manualshive.com logo in svg

LevelOne WGR-6012, User Manual, Page: 67 / 83

Share
Download
LevelOne WGR-6012 User Manual Download Page 67

 

67 

 

Figure 3: Smart card or certificate properties 

 

4. Windows 2000 RADIUS server Authentication testing: 

 

4.1DUT authenticate PC1 using certificate. (PC2 follows the same test procedures.) 

1.  Download and install the certificate on PC1. (Fig 4) 

2.  PC1 choose the SSID of DUT as the Access Point. 

3.  Set authentication type of wireless client and RADIUS server both to   

EAP_TLS. 

4.  Disable the wireless connection and enable again. 

5.  The DUT will send the user's certificate to the RADIUS server, and then 

send the message of authentication result to PC1. (Fig 5) 

6.  Windows XP will prompt that the authentication process is success or fail   

and end the authentication procedure. ( Fig 6) 

7.  Terminate the test steps when PC1 get dynamic IP and PING remote host   

successfully. 

Summary of Contents for WGR-6012

Page 1: ...1 LevelOne WGR 6012 300Mbps N_Max Wireless Gigabit Router User Manual V1 0 ...

Page 2: ...found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against radio interference in a commercial environment This equipment can generate use and radiate radio frequency energy and if not installed and used in accordance with the instructions in this manual may cause harmful interference to radio ...

Page 3: ...xt to Reboot 13 2 9 Apply the Settings or Modify 14 2 10 Test the Internet connection 14 2 11 Setup Completed 15 Chapter 3 Making Configuration 16 3 1 Login to Configure from Wizard 17 3 2 System Status 21 3 3 Advanced 21 3 3 1 Basic Setting 21 3 3 1 1 Primary Setup WAN Type Virtual Computers 23 3 3 2 Forwarding Rules 36 3 3 3 Security Settings 39 3 3 4 Advanced Settings 53 3 3 5 Toolbox 61 Append...

Page 4: ...his product 1 1 Packing List WGR 6012 x1 RJ 45 Ethernet LAN Cable x1 Antenna x 2 Power Adapter x1 Quick Installation Guide x1 CD Manual x1 1 2 Spec Summary Table Device Interface Ethernet WAN RJ 45 port 10 100 1000Mbps auto MDI MDIX 1 Ethernet LAN RJ 45 port 10 100 1000Mbps auto MDI MDIX 4 Antenna 2 dBi detachable antenna 2 WPS Button For WPS connection 1 Wireless Enable disable To enable or disab...

Page 5: ...etection and protection Routing Protocol Static route dynamic route RIP v1 v2 Management SNMP UPnP IGD syslog DDNS Administration Web based UI remote login backup restore setting Performance NAT up to 700Mbps and Wireless up to150Mbps Environment Certification Package Information Package dimension mm Package weight g Operation Temp Temp 0 40oC Humidity 10 90 non condensing Storage Temp Temp 10 70o...

Page 6: ... 45 cable is plugged Green in flash Data access LAN LED Green RJ 45 cable is plugged Green in flash Data access Wi Fi LED Green WLAN is on Green in flash Data access Green in fast flash Device is in WPS PBC mode Green in dark Wi Fi Radio is disabled 1 5 Procedure for Hardware Installation ...

Page 7: ...ntenna from its plastic wrapper 1 2 Screw the antenna in a clockwise direction to the back panel of the unit 1 3 Once secured position the antenna upward at its connecting joint This will ensure optimal reception 1 Turn off the Power Switch first ...

Page 8: ...port on the back panel of Router and an available Ethernet port on the network adapter in the computer you will use to configure the unit Step 3 Insert the Ethernet patch cable into Wired WAN port Insert the Ethernet patch cable form DSL Modem into Wired WAN port on the back panel of Router ...

Page 9: ...9 Step 4 Power on Router 4 1 Connect the power adapter to the receptor on the back panel of your Router and Push Power switch Step 5 Complete the setup 5 1 When complete the Status LED will flash ...

Page 10: ... g g S S St t ta a ar r rt t t Insert the CD into CD reader on your PC The program AutoRun will be executed automatically And then you can click the Easy setup Icon for this utility Configure the settings by the following steps 2 1 Select Language then click Next for continues ...

Page 11: ... can select Wizard mode to run the setup step by step or run advanced mode to diagnose the network settings of the router 2 3 Advanced mode Setup Check the PC Router or Internet icons for the Status of PC Router or Internet ...

Page 12: ...s powered on 2 Make sure your network adapter is connected to the LAN port of the router 3 Make sure your network adapter has an IP address Click Next for continues 2 5 Wireless Setting Key in the SSID Channel and Security options and then click Next for continues ...

Page 13: ...by myself to disable this function Note The Item supports to detect the Dynamic and PPPoE WAN Services only Example the Dynamic WAN type is tected 2 7 Manual select WAN Service In the manual mode Click the any icons for continues 2 8 Summary of the settings and Next to Reboot Click Next for continue ...

Page 14: ...14 2 9 Apply the Settings or Modify Click Next for continue 2 10 Test the Internet connection Test WAN Networking service Click Next for continue You can ignore the by select the Ignore Test ...

Page 15: ...15 2 11 Setup Completed The EzSetup is finish you can open the default web browser to configure advanced settings of the Router Click Finish to complete the installation ...

Page 16: ... Co o on n nf f fi i ig g gu u ur r ra a at t ti i io o on n n This product provides Web based configuration scheme that is configuring by your Web browser such as Mozilla Firefox or Internet Explorer This approach can be adopted in any MS Windows Macintosh or UNIX based platforms ...

Page 17: ...Login to Configure from Wizard Type in the IP Address HHUhttp 192 168 1 1UHH Type password the default is admin and click login button Press Wizard for basic settings with simple way Press Next to start wizard ...

Page 18: ...18 Step 1 Set up your system password Step 2 Select Wan Type Auto Detecting or Setup Manually ...

Page 19: ...19 Step 3 Setup the LAN IP and WAN Type Step 4 Please fill in PPPoE service information which is provided by your ISP Example Step 5 Set up your Wireless ...

Page 20: ...20 Set up your Authentication and Encryption Step 6 Then click Apply Setting And then the device will reboot Step 7 Click Finish to complete it ...

Page 21: ...atus If the WAN port is assigned a dynamic IP there may appear a Renew or Release button on the Side note column You can click this button to renew or release IP manually Statistics of WAN enables you to monitor inbound and outbound packets 3 3 Advanced 3 3 1 Basic Setting Please Select Advanced Setup to Setup ...

Page 22: ...22 ...

Page 23: ...epend on the WAN type Choose correct WAN type before you start 1 LAN IP Address the local IP address of this device The computers on your network must use the LAN IP address of your product as their Default Gateway You can change it if necessary 2 WAN Type WAN connection type of your ISP You can click Change button to choose a correct one from the following four options ...

Page 24: ... ISPs require the use of L2TP to connect to their services Static IP Address ISP assigns you a static IP address WAN IP Address Subnet Mask Gateway Primary and Secondary DNS enter the proper setting provided by your ISP Dynamic IP Address Obtain an IP address from ISP automatically Host Name optional Required by some ISPs for example Home Renew IP Forever this feature enables this product to renew...

Page 25: ... Time the amount of time of inactivity before disconnecting your PPPoE session Set it to zero or enable Auto reconnect to disable this feature Maximum Transmission Unit MTU Most ISP offers MTU value to users The most common MTU value is 1492 Connection Control There are 3 modes to select Connect on demand The device will link up with ISP when the clients send outgoing packets Auto Reconnect Always...

Page 26: ...n ID optional Input the connection ID if your ISP requires it 4 Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped Connection Control There are 3 modes to select Connect on demand The de...

Page 27: ...3 Connection ID optional Input the connection ID if your ISP requires it 4 Maximum Idle Time the time of no activity to disconnect your PPTP session Set it to zero or enable Auto reconnect to disable this feature If Auto reconnect is enabled this product will connect to ISP automatically after system is restarted or connection is dropped Connection Control There are 3 modes to select Connect on de...

Page 28: ...NAT feature and allows you to setup the one to one mapping of multiple global IP address and local IP address Global IP Enter the global IP address assigned by your ISP Local IP Enter the local IP address of your LAN PC corresponding to the global IP address Enable Check this item to enable the Virtual Computer feature ...

Page 29: ...the IP address pool to the requesting computer You must specify the starting and ending address of the IP address pool 4 Domain Name Optional this information will be passed to the client 5 Primary DNS Secondary DNS This feature allows you to assign DNS Servers 6 Primary WINS Secondary WINS This feature allows you to assign WINS Servers 7 Gateway The Gateway Address would be the IP address of an a...

Page 30: ...ctory setting is default SSID Broadcast The router will Broadcast beacons that have some information including ssid so that The wireless clients can know how many AP devices by scanning function in the network Therefore This function is disabled the wireless clients can not find the device from beacons Channel The radio channel number The permissible channels depend on the Regulatory Domain WPS Wi...

Page 31: ...andard has been made available Using WDS it is possible to wirelessly connect Access Points and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement Hybrid Mode It means the device can support WDS and AP Mode simultaneously ...

Page 32: ... one WEP key to be used and input 26 or 10 hexadecimal 0 1 2 8 9 A B F digits 802 1X Check Box was used to switch the function of the 802 1X When the 802 1X function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name RADIUS Shared Key Key value shared by the RADIUS server and this router This ke...

Page 33: ...u select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of pre share key is from 8 to 63 2 Fill in the key Ex 12345678 WPA Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user ...

Page 34: ... 12345678 WPA2 AES Check Box was used to switch the function of the WPA When the WPA function is enabled the Wireless user must authenticate to this router first to use the Network service RADIUS Server IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to ...

Page 35: ...omatically which Security type WPA PSK version 1 or 2 the client uses to encrypt IP address or the 802 1X server s domain name Select RADIUS Shared Key If you select HEX you have to fill in 64 hexadecimal 0 1 2 8 9 A B F digits If ASCII the length of Pre share key is from 8 to 63 Key value shared by the RADIUS server and this router This key value is consistent with the key value in the RADIUS ser...

Page 36: ...36 24B 20B3 3 1 4 Change Password You can change Password here We strongly recommend you to change the system password for security reason 3 3 2 Forwarding Rules ...

Page 37: ...port will be redirected to the computer specified by the Server IP Virtual Server can work with Scheduling Rules and give user more flexibility on Access control For Detail please refer to Scheduling Rule 3 3 2 2 Special AP Some applications require multiple connections like Internet games Video conferencing Internet telephony etc Because of the firewall function these applications cannot work wit...

Page 38: ...d the predefined setting to your list Note At any given time only one PC can use each Special Application tunnel 3 3 2 3 Miscellaneous Items IP Address of DMZ Host DMZ DeMilitarized Zone Host is a host without the protection of firewall It allows a computer to be exposed to unrestricted 2 way communication for Internet games Video conferencing Internet telephony and other special applications NOTE...

Page 39: ...icrosoft Corporation Please enable this function when you play games UPnP Setting The device also supports this function If the OS supports this function enable it like Windows XP When the user get IP from Device and will see icon as below 3 3 3 Security Settings ...

Page 40: ...cified rules You can specify 8 rules for each direction inbound or outbound For each rule you can define the following Source IP address Source port address Destination IP address Destination port address Protocol TCP or UDP or both Use Rule For source or destination IP address you can define a single IP address 4 3 2 1 or a range of IP addresses 4 3 2 1 4 3 2 254 An empty implies all IP addresses...

Page 41: ...bound Filter To enable Inbound Packet Filter click the check box next to Enable in the Inbound Packet Filter field Suppose you have SMTP Server 25 POP Server 110 Web Server 80 FTP Server 21 and News Server 119 defined in Virtual Server or DMZ Host Example 1 1 2 3 100 1 2 3 149 Remote hosts are allow to send mail port 25 and browse the Internet port 80 1 2 3 10 1 2 3 20 Remote hosts can do everythi...

Page 42: ...emote hosts can do everything except read net news port 119 and transfer files via FTP port 21 behind Router Server Others are all allowed After Inbound Packet Filter setting is configured click the save button Outbound Filter ...

Page 43: ...mple 1 Router LAN IP is 192 168 1 1 192 168 1 100 192 168 1 149 Located hosts are only allowed to send mail port 25 receive mail port 110 and browse Internet port 80 port 53 DNS is necessary to resolve the domain name 192 168 1 10 192 168 1 20 Located hosts can do everything block nothing Others are all blocked ...

Page 44: ...192 168 1 1 192 168 1 100 and 192 168 1 119 Located Hosts can do everything except read net news port 119 and transfer files via FTP port 21 Others are allowed After Outbound Packet Filter setting is configured click the save button ...

Page 45: ...tion when someone accesses the specific URLs Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access network without restriction Domain Suffix A suffix of URL to be restricted For example com xxx com Action When someone is accessing the URL met the domain suffix what kind of action you want Check drop to block the access Check log to log these access Enable Check ...

Page 46: ...tion will be record in log file 2 URL include www sina com will not be blocked but the action will be record in log file 3 URL include www baidu com will be blocked but the action will not be record in log file 4 IP address x x x 1 x x x 99 can access Internet without restriction ...

Page 47: ... to input a keyword only In other words Domain filter can block specific website while URL Blocking can block hundreds of websites by simply a keyword URL Blocking Enable Checked if you want to enable URL Blocking URL If any part of the Website s URL matches the pre defined word the connection will be blocked For example you can use pre defined word sex to block all websites if their URLs contain ...

Page 48: ...48 In this example 1 URL include msn will be blocked and the action will be record in log file 2 URL include sina will be blocked but the action will be record in log file ...

Page 49: ...hen Enable is checked Connection control Check Connection control to enable the controlling of which wired and wireless clients can connect to this device If a client is denied to connect to this device it means the client can t access to the Internet either Choose allow or deny to allow or deny the clients whose MAC addresses are not in the Control table please see below to connect to this device...

Page 50: ...ow the corresponding client to connect to this device A When Association control is checked check A will allow the corresponding client to associate to the wireless LAN In this page we provide the following Combobox and button to help you to input the MAC address You can select a specific client in the DHCP clients Combobox and then click on the Copy to button to copy the MAC address of the client...

Page 51: ...4 56 78 90 192 168 1 100 ID 3 00 09 76 54 32 10 192 168 1 101 Client 2 will obtain its IP address from the IP Address pool specified in the DHCP Server page or can use a manually assigned static IP address If for example client 3 tries to use an IP address different from the address listed in the Control table 192 168 1 101 it will be denied to connect to this device 5 Clients 2 and 3 and other wi...

Page 52: ...tration task from remote host If this feature is enabled only the specified IP address can perform remote administration If the specified IP address is 0 0 0 0 any host can connect to this product to perform administration task You can use subnet mask bits nn notation to specified a group of trusted IP addresses For example 10 1 2 0 24 NOTE When Remote Administration is enabled the web server port...

Page 53: ...is enabled the router will record the packet information pass through the router like IP address port address ACK SEQ number and so on And the router will check every incoming packet to detect if this packet is valid DoS Attack Detection When this feature is enabled the router will detect and log the DoS attack comes from the Internet Currently the router can detect the following DoS attack SYN At...

Page 54: ...to consult UTC time Time Zone Select a time zone where this device locates Set Date and Time manually Selected if you want to Set Date and Time manually Set Date and Time manually Selected if you want to Set Date and Time manually Function of Buttons Sync Now Synchronize system time with network time server Daylight Saving Set up where the location is ...

Page 55: ...eck Enable to enable this function E mail Alert Enable Check if you want to enable Email alert send syslog via email SMTP Server IP and Port Input the SMTP server IP and port which are concerted with If you do not specify port number the default value is 25 For example mail your_url com or 192 168 1 100 26 Send E mail alert to The recipients who will receive these logs You can assign more than 1 r...

Page 56: ...ch time you connect your Internet service provider Before you enable Dynamic DNS you need to register an account on one of these Dynamic DNS servers that we list in provider field To enable Dynamic DNS click the check box next to Enable in the DDNS field Next you can enter the appropriate information about your Dynamic DNS Server You have to define Provider Host Name Username E mail Password Key Y...

Page 57: ... If Local is checked this device will response request from LAN If Remote is checked this device will response request from WAN Get Community Setting the community of GetRequest your device will response Set Community Setting the community of SetRequest your device will accept IP 1 IP 2 IP 3 IP 4 Input your SNMP Management PC s IP here User has to configure to where this device should send SNMP Tr...

Page 58: ...gs used to setup the functions of static Dynamic Routing Routing Information Protocol RIP will exchange information about destinations for computing routes throughout the network Please select RIPv2 only if you have different subnet in your network Otherwise please select RIPv1 if you need this protocol Static Routing For static routing you can specify up to 8 routing rules You can enter the desti...

Page 59: ...ff Select the enable item Press Add New Rule You can write a rule name and set which day and what time to schedule from Start Time to End Time The following example configure ftp time as everyday 14 10 to 16 20 Schedule Enable Selected if you want to Enable the Scheduler Edit To edit the schedule rule ...

Page 60: ...ehind the deleted one will decrease one automatically Schedule Rule can be apply to Virtual server and Packet Filter for example Exanple1 Virtual Server Apply Rule 1 ftp time everyday 14 20 to 16 30 Exanple2 Packet Filter Apply Rule 1 ftp time everyday 14 20 to 16 30 ...

Page 61: ...61 3 3 5 Toolbox 3 3 5 1 View Log You can View system log by clicking the View Log button ...

Page 62: ...ou can backup your settings by clicking the Backup Setting button and save it as a bin file Once you want to restore these settings please click Firmware Upgrade button and use the bin file you saved 3 3 5 4 Reset to default You can also reset this product to factory default by clicking the Reset to default button ...

Page 63: ...evice remotely In order to enjoy this feature the target device must be Wake on LAN enabled and you have to know the MAC address of this device say 00 11 22 33 44 55 Clicking Wake up button will make the router to send the wake up frame to the target device immediately Domain Name or IP Address for Test Allow you to configure an IP and ping the device You can ping a specific IP to test whether it ...

Page 64: ...3 0 Driver version PC2 Microsoft Windows XP Professional with Service Pack 1a or latter Wireless Cardbus 1 0 1 0 Driver version 1 7 29 0 Driver date 10 20 2001 Authentication Server Windows 2000 RADIUS server with Service Pack 3 and HotFix Q313664 Note Windows 2000 RADIUS server only supports PEAP after upgrade to service pack 3 and HotFix Q313664 You can get more information from HHUhttp support ...

Page 65: ... smart card or other certificate on RADIUS server according to the test condition 3 1 2 Setup DUT 1 Enable the 802 1X check the Enable checkbox 2 Enter the RADIUS server IP 3 Enter the shared key The key shared by the RADIUS server and DUT 4 We will change 802 1X encryption key length to fit the variable test condition 3 1 3 Setup Network adapter on PC 1 Choose the IEEE802 1X as the authentication...

Page 66: ...66 use a certificate on this computer Fig 3 4 We will change EAP type to fit the variable test condition Figure 2 Enable IEEE 802 1X access control ...

Page 67: ...cess Point 3 Set authentication type of wireless client and RADIUS server both to EAP_TLS 4 Disable the wireless connection and enable again 5 The DUT will send the user s certificate to the RADIUS server and then send the message of authentication result to PC1 Fig 5 6 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure Fig 6 7 Terminate ...

Page 68: ...68 Figure 4 Certificate information on PC1 Figure 5 Authenticating ...

Page 69: ...PC2 5 Windows XP will prompt that the authentication process is success or fail and end the authentication procedure 6 Terminate the test steps when PC2 get dynamic IP and PING remote host successfully Support Type The router supports the types of 802 1x Authentication PEAP CHAPv2 and PEAP TLS Note 1 PC1 is on Windows XP platform without Service Pack 1 2 PC2 is on Windows XP platform with Service ...

Page 70: ...168 122 216 Radius Server 192 168 122 1 UserA XP Wireless Card Ti 11g Tool Odyssey Client Manager Refer to HHU www funk comUHH Download HHUhttp www funk com News Events ody_c_wpa_preview_pn aspU Or Another Configuration 192 168 1 1 192 168 1 33 LAN IP 192 168 1 1 ...

Page 71: ... The above is our environment Method 1 1 The UserA or UserB have to get certificate from Radius first HHUhttp 192 168 122 1 certsrvU account fae1 passwd fae1 2 Then Install this certificate and finish 3 Go to the Web manager of Wireless Router to configure like below LAN IP 192 168 1 1 ...

Page 72: ...72 4 Go to Odyssey Client Manager choose Profiles and Setup Profile name as 1 Login name and password are fae1 and fae1 Remember that you get certificate from Radius in Step1 ...

Page 73: ...73 5 Then Choose certificate like above ...

Page 74: ...74 6 Then go to Authentication and first Remove EAP TLS and Add EAP TLS again ...

Page 75: ...75 7 Go Network and Select 1 and ok ...

Page 76: ...ect 123kk If successfully the wireless client has to authenticate with Radius Server like below 9 Result Method 2 1 The UserA or UserB have to get certificate from Radius first HHUhttp 192 168 122 1 certsrvU account fae1 passwd fae1 ...

Page 77: ...77 2 Then Install this certificate and finish 3 Setting on the router and client Router ...

Page 78: ...lect wireless adapter Choose View available Wireless Networks like below Advanced choose 123kk Select WirelessCA and Enable in Trusted root certificate authority Then if the wireless client wants to associate it has to request to authenticate ...

Page 79: ... plug in LAN port 1 or LAN port 4 Then please check if the Pc gets IP address from Router Use command mode as below If yes please execute Browser like Mozilla and key 192 168 1 1 in address If not please ipconfig release then ipconfig renew Whatever I setup the pc can not get ip Please check Status Led and refer to the Q2 2 Why can I not connect the router even if the cable is plugged in LAN port ...

Page 80: ...ing on Maybe the router is the recovery mode and please refer to Q4 3 How to reset to factory default A Press Wireless on off and WPS button simultaneously about 5 sec Status will start flashing about 5 times remove the finger The RESTORE process is completed 4 Why can I not connect Internet even though the cables are plugged in Wan port and LAN port and the LEDs are blink In addition Status led i...

Page 81: ... Address Please refer to the information of ISP and assign one or two in DNS item How do I connect router by using wireless 1 How to start to use wireless A First make sure that you already installed wireless client device in your computer Then check the Configuration of wireless router The default is as below About wireless client you will see wireless icon Then click and will see the AP list tha...

Page 82: ... to Q3 Choose the one that you will want to connect and Connect If successfully the computer will show and get IP from router 2 When I use AES encryption of WPA PSK to connect even if I input the correct pre share key A First you must check if the driver of wireless client supports AES encryption Please refer to the below 192 168 1 115 255 255 255 0 192 168 1 1 ...

Page 83: ... client supports AES encryption 3 When I use wireless to connect the router but I find the signal is very low even if I am close to the router A Please check if the wireless client is normal first If yes please send the unit to the seller and verify what the problem is LevelOne ...

Reviews:

No comments