Gmail password From Address Your email address To Address Your email address Once you have filled in the information for the SMTP server click on the Verify SMTP Settings button You should receive a test email at your account Advanced Delivery Options Email Subject Prefix This optional string is prefixed to the alert subject It can be customized to help you identify alerts from speci...

Page 118: ...OR MORE HELP AND RESOURCES PAGE 116 8 3 System Control Restore to Factory Defaults This changes all settings back to their default values Reboot The Device This causes the router to restart Ping Test A simple test to check Internet connectivity Type the Hostname or IP address of the computer you want to ping and press Enter or click the Ping button ...

Page 119: ...rsion If there is a new firmware version available this will list the version number Click Check Again to have the router check the newest firmware Factory Reset Set default settings to match the new firmware This is safest as settings may have changed You should back up your current settings and restore them after the new firmware is loaded Automatically check for new firmware Check for an availa...

Page 120: ...dresses so that conversions can be made in both directions ADSL Asymmetric Digital Subscriber Line Advanced Encryption Standard AES Government encryption standard Alphanumeric Characters A Z and 0 9 Antenna Used to transmit and receive RF signals AppleTalk A set of Local Area Network protocols developed by Apple for their computer systems AppleTalk Address Resolution Protocol AARP Used to map the ...

Page 121: ... Input Output System BIOS A program that the processor of a computer uses to startup the system once it is turned on Baud Data transmission speed Beacon A data frame by which one of the stations in a WiFi network periodically broadcasts network control data to other wireless stations Bit rate The amount of bits that pass in given amount of time Bit sec Bits per second BOOTP Bootstrap Protocol Allo...

Page 122: ...d into binary so that it can be processed or moved to another device Data Encryption Standard Uses a randomly selected 56 bit key that must be known by both the sender and the receiver when information is exchanged Data Link layer The second layer of the OSI model Controls the movement of data on the physical link of a network Database Organizes information so that it can be managed updated as wel...

Page 123: ...er s security mechanisms for the convenience of being directly addressable from the Internet DNS Domain Name System Translates Domain Names to IP addresses Domain name A name that is associated with an IP address Download To send a request from one computer to another and have the file transmitted back to the requesting computer DSL Digital Subscriber Line High bandwidth Internet connection over t...

Page 124: ...hts Firewall A device that protects resources of the Local Area Network from unauthorized users outside of the local network Firmware Programming that is inserted into a hardware device that tells it how to function Fragmentation Breaking up data into smaller pieces to make it easier to store FTP File Transfer Protocol Easiest way to transfer files between computers on the Internet Full duplex Sen...

Page 125: ...evice that connects multiple devices together ICMP Internet Control Message Protocol IEEE Institute of Electrical and Electronics Engineers IGMP Internet Group Management Protocol is used to make sure that computers can report their multicast group membership to adjacent routers IIS Internet Information Server is a WEB server and FTP server provided by Microsoft IKE Internet Key Exchange is used t...

Page 126: ...ut Internet Protocol Version 4 that identifies each computer that transmits data on the Internet or on an intranet IPsec Internet Protocol Security IPX Internetwork Packet Exchange is a networking protocol developed by Novell to enable their Netware clients and servers to communicate ISP Internet Service Provider Java A programming language used to create programs and applets for web pages Kbps Ki...

Page 127: ...tal signals from a computer to an analog signal in order to transmit the signal over phone lines It also demodulates the analog signals coming from the phone lines to digital signals for your computer MPPE Microsoft Point to Point Encryption is used to secure data transmissions over PPTP connections MTU Maximum Transmission Unit is the largest packet that can be transmitted on a packet based netwo...

Page 128: ...used more than RIP in larger scale networks because only changes to the routing table are sent to all the other routers in the network as opposed to sending the entire routing table at a regular interval which is how RIP functions Password A sequence of characters that is used to authenticate requests to resources on a network Personal Area Network The interconnection of networking devices within ...

Page 129: ...ce allows for remote users to dial into a central server and be authenticated in order to access resources on a network Reboot To restart a computer and reload it s operating software or firmware from nonvolatile storage Rendezvous Apple s version of UPnP which allows for devices on a network to discover each other and be connected without the need to configure any settings Repeater Retransmits th...

Page 130: ...ol SNMP Simple Network Management Protocol SOHO Small Office Home Office SPI Stateful Packet Inspection SSH Secure Shell is a command line interface that allows for secure connections to remote computers SSID Service Set Identifier is a name for a wireless network Stateful Packet Inspection A feature of a firewall that monitors outgoing and incoming traffic to make sure that only valid responses t...

Page 131: ...t allows network devices to discover each other and configure themselves to be a part of the network Update To install a more recent version of a software or firmware product Upgrade To install a more recent version of a software or firmware product Upload To send a request from one computer to another and have a file transmitted from the requesting computer to the other UPnP Universal Plug and Pl...

Page 132: ...works that is supposed to be comparable to that of a wired network WiFi Wireless Fidelity Used to describe any of the 802 11 wireless networking specifications WiFi Protected Access An updated version of security for wireless networks that provides authentication as well as encryption Wide Area Network The larger network that your LAN is connected to which may be the Internet itself or a regional ...

Page 133: ...ANUAL Firmware ver 3 6 3 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 131 Yagi antenna A directional antenna used to concentrate wireless signals on a specific location ...

Page 134: ...rference Requirement Canada This Class B digital apparatus complies with Canadian ICES 003 Cet appareil numérique de la classe B est conforme à la norme NMB 003 du Canada 10 2Warranty Information CradlePoint Inc warrants this product against defects in materials and workmanship to the original purchases or the first purchaser in the case of resale by an authorized distributor for a period of one 1...

Page 135: ...me a WiFi repeater using existing WiFi to create secure connections or use as a WiFi to Ethernet adapter for non WiFi devices Two WiFi Networks Create a private secure and prioritized connection while sharing with others For example 1 private SSID for owner 1 public SSID for guests Each network can have its own security settings BUTTONS SWITCHES WiFi On Off Switch WPS Button WiFi Protected Setup M...

Page 136: ...ng UPnP DMZ Virtual Server Port Forwarding Routing Rules Route Management Content Filtering Website Filtering Local DHCP server DHCP Client DNS DNS Proxy ALGs PPTP L2TP PPPoE pass through IPSec pass through FTP passive FTP active MAC Address Filtering Dynamic DNS Management Remote WAN Web based Management Access HTTP HTTPS Web based Router Management Interface One button firmware upgrade USB firmw...

Page 137: ...5 USER MANUAL Firmware ver 3 6 3 2011 CRADLEPOINT INC PLEASE VISIT HTTP KNOWLEDGEBASE CRADLEPOINT COM FOR MORE HELP AND RESOURCES PAGE 135 http www cradlepoint com Copyright 2012 by CradlePoint Inc All rights reserved ...

Reviews:

No comments