SEESTATION SS-MES-CPE User Manual Download Page 46 | Manualshive

Page: 46 / 76

background image

45

Ch 4. Advanced Configurations

Configuring LAN to WAN Firewall

Filtering function is used to block packets from LAN to WAN. The device
supports three kinds of filter Port Filtering, IP Filtering and MAC Filtering. All
the entries in current filter table are used to restrict certain types of packets
from your local network to through the device. Use of such filters can be
helpful in securing or restricting your local network.

Port Filtering

When you enable the Port Filtering function, you can specify a single port
or port ranges in current filter table. Once the source port of outgoing
packets match the port definition or within the port ranges in the table, the
firewall will block those packets from LAN to WAN.

IP Filtering

When you enable the IP Filtering function, you can specify local IP
Addresses in current filter table. Once the source IP address of outgoing
packets match the IP Addresses in the table, the firewall will block this
packet from LAN to WAN.

«
...
44
45
46
47
48
...
»

Summary of Contents for SS-MES-CPE

Page 1: ...See Station SS MES CPE User Manual Version 1 2 2 24 02 2006 ...

Page 2: ...9 CH 3 CONFIGURING WDS 41 WDS NETWORK TOPOLOGY 41 WDS APPLICATION 43 CH 4 ADVANCED CONFIGURATIONS 45 CONFIGURING LAN TO WAN FIREWALL 45 PORT FILTERING 45 IP FILTERING 45 MAC FILTERING 46 CONFIGURING PORT FORWARDING VIRTUAL SERVER 46 MULTIPLE SERVERS BEHIND NAT EXAMPLE 47 CONFIGURING DMZ 47 CONFIGURING WAN INTERFACE 48 STATIC IP 49 DHCP CLIENT DYNAMIC IP 50 PPPOE 50 PPTP 51 CONFIGURING CLONE MAC AD...

Page 3: ...2 USING CLI MENU 63 THE SYSTEM MANAGEMENT 66 SNMP AGENT 67 FIRMWARE UPGRADE 69 CONFIGURATION DATA BACKUP RESTORE 70 AUTO DISCOVERY TOOL 71 ...

Page 4: ...d manages the Mesh City MCPE 1924 outdoor product hereafter referred to as the device To use this guide You should have experience working with the TCP IP configuration and be familiar with the concepts and terminology of wireless local area networks MCPE 1924 Installation ...

Page 5: ... ODU into the L bracket first Note ALL the 4 screws had been tightened onto the ODU and Bracket 2 You can use the U bolt to mount on the pipe depending on the radius of the pipe Wall mounting is referred to Wall Mounting Figure The two U bolts must be mounted tightly Be aware of not over tighten the U bolt 3 After checking the ODU is mounted well you can connect the following two cables the Waterp...

Page 6: ...r make sure the maximum length of the RJ 45 cable is shorter than 100M about 109 yards for normal operation under IEEE 802 3 standards When you plug the regular RJ 45 cable into the PoE device you should use the regular RJ 45 cable to plug into the DATA IN of Power Over Ethernet Kit to connect to hub switch or use the crosslink RJ 45 cable Not included in the Packing List to connect with user s PC...

Page 7: ...bnet mask is 255 255 255 0 The device has three operation modes Router Bridge WISP In bridge mode also known as AP Client you can access the device by both WLAN Wireless Local Area Network and wired LAN And in router WISP modes the device can be accessed by both WLAN and WAN The default IP addresses for the device are 192 168 2 254 for LAN 172 1 1 1 for WAN so you need to make sure the IP address ...

Page 8: ...he following is the types of operation mode Router The wired Ethernet WAN port is used to connect with ADSL Cable modem and the wireless NIC is used for your private WLAN The NAT is existed between the 2 NIC and all the wireless clients share the same public IP address through the WAN port to ISP The default IP configuration for WAN port is static IP You can access the web server of device through...

Page 9: ...d all the PCs connecting with hub switch can share the same public IP address from your ISP WDS Wireless Distribution System This mode serves as a wireless repeater the device forwards the packets to another AP with WDS function When this mode is selected all the wireless clients can t survey and connect to the device The device only allows the WDS connection WDS AP This mode combines WDS plus AP ...

Page 10: ...9 Bridge Mode With AP Bridge Mode With WDS AP Bridge Mode Router Mode With WDS AP WISP Mode Internet Broadband Modem ...

Page 11: ...idge Mode Bridge Mode With AP Bridge Mode With WDS AP Router Mode With WDS AP This example demonstrates how to set up a network with different device configurations There are 2 DHCP servers DEV1 DEV4 in the network to control the IP configuration of 2 domains 192 168 2 x 192 168 3 x Once the setting is done all the PCs can visit Internet through DEV1 We assume all the devices keep the factory defa...

Page 12: ...ion Mode to Router mode 5 Press Next button then disable Time Zone function 6 Press Next button then set the IP address of LAN interface 7 Press Next button then select the PPPoE for WAN Access Type and fill in the User Name and Password fields ...

Page 13: ...utton then select the AP WDS for mode and change the SSID to DEV1 9 Press Next button then select None for Encryption then press Finished button 10 Wait for refreshing web page 11 Use WDS Settings page to configure WDS ...

Page 14: ...dd the BSSID of DEV2 to Current WDS AP List 13 Since we access the device by wireless connection it may temporarily disconnect when applying the WDS setting After re connecting to the device use the Status page to check the settings ...

Page 15: ... but different MAC addresses it may cause you not able to access the web server of device If the situation happens please try to clean the ARP table of your PC by DOS command arp d then you can access the web server of device using the default IP address 2 Use Wizard page to setup device 3 Press Next button then set the Operation Mode to Bridge mode 4 Press Next button then disable Time Zone funct...

Page 16: ...n set the IP address of LAN interface 6 Press Next button then select the AP WDS for mode and change the SSID to DEV2 7 Press Next button then select None for Encryption then press Finished button 8 Wait for refreshing web page ...

Page 17: ...16 9 Access the web server by new IP address 192 168 2 202 then use LAN Interface page to disable DHCP Server 10 Wait for refreshing web page 11 Use WDS Settings page to configure WDS ...

Page 18: ...17 12 Enable WDS function and add the BSSID of DEV1 to Current WDS AP List 13 Use the Status page to check the settings ...

Page 19: ...ault IP address but different MAC addresses it may cause you not able to access the web server of device If the situation happens please try to clean the ARP table of your PC by DOS command arp d then you can access the web server of device using the default IP address 2 Use LAN Interface page to set the IP address of LAN interface and disable DHCP server 3 Wait for refreshing web page ...

Page 20: ...19 4 Access the web server by new IP address 192 168 2 203 then use Basic Settings page to change SSID and CHANNEL 5 Use the Status page to check the settings ...

Page 21: ...ut different MAC addresses it may cause you unable to access the web server of device If the situation happens please try to clean the ARP table of your PC by DOS command arp d then you can access the web server of device using the default IP address 2 Use Wizard page to setup device 3 Press Next button then set the Operation Mode to Wireless ISP mode 4 Press Next button then disable Time Zone fun...

Page 22: ...ace 6 Press Next button then select the DHCP Client for WAN Access Type 7 Press Next button then select the Client for mode and change the SSID to DEV4 8 Press Next button then select None for Encryption then press Finished button 9 Wait for refreshing web page ...

Page 23: ...2 168 3 x then access the web server by the new IP address 192 168 3 1 and use Status page check the setting 11 If the State of Wireless Configuration is not Connected or you want to refresh the RSSI please use Site Survey page to re connect a AP ...

Page 24: ...ut different MAC addresses it may cause you unable to access the web server of device If the situation happens please try to clean the ARP table of your PC by DOS command arp d then you can access the web server of device using the default IP address 2 Use Wizard page to setup device 3 Press Next button then set the Operation Mode to Wireless ISP mode 4 Press Next button then disable Time Zone fun...

Page 25: ...e 6 Press Next button then select the Client for mode and change the SSID to DEV5 7 Press Next button then select None for Encryption then press Finished button 8 Wait for refreshing web page 9 Access the web server by the new IP address 192 168 2 205 and use LAN ...

Page 26: ...25 Interface page to disable DHCP Server 10 Wait for refreshing webpage 11 Use State page to check setting ...

Page 27: ...26 12 If the State of Wireless Configuration is not Connected or you want to refresh the RSSI please use Site Survey page to re connect a AP ...

Page 28: ...ireless clients to join a wireless local network 2 Client Support Infrastructure and Ad hoc network types to act as a wireless adapter 3 WDS Wireless Distribution System this mode serves as a wireless repeater only devices with WDS function supported can connect to it all the wireless clients can t survey and connect the device when the mode is selected 4 AP WDS Support both AP and WDS functions t...

Page 29: ... use the same SSID and channel for establishing the wireless connection PC 3 PC 2 AP Client 1 AP Client 2 AP Client 3 PC 1 In client mode the device can t support the Router mode function including Firewall and WAN settings SSID The SSID is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity Multiple access point bridges on a network or sub netw...

Page 30: ... and China 6 2437 Americas EMEA Japan Israel and China 7 2442 Americas EMEA Japan Israel and China 8 2447 Americas EMEA Japan Israel and China 9 2452 Americas EMEA Japan Israel and China 10 2457 Americas EMEA Japan and China 11 2462 Americas EMEA Japan and China 12 2467 EMEA and Japan only 13 2472 EMEA and Japan only 14 2484 Japan only When set to Auto the device will find the least congested chan...

Page 31: ...rts two Authentication Types Open system and Shared Key When you select Share Key you need to setup WEP key in Security page See the next section The default setting is Auto The wireless client can associate with the device by using one of the two types Fragment Threshold The fragmentation threshold determines the size at which packets are fragmented sent as several pieces instead of as one block ...

Page 32: ...public Wireless Network disable this function can provide better security Every wireless stations located within the coverage of the device must connect this device by manually configure the SSID in your client settings Int Roaming This function will let Wireless Stations roam among a network environment with multiple devices Wireless Stations are able to switch from one device to another as they ...

Page 33: ...t see each other Transmit Power The device supports four transmission output power levels 250 200 150 and 100mW for CCK 802 11b mode and two transmission output power levels 100 and 50mW for OFDM 802 11g mode User can adjust the power level to change the coverage of the device Every wireless stations located within the coverage of the device also needs to have the high power radio Otherwise the wi...

Page 34: ...s disabled Choose your preferred security setting depending on what security function you need WEP Encryption Setting Wired Equivalent Privacy WEP is implemented in this device to prevent unauthorized access to your wireless network The WEP setting must be as same as each client in your wireless network For more secure data transmission you can change encryption type to WEP and click the Set WEP K...

Page 35: ...to use in your WLAN environment WEP Encryption with 802 1x Setting The device supports external RADIUS Server that can secure networks against unauthorized access If you use the WEP encryption you can also use the RADIUS server to check the admission of the users By this way every user must use a valid account before accessing the Wireless LAN and requires a RADIUS or other authentication server o...

Page 36: ...erprise authentication is achieved via WPA RADIUS Server You need a RADIUS or other authentication server on the network Enterprise RADIUS When WPA Authentication mode is Enterprise RADIUS you have to add user accounts and the target device to the RADIUS Server In the device you need to specify the IP address Password Shared Secret and Port number of the target RADIUS server Pre Share Key This mod...

Page 37: ...tions Ad Hoc network type or Access Point Infrastructure network type and you don t need to install any driver Quick start to configure Step 1 In Basic Settings page change the Mode to Client mode And key in the SSID of the AP you want to connect then press Apply Changes button to apply the change Step 2 Check the status of connection in Status web page 2 1 3 ...

Page 38: ...page select one of the SSIDs you want to connect and then press Connect button to establish the link Step 2 If the linking is established successfully It will show the message Connect successfully Then press OK Step 3 Then you can check the linking information in Status page 1 3 2 ...

Page 39: ...ation Type In client mode the device also supports two Authentication Types Open system and Shared Key Although the default setting is Auto not every Access Points can support Auto mode If the authentication type on the Access Point is knew by user we suggest to set the authentication type as same as the Access Point Data Encryption In client mode the device supports WEP and WPA Personal Enterpris...

Page 40: ... as AP and Repeater same time Following two ways describe how to make Universal Repeater effective 1 Enable Universal Repeater Mode and then select a SSID in the Table that you want Final click Apply Changes button to take effective Click Refresh button to make table renew Note Under AP WDS and AP WDS mode The Universal Repeater can take effective 2 Enter specific SSID in the Extended SSID field a...

Page 41: ...40 Changes button to take effective ...

Page 42: ...ee function You don t need to add all MAC address of devices existed in your network to WDS AP List WDS AP List only needs to specify the MAC address of devices you need to directly connect to The bandwidth of device is limited to add more bridging devices will split the more bandwidth to every bridging device WDS network topology In this section we will demonstrate the WDS network topologies and ...

Page 43: ...Address of WDS1 No WDS4 The MAC Address of WDS1 No WDS5 The MAC Address of WDS1 No Ring topology LAN3 LAN 4 LAN 1 LAN 2 LAN 5 WDS 5 WDS 2 WDS 3 WDS 4 WDS 1 Device Entries of WDS AP List Spanning Tree Protocol Required WDS1 The MAC Addresses of WDS2 and WDS5 Yes WDS2 The MAC Addresses of WDS1 and WDS3 Yes WDS3 The MAC Addresses of WDS2 and WDS4 Yes WDS4 The MAC Addresses of WDS3 and WDS5 Yes WDS5 T...

Page 44: ...5 The MAC Addresses of WDS1 WDS2 WDS3 and WDS4 Yes WDS Application Wireless Repeater Wireless Repeater can be used to increase the coverage area of another device Parent AP Between the Parent AP and the Wireless Repeater wireless stations can move among the coverage areas of both devices When you decide to use the WDS as a Repeater please refer the following instructions for configuration In AP mo...

Page 45: ...establish a wireless connection between two or more Wired LANs When you decide to use the WDS as a Wireless Bridge please refer the following instructions for configuration In AP mode enable the WDS function You must set these connected devices with the same radio channel but you may use different SSID Choose WDS mode for only wireless backbone extension purpose You can use any network topology pl...

Page 46: ...n securing or restricting your local network Port Filtering When you enable the Port Filtering function you can specify a single port or port ranges in current filter table Once the source port of outgoing packets match the port definition or within the port ranges in the table the firewall will block those packets from LAN to WAN IP Filtering When you enable the IP Filtering function you can spec...

Page 47: ...guring Port Forwarding Virtual Server This function allows you to automatically redirect common network services to a specific machine behind the NAT firewall These settings are only necessary if you wish to host some sort of server like a web server or mail server on the private local network behind the device s NAT firewall The most often used port numbers are shown in the following table Servic...

Page 48: ...net Device with Router Mode enabled WLAN IP Address 192 168 2 254 Web Server IP Address 192 168 2 1 Port 80 FTP Server IP Address 192 168 2 2 Port 21 User AP AP Client 2 AP Client 1 Configuring DMZ A Demilitarized Zone is used to provide Internet services without sacrificing unauthorized access to its local private network Typically the DMZ host contains devices accessible to Internet traffic such...

Page 49: ... that you want to expose to Internet Internet Device with Router Mode enabled DNS Host AP Client Configuring WAN Interface The device supports four kinds of IP configuration for WAN interface including Static IP DHCP Client PPPoE and PPTP You can select one of the WAN Access Types depend on your ISP required The default WAN Access Type is Static IP ...

Page 50: ... ISP or MIS Default Gateway is the intermediate network device that has knowledge of the network IDs of the other networks in the Wide Area Network so it can forward the packets to other gateways until they are delivered to the one connected to the specified destination DNS 1 3 The IP addresses of DNS provided by your ISP DNS Domain Name Server is used to map domain names to IP addresses DNS maint...

Page 51: ... Internet requests to other servers on the Internet until the specified web site is found Clone MAC Address Clone device MAC address to the specify MAC address required by your ISP Enable uPnP Enable uPnP this function allows the device to be found and configured automatically by the system Ex Window XP PPPoE When the PPPoE Point to Point Protocol over Ethernet WAN Access Type is selected you must...

Page 52: ...d to change the MTU for optimal performance with your specific ISP DNS1 3 The IP addresses of DNS provided by your ISP DNS Domain Name Server is used to map domain names to IP addresses DNS maintain central lists of domain name IP addresses and map the domain names in your Internet requests to other servers on the Internet until the specified web site is found Clone MAC Address Clone device MAC ad...

Page 53: ...nge the MTU for optimal performance with your specific ISP DNS1 3 The IP addresses of DNS provided by your ISP DNS Domain Name Server is used to map domain names to IP addresses DNS maintain central lists of domain name IP addresses and map the domain names in your Internet requests to other servers on the Internet until the specified web site is found Clone MAC Address Clone device MAC address to...

Page 54: ...53 1 Clone MAC address for DHCP Client WAN access type 2 Clone MAC address for Static IP WAN access type 3 Clone MAC address for PPPoE WAN access type ...

Page 55: ...ace MAC address clone Configuring DHCP Server 1 To use the DHCP server inside the device please make sure there is no other DHCP server existed in the same network as the device 2 Enable the DHCP Server option and assign the client range of IP addresses as following page ...

Page 56: ...he DHCP client hosts will set to the IP address of device Bandwidth Control This functionality can control Bandwidth of Up Downstream 1 Enable Bandwidth Control and then enter Data Rate Latency and Burst Packet in the specific field Note Only device on Client mode or WISP mode this functionality can take effective ...

Page 57: ...queuing time Upstream Burst Packet Similar a buffer the data will into the buffer while the data is transmit or receive Downstream Data Rate Speed of transmit data that from Wireless interface to Ethernet interface Downstream Latency Similar a waiting time the data queuing time Downstream Burst Packet Similar a buffer the data will into the buffer while the data is transmit or receive ...

Page 58: ...m and Low user can allocation Bandwidth to these and default is High 50 Medium 30 and Low 20 The following table describes the priorities that you can apply to bandwidth Priority Level Description High Typically used for voice or video applications that is especially sensitive to the variations in delay Medium Typically used for important traffic that can tolerate some delay Low Typically used for...

Page 59: ...is decided by priority of the rules Higher priority will get the remaining bandwidth first Max Throughput Enter the value of max throughput in kbps that you want to allocate for one rule The value should between 1200 kbps and 24000 kbps Bandwidth Ratio H M L You can specify the ratio of priority in these fields The range from 1 to 99 The High priority s ratio should higher than Medium priority s r...

Page 60: ... port number or port range of the source destination Protocol Select a protocol from the drop down list box Choose TCP UDP TCP or UDP Bandwidth Priority Select a bandwidth priority from the drop down list box Choose Low Medium or High Filter Priority Select a filter priority number from the drop down list box Lower number gets higher priority while two rules have the same bandwidth priority IP TOS...

Page 61: ... the rules This table can input 50 rules at most An example for usage For example there are three users in your network User A wants to browse the websites to retrieve information User B wants to use FTP connection to download a large file User C wants to use software phone to connect with customer The voice is sensitive to the variations in delay you can set High priority for User C The FTP trans...

Page 62: ...twork 1 Network 2 Network 3 Network 4 R1 R2 HUB For example if user wants to link the Network 3 and Network 4 separately from Network 1 that Routing Table configuration as blow 1 Enable Static Route in Route Setup of TCP IP page and then enter IP Address of Network 3 Subnet Mask and IP Address of Router R1 in Default Gateway field final click Apply Change button ...

Page 63: ...able there have two routings for Network 3 and Network 4 Dynamic Route Setup The Dynamic Route utilizes RIP1 2 to transmit and receive the route information with other Routers 1 Enable Dynamic Route and then select RIP 1 RIP2 or Both to transmit receive packets final click Apply Change button 2 Click Show Route Table button to show Dynamic Route Table ...

Page 64: ...nnection LAN 1 Check the VPN Pass through in WAN Interface of TCP IP Page that you want and then click Apply Changes button Using CLI Menu Start a SSH Secure Shell client session to login the device The SSH server daemon inside device uses well known TCP port 22 User must use SSH client utility such like Putty to login the device The default password for user root is qwert once user login the devi...

Page 65: ... User must manually execute it by typing the case sensitive command cli Please note that any modified settings won t save permanently until user Apply Changes to Flash or reboot it The new settings modified by CLI will take effect after rebooting the device Menu Tree List ...

Page 66: ...P transmit to WAN C RIP receive from WAN D RIP transmit to LAN E RIP receive from LAN Static Route F Static Route G Add Static Route Setting H Delete Static Route Setting I Delete all Static Route Setting J Current Static Route Setting List Route Table K Show Route Table List 0 Exit Wireless Basic Settings A Access Point Status B QoS Settings C Bandwidth Control D SNMP Settings E Password 0 Exit F...

Page 67: ...guration interfaces have password protection To disable the Web Browser password protection just leave the User Name field to blank then click Apply Changes button To change the password of user root for SSH session please use the CLI menu item G System Setting A Root Password ...

Page 68: ... Final click Apply Changes button 2 Following Table describes the SNMP configuration parameter Label Description System Community String This is password sent with each trap to the SNMP Manager System Name Type the Name which is name of device System Location Type the Location which is location of device System Contact Type the Name which is person or group when the device has problem can find the...

Page 69: ... 4 Private MIBs OID Description 1 3 6 1 4 1 99 1 Mode Operation Mode in device 1 3 6 1 4 1 99 2 SSID SSID of the device 1 3 6 1 4 1 99 3 Channel Channel of the device in WLAN 1 3 6 1 4 1 99 4 Band 802 11g 802 11b only 1 3 6 1 4 1 99 5 RSSI Receive Signal Strength Index Support AP and Client RSSI 1 3 6 1 4 1 99 6 Active_Clients The number of associate clients 1 3 6 1 4 1 99 7 Active_Clients_List Cl...

Page 70: ...6 1 4 1 99 8 Encryption Firmware Upgrade Firmware Types The firmware for this device is divided into 2 parts one is web pages firmware the other is application firmware and the naming usually are g120webpage bin and g120linux bin To upgrade firmware we suggest user first upgrade the application firmware then web pages firmware Upgrading Firmware ...

Page 71: ...evice have enough memory to upload firmware the system will check the capacity of free memory if the device lack of memory to upload firmware please temporarily turn off some functions then reboot the device to get enough memory for firmware uploading Configuration Data Backup Restore Rest Setting to Factory Default Value Since the device is designed for outdoor used there is no interface outside ...

Page 72: ...n you can backup configuration data to local host or restore configuration data to the device Auto Discovery Tool User can use this tool to find out how many devices in your local area network The name of tool is WirelessConf exe it in the packing CD ...

Page 73: ... shows Received Signal Strength Indication while device is on AP Client mode 2 Setup IP After you press the Setup IP button you would see Setup IPAddress window You could change device s IP Address Netmask and Default Gateway in this window But if the device s web server needs User Name and Password to login you should fill in these two fields and then apply changes 3 Detail If you want to see mor...

Page 74: ...73 ...

Page 75: ...DS mode or AP WDS mode you could press WDS button and then you would see the WDS List window 5 Active Clients After press Active Clients button you would see WLAN AP Active Clients window In this window you could see client s information such as ...

Page 76: ...75 6 Connect to Web Server If you want connect to device s web server you could press this button or double click on the device 7 Close You could press this button to leave this tool ...

Reviews:

No comments

Related manuals for SS-MES-CPE

Brand: Garmin Pages: 38

Brand: Majestic Pages: 2

Brand: Naxa Pages: 2

Brand: Icom Pages: 10

Brand: M2 Antenna Systems Pages: 8

Brand: Jegs Pages: 4

Brand: Majestic Pages: 19

Brand: Metronic Pages: 2

Brand: Scout Pages: 4

Brand: SPE Pages: 14

Brand: DEGEN Pages: 8

Brand: TracVision Pages: 138

Brand: Xirrus Pages: 27

Brand: M2 Antenna Systems Pages: 4

Brand: Haicom Pages: 12

Thinkpad X30 Series

Brand: IBM Pages: 6

Brand: Magnavox Pages: 2

Mobile Satellite Internet Systems G75

Brand: MotoSAT Pages: 2

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands