manualshive.com logo in svg

Sitecom WL-347, User Manual, Page: 35 / 59

Share
Download
Sitecom WL-347 User Manual Download Page 35

 

 

35 

 

12

 

 Firewall Settings 

 

The  Broadband  router  provides  extensive  firewall  protection  by  restricting 

connection  parameters,  thus  limiting  the  risk  of  hacker  attacks,  and  defending 

against a wide array of common Internet attacks. However, for applications that 

require  unrestricted  access  to  the  Internet,  you  can  configure  a  specific 

client/server as a Demilitarized Zone (DMZ).  

 

Note:  To  enable  the  Firewall  settings  select  Enable  and  click 

Apply. 

 

 

 

 

Summary of Contents for WL-347

Page 1: ...WL 347 WL 348 Wireless Broadband modem router ADSL2 802 11B G N draft 2 0 ...

Page 2: ...2 User Manual Version 1 0 ...

Page 3: ...M REQUIREMENTS 9 5 WL 347 WL 348 PLACEMENT 9 6 SETUP LAN WAN 10 7 PC NETWORK ADAPTER SETUP WINDOWS XP 11 8 BRINGING UP THE WL 347 WL 348 13 9 INITIAL SETUP WL 347 WL 348 13 10 CONFIGURATION WIZARD 22 11 WIRELESS SETTINGS 24 12 FIREWALL SETTINGS 35 13 ADVANCED SETTINGS 41 14 TOOLBOX SETTINGS 53 ...

Page 4: ...chnology to transmit multiple steams of data in a single wireless channel giving you seamless access to multimedia content Robust RF signal travels farther eliminates dead spots and extends network range For data protection and privacy the WL 347 WL 348 encodes all wireless transmissions with WEP WPA and WPA2 encryption With an inbuilt DHCP Server powerful SPI firewall the WL 347 WL 348 protects y...

Page 5: ...tual Server Mapping DMZ IP Filter ICMP Blocking SPI Avoids the attacks of Hackers or Viruses from Internet Support 802 1x authenticator 802 11i WPA WPA2 AES VPN pass through Provide mutual authentication Client and dynamic encryption keys to enhance security Integrated modem Annex A Fully compatible with the fastest ADSL2 connections up to date Theoretical wireless signal rate based on IEEE standa...

Page 6: ...e of the items listed below are missing Do not discard the packing materials in case of return the unit must be shipped back in its original package 1 WL 347 WL 348 modem router 2 220V 240V Power Adapter 3 Quick Install Guide 4 CD User s Manual 5 Warranty card 6 UTP cable ...

Page 7: ...L Connect your telephone ADSL cable this port LAN Connect the cable from your PC s or network devices to this port Power connector Blinks on traffic for specific LAN PORT Reset button Power connector LAN computer connections Modem connection ...

Page 8: ... POWER Lights up when powered ON Blinks on TEST RESET Wan Lights up when an ADSL cable is connected Online Lights up when internet connection is UP WLAN Lights up in Blue when WLAN is enabled Blinks on traffic WPS Blinks when WPS mode is on Lan1 Lan4 When a lan cable is connected the corresponding light lights up ...

Page 9: ...net Explorer Safari Firefox Opera Ethernet compatible CAT5 cables 5 WL 347 WL 348 Placement You can place the WL 347 WL 348 on a desk or other flat surface or you can mount it on a wall For optimal performance place your Wireless Broadband Modem Router in the center of your office or your home in a location that is away from any potential source of interference such as a metal wall or microwave ov...

Page 10: ...10 6 Setup LAN WAN LAN computer connections Modem connection ...

Page 11: ...11 7 PC Network Adapter setup Windows XP Enter Start Menu select Control panel select Network Select Local Area Connection icon select properties ...

Page 12: ...lect Internet Protocol TCP IP Click Properties Select the General tab a WL 347 WL 348 supports DHCP function please select both Obtain an IP address automatically and Obtain DNS server address automatically ...

Page 13: ...47 WL 348 automatically enters the self test phase During self test phase the Power LED will blink briefly and then will be lit continuously to indicate that this product is in normal operation 9 Initial Setup WL 347 WL 348 LOGIN procedure 2 OPEN your browser e g Internet Explorer 3 Type http 192 168 0 1 in address bar and press Enter ...

Page 14: ...dmin 4 Click OK 5 You will see the home page of the WL 347 WL 348 The System status section allows you to monitor the current status of your router the UP time hardware information serial number as well as firmware version information is displayed here ...

Page 15: ...cify a Subnet Mask for your LAN segment 802 1d Spanning Tree is Disabled by default If the 802 1d Spanning Tree function is enabled this router will use the spanning tree protocol to prevent network loops DHCP Server Enabled by default You can enable or disable the DHCP server When DHCP is disabled no ip addresses are assigned to clients and you have to use static ip addresses When DHCP server is ...

Page 16: ...period is reached IP Address Pool You can select a particular IP address range for your DHCP server to issue IP addresses to your LAN Clients Note default IP range 192 168 0 100 192 168 0 199 If you want your PC s to have a static fixed IP address then you ll have to choose an IP address outside this IP address Pool Domain Name You can specify a Domain Name for your LAN Or just keep the default Si...

Page 17: ...7 Device Status View the Broadband modem router s current configuration settings Device Status displays the configuration settings you ve configured in the Wizard Basic Settings Wireless Settings section ...

Page 18: ...displays whether the ADSL port is connected to an ADSL service provider It also displays the router s WAN IP address Subnet Mask and ISP Gateway as well as MAC address the Primary DNS Press Renew button to renew your WAN IP address ...

Page 19: ...19 ADSL Status This page shows the current operation mode status of your ADSL connection the data rate and the quality of your ADSL link Operation mode allows manual selection of the ADSL mode ...

Page 20: ...s page shows all DHCP clients LAN PCs currently connected to your network The table shows the assigned IP address MAC address and expiration time for each DHCP leased client Use the Refresh button to update the available information ...

Page 21: ...plays any event occurred after system start up At the bottom of the page the system log can be saved Save to a local file for further processing or the system log can be cleared Clear or it can be refreshed Refresh to get the most updated information When the system is powered down the system log will disappear if not saved to a local file ...

Page 22: ...n Wizard Click Wizard to configure the modem The Setup wizard will now be displayed check that the adsl line is connected and click Next Select your country from the Country list Select your internet provider Click Next ...

Page 23: ...ng on the chosen provider you may need to enter your user name and password or hostname in the following window After you have entered the correct information click Next Click APPLY to complete the configuration ...

Page 24: ... that are used for the wireless stations to connect to this router The parameters include Mode ESSID Channel Number and Associated Client Wireless Function Enable or Disable Wireless function here Click Apply and wait for module to be ready loaded ...

Page 25: ... wireless LAN should have the same ESSID Channel Number The channel used by the wireless LAN All devices in the same wireless LAN should use the same channel Channel bandwidth 20 40 MHz Allows automatic detection of the operation bandwidth between 20 and 40 MHz Extension channel This is the optional channel for use Setting the Bandwidth to 20 40 MHz allows you to use this extension channel as the ...

Page 26: ...ze of a packet during the fragmentation of data to be transmitted If you set this value too low it will result in bad performance RTS Threshold When the packet size is smaller then the RTS threshold the wireless router will not use the RTS CTS mechanism to send this packet Beacon Interval is the interval of time that this wireless router broadcasts a beacon A Beacon is used to synchronize the wire...

Page 27: ...ature is recommended Disabling Broadcast ESSID can provide better security Transmit burst mode if enabled wireless throughput is enhanced this may affect compatibility 802 11g It is recommended to enable the protection mechanism This mechanism can decrease the rate of data collision between 802 11b and 802 11g wireless stations When the protection mode is enabled the throughput of the AP will be a...

Page 28: ...WPA with pre shared key and WPA with RADIUS With these security functions you can prevent your wireless LAN from illegal access Please make sure your wireless stations use the same security function and are setup with the same security key Disable When you choose to disable encryption it is very insecure to operate the WL 347 WL 348 ...

Page 29: ...ll be the higher level of security is used but the throughput will be lower Key Format You may select ASCII Characters alphanumeric format or Hexadecimal Digits in the A F a f and 0 9 range to be the WEP Key Key1 Key4 The WEP keys are used to encrypt data transmitted in the wireless network Use the following rules to setup a WEP key on the device 64 bit WEP input 10 digits Hex values in the A F a ...

Page 30: ...tings and reboot the device WPA Pre shared Key Wi Fi Protected Access WPA is an advanced security standard You can use a pre shared key to authenticate wireless stations and encrypt data during communication It uses TKIP or CCMP AES to change the encryption key frequently So the encryption key is not easy to be cracked by hackers This is the best security available ...

Page 31: ... security standard You can use an external RADIUS server to authenticate wireless stations and provide the session key to encrypt data during communication It uses TKIP or CCMP AES to change the encryption key frequently Press Apply button when you are done ...

Page 32: ...ss network Enable wireless access control Enables the wireless access control function Adding an address into the list Enter the MAC Address of the wireless station to be added and then click Apply The wireless station will now be added If you are having any difficulties filling in the fields just clear the MAC Address ...

Page 33: ... WPS via PIN code If you want to use the Push Button you have to push a specific button on the wireless client or in the utility of the wireless client to start the WPS mode and switch the wireless router to WPS mode You can simply push the WPS button of the wireless router or click the Start to Process button in the web configuration interface If you want to use the PIN code you have to know the ...

Page 34: ...de It shows the active authentication mode for the wireless connection Passphrase Key It shows the passphrase key that is randomly generated by the wireless router during the WPS process You may need this information when using a device which doesn t support WPS WPS via Push Button Press the button to start the WPS process The router will wait for the WPS request from the wireless devices within 2...

Page 35: ...ers thus limiting the risk of hacker attacks and defending against a wide array of common Internet attacks However for applications that require unrestricted access to the Internet you can configure a specific client server as a Demilitarized Zone DMZ Note To enable the Firewall settings select Enable and click Apply ...

Page 36: ...at the virtual server re directs a particular service Internet application e g FTP websites to a particular LAN client server whereas DMZ re directs all packets regardless of services going to your WAN IP address to a particular LAN client server Enable DMZ Enable disable DMZ Public IP Address The IP address of the WAN port or any other Public IP addresses given to you by your ISP Client PC IP Add...

Page 37: ...DOS Sync flood port scan RIP defect Discard Ping to WAN interface The router s WAN port will not respond to any Ping requests Stateful packet inspection allows the user to manually determine which packets should be scanned When hackers attempt to enter your network we can alert you by e Mail Enter your email address Specify your SMTP and POP3 servers user name and password Connection Policy Enter ...

Page 38: ...t accept for the clients in the list below Allow If you select Allow then all clients will be denied to access Internet accept for the PCs in the list below Filter client PCs by IP Fill in IP Filtering Table to filter PC clients by IP Add PC You can click Add PC to add an access control rule for users by IP addresses Remove PC If you want to remove some PCs from the IP Filtering Table select the P...

Page 39: ... want to retype again just click Reset and the fields will be cleared Remove PC If you want to remove some PC from the MAC Filtering Table select the PC you want to remove in the table and then click Delete Selected If you want to remove all PCs from the table just click the Delete All button If you want to clear the selection and re select again just click Reset Click Apply at the bottom of the s...

Page 40: ...RL address or the keyword of the web site you want to block Remove URL Keyword If you want to remove some URL keywords from the Current URL Blocking Table select the URL keyword you want to remove in the table and then click Delete Selected If you want remove all URL keywords from the table just click Delete All button If you want to clear the selection and re select again just click Reset Click A...

Page 41: ...s the Internet through a single Public IP Address or multiple Public IP Addresses NAT provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as Websites and FTP Select Disable to disable the NAT function ...

Page 42: ... port number from the Internet WAN Port to a particular LAN private IP address and its service port number Enable Virtual Server Enable Virtual Server Private IP This is the LAN client host IP address that the Public Port number packet will be sent to Private Port This is the port number of the above Private IP host that the below Public Port number will be changed to when the packet enters your L...

Page 43: ...d Then this Virtual Server setting will be added into the Current Virtual Server Table below Remove Virtual Server If you want to remove Virtual Server settings from the Current Virtual Server Table select the Virtual Server settings you want to remove in the table and then click Delete Selected If you want to remove all Virtual Server settings from the table just click the Delete All button Click...

Page 44: ...ons Enable Trigger Port Enable the Special Application function Trigger Port This is the out going Outbound range of port numbers for this particular application Trigger Type Select whether the outbound port protocol is TCP UDP or both Public Port Enter the In coming Inbound port or port range for this type of application e g 2300 2400 47624 Public Type Select the Inbound port protocol type TCP UD...

Page 45: ...l in the Trigger Port Trigger Type Public Port Public Type Public Port and Comment of the setting to be added and then click Add The Special Application setting will be added into the Current Trigger Port Table below If you happen to make a mistake just click Clear and the fields will be cleared Remove If you want to remove Special Application settings from the Current Trigger Port Table select th...

Page 46: ...le or Disable the UPnP feature here After you enable the UPnP feature all client systems that support UPnP like Windows XP can discover this router automatically and access the Internet through this router without having to configure anything The NAT Traversal function provided by UPnP can let applications that support UPnP connect to the internet without having to configure the virtual server sec...

Page 47: ...r experience in using critical real time services like Internet phone video conference etc All the applications not specified by you are classified as rule name Others The rule with a smaller priority number has a higher priority the rule with a larger priority number has a lower priority You can adjust the priority of the rules by moving them up or down Enable Disable QoS You can check Enable QoS...

Page 48: ...n enter the detail form of the QoS rule Click Apply after editing the form and the rule will be saved Adjust QoS rule priority You can select the rule and click Move Up to make its priority higher You also can select the rule and click Move Down to make its priority lower ...

Page 49: ... static route to the list or check the box of an already entered route and click Modify Clicking Delete will remove an entry from the list RIP mode Globally enables or disables RIP Auto summary If Auto summary is disabled then RIP packets will include sub network information from all sub networks connected to the router If enabled this sub network information will be summarized to one piece of inf...

Page 50: ...led on this interface Silent Listens for route broadcasts and updates its route table It does not participate in sending route broadcasts Version Sets the RIP Routing Information Protocol version to use on this interface ...

Page 51: ...rameters for the Simple Network Management Protocol SNMP SNMP operation mode To select the SNMP modes for this device Community A computer attached to the network called a Network Management Station NMS can be used to access this information Access rights to the agent ...

Page 52: ...ress when errors or specific events occur on the network Community A community string password specified for trap management Enter a word something other than public or private to prevent unauthorized individuals from accessing information on your system Version Sets the trap status to disabled or enabled with V1 or V2c The v2c protocol was proposed in late 1995 and includes enhancements to v1 tha...

Page 53: ... password is admin Passwords can contain 0 to 12 alphanumeric characters and are case sensitive Current Password Fill in the current password to allow changing to a new password New Password Enter your new password Confirmed Password Enter your new password again for verification purposes Click Apply at the bottom of the screen to save the above configurations ...

Page 54: ...r Address You can set an NTP server address Enable Daylight Savings The router can also take Daylight savings into account If you wish to use this function you must check tick the enable box to enable your daylight saving configuration below Start Daylight Savings Time Select the period in which you wish to start daylight Savings Time End Daylight Savings Time Select the period in which you wish t...

Page 55: ... the host in the Internet that will have management configuration access to the Broadband router from a remote site If the Host Address is left 0 0 0 0 this means anyone can access the router s web based configuration from a remote location providing they know the password Port The port number of the remote management web interface Enabled Select Enabled to enable the remote management function Cl...

Page 56: ... upgrade the firmware of your Broadband router you need to download the firmware file to your local hard disk and enter that file name and path in the appropriate field on this page You can also use the Browse button to find the firmware file on your PC Once you ve selected the new firmware file click Apply at the bottom of the screen to start the upgrade process ...

Page 57: ...Factory Defaults selection this will set all configurations to its original default settings e g when you first purchased the router Use the Backup tool to save the Broadband router current configuration to a file named config bin on your PC You can then use the Restore tool to restore the saved configuration to the Broadband router Alternatively you can use the Restore to Factory Defaults tool to...

Page 58: ...58 Reset You can reset the router s system should any problem exist The reset function essentially re boots your router s system ...

Page 59: ...r common DDNS service providers Enable Disable Enable or disable the DDNS function of this router Provider Select a DDNS service provider Domain name Fill in your static domain name that uses DDNS Account E mail The account that your DDNS service provider assigned to you Password Key The password you set for the DDNS service account above Click Apply at the bottom of the screen to save the above c...

Reviews:

No comments