LevelOne WBR-6001 User Manual Download Page 65

Page: 65 / 86

Appendix A

802.1x

Setting

Figure 1: Testing Environment (Use Windows 2000 Radius Server)

Equipment Details

PC1:

Microsoft Windows XP Professional without Service Pack 1 and LevelOne Wireless PCI Card

PC2:

Microsoft Windows XP Professional with Service Pack 1a or latter and LevelOne Wireless PCI

Card.

Authentication Server: Windows 2000 RADIUS server with Service

Pack 3 and HotFix Q313664.

Note. Windows 2000 RADIUS server only supports PEAP after upgrade to

service pack 3 and HotFix Q313664

(You can get more information from

http://support.microsoft.com/default.aspx?scid=kb; en-us;313664)

DUT Configuration:

1. Enable DHCP server.

2. WAN setting: static IP address.

3. LAN IP address: 192.168.123.254/24.

4. Set RADIUS server IP.

5. Set RADIUS server shared key.

6. Configure WEP key and 802.1X setting.

Summary of Contents for WBR-6001

Page 1: ...LevelOne User Manual Ver 1 0 0 0801 WBR 6001 N_Max Wireless Broadband Router i...

Page 2: ...cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the...

Page 3: ...ESS ROUTER 10 LOGIN TO CONFIGURE FROM WIZARD 7 BASIC SETTING 10 Primary Setup WAN Type Virtual Computers 10 Static IP Address 12 Dynamic IP Address with Road Runner Session Management e g Telstra BigP...

Page 4: ...em Log 46 Dynamic DNS 47 SNMP Setting 49 Routing 50 Schedule Rule 52 Qos Rule 54 TOOLBOX 55 System Log 55 Firmware Upgrade 55 Backup Setting 55 Reset to default 56 Reboot 56 APPENDIX A 802 1X SETTING...

Page 5: ...install and use this product please read the manual carefully for fully exploiting the functions of this product User Manual Overview Introduction Describes N_Max Wireless Broadband Router Helps user...

Page 6: ......

Page 7: ...Fi Protected Setup z Integrate 4 Port Fast Ethernet Switch with 10 100Mbps MDI MDI X auto sensing z Built in NAT function allows multiple PCs and devices to share Internet connection z Browser based...

Page 8: ......

Page 9: ...light indicates the device is ready 3 WAN A solid light indicates the WAN port is connected 4 WLAN A solid light indicates the Wireless segment is ready LED blinks during wireless data transmission 5...

Page 10: ...ou can place your Wireless Broadband Router on a desk or other flat surface For optimal performance place your Wireless Broadband Router in the center of your office or your home in a location that is...

Page 11: ...he power switch on this product will automatically enter the self test phase When it is in the self test phase the Status indicator will be lighted ON for about 10 seconds and then it will be flashed...

Page 12: ...es Select the TCP IP protocol for your network card Click on the Properties button You should then see the following screen and make sure you have selected Obtain IP address automatically 2 Reboot com...

Page 13: ...Default Settings IP Address 192 168 0 1 Password password Wireless Mode Enable SSID WBR 6001 Security None Please enter the default system password in lowercase only...

Page 14: ...Blinking The WAN port is sending or receiving data WLAN Wireless activity Green Blinking Sending or receiving data via wireless An active station is connected to the corresponding LAN port Link 1 4 Li...

Page 15: ...b user interface of this product There are two appearances of web user interface for general users and for system administrator To log in as an administrator enter the system password the default pass...

Page 16: ...will guide you through a basic configuration procedure step by step Press Next Once the user finishes those steps and the router screen displayed as below It means that the Internet connection is now...

Page 17: ......

Page 18: ...Basic Setting Please Select Advanced Setup to Setup Primary Setup WAN Type Virtual Computers 10...

Page 19: ...Press Change...

Page 20: ...button to choose a correct one from the following four options A Static IP Address ISP assigns you a static IP address B Dynamic IP Address Obtain an IP address from ISP automatically C Dynamic IP Ad...

Page 21: ...rd the account and password your ISP assigned to you For security this field appears blank If you don t want to change the password leave it empty 2 PPPoE Service Name optional Input the service name...

Page 22: ...ks the connect button in the Status page L2TP First please check your ISP assigned and Select Static IP Address or Dynamic IP Address For example Use Static 1 My IP Address and My Subnet Mask the priv...

Page 23: ...feature and allows you to setup the one to one mapping of multiple global IP address and local IP address Global IP Enter the global IP address assigned by your ISP Local IP Enter the local IP addres...

Page 24: ...m the IP address pool to the requesting computer You must specify the starting and ending address of the IP address pool 4 Domain Name Optional this information will be passed to the client 5 Primary...

