background image

 

 

14

 

Firewall Settings 

 

The Broadband router provides extensive firewall protection by restricting 
connection parameters, thus limiting the risk of hacker attacks, and defending 
against a wide array of common Internet attacks. However, for applications that 
require unrestricted access to the Internet, you can configure a specific 
client/server as a Demilitarized Zone (DMZ).  

 

 

Firewall

 

 

 

 
 

 

Parameter 

Description

 

Firewall 

Enable or Disable the firewall 

SPI 

Enable or Disable the firewall (Warning: If you 
enable SPI, all traffic initiated from WAN will be 
blocked) 

 

Summary of Contents for WLM-6501

Page 1: ...WLM 6501 Wireless ADSL2 N750 Gigabit Modem Router User Manual ...

Page 2: ...WS XP 11 WINDOWS VISTA WINDOWS 7 12 9 BRING UP THE WLM 6501 14 10 INITIAL SETUP WLM 6501 14 LOGIN PROCEDURE 14 STATUS 15 STATUS 15 STATISTICS 16 DHCP LIST 17 DIAGNOSTICS 18 11 CONFIGURATION WIZARD 19 12 BASIC SETTINGS 20 LAN SETTINGS 20 DHCP SETTINGS 21 WAN SETTINGS 22 SECURITY SETTINGS 27 WIRELESS ACL 29 13 ADVANCED SETTINGS 30 ADVANCES WIRELESS 30 QOS 32 UPNP 34 ROUTING 35 SNMP 36 DDNS 37 NAT 38...

Page 3: ...INGS 53 FIRMWARE UPGRADE 54 REBOOT 55 Revision 1 0 Sitecom Europe BV 2011 Note All the information contained in this manual was correct at the time of publication However as our engineers are always updating and improving the product your device s software may have a slightly different appearance or modified functionality than presented in this manual ...

Page 4: ...ith a WPA2 AES encryption key The WPA2 key is printed on the label underneath the modem With a built in DHCP Server powerful SPI firewall the WLM 6501 protects your computers against intruders and known Internet attacks and also provides safe VPN pass through With Sitecom Cloud Security Sitecom goes one step further and ensures that you can surf the Internet even more safely not only on your PC bu...

Page 5: ...igabit Port Auto Crossover To connect four wired PC s as well Firewall supports Virtual Server Mapping DMZ IP Filter ICMP Blocking SPI Avoids the attacks of Hackers or Viruses from Internet Supports 802 11i WPA WPA2 AES VPN pass through Provide mutual authentication Client and dynamic encryption keys to enhance security Integrated modem Annex A Fully compatible with the fastest ADSL2 connections u...

Page 6: ...items listed below are missing Do not discard the packing materials in case of return the unit must be shipped back in its original package 1 WLM 6501 modem router 2 110V 240V 12V 1A Power Adapter 3 Quick Install Guide 4 CD User s Manual 5 Warranty card 6 UTP cable 7 RJ11 cable ...

Page 7: ...ter yourself you might damage the router or endanger yourself 3 4 Disposing of the Router When you dispose of the router be sure to dispose it appropriately Some countries may regulate disposal of an electrical device please consult with your local authority 3 5 Others When using this router please do not let it come into contact with water or other liquids If water is accidentally spilled on the ...

Page 8: ...L cable this port LAN Connect the cable from your PC or network device to this ports Power connector Connect your power adapter to this port Power button Turn the modem On or Off Power connector LAN computer connections Modem connection WPS Reset button Power button ...

Page 9: ...ower Lights up when powered ON Blinks on TEST RESET ADSL Lights up when an ADSL cable is connected Internet Lights up when internet connection is UP WLAN Lights up in Blue when WLAN is enabled Blinks on traffic OPS Blinks when OPS mode is on LAN1 4 When a LAN cable is connected the corresponding light lights up ...

Page 10: ...AT5 cables 6 WLM 6501 Placement You can place the WLM 6501 on a desk or other flat surface or you can mount it on a wall For optimal performance place your Wireless Broadband Modem Router in the center of your office or your home in a location that is away from any potential source of interference such as a metal wall or microwave oven This location must be close to a power connection and the ADSL...

Page 11: ...nections Right mouse click on the Local Area Connection icon and select properties Select Internet Protocol TCP IP Click Properties Select the General tab The WL 358 359 supports DHCP Please select both Obtain an IP address automatically and Obtain DNS server address automatically ...

Page 12: ...Windows Vista Windows 7 Go to Start Menu Control panel View network status and tasks Manage network connections Right mouse click on the Local Area Connection icon and select properties ...

Page 13: ...ct Internet Protocol Version 4 TCP IPv4 and Click Properties Open the General tab The WLM 6501 supports DHCP Please select both Obtain an IP address automatically and Obtain DNS server address automatically ...

Page 14: ...ase the Power LED will blink briefly and then will be lit continuously to indicate that this product is in normal operation 10 Initial Setup WLM 6501 LOGIN procedure 1 OPEN your browser e g Internet Explorer 4 Type http 192 168 0 1 in address bar and press Enter Type user name and password The default username is admin the password can be found on the back label of the device 5 Click OK 6 You will...

Page 15: ...f your device Status The System status section allows you to monitor the current status of your modem router the UP time hardware information serial number as well as firmware version information is displayed here The page also shows extensive information concerning the ADSL status and current settings ...

Page 16: ...f IP packets on the networking interfaces You will not typically need to view this data but you may find it helpful when working with your ISP to diagnose network and Internet data transmission problems To display statistics for any new data click Refresh ...

Page 17: ...DHCP List This page shows all DHCP clients LAN PCs currently connected to your network The table shows the assigned IP address MAC address and expiration time for each DHCP leased client ...

Page 18: ...Diagnostics The Diagnostics page allows you to test the current configuration Click Start to let the modem router perform several tasks to verify if the connection is operational ...

Page 19: ... connected and click Next Select your country from the Country list Select your internet provider Click Next Depending on the chosen provider you may need to enter your user name and password or hostname in the following window After you have entered the correct information click Next Click Finish to complete the configuration ...

Page 20: ...12 Basic Settings LAN Settings This page is used to configure the LAN interface of your ADSL Router You can set IP address subnet mask and IGMP Snooping or modify the IPv6 address range ...

Page 21: ...DHCP This page allows you to select the DHCP mode that this router will support There are two different DHCP Modes DHCP Server and DHCP Relay When the router is acting as DHCP server please configure the router in the DHCP Server page while acting as DHCP Relay you can setup the relay in the DHCP Relay page ...

Page 22: ...llows you to manually configure the ADSL WAN settings The settings on this page require some knowledge concerning the WAN configuration we advice less experienced users to configure the WAN settings using the Wizard Chapter 10 ...

Page 23: ...d If you select Bridge in the Mode field select 1483 Bridged IP If you select Routing in the Mode field select PPPoA 1483 Bridged IP 1483 Router IP or PPPoE PPPoE PPPoA User Name Enter the user name exactly as your ISP assigned Password Enter the password associated with the user name above Encapsulation select Bridge in the Mode field select either PPPoA or RFC 1483 select Routing in the Mode fie...

Page 24: ...ter for more details RIP Version Select the RIP version from RIP 1 RIP 2B and RIP 2M RIP Direction Select the RIP direction from None Both In Only and Out Only Multicast IGMP Internet Group Multicast Protocol is a network layer protocol used to establish membership in a Multicast group it is not used to carry user data ...

Page 25: ...sfer rate 54Mbps 2 4 GHz B G 2 4GHz band only allows 802 11b and 802 11g wireless network client to connect this router maximum transfer rate 11Mbps for 802 11b clients and maximum 54Mbps for 802 11g clients 2 4 GHz N 2 4GHz band only allows 802 11n wireless network client to connect this router maximum transfer rate 150Mbps 2 4 GHz G N 2 4GHz band only allows 802 11g and 802 11n wireless network ...

Page 26: ...an select is from channel 5 to channel 11 While lower band is selected the channel number you can select is from channel 1 to channel 7 Channel Number It is the radio channel used by the wireless LAN All devices in the same wireless LAN should use the same channel Please select the country you are located and designate a channel that the router will use If you want to let the router automatically ...

Page 27: ... supports 64 bit and 128 bit key lengths to encrypt the wireless data WPA TKIP WPA uses Temporal Key Integrity Protocol TKIP for data encryption TKIP utilized a stronger encryption method and incorporates Message Integrity Code MIC to provide protection against hackers WPA2 AES WPA2 also known as 802 11i uses Advanced Encryption Standard AES for data encryption AES utilized a symmetric 128 bit blo...

Page 28: ...the shared secret from the RADIUS server Please refer to Authentication RADIUS Server setting below for RADIUS setting Personal Pre Shared Key Pre Shared Key authentication is based on a shared secret that is known only by the parties involved To use WPA Pre Shared Key select key format and enter a password in the Pre Shared Key Format and Pre Shared Key setting respectively Pre Shared Key Format ...

Page 29: ...ireless Access Control Actions Allow Only allow the wireless clients with the MAC Address you have specified can access to the router Deny The wireless clients with the MAC Address you have specified will be denied accessing to the router MAC Address Enter the MAC Address of the wireless clients for the filtering control When you finish click save to save the settings made and restart the router s...

Page 30: ... milliseconds Fragmentation Threshold Fragment Threshold specifies the maximum size of packet during the fragmentation of data to be transmitted If you set this value too low it will result in bad performance Enter a value from 256 to 2346 RTS Threshold This value should remain at its default setting of 2347 Should you encounter inconsistent data flow only minor modifications are recommended If a ...

Page 31: ...ly discover the router If this option is disabled the router will hide its SSID When this is done the clients cannot directly discover the router and MUST be configure with the SSID for accessing to the router It is used to protect your network from being accessed easily When you finish click save to save the settings made and restart the router so the settings will take effect after it reboots ...

Page 32: ...cations will get bandwidth after higher priority applications get enough bandwidth This can let you have a better experience in using critical real time services like Internet phone video conference etc All the applications not specified by you are classified as rule name Others The rule with a smaller priority number has a higher priority the rule with a larger priority number has a lower priorit...

Page 33: ...ule Edit a QoS rule Select the rule you want to edit and click Edit then enter the detail form of the QoS rule Click Apply after editing the form and the rule will be saved Discipline Save allows to save the selected Qos discipline without changing the current rules Rules Action summary provides an overview of the current effective Qos settings Click Add To save and apply the new rule ...

Page 34: ... double click the router or right click the router and select Invoke to configure the router through web browser Parameter Description UPnP Enable or disable UPnP feature Auto configured This will allow Upnp enabled applications to open required ports in your router When you finish click Save to save the settings made and restart the router so the settings will take effect after it reboots ...

Page 35: ...Adress The destination can be specified as the IP address of a subnet or a specific host in the subnet It can also be specified as all zeros to indicate that this route should be used for all destinations for which no other route is defined this is the route that creates the default gateway Subnet Mask The network mask of the destination subnet The default gateway uses a mask of 0 0 0 0 Gateway IP...

Page 36: ...SNMP Select Disable or Enable to disable or enable the SNMP feature Get Community Name of the read only community This read only community allows read operation to all objects in the MIB Set Community Name of the write only community This write only community allows write operation to the objects defines as read writable in the MIB When you finish click Save to save the settings made and restart t...

Page 37: ...vice provider here This router supports DynDNS and TZO service providers Host Name Enter the domain name you ve obtained from DDNS service provider DynDns Settings Username Enter the username assigned by the DDNS service provider Password Enter the password assigned by the DDNS service provider Wildcard support Enable or disable the usage of wildcards i e When you finish click Save to save the set...

Page 38: ...ng or changing of the current status of the NAT for each VC Here it s possible to set Virtual server or DMZ settings for each virtual circuit For more information about the DMZ and virtual server please read chapter 13 Firewall ...

Page 39: ...eways set top box VoIP phones At the same time the configuration of this equipment became more complicated too complicated for the end users For this reason the TR 069 standard was developed It provides the possibility of auto configuration of these access types The technical specifications are managed and published by the Broadband Forum Using TR 069 the terminals can get in contact with the Auto...

Page 40: ...g against a wide array of common Internet attacks However for applications that require unrestricted access to the Internet you can configure a specific client server as a Demilitarized Zone DMZ Firewall Parameter Description Firewall Enable or Disable the firewall SPI Enable or Disable the firewall Warning If you enable SPI all traffic initiated from WAN will be blocked ...

Page 41: ...le or disable Access Control ACL Rule index Select an index number for the rule you are creating Active Select if the Rule should be active or not Secure IP Address Enter the range IP addresses for which this rule should be effective Application Select an application from the list or choose all Interface Select the interface for this rule WAN or LAN ...

Page 42: ... drop down list box to enable IP filter rule Source IP Address The source IP address or range of packets to be monitored Subnet Mask It is the destination IP addresses based on above destination subnet IP Source Port Number This Port or Port Ranges defines the port allowed to be used by the Remote WAN to connect to the application Default is set from range 0 65535 It is recommended that this optio...

Page 43: ...h and NEXT to check it by the next rule IP Filter Listing Item number Active Whether the connection is currently active Src IP Mask The source IP address or range of packets to be monitored Dest IP Mask This is the destination subnet IP address Src port This Port or Port Ranges defines the port allowed to be used by the Remote WAN to connect to the application Default is set from range 0 65535 It ...

Page 44: ...application should be allowed or denied access and click Save to apply the settings The URL block Here it s possible to block certain websites Filter type Enter the website you wish to block and make sure the rule is active Click Save to apply the new rule URL Filter Listing Shows all entered URL block rules ...

Page 45: ...sed to the DMZ Host For example if you have a local client PC that cannot run an Internet application e g Games properly from behind the NAT firewall then you can open the client up to unrestricted two way Internet access by defining a DMZ Host Enable DMZ and enter the IP address for which you want unrestricted access to the internet in the DMZ Host IP address Click Apply to save and apply the set...

Page 46: ...ver allows you to re direct a particular service port number from the Internet WAN Port to a particular LAN private IP address and its service port number Local IP This is the LAN client host IP address that the Public Port number packet will be sent to Start port Here the starting port number must be entered End port Here the end port number must be entered Note The ports from the start port till...

Page 47: ...e Your Sitecom device comes with a 6 month free Sitecom cloud security subscription After you have set up your Sitecom device for internet access open the webbrowser and enter http www sitecomcloudsecurity com in the address bar If the device has been properly configured the following web page should be shown Here you can see which security features are activated The Sitecom Cloud Security service...

Page 48: ...m Cloud Security will always check if a website is safe If it is not safe it will inform you that is not safe to enter If you still wish to visit this webpage click on proceed anyway Alternatively click Back to Safety so that your security will not be breached ...

Page 49: ... any time open http www sitecomcloudsecurity com from your web browser You will be asked for a username and password These can be found on the backlabel on the bottom of your Sitecom router or modem If the login succeeded you can click on Settings to change your security options ...

Page 50: ...Or click License to renew your subscription If you wish to disable to Sitecom cloud security at any time open the webpage of your Sitecom product and log in with the supplied credentials these can be ...

Page 51: ...sword This page allows you to set the password to access the web server of the router If the password you typed in New Password and Confirmed Password field are not the same you ll see the following message Please retype the new password again when you see above message If the current and new passwords are correctly entered after you click Apply you ll be prompted to input your new password ...

Page 52: ...Please use new password to enter web management interface again and you should be able to login with new password ...

Page 53: ...ed by SNTP server Time Zone Select Select the time zone of the country you are currently in The router will set its time based on your selection Enable SNTP client update Check the box to enable router to update time from SNTP server SNTP server The IP address or the host name of the SNTP server You can select from the list or set it manually When you finish click Save The router so the settings w...

Page 54: ... that a newer firmware is available and offers to download and install the firmware This page also allows you to manually upgrade the firmware for the router Click Browse button to select the firmware file and click Upload button to start upgrading Romfile backup Allows saving all current settings to a file IMPORTANT Do not turn off your router while this procedure is in progress ...

Page 55: ...s are initially placed in temporary storage To save your change for future use you have to click Apply to reboot the router If you have encountered problems during the configuration you can click the OPS button in the top panel of the router over 15 seconds to reset default settings ...

Reviews: