LevelOne WBR-3460 User Manual Download Page 84

Page: 84 / 129

Wireless ADSL2/2+ Modem Router User Guide

VPN- Manual Policy Screen

This screen is displayed when you click the

Add Manual Policy

button on the

VPN

Policies

screen, or when you edit an existing Manual Policy. It allows you to define or

edit a "Manual" VPN policy.

An "Manual" VPN policy requires that you enter all data on both VPN endpoints. There
is no negotiation between the 2 VPN endpoints.

Figure 60: VPN-Manual Policy Screen

Data - VPN-Manual Policy Screen

General

Policy Name

Enter a unique name to identify this policy. This name is not
supplied to the remote VPN endpoint. It is used only to help you
manage the policies.

Summary of Contents for WBR-3460

Page 1: ...LevelOne WBR 3460 11g Wireless ADSL2 2 Modem Router 1WAN 4LAN QoS VPN User Manual V1 0 0 0608...

Page 2: ...R 4 PC CONFIGURATION 31 Overview 31 Windows Clients 31 Macintosh Clients 39 Linux Clients 39 Other Unix Systems 39 Wireless Station Configuration 40 Wireless Configuration on Windows XP 40 CHAPTER 5 O...

Page 3: ...NDIX A TROUBLESHOOTING 113 Overview 113 General Problems 113 Internet Access 113 Wireless Access 114 APPENDIX B ABOUT WIRELESS LANS 116 Modes 116 BSS ESS 116 Channels 117 WEP 117 WPA PSK 117 Wireless...

Page 4: ...L2 2 Modem Router incorporates many advanced features care fully designed to provide sophisticated functions while being easy to use Internet Access Features Shared Internet Access All users on the LA...

Page 5: ...etermine which incoming and outgoing traffic should be permit ted Scheduling Both the URL Filter and Firewall rules can be scheduled to operate only at certain times This provides great flexibility in...

Page 6: ...ter Remote Management The Wireless ADSL2 2 Modem Router can be ma naged from any PC on your LAN or Wireless LAN And if the Internet connection exists it can also optionally be configured via the Inter...

Page 7: ...cluded If any of these items are damaged or missing please contact your dealer immediately WBR 3460A B Power Adapter Cat 5 Ethernet LAN cable Yellow Color RJ 11 ADSL cable Gray Color RJ 11 to RJ45 cab...

Page 8: ...AN port 10 This will be ON if the LAN connection is using 10BaseT and Blinking if data is being transferred via the corresponding LAN port If neither LED is on there is no active connection on the cor...

Page 9: ...plink port when required Just connect any port to a normal port on the other hub using a standard LAN cable Reset Button Reset to De faults This button will reset the Wireless ADSL2 2 Modem Router to...

Page 10: ...and a DSL connec tion To use the Wireless Access Point all Wireless devices must be compliant with the IEEE 802 11g or IEEE 802 11b specifications Procedure Figure 4 Installation Diagram 1 Choose an I...

Page 11: ...from to the ADSL port on the Wireless ADSL2 2 Modem Router the RJ11 connector to the ADSL terminator provided by your phone company 4 Power Up Connect the supplied power adapter to the Wireless ADSL2...

Page 12: ...em Router you wish to use Use the table below to locate detailed instructions for the required functions To Do this Refer to Configure PCs on your LAN Chapter 4 PC Configuration Check Wireless ADSL2 2...

Page 13: ...he same LAN segment The Wireless ADSL2 2 Modem Router must be installed and powered ON If the Wireless ADSL2 2 Modem Router s default IP Address 192 168 0 1 is already used by another device the other...

Page 14: ...192 168 0 2 to 192 168 0 254 to be compatible with the Wireless ADSL2 2 Modem Router s default IP Address of 192 168 0 1 Also the Network Mask must be set to 255 255 255 0 See Chapter 4 PC Confi gura...

Page 15: ...Setup 15 Figure 5 Setup Wizard Home Page 3 On the VC1 screen shown below enter the VPI and VCI values provided by your ISP then click Next Figure 6 Setup Wizard VC1...

Page 16: ...quire you to use a particular Hostname or Domain name or MAC physi cal address Static Fixed IP Address Your ISP allocates a perma nent IP Address to you Usually the connection is Always on IP Address...

Page 17: ...nd VC4 are available for special purposes such as Video on Demand You can only use these VCs if supported by your ISP and ADSL service provider In that case they will provide the necessary configurati...

Page 18: ...ice Select the multiplexing value provided by your ISP IP Address Enter the IP address of the device on your LAN which will receive the data on this VC For Video on Demand this would be the IP address...

Page 19: ...buttons Log Out When finished you should click this button to logout Restart Use this if you wish to restart the Wireless ADSL2 2 Modem Router Note that restarting the Router will break any existing...

Page 20: ...for the LAN segment to which the Wireless ADSL2 2 Modem Router is attached the same value as the PCs on that LAN segment DHCP Server If Enabled the Wireless ADSL2 2 Modem Router will allocate IP Addre...

Page 21: ...m Router s DHCP Server This is the default setting The DHCP Server settings are on the LAN screen On this screen you can Enable or Disable the Wireless ADSL2 2 Modem Router s DHCP Server function Set...

Page 22: ...s for the Wireless Access Point feature use the Wireless link on the main menu to reach the Wireless screen An example screen is shown below Figure 11 Wireless Screen Data Wireless Screen Identificati...

Page 23: ...ireless Stations will only be able to use the Wire less ADSL2 2 Modem Router if they are fully backward compatible with the 802 11b standard Channel No Select the Channel you wish to use on your Wirel...

Page 24: ...ireless Stations All wireless stations can use the access point provided they have the correct SSID and secu rity settings Trusted Wireless stations only Only wireless stations you designate as Truste...

Page 25: ...red option and ensure the Wireless Stations use the same setting 64 Bit data is encrypted using the default key before being transmitted You must enter at least the default key For 64 Bit Encryption t...

Page 26: ...ss Security Figure 13 WPA PSK Data WPA PSK Screen Security System WPA PSK Like WEP data is encrypted before transmission WPA is more secure than WEP and should be used if possible WPA PSK is the versi...

Page 27: ...ess Stations This list any Wireless Stations detected by the Access Point which you have not designated as Trusted Name The name assigned to the Trusted Wireless Station Use this when adding or editin...

Page 28: ...ed to the Address field and the Add button will change to Update 3 Edit the address MAC or physical address as required 4 Click Update to save your changes Add Update To add a Trusted Station which is...

Page 29: ...d Enter the existing password in this field New password Enter the new password here Verify pass word Re enter the new password here You will be prompted for the password when you connect as shown bel...

Page 30: ...through it You need to have a DHCP Server on your LAN to provide IP addresses to the Wireless clients using this Access Point After changing the mode this device will restart which will take a few se...

Page 31: ...igured on each PC TCP IP Settings Overview If using the default Wireless ADSL2 2 Modem Router settings and the default Windows TCP IP settings no changes need to be made By default the Wireless ADSL2...

Page 32: ...Figure 19 IP Address Win 98SE Ensure your TCP IP settings are correct as follows Using DHCP To use DHCP select the radio button Obtain an IP Address automatically This is the default Windows setting U...

Page 33: ...ministrator can advise you of the IP Address they assigned to the Wireless ADSL2 2 Modem Router Figure 20 Gateway Tab Win 98SE ME On the DNS Configuration tab ensure Enable DNS is selected If the DNS...

Page 34: ...nection 2 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 22 Network Configuration Win 2000 3 Select the TCP IP protocol for your net...

Page 35: ...the Wireless ADSL2 2 Modem Router Using a fixed IP Address Use the following IP Address If your PC is already configured check with your network administrator before making the following changes Enter...

Page 36: ...l Network Connection 2 Right click the Local Area Connection and choose Properties You should see a screen like the following Figure 24 Network Configuration Windows XP 3 Select the TCP IP protocol fo...

Page 37: ...ress from the Wireless ADSL2 2 Modem Router Using a fixed IP Address Use the following IP Address If your PC is already configured check with your network administrator before making the following cha...

Page 38: ...nternet Connections 2 Select Set up or change your Internet Connection 3 Select the Connection tab and click the Setup button 4 Cancel the pop up Location Information screen 5 Click Next on the New Co...

Page 39: ...any changes Fixed IP Address By default most Unix installations use a fixed IP Address If you wish to continue using a fixed IP Address make the following changes to your configuration Set your Defau...

Page 40: ...reless Security By default Wireless security on the Wireless ADSL2 2 Modem Router is disabled If Wireless security remains disabled on the Wireless ADSL2 2 Modem Router all stations must have wireless...

Page 41: ...n If the SSID is not listed for details of dealing with this situation 4 The next step depends on whether or not Wireless security has been enabled on the Wireless ADSL2 2 Modem Router If Wireless Sec...

Page 42: ...Encryption If WEP data encryption has been enabled on the Wireless ADSL2 2 Modem Router Windows will detect this and show a screen like the following Figure 29 WEP Windows XP To connect Enter the WEP...

Page 43: ...outer and click Configure to see a screen like the following Figure 31 Wireless Network Properties WEP Configure this screen as follows Set Network Authentication to match the Wireless ADSL2 2 Modem R...

Page 44: ...e Key index must match the default key index on the Wireless ADSL2 2 Modem Router The default value is 1 Ensure the options The key is provided for me automatically and This is a comput er to computer...

Page 45: ...r it does not matter which network is selected on the screen below Just click the Advanced button Figure 33 Wireless Networks Windows XP You will then see a screen like the example below Figure 34 Adv...

Page 46: ...WPA PSK For Data Encryption select TKIP For the Network key and Confirm network key enter the network key PSK used on the Wireless ADSL2 2 Modem Router Ensure the option This is a computer to compute...

Page 47: ...d If the Broadcast SSID setting on the Wireless ADSL2 2 Modem Router has been disabled its SSID will NOT be listed on the screen below Figure 37 Wireless Networks Windows XP In this situation you need...

Page 48: ...the example below Figure 39 Add Wireless Network 3 Configure this screen as follows Enter the correct SSID as used on the Wireless ADSL2 2 Modem Router Remember the SSID is case sensitive so be sure...

Page 49: ...tails of WEP and WPA PSK Uncheck the options The key is provided for me automatically and This is a computer to computer ad hoc network Click OK to save and exit 4 This wireless network will then be l...

Page 50: ...mode see Chapter 8 Modem Mode Operation Router Mode Once both the Wireless ADSL2 2 Modem Router and the PCs are configured operation is automatic However there are some situations where additional In...

Page 51: ...or the Up Stream upload ADSL Connection VC 1 Status VC 2 Status VC 3 Status VC 4 Status For each VC Virtual Circuit the current status is displayed This will be either Enabled or Disabled Note VC 1 is...

Page 52: ...ddress of the Wireless ADSL2 2 Modem Router Network Mask The Network Mask Subnet Mask for the IP Address above DHCP Server This shows the status of the DHCP Server function The value will be Enabled o...

Page 53: ...howing all LAN and Wireless devices currently on the network VPN Status View details of each current VPN Tunnel is a sub window You also have the option of viewing the VPN Log For further details abou...

Page 54: ...sh a connection If the connection currently exists the Disconnect button can be used to break the connection Normally it is not necessary to use the Connect and Disconnect buttons unless the setting C...

Page 55: ...Gateway or Router associated with the IP Address above DHCP Server The IP address of your ISP s DHCP Server DNS Server The IP address of the Domain Name Server which is currently used Lease Obtained...

Page 56: ...Wireless ADSL2 2 Modem Router User Guide 56 Close Close this window...

Page 57: ...Details Fixed Dynamic IP Address Data Fixed IP address Screen Internet IP Address The IP Address of this device as seen by Internet users This address is allocated by your ISP Internet Service Provid...

Page 58: ...d Features Overview The following advanced features are provided Internet DMZ Special Applications URL filter Dynamic DNS Firewall Rules Firewall Services Options Schedule Virtual Servers VPN Internet...

Page 59: ...ed Special Applications If you use Internet applications which use non standard connections or port numbers you may find that they do not function correctly because they are blocked by the Wire less R...

Page 60: ...in both the Start and Finish fields Finish Enter the end of the range of port numbers used by the application server for data you send to it If the application uses a single port number enter it in b...

Page 61: ...his feature The URL filter will check each Web site access If the address or part of the address is included in the block site list access will be denied On the Advanced Internet screen select the des...

Page 62: ...ton Add Filter String To add to the current list type the word or domain name you want to block into the field provided then click the Add button Filter strings should be as specific as possible Other...

Page 63: ...vider s normal procedure to obtain your desired Domain name 3 Enter your DDNS data on the Wireless ADSL2 2 Modem Router s DDNS screen and enable the DDNS feature 4 The Wireless ADSL2 2 Modem Router wi...

Page 64: ...u have more than one name enter the name you wish to use User Name Enter your Username for the DDNS Service TZO com uses your E mail address Password Enter your current password for the DDNS Service T...

Page 65: ...traffic Firewall Rules Screen An example screen is shown below Figure 49 Firewall Screen Data Firewall Rules Incoming Rules For the default rule this will display Default For rules which you create t...

Page 66: ...will display a radio button which allows you to select the rule Enable Indicates whether or not the rule is currently enabled For rules you have added this column will contain a checkbox allowing you...

Page 67: ...k BLOCK always BLOCK by schedule otherwise Allow Note Any inbound traffic which is not allowed by rules you create will be blocked by the Default rule BLOCK rules are only useful if the traffic is alr...

Page 68: ...h Log traffic only it matches this rule The action is determined by this rule Not Match Log traffic which is considered by this rule but does not match The action is NOT determined by this rule Outgoi...

Page 69: ...ver on your LAN which will be covered by this rule WAN Users These settings determine which packets are covered by the rule based on their source WAN IP address Select the desired option Any All IP ad...

Page 70: ...Services Screen Data User defined Services Services Existing Servic es This lists any Services you have defined If you have not de fined any Services this list will be empty Once you define some servi...

Page 71: ...e Data Add Edit Service Services Name If editing this shows the current name of the Service If adding a new service this will be blank and you should enter a suitable name Type Select the protocol use...

Page 72: ...ignored Disabling this option provides a slight increase in security MTU Size Enter a value between 1 and 1500 Note MTU Maximum Transmission Unit size should only be changed if advised to do so by Te...

Page 73: ...sessions or periods can be defined Session 2 can be left blank if not required Start Time Enter the start using a 24 hr clock Finish Time Enter the finish time using a 24 hr clock Local Time Time Zon...

Page 74: ...er If you prefer to use a particular NTP server as the primary NTP server check the checkbox Use this NTP Server and enter the Server s IP address in the fields provided If this setting is not enabled...

Page 75: ...ocols To Internet users all virtual Servers on your LAN have the same IP Address This IP Address is allocated by your ISP This address should be static rather than dynamic to make it easier for Intern...

Page 76: ...will be sent PC Server Select the PC for this Server The PC must be running the appropriate Server software For each entry the PC must be running the appropri ate Server software If the desired Server...

Page 77: ...Advanced Features 77 From the Internet ALL Virtual Servers have the IP Address allocated by your ISP...

Page 78: ...connection Generally you will have to create one policy for each site you wish to connect to The remote VPN Gateway or client needs to have matching configuration Traffic covered by an enabled policy...

Page 79: ...ss of the remote VPN endpoint Type The Type is Auto or Manual as explained above Local LAN IP address or subnet on your local LAN Traffic must be from or to these addresses to be cov ered by this poli...

Page 80: ...iewing the VPN Log VPN Auto Policy Screen This screen is displayed when you click the Add Auto Policy button on the VPN Poli cies screen or when you edit an existing Auto Policy It allows you to defin...

Page 81: ...ote endpoint has a dynamic IP address select Dynamic IP address No Address Data input is required Otherwise select the desired option IP address or Domain Name and enter the address of the remote VPN...

Page 82: ...ngle address Enter an IP address in the IP address field This must be an address on the remote LAN Typically this setting is used when you wish to access a server on the remote LAN Subnet address Ente...

Page 83: ...ed on the remote VPN Gateway Authentication Authentication Algorithm used for both IKE and IPSec This setting must match the setting used on the remote VPN Gateway Pre shared Key The key must be enter...

Page 84: ...t allows you to define or edit a Manual VPN policy An Manual VPN policy requires that you enter all data on both VPN endpoints There is no negotiation between the 2 VPN endpoints Figure 60 VPN Manual...

Page 85: ...ndpoint must have these IP addresses entered as its Remote addresses Remote LAN Remote LAN This identifies which PCs on the remote LAN are covered by this policy For each selection data must be provid...

Page 86: ...S the key should be 8 ASCII characters 16 Hex characters For 3DES the key should be 24 ASCII characters 48 Hex characters Authentication Select the desired Authentication Algorithm and enter the key i...

Page 87: ...to identify the incom ing connection For Auto policies the SPI is automatically generated For Manual policies the SPI must be entered when the policy is configured SPI Out This is a unique index numbe...

Page 88: ...the DMZ PC or a Virtual Server This database is maintained automati cally but you can add and delete entries for PCs which use a Fixed Static IP Address Config File Backup or restore the configuratio...

Page 89: ...abase screen is shown below Figure 62 PC Database PCs which are DHCP Clients are automatically added to the database and updated as required By default non Server versions of Windows act as DHCP Clien...

Page 90: ...nected or not powered On you will not be able to add it Buttons Add This will add the new PC to the list The PC will be sent a ping to determine its hardware address If the PC is not available not con...

Page 91: ...re control than the standard PC Database screen Figure 63 PC Database Admin Data Advanced PC Database Known PCs This lists all current entries Data displayed is name IP Address type The type indicates...

Page 92: ...ter contact the PC and find its MAC address This is only possible if the PC is connected to the LAN and powered On MAC address is Enter the MAC address on the PC The MAC address is also called the Har...

Page 93: ...s shown below Figure 64 Config File Screen Data Config File Screen Backup Config Use this to download a copy of the current configuration and store the file on your PC Click Download to start the down...

Page 94: ...ge amount of data and adversely affect performance Since only a limited amount of log data can be stored in the Wireless ADSL2 2 Mod em Router log data can also be E mailed to your PC Use the E mail s...

Page 95: ...ed Internet accesses which were blocked are logged Connections to the Web based interface of this Router If checked this will log connections TO this Router rather than through this Router to the Inte...

Page 96: ...g is to be sent to The E mail will also show this address as the Sender s address Outgoing SMTP Mail Server Enter the address or IP address of the SMTP Simple Mail Transport Protocol Server you use fo...

Page 97: ...rea Network tries to visit a blocked site E mail Logs Send Logs Select the desired option for sending the log by E mail Never default This feature is disabled Logs are not sent When log is full The ti...

Page 98: ...hat case wait a few seconds and try again Ping Button After entering the IP address click this button to start the Ping procedure The results will be displayed in the Ping Results pane DNS Lookup Inte...

Page 99: ...Qos Setting Qos setting If enabled this feature allows you to specify priorities for differ ent traffic Category Category Select the desired option Applications Games Select the desired applications...

Page 100: ...nto the summary list Summary Summary This lists the summary of your Qos setting Priority The priority of this Applications Games or MAC Address Name The name of this Applications Games or MAC Address...

Page 101: ...o connect see details and an exam ple below Port Number Enter a port number between 1 and 65535 The default for HTTP Web connections is port 80 but using port 80 will prevent the use of a Web Virtual...

Page 102: ...your Web Browser 2 In the Address bar enter HTTP followed by the Internet IP Address of the Wireless ADSL2 2 Modem Router If the port number is not 80 the port number is also required After the IP Ad...

Page 103: ...less ADSL2 2 Modem Router and ensure the following Windows 2000 settings are correct Open Routing and Remote Access In the console tree select Routing and Remote Access server name IP Routing RIP In t...

Page 104: ...table using the data shown in the Properties area on screen The entry selected in the list is ignored and has no effect Edit Update the current Static Routing Table entry using the data shown in the...

Page 105: ...cal LAN must use the Wireless ADSL2 2 Modem Router s Local Router as the Default Route The entries will be the same as the Wireless ADSL2 2 Modem Router s local router with the exception of the Gatewa...

Page 106: ...ment 2 Destination IP Address 192 168 2 0 Network Mask 255 255 255 0 Standard Class C Gateway IP Address 192 168 0 100 Metric 3 For Router A s Default Route Destination IP Address 0 0 0 0 Network Mask...

Page 107: ...owing Figure 72 Router Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will appear in the U...

Page 108: ...he IP address does not change but the DHCP server is disabled However your PC will usually retain the IP address provided by the DHCP Server so the connection will be automatically re established You...

Page 109: ...change back to Router mode if desired LAN set IP address mask and gateway This is the same as in Router mode except that the DHCP server is not available while in Modem mode Wireless this screen and...

Page 110: ...not perform any operations or make any changes to the network traffic passing through it You need to have a DHCP Server on your LAN to provide IP addresses to the Wireless clients using this Access P...

Page 111: ...atus Screen Bridge Mode Data Status Screen Bridge Mode ADSL Modem Status This indicates the status of the ADSL modem component DownStream Connection Speed Displays the speed for the DownStream Connect...

Page 112: ...le access points this ID is called an ESSID Extended Service Set Identifier Region The current region as set on the Wireless screen Channel This shows the Channel currently used as set on the Wire les...

Page 113: ...c IP address ensure that it is using an IP Address within the range 192 168 0 2 to 192 168 0 254 and thus compatible with the Wireless ADSL2 2 Modem Router s de fault IP Address of 192 168 0 1 Also th...

Page 114: ...have the same setting for WEP The default setting for the Wire less ADSL2 2 Modem Router is disabled so your wireless station should also have WEP disabled If WEP is enabled on the Wireless ADSL2 2 M...

Page 115: ...by switching other devices Off and see if this helps Any noisy devices should be shielded or relocated RF Shielding Your environment may tend to block transmission between the wireless stations This w...

Page 116: ...only with Wireless Stations which are set to Infrastructure mode BSS ESS BSS A group of Wireless Stations and a single Access Point all using the same ID SSID form a Basic Service Set BSS Using the s...

Page 117: ...rom receiving any data which is transmitted by your Wireless Stations But if the data is encrypted then it is meaningless unless the receiver can decrypt it If WEP is used the Wireless Stations and th...

Page 118: ...wish to connect to Alternatively the SSID can be set to any or null blank to allow connection to any Access Point Wireless Security The Wireless Stations and the Access Point must use the same setting...

Page 119: ...There are two security modes possible with IPSec Transport Mode the payload data part of the packet is encapsulated through encryption but the IP header remains in the clear unchanged The Wireless ADS...

Page 120: ...necessary to have multiple Policies for the same remote site However you should only Enable one 1 policy at a time VPN Configuration The general rule is that each endpoint must have matching Policies...

Page 121: ...not acting as a VPN endpoint Client PC to VPN Gateway Figure 77 Client PC to VPN Server In this situation the PC must run appropriate VPN client software in order to connect via the Internet to the W...

Page 122: ...VPN tunnel will be established and what systems on the remote LAN can be accessed once the VPN connection is established It is possible to have simultaneous VPN connections to many remote sites VPN E...

Page 123: ...Appendix C About VPNs 123 Configuration Settings Gateway A Gateway A should be configured as shown below Figure 80 Gateway A Configuration...

Page 124: ...Settings Setting LAN A Gateway LAN B Gateway Notes Policy Name Example Example Name does not affect operation Select a meaningful name Remote VPN Endpoint Fixed IP Address 205 17 11 43 Fixed IP Addres...

Page 125: ...P address IP address is the most common ID method Remote Identity WAN IP address WAN IP address IP address is the most common ID method SA Parameters Encryption 3DES 3DES Must match Authentication MD5...

Page 126: ...eT RJ45 LAN connection 1 RJ11 for ADSL line LEDs 13 Power Adapter 12VDC 1A External Wireless Interface Standards IEEE802 11b IEEE802 11g WLAN 802 11G plus Texas Instruments proprietary enhanced mode F...

Page 127: ...erent from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help To assure continued compliance any changes or modifications not expressly ap proved...

Page 128: ...g Hereby Digital Data Communications declares that this Model no WBR 3460 is in compliance with the essential requirements and other relevant provisions of Directive 1999 5 EC The CE Declaration of Co...

Page 129: ...agreement Adhering to the GPL requirements the open source code and open source license for the source code are available for free download at http global level1 com If you would like a copy of the GP...

Search results

Summary of Contents for WBR-3460

Reviews:

Brands by name

Popular brands

LevelOne WBR-3460, User Manual

Search results

Summary of Contents for WBR-3460

Reviews:

Brands by name

Popular brands