Page 25: ...same Network ID The factory setting is default SSID Broadcast The router will Broadcast beacons that have some information including SSID so that the wireless clients can know how many AP devices by...

Page 26: ...WEP key to be used and input 26 or 10 hexadecimal 0 1 2 8 9 A B F digits 802 1X Check Box was used to switch the function of the 802 1X When the 802 1X function is enabled the Wireless user must auth...

Page 27: ...elect Encryption and Pre share Key Mode If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of pre share key is from 8 to 63 2 Fill in the key...

Page 28: ...you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user elects ASCII the length of pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key...

Page 29: ...l 0 1 2 8 9 A B F digits If user selects ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the...

Page 30: ...s to encrypt IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If user selects ASCII the length of Pre...

Page 31: ...ion as defined by the IEEE802 11 standard has been made available Using WDS it is possible to wirelessly connect Access Points and in doing so extend a wired infrastructure to locations where cabling...

Page 32: ...24...

Page 33: ...Change Password You can change Password here We strongly recommend you to change the system password for security reason...

Page 34: ...Forwarding Rules 26...

Page 35: ...all requests to this port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail pleas...

Page 36: ...ecial Applications fails to make an application work try setting your computer as the DMZ host instead 1 Trigger the outbound port number issued by the application 2 Incoming Ports when the trigger pa...

Page 37: ...onferencing Internet telephony and other special applications NOTE This feature should be used only when needed Non standard FTP port You have to configure this item if you want to access an FTP serve...

Page 38: ...The device also supports this function If the OS supports this function enable it Security Settings 30...

Page 39: ...rs or DMZ host only You can select one of the two filtering policies 1 Allow all to pass except those match the specified rules 2 Deny all to pass except those match the specified rules You can specif...

Page 40: ...o prefix indicates both TCP and UDP are defined An empty implies all port addresses Packet Filter can work with Scheduling Rules and give user more flexibility on Access control For Detail please refe...

Page 41: ...all blocked Example 2 1 2 3 100 1 2 3 119 they can do everything except read net news port 119 and transfer files via FTP port 21 Others are all allowed After Inbound Packet Filter setting is configur...

Page 42: ...are allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 149 161 123 10 149 161 123 20 they can do everything block nothin...

Page 43: ...123 100 and 149 161 123 119 They can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the sav...

Page 44: ...someone accesses the specific URLs Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restricted...

Page 45: ...on will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www google com will be blocked but the action will not be record in...

Page 46: ...put a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Check if you want to enable URL Blo...

Page 47: ...will be record in log file 2 URL include sina will be blocked but the action will be record in log file 3 URL include cnnsi will not be blocked but the action will be record in log file 4 URL include...

Page 48: ...a client is denied to connect to this device it means the client can t access to the Internet either Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table...

Page 49: ...esponding client to connect to this device C When Association control is checked check A will allow the corresponding client to associate to the wireless LAN A In this page we provide the following Co...

Page 50: ...nd 3 have fixed IP address either from the DHCP server of this device or manually assigned ID 1 00 12 34 56 78 90 192 168 12 100 ID 3 00 98 76 54 32 10 192 168 12 101 Client 2 will obtain its IP addre...

Page 51: ...t in web pages to perform administration task This feature enables you to perform administration task from remote host If this feature is enabled only the specified IP address can perform remote admin...

Page 52: ...router will record the packet information pass through the router like IP address port address ACK SEQ number and so on And the router will check every incoming packet to detect if this packet is val...

Page 53: ...lect it if you want to Get Date and Time by NTP Protocol Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates Set Date and Time manually Sele...

Page 54: ...cation is System Log This page support two methods to export system logs to specific destination by means of syslog UDP and SMTP TCP The items you have to setup including IP Address for Syslog Host IP...

Page 55: ...using or to separate these email addresses Dynamic DNS To host your server on a changing IP address you have to use dynamic domain name service DDNS So that anyone wishing to reach your host only need...

Page 56: ...enter the appropriate information about your Dynamic DNS Server You have to define Provider Host Name Username E mail Password Key You will get this information when you register an account on a Dyna...

Page 57: ...nction If Local is checked this device will response request from LAN If Remote is checked this device will response request from WAN Get Community Setting the community of Get Request your device wil...

Page 58: ...up the functions of static Dynamic Routing Routing Information Protocol RIP will exchange information about destinations for computing routes throughout the network Please select RIPv2 only if you hav...

Page 59: ...103 1 So if for example the client3 wanted to send an IP data gram to 192 168 0 2 it would use the above table to determine that it had to go via 192 168 123 103 a gateway And if it sends Packets to 1...

Page 60: ...e which service will be turned on or off Select the enable item Press Add New Rule You can write a rule name and set which day and what time to schedule from Start Time to End Time The following examp...

Page 61: ...able the Scheduler press Edit To edit the schedule rule press Delete To delete the schedule rule and the rule of the rules behind the deleted one will decrease one automatically Schedule Rule can be a...

Page 62: ...Qos Rule Local IP Please input Client IP Example 192 168 12 33 Remote Priority Please input Global IP and port Example 168 96 2 3 and port 21 54...

Page 63: ...irmware by clicking Firmware Upgrade button Backup Setting You can backup your settings by clicking the Backup Setting button and save it as a bin file Once you want to restore these settings please c...

Page 64: ...gy that enables you to power up a networked device remotely In order to enjoy this feature the target device must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 2...

Page 65: ...Card Authentication Server Windows 2000 RADIUS server with Service Pack 3 and HotFix Q313664 Note Windows 2000 RADIUS server only supports PEAP after upgrade to service pack 3 and HotFix Q313664 You...

Page 66: ...he RADIUS server IP 3 Enter the shared key The key shared by the RADIUS server and DUT 4 We will change 802 1X encryption key length to fit the variable test condition Setup Network adapter on PC 1 Ch...

Page 67: ...UT as the Access Point 3 Set authentication type of wireless client and RADIUS server both to EAP_TLS 4 Disable the wireless connection and enable again 5 The DUT will send the user s certificate to t...

Page 68: ...Figure 4 Certificate information on PC1 Figure 5 Authenticating 60...

Page 69: ...C2 5 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure 6 Terminate the test steps when PC2 get dynamic IP and PING remote host successfully...

Page 70: ...1 User A XP Wireless Card Ti 11g Tool Odyssey Client Manager Refer to www funk com Download http www funk com News Events ody_c_wpa_preview_pn asp Or Another Configuration WPA PSK In fact it is not n...

Page 71: ...manager of Wireless Router to configure like below 2 Go to Odyssey Client Manager first choose Network Before doing that you should verify if the software can show the wireless card Open Adapters 3 Ad...

Page 72: ...Select Connect to network You will see Method2 1 First patch windows XP and have to install Service package 1 Patch http www microsoft com downloads details aspx displaylang en FamilyID 5039ef4a 61e0...

Page 73: ...and client Router Client Go to Network Connection and select wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk WPA For this function we need the server to auth...

Page 74: ...1 1 The User A or User B have to get certificate from Radius first http 192 168 122 1 certsrv Account fae1 Password fae1 2 Then Install this certificate and finish 3 Go to the Web manager of Wireless...

Page 75: ...o to Odyssey Client Manager choose Profiles and Setup Profile name as 1 Login name and passwd are fae1 and fae1 Remember that you get certificate from Radius in Step1 5 Then Choose certificate like ab...

Page 76: ...6 Then go to Authentication and first Remove EAP TLS and Add EAP TLS again 68...

Page 77: ...7 Go Network and Select 1 and ok 8 Back to Connection and Select 123kk If successfully the wireless client has to authenticate with Radius Server like below...

Page 78: ...thod 2 1 The UserA or UserB have to get certificate from Radius first http 192 168 122 1 certsrv Account fae1 Password fae1 2 Then Install this certificate and finish 3 Setting on the router and clien...

Page 79: ...Client Go to Network Connection and select wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Select WirelessCA and Enable in Trusted root certificate authority...

Page 80: ...Then if the wireless client wants to associate it has to request to authenticate 72...

Page 81: ...make sure that which port is plugged If the cable is in the Wan port please change to plug in LAN port 1 or LAN port 4 Then please check if the Pc gets ip address from Router Use command mode as belo...

Page 82: ...e with RESET button First turn off the router and press the RESET button in And then power on the router and push the RESET button down until the Status start flashing then remove the finger If LED fl...

Page 83: ...DNS configuration of Static IP Address Please refer to the information of ISP and assign one or two in DNS item How do I connect router by using wireless 1 How to start to use wireless A First make s...

Page 84: ...list again Choose the one that you will want to connect and connect If successfully the computer will show User will also retrieve IP from router 2 When I use AES encryption of WPA PSK to connect even...

Page 85: ...ss client supports AES encryption 3 When I use wireless to connect the router but I find the signal is very low even if I am close to the router A Please check if the wireless client is normal first I...

Page 86: ...rope ETSI 2 412 2 472GHz 13 Channels Modulation Schemes DBPSK DQPSK CCK OFDM Channels 1 11 channels FCC 1 13 channels ETSI 1 14 channels MKK Japan Security 64 128 bits WEP Encryption WPA PSK WPA2 PSK...

Search results

Summary of Contents for WBR-6001

Reviews:

Related manuals for WBR-6001

Brands by name

Popular brands

LevelOne WBR-6001, User Manual

Search results

Summary of Contents for WBR-6001

Reviews:

Related manuals for WBR-6001

Brands by name

Popular brands