background image

Security with MyFRITZ!

FRITZ!Box 4020

101

17.3

Security with MyFRITZ!

For the following MyFRITZ! activities the HTTPS security proto-
col is used:

setting up a MyFRITZ! account with 

myfritz.net

registration of the FRITZ!Box with the MyFRITZ! account

accessing the MyFRITZ! page of your FRITZ!Box over 

myfritz.net

accessing the user interface of the FRITZ!Box over 

myfritz.net

 and over the MyFRITZ!App.

The FRITZ!Box generates its own HTTPS certificate. Because 
this certificate does not come from a certification authority 
preconfigured in common browsers, you have to confirm in 
your web browser or in the MyFRITZ!App that the connection 
should be established nevertheless. Firefox and Internet Ex-
plorer will remember your confirmation and refrain from 
showing any further warnings.

The HTTP protocol is used to update the IP address with the 
MyFRITZ! web service each day. The password is never trans-
mitted as clear text.

For further details on the HTTPS and HTTP protocols, see the 
section 

Access from the Internet via HTTPS, FTP and FTPS 

from 

page 54

.

Summary of Contents for 4020 Box

Page 1: ...FRITZ Box 4020 AVM GmbH Alt Moabit 95 10559 Berlin Telefon 030 39976 0 info avm de avm de Configuration and Operation ...

Page 2: ... 3 Handling the FRITZ Box 14 3 4 Tips for Passwords 15 4 Connecting the FRITZ Box 16 4 1 Connecting to Electrical Power 16 4 2 Connecting to the Internet 16 5 Connecting a Computer with a Network Cable 18 5 1 Connecting to the Computer 18 5 2 Connecting a Network Hub or Switch 19 6 Connecting Devices with the FRITZ Box over Wireless LAN 20 6 1 Establishing a Wireless LAN Connection Using WPS 20 6 ...

Page 3: ...ction to the Internet Connection 40 10 Connecting to the Internet via the Mobile Network 41 11 FRITZ Box as an Internet Router 43 11 1 Parental Controls Access Profiles for Internet Use 43 11 2 Port Forwarding Making Computers Accessible from the Internet 50 11 3 Dynamic DNS Name instead of IP Address 53 11 4 Access from the Internet via HTTPS FTP and FTPS 54 11 5 Prioritization Right of Way for I...

Page 4: ...FRITZ NAS 91 15 1 Requirements for FRITZ NAS 91 15 2 Starting FRITZ NAS 91 15 3 FRITZ NAS Password Protection 91 16 Configuring Internet Access for Guests 93 16 1 Wireless Guest Access Private Hotspot 93 16 2 Configuring Guest Access on the LAN 4 Port 94 17 MyFRITZ Accessing the FRITZ Box from Anywhere 96 17 1 Configuring MyFRITZ 96 17 2 Using MyFRITZ 98 17 3 Security with MyFRITZ 101 18 Push Serv...

Page 5: ...h a Wireless LAN Connection 115 22 3 Wireless LAN Connection Interrupted 117 23 Technical Specifications 118 23 1 Ports and Interfaces 118 23 2 Router Functions 118 23 3 User Interface and Display 118 23 4 Device Properties 119 23 5 Cable 120 24 Customer Service 121 24 1 FRITZ Box Help 121 24 2 Information in the Internet 121 24 3 Feedback on FRITZ Box 122 24 4 Assistance from the Support Team 122...

Page 6: ...e Do not connect multiple extension cords or socket strips to each other Damage to electric wiring or gas or water pipes during drilling can present a significant danger Before mounting the FRITZ Box on the wall make sure that there are no electrical lines gas or water pipes located where you need to drill the holes If necessary check the site with a pipe detector or con sult with qualified expert...

Page 7: ...into the FRITZ Box can cause electric shocks or short circuits Only use the FRITZ Box indoors Never let liquids get inside the FRITZ Box The FRITZ Box contains hazardous components and should only be opened by authorized repair technicians Do not open the FRITZ Box housing If the FRITZ Box needs to be repaired please take it to a specialized vendor Dust moisture and vapors as well as caustic clean...

Page 8: ...ild cards Example To edit the device called Name click the Edit button Bold type in the text emphasizes important words Example Do not leave the page without saving Blue font in the text designates links and references within this manual and addresses to be entered in the browser Example See also the information on page 8 This symbol marks useful hints and tips This symbol indicates important inst...

Page 9: ...d network devices into your private home network The devices can exchange data with each other and enjoy shared access to USB hard drives USB printers and other USB devices The FRITZ Box transmits music video and im age files to suitable playback devices in the home network Settings for the FRITZ Box and for your private network are configured in an easy to use user interface The user interface ca...

Page 10: ...evices like game consoles and network hubs USB USB 2 0 port for connecting USB devices like printers or storage media Wireless access point Integrated wireless access point for connecting to wire less LAN devices that use the radio standard IEEE 802 11b IEEE 802 11g or IEEE 802 11n in the 2 4 GHz frequency band WLAN N 2 4 GHz Notebook computer smartphone video TV streaming 4 x Fast Ethernet LAN 10...

Page 11: ...the buttons on the FRITZ Box Locking the but tons prevents the settings for your FRITZ Box or your home network from being changed unintentionally or without au thorization Example With the WLAN button the wireless network of the FRITZ Box can be switched off at the touch of a button If this happens by accident in some cases it may take some time before the cause is found and the wireless LAN radi...

Page 12: ...ning Any Event to the Info LED The Info LED on the upper panel of the FRITZ Box signals various events Some events for which the Info LED flashes or lights up are preset in the FRITZ Box You also have the op tion of assigning any other event to the Info LED 1 Open the FRITZ Box user interface see page 24 2 In the menu System Buttons and LEDs click the Info Display tab 3 In the Freely Selectable Op...

Page 13: ...er supply unit one network cable one quick guide 3 2 Requirements for Operation In order to operate the FRITZ Box you must have the follow ing an up to date web browser Some of the FRITZ Box functions can be used only with a web browser that supports HTML5 for instance Firefox version 17 or higher Internet Explorer version 9 or high er or Google Chrome version 23 or higher for the Internet connect...

Page 14: ... on a horizontal surface or mount it on a wall For a drilling template to mount the FRITZ Box on a wall see page 126 Place or hang the FRITZ Box in a dry location that is free of dust and protected from direct sunlight For ideal operating conditions mount the FRITZ Box on a wall with the cables connected on the bottom When connecting the FRITZ Box to your computer using a network cable keep in min...

Page 15: ...search term Characters for Passwords the Help of the FRITZ Box user interface contains more infor mation about which characters you can use Be sure to keep your passwords in a safe place Configure the Forgot Password push service This noti fication service sends you an access link at regular inter vals with which you can access the FRITZ Box user inter face even if you have forgotten your password...

Page 16: ...only this power supply unit for connecting to electri cal power 2 Connect the power supply unit to the socket on the FRITZ Box labeled Power 3 Plug the other end into an AC power outlet After a few seconds the Power LED stops flashing and re mains on 4 2 Connecting to the Internet The FRITZ Box 4020 can be connected using various types of Internet connections to a cable modem to a router to an ADS...

Page 17: ...m or router 1 Connect the network cable white to the WAN port on the FRITZ Box 2 Connect the other end of the network cable to a LAN port on the router or modem The Internet LED begins flashing Info Internet WLAN LAN Power WLA N WLA N WPS WPS 1 LAN1 LAN2 LAN2 LAN3 LAN3 LAN4 LAN4 Power Power WAN WAN ...

Page 18: ...cted to each LAN port of the FRITZ Box Connecting a computer using a network cable 1 Insert the network cable included in the package into the LAN port of the computer You can also use any other network cable For more in formation see page 120 2 Insert the free end of the cable into a LAN socket on the FRITZ Box Now the FRITZ Box and the computer are connected with each other Info Internet WLAN LA...

Page 19: ...ed in the package into the uplink port of the network hub or network switch You can also use any other network cable For more in formation see page 120 2 Insert the free end of the cable into a LAN socket on the FRITZ Box The FRITZ Box and the network hub are now connected with each other Info Internet WLAN LAN Power WL ANWL AN WP SWP S 1 LAN1 LAN2 LAN2 LAN3 LAN3 LAN4 LAN4 Power Power WAN ...

Page 20: ...cedure for establishing secure wireless LAN con nections With WPS connecting a wireless device with the FRITZ Box is quick and easy Requirements The wireless device must support WPS Establishing a Connection on a Windows Computer Using WPS Here is how to establish a wireless connection with WPS on a computer with Windows 8 1 8 7 or Vista 1 If the WLAN LED on the FRITZ Box is off press the WLAN but...

Page 21: ...on will be established Connecting on Other Wireless Devices Here is how to establish a wireless connection with WPS on a wireless LAN device without Windows 1 If the WLAN LED on the FRITZ Box is off press the WLAN button briefly The wireless radio network of the FRITZ Box will be switched on 2 Use your wireless device to search for wireless networks at your location See the documentation of the wi...

Page 22: ...ox A new network key can be entered in the user interface 1 If the WLAN LED on the FRITZ Box is off press the WLAN button briefly The wireless radio network will be switched on 2 Open the wireless LAN software on your wireless device In Windows 8 1 8 and 7 do this by clicking the Wireless LAN icon in the task bar 3 Select the wireless radio network of the FRITZ Box The preconfigured name of the wi...

Page 23: ...a and a QR code reader app like smartphones and tablets you can connect wire lessly by reading a QR code 1 Open the FRITZ Box user interface see page 24 2 Select WLAN Radio Network 3 Read the QR code with your mobile device s QR code reader directly from the monitor of from a printout The mobile device automatically establishes a secure wire less connection to the FRITZ Box ...

Page 24: ...on your computer 2 Enter http fritz box in the address field of your web browser Entering the address http fritz box in the browser 3 Follow the instructions on the screen and enter your FRITZ Box password The preset password is printed on the bottom of the housing of the FRITZ Box If the user interface is not opened read The User Interface Does Not Open from page 112 7 2 Overview FRITZ Box at a G...

Page 25: ...e of your FRITZ Box is displayed along with the currently in stalled version of FRITZ OS and its current energy consump tion The middle area of the window presents information about connections interfaces and configured convenience func tions In the lower area of the window this information is rounded out with the list of connected devices ...

Page 26: ...nterface The name is set up under Home Network FRITZ Box Name and appears in the following areas of your home network display Name of the wireless radio network SSID Name of the guest radio network SSID Name of the working group released for home network sharing Name of the media server Individualized FRITZ Box name for MyFRITZ Push service sender name ...

Page 27: ...assword can access all of the contents and settings in the FRITZ Box user interface Property FRITZ Box Password FRITZ Box User Password You define a password that is used to open the FRITZ Box user interface There are user accounts Every FRITZ Box user receives her or his own password for opening the user interface Scope of access With the FRITZ Box password access to all contents and set tings in...

Page 28: ... user name to log in to the user interface of your FRITZ Box Quick Access Logging off and Changing the Password If you are logged in with the FRITZ Box password the upper navigation bar of the user interface will display the entry Logged in Here you can change the FRITZ Box password and log off the user interface Log off before you surf the web with your browser If you do not click on the user int...

Page 29: ... interface see page 24 2 Select System FRITZ Box Users Users 3 Click the Add User button 4 Enter a user name a valid e mail address and a pass word for the new user For more information on the characters you can use for the password see the Help in the FRITZ Box user inter face 5 Specify whether or not the new FRITZ Box user is allowed to access from the Internet the FRITZ Box contents for which s...

Page 30: ...Login to the Home Network tab Select the option Login with FRITZ Box user name and pass word and click Apply You will be directed to the welcome screen of your FRITZ Box 9 Select your user name and enter your password Now you can configure more users Configuring More FRITZ Box Users 1 Open the FRITZ Box user interface see page 24 2 Select System FRITZ Box Users Users A list of the FRITZ Box user a...

Page 31: ...Box user is allowed to access The rights checked in the user account are granted to the FRITZ Box user for access from the home network and if en abled also for access from the Internet see page 32 You can grant the following rights FRITZ Box settings A user with these rights can open the http fritz box or http myfritz box view of the FRITZ Box user interface Here she or he can see and edit all se...

Page 32: ...have set up an account with the MyFRITZ service see page 96 Your FRITZ Box is registered with this MyFRITZ account The option Access from the Internet allowed is en abled in your user account The option Internet access to the FRITZ Box via HTTPS enabled is selected in the Internet MyFRITZ menu or enabled in the Internet Permit Access FRITZ Box Services menu When the MyFRITZ service is enabled this...

Page 33: ...ccess voice mes sages faxes FRITZ App Fon and the call list the entire family can check the answering machine or view the call list even when they re away from home With a FRITZ Box user account that has only the right to access a certain area of the NAS you can grant your friends Internet access to your latest vacation pictures for instance Preconfigured FRITZ Box User ftpuser The first time you ...

Page 34: ...pper navigation bar of the FRITZ Box shows the name of the FRITZ Box user account with which the user is currently logged in to the user interface Click the user name to control basic functions of this user account Changing the e mail address Select the Change e mail Address entry to assign a dif ferent e mail address to the current user account Changing the password With the Change Password entry...

Page 35: ...menu 2 Click the Edit button for the user account to be dis abled 3 In the User area remove the check mark in front of the User account enabled option 4 Apply the change by clicking OK The user account has been disabled 8 4 Forgot Password What to Do If you have forgotten your password for the user interface for reasons of security you have to restore the factory settings to your FRITZ Box see Del...

Page 36: ...uffi ciently protected from malicious programs or unwelcome ac tivities Therefore we urgently advise against using the FRITZ Box without password protection For comprehensive information about logging in to the FRITZ Box with a password see the sections Using FRITZ Box Users from page 29 and Using a FRITZ Box Password from page 27 Protect your FRITZ Box by defining a password for the FRITZ Box use...

Page 37: ...ect Cable modem or Internet router from the Inter net connection via list Internet Connection The Internet connection via Cable modem or Internet router selection is the factory setting If you connected the FRITZ Box to a cable modem or an Inter net router when the factory settings were still configured the Internet connection is immediately available for the FRITZ Box If the FRITZ Box was already...

Page 38: ...L or fiber optic modem entry from the Internet connection via area 3 Select your Internet service provider If your Internet ser vice provider is not included in the list select the Other Internet service provider entry Entering Your Account Information If you received account information from your Internet provider enter the information here Changing the Connection Settings Depending on the Intern...

Page 39: ...s IP client from the Internet connection via area Entering Your Account Information For the IP client mode no account data have to be entered Changing the Connection Settings Depending on the Internet provider the following connection settings can be configured Transmission speed on your Internet connection IP settings DHCP or manual entry of the IP address Operating Mode The following apply in IP...

Page 40: ...he Inter net Account Information menu and the Internet Con nection tab 2 Select Existing connection over wireless LAN from the Internet connection via area Selecting a Wireless Device Select the wireless device to which the wireless LAN con nection is to be established Entering the Network Key Enter the network key of the radio network Operating Mode The following applies to this kind of Internet ...

Page 41: ...s that are config ured as WiFi hotspots can provide the FRITZ Box with an Internet connection over wireless LAN Mobile Communications Dongle or Smartphone on the USB Port 1 Insert the mobile communications dongle in the USB port of the FRITZ Box or connect the smartphone with the FRITZ Box using a USB cable 2 Open the FRITZ Box user interface see page 24 3 Select the Internet Mobile Communications...

Page 42: ...ernet connection of the FRITZ Box 4020 via wireless LAN in the Internet Account Information menu Due to technical limitations on the part of the mobile com munications network providers some limitations may arise for Internet telephone calls and for applications requiring an incoming connection This is also true for using port forward ing releasing USB storage media for sharing remote mainte nance...

Page 43: ...d and Own Access Profiles In the FRITZ Box there are four preconfigured access pro files You can create and configure many access profiles of your own No Network Device without Access Profile Network devices that log in to the home network for the first time are automatically assigned the preconfigured Standard access profile As soon as a network device is registered in the home network you can as...

Page 44: ...he factory settings the Stan dard profile is allowed to do ev erything There are no restrictions on time or activity Changeable The Standard profile can be changed Automatic assignment Network devices that register with the FRITZ Box for the first time are automatically assigned the Stan dard profile Standard Unknown network devices can on ly receive the Standard profile Unknown network devices ar...

Page 45: ...plications Changeable The Guest profile can be changed Automatic assignment Network devices that are connect ed with the FRITZ Box via the guest access receive the Guest profile Single access profile This is the only access profile available for the guest access No budget No shared budget can be config ured in the Standard profile Property Description Limitations This profile allows unrestricted u...

Page 46: ... filter list that should be used when access should be limited to just a few websites Setting Description Period On a timetable you define when the Internet connection may be used Online time For each day of the week you define how long the Internet is allowed to be used Shared budget You decide and define whether all network devices that use the same access profile must share this online time lim...

Page 47: ...tions that address websites only directly via the IP address for instance virus scanner update software the relevant IP addresses can be released for access by entering them in the exception list of Permitted IP addresses Internet Access by Network Applications You can list network applications for which you would like to block communication with the Internet For instance you can prohibit file sha...

Page 48: ... Configuring an Access Profile Configuring an Access Profile 1 Open the FRITZ Box user interface see page 24 2 Select the Internet Filters menu 3 Select the Access Profiles tab 4 Click 5 Configure the settings for the access profile in the New Access Profile window Use the FRITZ Box Help Editing Filter Lists Editing a Filter List 1 Open the FRITZ Box user interface see page 24 2 Select the Interne...

Page 49: ...ental Controls software if multiple Windows users with different rights in the Internet are sharing a single computer The AVM FRITZ Box Parental Controls software detects the various Windows users AVM FRITZ Box Parental Controls The AVM FRITZ Box software can be downloaded free of charge from the AVM website The AVM FRITZ Box parental controls software must be installed on every Windows computer o...

Page 50: ... Parental Controls for Windows Users 1 Open the FRITZ Box user interface see page 24 2 Select the Internet Filters menu 3 Select a Windows user on the Parental Controls tab 4 Click the button 5 Select the access profile to be applied to the Windows user and then click OK 11 2 Port Forwarding Making Computers Accessible from the Internet With default settings in the FRITZ Box programs on your com p...

Page 51: ...onds to ping inquiries from the Internet addressed to the IPv6 address of the FRITZ Box Additionally you can set up PING6 port forwarding rules for each computer in the home network since each computer has its own globally valid IPv6 address TCP UDP IPv4 Within IPv4 networks you can open the FRITZ Box firewall for the protocols TCP and UDP when en tering the port range One port can be opened for e...

Page 52: ...ddress Here is how to determine the public IPv4 address of the FRITZ Box 1 Open any Internet page in order to establish an Internet connection 2 Open the FRITZ Box user interface 3 The FRITZ Box s public IPv4 address is displayed on the Overview page in the Connections area Exposed host Open firewall completely IPv4 Within IPv4 networks you can open the firewall completely for one computer This co...

Page 53: ...to remain accessible from the Internet at all times under a fixed name even though the public IP address changes Dynamic DNS can be used as an alternative to MyFRITZ Both services can be used in parallel You must register with a dynamic DNS provider to use this service When you register you agree on the fixed name do main name at which your FRITZ Box should be accessible from the Internet You also...

Page 54: ...Internet requires a FRITZ Box user account with the rights to ac cess from the Internet and to access the contents on the storage media The protocols for the desired access must be enabled in the FRITZ Box HTTPS FTP and FTPS The protocols HTTPS FTP and FTPS are used for access over the Internet HTTPS Hypertext Transfer Protocol Secure HTTPS is an Internet protocol for bug proof communica tion betw...

Page 55: ...tions You can also specify that file sharing applications like eMule and BitTorrent always have to wait be hind online games Categories for Prioritization There are three categories for prioritization Real time appli cations Prioritized applications and Background appli cations Network applications and network devices are assigned to the categories using rules Real time Applications This category ...

Page 56: ...ad bandwidth is available for applications that are prioritized in lower categories or not prioritized at all If multiple network applications are assigned to the Pri oritized applications category then they must share the available capacity Background Applications This category is suitable for applications that do not require any high transmission rates and which are not time critical for example...

Page 57: ... be changed Discard low priority packets in order to ensure the trans mission of higher priority packets This technique is used whenever more packets are supposed to be sent to the Internet than the upstream transmission rate of the Internet connection allows As long as no packets are being sent from higher priority applications the full transmission rate of the Internet connection is available fo...

Page 58: ...r interface for assistance with configuring VPN IPSec VPN in the FRITZ Box is based on the IPSec standard Computer LAN Computer LAN linkup VPN connections can be configured for individual remote com puters LAN LAN LAN LAN linkup VPN connections can be configured for remote networks Eight simultaneous connections FRITZ Box supports a maximum of eight simultaneous VPN connections Configuration softw...

Page 59: ...s of the VPN tunnel At the terminal with the FRITZ Box the configuration file is then imported to the FRITZ Box The VPN parameters in these files can be adjusted manually to connect to products by other man ufacturers The FRITZ VPN VPN client AVM offers the FRITZ VPN software as a VPN client Both the Wizard and the client can be downloaded free of charge from the VPN Service page on the AVM websit...

Page 60: ...en avm de Every query is sent to the DNS server first The DNS server resolves the URL into the cor responding IP address There is one unique IP address for every URL The home user relies on the authenticity of the IP address re turned by the DNS server Authentic means that the response is the IP address of the desired website and not a faked IP address that leads to a fake website DNSSEC can ensur...

Page 61: ...rnet ser vice provider supports IPv6 directly on your line IPv6 Capable Services in the Home Network FRITZ NAS access via SMB or FTP FTPS Access to the user interface with http or https over IPv6 The DNS resolver of the FRITZ Box supports queries for IPv6 addresses AAAA records and can query the up stream DNS resolver of the Internet service provider over IPv6 The globally valid prefix is distribu...

Page 62: ...led and enabled on the computers in your home network IPv6 is already installed and enabled in the Windows 8 Windows 7 and Windows Vista operating systems IPv6 has been available in the Mac OS X operating sys tems since Mac OS 10 11 10 LISP FRITZ Box as a LISP Router LISP is a routing architecture which separates information about location and identity There are two IP addresses one for the locati...

Page 63: ...ress for identification which is called the EID Endpoint Identifier The EID can be the IP address of a host or an entire IP subnet One IP address for the location known as the RLOC Routing Locator The RLOC is the IP address of the LISP router Tunnel protocol LISP is a tunnel protocol A LISP packet consists of an internal IP packet and an additional external header The header of the internal packet...

Page 64: ...ained in the internal header of the LISP packet can be an IPv4 address can be an IPv6 address can be a public IP address can be a private non public IP address Mapping system The mapping system is responsible for allo cating the EIDs to the RLOCs ETR Egress Tunnel Router The ETR accepts IP packets whose destination IP address contained in the external header is the ETR s own RLOC ETR unpacks the L...

Page 65: ...a LISP Router The FRITZ Box can be configured as a LISP router As a LISP router the FRITZ Box is an xTR ETR and ITR Preparations You need a LISP provider Register with a LISP provider All of the information you need to configure the FRITZ Box as a LISP router is supplied by the LISP provider PETR Proxy ETR A PETR Proxy ETR is required for communica tion between LISP sites and non LISP sites On the...

Page 66: ...figuring a LISP Router 1 Open the FRITZ Box user interface see page 24 2 Select the Internet Account Information menu 3 Select the LISP tab 4 Enable the setting LISP support enabled 5 Enter in the fields the information you received from the LISP provider ...

Page 67: ...is to be turned on and off automati cally This reduces the power consumption of the FRITZ Box The FRITZ Box schedule also affects any other AVM products connected in the network the FRITZ WLAN Repeater for in stance the radio network of these devices is also switched on and off for the specified times 1 Open the FRITZ Box user interface see page 24 2 Open the WLAN Schedule menu 3 Enable the schedu...

Page 68: ...ou operate the wireless radio network the number of wireless devices in the vicinity of your FRITZ Box that work in the same frequency range You can extend the range of your wireless radio network with a wireless LAN repeater Or you can set up a second FRITZ Box as a wireless LAN re peater Extending a Wireless Radio Network with a Wireless LAN Repeater You can extend your wireless radio network wi...

Page 69: ...erface you can find de tailed instructions 12 3 Wireless LAN Getting Technical A wireless LAN is based on standards defined by the Institute of Electrical and Electronic Engineers IEEE These standards describe for instance the transmission rate encryption methods and frequencies used in a wireless network Throughput Rate The FRITZ Box supports your choice of the standards IEEE 802 11b IEEE 802 11g...

Page 70: ...ple Input Multiple Output use the frequency band more effectively than the older standards Setting the Right Standard in the FRITZ Box The throughput rate that can be achieved in your wireless ra dio network depends on the wireless standards used by the integrated wireless devices These wireless standards must also be set in the FRITZ Box Proceed as follows to check which wireless LAN standards ar...

Page 71: ...t are compatible with one or both of the following standards 802 11g 802 11b In this case set the wireless LAN standard for the 2 4 GHz fre quency band to 802 11b g 11n 11g 11b In your radio network there are wireless LAN devices that are compatible with one or all of the following standards 802 11n 802 11g 802 11b In this case set the wireless LAN standard for the 2 4 GHz fre quency band to 802 1...

Page 72: ...LAN uses the frequency ranges at 2 4 GHz and 5 GHz for transmission With the FRITZ Box 4020 you can establish wireless LAN con nections in the 2 4 GHz range 2 4 GHz Frequency Band In the 2 4 GHz frequency band wireless LAN works in the same range as Bluetooth microwave devices and various other devices like radio controlled toys garage door openers and video bridges This means that interference ma...

Page 73: ...n be selected for a second wireless network This maintains the minimum distance between channels Should interference in a wireless network persist the first step should be to select a different channel Wireless Auto Channel With the wireless auto channel function the FRITZ Box auto matically searches for the channel subject to the least inter ference This process takes into consideration interfere...

Page 74: ... FRITZ Box are located in a single network The network settings can be changed and adapted to your conditions and needs But you should do so only if you are well versed in networking technology Network Overview All of the devices and users connected with the FRITZ Box are displayed in a table on the Devices and Users tab in the Home Network Network menu For each user and each network device you fi...

Page 75: ...ITZ Box will assign the same IP address to the device every time it connects to the network Starting the Computer Wake on LAN Wake on LAN is a function that allows a computer in the local network to be started when it is accessed from the Internet For instance you can access a computer using remote main tenance software without wasting electricity by keeping the computer switched on permanently Th...

Page 76: ... Network menu 2 Select the Devices and Users tab 3 Select the computer and click the Edit button The detailed view for the computer will be opened IPv4 Settings in the FRITZ Box Factory Settings The following IPv4 settings are preconfigured in the FRITZ Box upon delivery The following IP addresses can be derived from the IP address and the subnet mask Setting Preconfigured Value IPv4 address 192 1...

Page 77: ...se You have an existing local IPv4 network one subnet with several computers Fixed IPv4 addresses are registered in the network set tings of the computer and you do not want to or are not permitted to change these addresses You want to connect the FRITZ Box to the local IPv4 net work in order to make the FRITZ Box features available to all of the computers in the IPv4 network IPv4 Address in Case ...

Page 78: ...the IP addresses via the DHCP server ensures that all of the network devices connected with the FRITZ Box are located in the same IP network The IPv4 settings of the network devices must have the Ob tain an IP address automatically option enabled This is the only way to receive the IP address from the DHCP server For more information see the chapter Obtaining an IP Address Automatically from page ...

Page 79: ...x in your network by adjusting the IP address of the FRITZ Box to your home network IPv6 Settings in the FRITZ Box The following settings options for IPv6 are found in the ad vanced view in the Home Network Network menu on the Network Settings page Additional IPv6 Routers in the Home Network IPv6 prefixes from other IPv6 routers You can allow the network devices connected to the FRITZ Box to recei...

Page 80: ...advertisement messages The DNS server IPv6 prefix es or IPv6 addresses can all be assigned by DHCPv6 Define which IPv6 settings should be assigned by the DHCPv6 serv er Changing Network Settings 1 Open the FRITZ Box user interface see page 24 2 Select the Home Network Network menu 3 Select the Network Settings page 4 Click the IPv4 Addresses or IPv6 Addresses button depending on the address range ...

Page 81: ... IP ad dresses to the connected computers The connected comput ers must be configured such that they can receive their IP ad dresses automatically The steps for checking and adjusting this option differ among the operating systems See the rele vant section for your operating system If FRITZ Box is operated in a network no other DHCP server may be activated in this network Obtaining an IP Address A...

Page 82: ...ect Internet Protocol Version 4 TCP IPv4 5 Click the Properties button 6 On the General tab enable the options Obtain an IP address automatically and Obtain DNS server address automatically 7 Click OK to save the settings 8 Enable the options Obtain an IP address automatically and Obtain DNS server address automatically for the Internet protocol version 6 TCP IPv6 as well The computer receives an ...

Page 83: ...Network window select the Ethernet entry from the Show list 4 Click the Advanced button The TCP IP settings page opens Select the Using DHCP option from the Configure IPv4 drop down list 5 Click OK The computer now receives an IP address from the FRITZ Box Obtaining an IP Address Automatically in Linux For comprehensive information and tips on network settings in Linux see for example www tldp org...

Page 84: ...to the FRITZ Box using a USB hub with its own power supply The total current consumption of connected USB devices without their own power supply may not exceed 500 mA Check the rating plates of the connected USB devices USB devices that exceed the total current consumption of 500 mA can be connected to the FRITZ Box using a USB hub with its own power supply 14 2 USB Devices on the FRITZ Box These ...

Page 85: ...m the FRITZ Box go to the Home Network USB Devices area in the FRITZ Box user interface to remove them safely and avoid any loss of data 14 4 Configuring Access Rights You can protect the data on your USB storage from unautho rized access by securing the user interface of your FRITZ Box with a password In the System FRITZ Box Users menu you can configure a shared password that is requested every t...

Page 86: ... among the FRITZ Box stor age media and workplaces Alternatively you can enter ftp fritz box in the address line of your Internet browser to access the storage me dia If you would like to use FTP software see the documen tation of the software as well as the instructions in the Help on the FRITZ Box user interface For access to media data like music images and videos available on the memory or on ...

Page 87: ...r You can connect a USB printer to the FRITZ Box to make it available to all participants in your home network Configuring a USB Printer as a Network Printer Connect the USB printer to the USB port of the FRITZ Box Configuring a USB Printer in Windows 8 Windows 7 and Vista 1 Click Start Control Panel and select the printer cate gory of your operating system Hardware and Sound Devices and Printers ...

Page 88: ...a USB Printer in Windows 8 1 or 8 1 Press the keyboard shortcut Windows key X and se lect Control Panel from the context menu 2 Click Hardware and Sound and select Devices and Printers 3 In the menu bar click Add a printer 4 In the Add Printer window select The printer that I want isn t listed and then Next 5 Enable the option Add a printer using TCP IP address or hostname and click Next 6 In the ...

Page 89: ...o the USB port of your FRITZ Box 8 Click Add or Add Port The USB printer has been configured and can be used as a network printer Configuring a USB Printer in Other Operating Systems As the port type select Raw TCP Enter 9100 as the port Enter http fritz box as the printer name If the FRITZ Box is configured as a wireless repeater or an IP client enter here the IP address at which the FRITZ Box ca...

Page 90: ...FRITZ Box 4020 90 Sharing a USB Printer If the FRITZ Box is configured as a wireless repeater or an IP client enter here the IP address at which the FRITZ Box can be reached within the network ...

Page 91: ...S 1 Open a web browser 2 Enter fritz nas in the address field FRITZ NAS opens and displays the storage media enabled in the FRITZ Box 15 3 FRITZ NAS Password Protection Access to FRITZ NAS and thus to the storage media of the FRITZ Box can be protected by defining a password in the us er interface In the System FRITZ Box Users Login to Home Network menu you can configure a shared password that is ...

Page 92: ...FRITZ Box 4020 92 FRITZ NAS Password Protection Information on the password protection of your FRITZ Box is presented in the section Password Protection Using FRITZ Box Safely from page 27 ...

Page 93: ...hones tablets laptops or other net work devices Guest devices can surf the Internet Guest devices have no access to your home network The guest access can be disabled automatically The guest access can use push service to notify you about all devices registering and deregistering The access profile Guest is set for the wireless guest access This access profile can be edited in the Internet Filters...

Page 94: ...ode of the wireless net work The wireless LAN connection will be established Registering a Wireless Device with the Wireless Guest Access via WPS 1 Your guest starts WPS on his or her wireless device 2 In the WLAN Guest Access menu click the Start WPS button The wireless LAN connection will be established 16 2 Configuring Guest Access on the LAN 4 Port For guests you can configure the network port...

Page 95: ... Guest Access Set up the guest access as follows 1 Open the FRITZ Box user interface see page 24 2 In the Home Network Network menu select the Net work Settings tab 3 In the Guest Access area check the box in front of the Guest access enabled for LAN 4 option 4 Click Apply ...

Page 96: ... data are lo cated safely at home Data transmission is encrypted see page 101 FRITZ Box user interface With MyFRITZ you can open the user interface of your FRITZ Box from anywhere and con figure settings Exactly which data are available to you depends on the rights set in your FRITZ Box user account see page 31 17 1 Configuring MyFRITZ The MyFRITZ service can be used only with a MyFRITZ ac count R...

Page 97: ...t has been saved every time it is entered it will be displayed encoded 6 If you do not have a user account for a FRITZ Box user yet you will be prompted to set one up by assigning a user name and an additional password If you already have a FRITZ Box user account follow the instructions in the FRITZ Box user interface Note For security reasons access to the FRITZ Box from the Internet is possible ...

Page 98: ... your FRITZ Box with the account you can begin using the MyFRITZ service to access your FRITZ Box directly You can reach your FRITZ Box from anywhere by opening the myfritz net website in any web browser If you use a smartphone or a tablet the MyFRITZ App from AVM offers you simple access to your FRITZ Box at home MyFRITZ in the Web Browser 1 Open the myfritz net website 2 Log in with your e mail ...

Page 99: ... your smartphone or tablet must be con nected with the FRITZ Box over wireless LAN After setup you can use the MyFRITZ App no matter whether you re at home or on the go 1 Load the MyFRITZ App to your device 2 Connect your smartphone or tablet with your FRITZ Box via wireless LAN 3 Open the MyFRITZ App 4 To register with your FRITZ Box enter the data of your FRITZ Box user account These are your e ...

Page 100: ...your FRITZ Box In this case no login to MyFRITZ is required If you logged in with the FRITZ Box password you now have access to all of the contents stored on your FRITZ Box If you logged in using the information for your FRITZ Box user account the MyFRITZ page will show those contents of your FRITZ Box to which you have access rights Multiple FRITZ Boxes You can register multiple FRITZ Boxes with ...

Page 101: ...ts own HTTPS certificate Because this certificate does not come from a certification authority preconfigured in common browsers you have to confirm in your web browser or in the MyFRITZ App that the connection should be established nevertheless Firefox and Internet Ex plorer will remember your confirmation and refrain from showing any further warnings The HTTP protocol is used to update the IP add...

Page 102: ...t and to which e mail address 18 1 Available Push Services You can request push service mails about the following FRITZ Box areas and activities Push Service Information FRITZ Box info Sends you regular e mail messages with data on FRITZ Box usage and connec tions Wireless guest access Sends you a message whenever devices register with or deregister from the wire less guest access New FRITZ OS Not...

Page 103: ... the push services 18 3 Configuring Push Services You can adjust the push services to your needs and also dis able any or all push services 1 Open the FRITZ Box user interface see page 24 2 Select the System Push Service Push Services menu 3 To configure a push service click the Edit button 4 Configure various settings in the details The Help of the FRITZ Box user interface presents com prehensive...

Page 104: ...edy any problems Starting the Function Diagnosis 1 Open the FRITZ Box user interface see page 24 2 Select Diagnostics Function 3 Click Start to start the diagnostics The diagnostics run through the various test areas For more information on test areas and test items as well as on the icons and information in the result of the diagnostics see the Help on the FRITZ Box user interface Canceling Diagn...

Page 105: ...ttings that the security diag nostics classify as insecure From the test entries in the Security overview you can navigate directly to the relevant settings Help is available for each test entry You can print the results of the security diagnostics The Security overview is located in the Diagnostics Secu rity menu in the FRITZ Box user interface Comprehensive information on the subject of Security...

Page 106: ...p by step 1 Open the FRITZ Box user interface see page 24 2 On the Overview page select the Wizards menu 3 Start the Save and Restore Settings Wizard 4 In the next window select the Save settings option and then click Next The wizard guides you through the menus and dialogs to save your settings 20 2 Restoring Settings With the Restore function in the System Backup you can have all settings from a...

Page 107: ...TZ Box A wizard is available in the FRITZ Box user interface to assist you in restoring your FRITZ Box settings guiding you through the process step by step 1 Open the FRITZ Box user interface see page 24 2 On the Overview page select the Wizards menu 3 Start the Save and Restore Settings Wizard 4 In the next window select the Restore settings option and then click Next The wizard guides you throu...

Page 108: ...ot open the FRITZ Box user interface it is also pos sible to restart directly on the FRITZ Box device 1 Remove the power supply of the FRITZ Box from the elec trical outlet 2 Wait 5 minutes 3 Plug the power supply back in to the outlet Restarting the FRITZ Box takes about 2 minutes During this time you cannot access the FRITZ Box user inter face After the restart and logging back in to the FRITZ B...

Page 109: ...g the factory settings you can delete incorrect settings that prevent the FRITZ Box from functioning properly Resetting the FRITZ Box has the following effects All settings you made in the FRITZ Box will be deleted The network key of the factory settings will be activated again The IP configuration of the factory settings will be re stored Preparing to Load Factory Settings Before loading the fact...

Page 110: ...led supplementary programs on one or more computers uninstall this software using the control panel of your Windows operating system Uninstalling Programs in Windows 8 1 or 8 1 Press the Windows key and the X key at the same time A menu is opened that contains all of the important functions of Windows 8 or 8 1 respectively 2 Click the Programs and Features entry The Uninstall or change a program l...

Page 111: ...l a pro gram 3 Mark the AVM program you want to remove in the list 4 Click the Uninstall Change button The program will be removed Uninstalling Programs in Windows Vista 1 Open Start Settings Control Panel Programs and Functions 2 Mark the AVM program you want to remove in the list 3 Click the Uninstall Change button and confirm with Continue The program will be removed ...

Page 112: ...quence until the error has been resolved Entering http fritz box in the Web Browser Enter http fritz box in your web browser instead of fritz box Google Chrome for instance performs a Google search if the address of the FRITZ Box is not known or was entered incom pletely Restarting the FRITZ Box 1 Disconnect the FRITZ Box from the power supply 2 Wait about five seconds before reconnecting to the p...

Page 113: ... history area 3 Enable the Temporary Internet files and website files option and click Delete Google Chrome 1 Click the Chrome menu Customize and control Google Chrome button and select History Clear browsing data 2 Select the beginning of time and below it only the op tion Cached images and files 3 Click Clear browsing data Other Web Browsers If you use a different web browser see the Help for yo...

Page 114: ... LAN set tings button 3 If the Use a proxy server for your LAN option is en abled click Advanced Under Exceptions enter the address http fritz box and click OK If no proxy server is used click Cancel Google Chrome Check whether the use of a proxy server is enabled If so en ter http fritz box as an exception in the proxy server set tings Google Chrome uses the proxy settings of your operating sys t...

Page 115: ...th the FRITZ Box over wireless LAN clear the wireless connection 3 Make sure that the computer obtains its IP address auto matically see page 81 4 Clear all other connections between your FRITZ Box and other network devices 5 In the web browser enter the address 169 254 1 1 6 When the FRITZ Box user interface is displayed enable the DHCP server of the FRITZ Box In the user interface select Home Ne...

Page 116: ...of the Wireless Radio Network If the wireless LAN software on your computer cannot find the wireless radio network of the FRITZ Box configure the follow ing setting in the FRITZ Box 1 Connect a computer to the FRITZ Box with a network ca ble see page 18 2 Open the FRITZ Box user interface see page 24 3 Select WLAN Radio Network 4 Enable the option Name of the radio network visible 5 Click Apply 6 ...

Page 117: ...wire less devices in different locations to improve the wireless LAN connection Do not set up the FRITZ Box in the corner of a room Do not set up the FRITZ Box directly next to or beneath an obstacle or a metal object like a cabinet or radiator Position the FRITZ Box and your wireless devices so that there are as few obstacles between them as possible Configuring Automatic Radio Channel Selection ...

Page 118: ...B version 2 0 Wireless access point with support for wireless networks in the 2 4 GHz frequency band IEEE 802 11b 11 Mbit s IEEE 802 11g 54 Mbit s IEEE 802 11n 450 Mbit s 23 2 Router Functions Router DHCP server Firewall with IP masquerading NAT IPv4 and IPv6 Parental controls and filter lists Port Forwarding Dynamic DNS VPN 23 3 User Interface and Display Configuration and status messages via a w...

Page 119: ...mperature 20 C 70 C relative humidity operation 10 90 relative humidity idle 5 95 Supply voltage 230 V 50 Hz Maximum power consumption 9 W Average power consumption 2 W 7 W The average power consumption was determined at room temperature 23 C to 27 C with the following load wireless LAN on no devices registered via wireless LAN one network device connected to a LAN port no data transfer other LAN ...

Page 120: ...one or both ends of the network cable You will need the following components to extend the cable Standard CAT 5 network cable When components of a category smaller than Cat 5 are used reduced transmission rates may result You can use both straight cables and crosslink ca bles 1 standard RJ45 CAT 5 double coupling with a 1 1 pinout All components are available from specialized vendors Replacement T...

Page 121: ...y to find specific information quickly 24 2 Information in the Internet On its website AVM presents comprehensive information on your AVM product AVM Service The Service area is the portal for all product specific services from AVM FRITZ Clips manuals downloads and support re quests In the Service area you can also receive comprehen sive information and useful tips on configuring and operating you...

Page 122: ... report helps improve the stability of FRITZ OS The feature for automatically sending error reports is located on the Contents AVM Services page of the FRITZ Box user interface Evaluating the Wireless LAN Connection On the WLAN Radio Network Known Wireless LAN Devices Feedback page you can evaluate your satisfaction with the wireless LAN connection between the FRITZ Box and the wire less device Th...

Page 123: ...u can send us an English language e mail request at any time using the Service area of our website You can reach the service area at en avm de service support request your support request 1 Select the product group and your product for which you need support You will receive a selection of FAQs 2 If you need more help click the Submit support re quest link to open the e mail support form 3 Fill ou...

Page 124: ...ty which may arise in connection with the use of this product AVM will not be liable for damages arising directly or indirectly from the use of the manual or the software nor for incidental or consequential damages except in case of intent or gross negli gence AVM expressly disclaims all liability for the loss of or damage to hardware or software or data as a result of direct or indirect errors or...

Page 125: ...ons not however that the soft ware meets your individual requirements Delivery costs will not be reimbursed Products which have been replaced revert to our ownership Claims recognized under warranty entail neither an extension or recommencement of the warranty period If we reject a warranty claim this claim lapses no later than six months after being rejected by us This warranty shall be governed ...

Page 126: ...he drilling template as a guide to mark the holes needed to mount the FRITZ Box on a wall 122 mm Be sure to print out the page with the drilling template in its original size or 100 Do not enlarge it adjust its size reformat or rescale it in your printer settings ...

Page 127: ...st 104 security 104 diagnostics of functions 104 disposal 125 DNS server 59 DNSSEC 60 drilling template 126 dynamic DNS 53 E e mail notifications 102 electrical power connecting 16 electricity FRITZ Box consumption 119 emergency IP address 77 ending operation 109 evaluating wireless LAN connection 122 events 12 exposed host 50 F factory settings DHCP server 78 loading with FRITZ Box 109 feedback 1...

Page 128: ...ecurity 6 interfaces on the FRITZ Box 10 118 internal memory 109 Internet access 32 43 54 Internet connection configuring 37 via mobile network 41 Internet protocol version 6 61 Internet router 43 Internet use blocking websites 43 time limits 43 IP address changing 80 emergency 77 in Linux 83 in Mac OS X 83 obtaining automatically 81 IPv4 settings 76 IPv6 61 L LAN connecting 18 guest access 94 LED...

Page 129: ...d 35 FRITZ Box password 27 method 27 personal cloud service 96 port forwarding 50 port forwarding IPv6 50 ports on the FRITZ Box 118 power consumption 119 push services 102 R reassigning Info LED 12 recycling 125 remote access VPN 58 remote maintenance 54 requirements for operation 13 restarting 107 S saving data 109 schedule 67 security check 104 FRITZ Box password 27 FRITZ Box user account 29 in...

Page 130: ...puser 33 quick access 34 rights 31 user interface opening 24 overview 24 password protection 27 V videos 121 VPN client 59 configuration wizard 59 user account 32 using remote access 58 W wake on LAN 75 warranty 125 whitelist 43 Windows users 49 wireless auto channel 73 wireless LAN access point 10 connecting 20 extending a radio network 68 frequency ranges 72 guest access 93 network key 22 range ...

Reviews: