TRENDnet TEW-829DRU User Manual Download Page 3

Page: 3 / 117

TRENDnet User’s Guide

Table of Contents

One-to-One NAT .......................................................................................................... 51

RADIUS Authentication ................................................................................................ 53

Multiple WAN Configuration ......................................................... 54

Multiple WAN Management Settings .......................................................................... 54

MWAN Status ................................................................................................................... 54

Link Tracking .................................................................................................................... 54

Default Traffic Rule .......................................................................................................... 55

Web Management System (Router Limits™) .................................. 56

Setup your router with Router Limits .......................................................................... 56

Router Limits Content Management ........................................................................... 58

Virtual Private Networking (VPN) .................................................. 61

Creating a Virtual Private Network (VPN) .................................................................... 61

PPTP VPN Server .......................................................................................................... 62

Setting up the PPTP VPN server ....................................................................................... 62

Setting up the PPTP VPN client (Windows) ...................................................................... 64

L2TP VPN Server .......................................................................................................... 65

Setting up the L2TP VPN server without IPsec encryption .............................................. 65

Setting up the L2TP VPN server with IPsec encryption (PSK) ........................................... 66

Setting up the L2TP VPN client (Windows) with IPsec encryption (PSK) ......................... 68

IPsec (Internet Protocol Security) ................................................................................ 70

Setting up IPsec site-to-site VPN (PSK) ............................................................................. 70

Setting up IPsec server VPN (PSK with xAUTH) ................................................................ 73

Setting up IPsec site-to-site VPN Failover (PSK) ............................................................... 76

Secure Socket Layer VPN (SSL) / OpenVPN.................................................................. 81

SSL VPN Server Setup ....................................................................................................... 81

SSL VPN Client Setup (Windows)...................................................................................... 82

Certificate Management .............................................................................................. 86

IPsec ................................................................................................................................. 86

OpenVPN .......................................................................................................................... 87

Router Maintenance and Monitoring ............................................ 88

Managing access to the router management interface .............................................. 88

Local Access Management ............................................................................................... 88

Remote Access Management .......................................................................................... 88

Diagnostic tools ........................................................................................................... 89

Backup and restore your router configuration settings .............................................. 90

Reboot your router ...................................................................................................... 90

Scheduled automatic reboot ....................................................................................... 91

Console access ............................................................................................................. 91

Router Default Settings ............................................................................................... 92

Reset your router to factory defaults .......................................................................... 92

Upgrade your router firmware .................................................................................... 93

Ping Watchdog ............................................................................................................ 95

Local Access Management ............................................................................................... 95

Check the router status information ........................................................................... 96

View routing table and ARP entries ............................................................................. 98

View your router logging ............................................................................................. 99

Configure router logging settings and setup external syslog server ................................ 99

Technical Specifications .............................................................. 100

Troubleshooting ......................................................................... 103

Appendix .................................................................................... 104

Summary of Contents for TEW-829DRU

Page 1: ...TRENDnet User s Guide Cover Page...

Page 2: ...2 interfaces for Internet connectivity 16 IPv6 settings 18 Virtual LANs VLANs 19 Create a port based VLAN 19 Create a port based VLAN with 802 1Q tagging 20 Assigning VLAN IDs to Wireless SSIDs 23 App...

Page 3: ...ol Security 70 Setting up IPsec site to site VPN PSK 70 Setting up IPsec server VPN PSK with xAUTH 73 Setting up IPsec site to site VPN Failover PSK 76 Secure Socket Layer VPN SSL OpenVPN 81 SSL VPN S...

Page 4: ...users Dual WAN ports smooth network loading minimize network downtime and allow employees to access your network from the Internet all with a single router This wireless router features advanced mana...

Page 5: ...igently prioritize voice video and other data traffic to improve network efficiency and overall performance Rack Mount Design Sturdy metal housing with rack mount brackets included Wall Mountable Wall...

Page 6: ...e TEW 829DRU 3 Product Hardware Features Front Panel View Rear Panel View Ground Point Security Slot RJ 45 Console Port USB 3 0 Port Gigabit LAN Ports 1 8 WAN1 Port WAN2 Port LED Indicators High Gain...

Page 7: ...on and handling Grounding wire and screw not included Security Slot Allows for an optional cable lock attachment to secure the device to a physical location RJ 45 Console Port Using the included RJ 45...

Page 9: ...entilation Install the Router on a sturdy level surface that can support its weight or in an EIA standard size equipment rack For information on rack installation see the next section Rack Mounting Wh...

Page 10: ...osition them for the best WiFi coverage It is recommended that you position all antennas vertically as shown for initial installation and adjust as needed later on 2 Connect a network cable from the W...

Page 11: ...owser on the connected computer and in the address bar enter http tew 829dru or http 192 168 10 1 and press Enter to access the router web configuration page 7 Enter the default User Name and Password...

Page 12: ...sword field and re type the new password in the Confirmation field Click Apply to save and commit the changes 10 To change your router s LAN IPv4 address settings click on Network and click LAN 11 Und...

Page 13: ...the Internet connection settings please contact your ISP for details After you have completed the Internet connection settings click Apply to save and commit the changes 14 To configure your wireless...

Page 14: ...ame SSID is the name your WiFi clients will need to search and discover when connecting to your router wireless network 16 To change the wireless encryption key for the selected wireless band under In...

Page 15: ...iguration changes In the router management page pages may include all some or one of the options below Some configuration changes may require a device reboot Reset Clicking this option will reset all...

Page 16: ...the included wireless sticker in the router package contents or on device label located on the bottom of the router Set your router date and time Administrator System It is recommended to set the rout...

Page 17: ...ge on page 8 2 Click on Administrator and click Schedule 3 Review the settings below Click Add to add the new schedule to the list and Apply to save and commit the changes Name Enter a name for the ne...

Page 18: ...the total amount of data received by the LAN interface in MB of packets since the start of the currently displayed uptime o Tx Displays the total amount of data transmitted by the LAN interface in MB...

Page 19: ...s 192 168 50 1 entering 200 will define the last IP address of the DHCP pool is 192 168 50 200 Lease Time Enter the lease time in hours h or minutes m DHCP clients will hold their IP address settings...

Page 20: ...HCP Checking this option the enables the DHCP server to distribute IPv4 address settings dynamically to clients If this option is unchecked IPv4 address settings will only be assigned to DHCP clients...

Page 21: ...ddress settings through DHCP e g AA BB CC DD EE FF IPv4 Address Enter the IPv4 address to assign to the computer or network device for the reservation You can also click the drop down list to select f...

Page 22: ...on WAN 1 Log into your router management page see Access your router management page on page 8 2 Click on Network and click LAN 3 Under the Static ARP section click the MAC Address drop down list to s...

Page 23: ...d by the WAN1 WAN2 interface in MB of packets since the start of the currently displayed uptime o Tx Displays the total amount of data transmitted by the WAN1 WAN2 interface in MB of packets since the...

Page 24: ...ng the highest priority Typically this parameter does not need to be modified Use DNS servers advertised by peer If checked automatically obtains DNS service IP address settings from your ISP If unche...

Page 25: ...ng Less transmission overhead and smaller routing tables Easier configuration of addressing Note In order to use IPv6 Internet connection settings it is required that your ISP provide you with the IPv...

Page 26: ...select Enabled to enable communication between the LAN and other VLAN interfaces Click Apply to save and commit the changes Example We will remove ports 5 8 from the default VLAN VID 1 LAN interface s...

Page 27: ...AN configuration example any computers or devices connecting to ports 5 6 will obtain 192 168 50 x 255 255 255 0 address settings and use the VLAN 50 IP interface 192 168 50 1 as the Internet gateway...

Page 28: ...e VLAN IP interface configuration under IP Address and Subnet Mask Example In the example below we will enter the VLAN 50 interface IP address as 192 168 50 1 and subnet mask 255 255 255 0 7 Under DHC...

Page 29: ...necting to the untagged VLAN ports PVID 50 on the managed web smart will obtain 192 168 50 x 255 255 255 0 address settings and use the VLAN 50 IP interface 192 168 50 1 as the Internet gateway and ga...

Page 30: ...AN VID 1 LAN click the Inter VLAN Routing drop down list and select Enabled and click Apply to commit and save the changes 4 To create a new 802 1Q VLAN under the VLANs section click Add 5 Under VID e...

Page 31: ...LAN configuration example a managed web smart switch with 802 1Q VLAN support can be connected and pass VLAN 50 traffic between the router and switch and 2 4GHz wireless SSID Any computers or devices...

Page 32: ...et Mask The IP address and subnet mask assigned to a specific VLAN interface Mode Configures the DHCP server settings for a specific VLAN interface o Disabled Disables DHCP on a specific VLAN interfac...

Page 33: ...local networks through other routers Generally different networks can be determined by the IP addressing assigned to those networks Generally speaking and for the case of this example your network may...

Page 34: ...changes RIP enable Check the option to enable the RIP dynamic routing protocol globally on the router In the Overview table you can enable and configure RIP for each interface by clicking Edit next t...

Page 35: ...ing on the specified interface Network type Select the OSPF network type Select only Point to Point or Point to Multi point if connecting to your networking using PPP protocol otherwise select Broadca...

Page 36: ...n the total upload download speed specified to ensure the values entered are the absolute maximum value limits entered Default class When QoS is enabled select the default priority class used for all...

Page 37: ...fic source host IP address from the list or select Custom to define a particular source IP address not listed Destination Host Click the drop down list to select All any IP address a specific destinat...

Page 38: ...n page 8 3 Click on Services and click on Dynamic DNS 4 Review the DDNS settings below When complete click Apply to save and commit your changes Enabled Check the enabled option to enable dynamic DNS...

Page 39: ...the standard default WORKGROUP If you change this setting you will need to change the workgroup name on all computers in your network that are allowed access to the USB storage in order to discover i...

Page 40: ...e 1 Log into your router management page see Access your router management page on page 8 2 Click on Services and click on Wake on LAN 3 Review the settings below When complete click Apply to save and...

Page 41: ...to to automatically scan and use the best channel available when the device is powered on If you are encountering interference or connectivity issues on the current channel you can select a different...

Page 42: ...Hide ESSID Checking this option will hide your wireless network name from being discovered by wireless client devices scanning for available wireless networks This will not disable the wireless band...

Page 43: ...hich cause instability if there are too many neighboring 2 4GHz wireless networks Multiple SSID This tab involves the configuration parameters for the additional SSIDs for a specific wireless band Up...

Page 44: ...nt unwanted users from accessing your network and network resources personal documents media etc In general it is recommended that you choose the security type with the highest strength and performanc...

Page 45: ...es will operate at 802 11g 802 11a to connect using this standard 802 11a b g n ac Highest Performance Under This Setting Up to 54Mbps Highest data rate supported by wireless device Encryption Strengt...

Page 46: ...The following section outlines options when selecting WPA2 EAP or WPA EAP WPA2 EAP Mixed Mode EAP or RADIUS This security type is also known as EAP Extensible Authentication Protocol or RADIUS Remote...

Page 47: ...Secure your wireless network sections for details configuring wireless security Note You can only select WPA2 PSK or WPA PSK WPA2 PSK Mixed Mode EAP security cannot be applied to the wireless guest n...

Page 48: ...less network you can plug in the device in the area where you would like to bridge network connectivity to wired client devices using the LAN switch ports 1 8 In this mode the device can only connect...

Page 49: ...n page 8 2 Click on Network and click on WPS 3 To add a wireless device to your network under WPS Method next to Push Button click the PBC Start button Then push the WPS button on the wireless device...

Page 50: ...unction enrollee mode instead of registrar mode For security purposes it is recommended to leave this settings unchecked disabled WPS Method Push Button o PBC Start PBC Again Clicking this button will...

Page 51: ...formance so if your wireless signal is weak place the router in several locations and test the signal strength to determine the ideal position 2 Building materials can have a large impact on your wire...

Page 52: ...or not Enabling this function will set the router to drop all packets found to be invalid without any response to the sender which can increase security and prevent denial of service DoS attacks Inpu...

Page 53: ...to allow TCP UDP TCP UDP or Other External Interface Click the drop down list to select the external WAN interface s to allow WAN1 WAN2 or WAN1 WAN2 For example choosing WAN1 will only allow the port...

Page 54: ...the list and Apply to save and commit your changes Name Enter a name for the new port trigger rule Match Protocol Click the drop down list to select the match port protocol for the service to allow TC...

Page 55: ...is the source IP address or device IP address to filter Click the drop down list to select a device from the list or enter the local internal IP address of the device to filter or restrict Dst IP This...

Page 56: ...ion to enable MAC filtering and select Mode Note Please make sure to add the MAC addresses in the list first before clicking Apply Enable Check this option to enable MAC filtering Mode Select the mode...

Page 57: ...per second for a specific session Burst This value limits the total amount of packets that can be received and stored in buffer memory for a specific session DMZ Host Network Firewall DMZ Host You may...

Page 58: ...service Public Enter the additional static public Internet IP address you would like to map to the local internal IP address External Interface Click the drop down list to select the external WAN inte...

Page 59: ...ces to resolve the additional public static IP addresses from the local interfaces e g LAN VLAN Unchecking this option will not allow to devices to resolve the additional public static IP addresses fr...

Page 60: ...ck this option to enable RADIUS authentication Server IP Address Enter the IP address of the external RADIUS server Server Port Enter the port used for the RADIUS service Note The default port used fo...

Page 61: ...ys the current status of the WAN interfaces of your router Tracking is enabled using physical link status and L2 based methods but the tracking status displayed refers to the status of IP based link t...

Page 62: ...only through WAN2 and will only route to WAN1 if the WAN2 primary fails or is disconnected If WAN2 connectivity is restored all Internet traffic will revert back to the primary WAN2 interface o WAN1 F...

Page 63: ...per functionality of the Router Limits feature Web management filtering content services are offered for complimentary along with account sign up Additional paid upgrades may be available Services may...

Page 64: ...ur router management page If the pairing code does not match you can click Auto Detect to automatically copy the router pairing code into the field or you can manually enter the correct pairing code A...

Page 65: ...splays the groups and devices assigned to each group Content filters and scheduling can be assigned for each group By default new devices are assigned to the Guest group New groups can be created and...

Page 66: ...Ls to block access Exceptions This setting allows you to configure exceptions and allow access Options o Safe Search Enables this setting enforces the use safe search to be enabled for Google and Bing...

Page 67: ...t This page will display provide support on information on the Router Limits web management system and allow you to submit support tickets if needed You can access and manage your Router Limits accoun...

Page 68: ...ternet Protocol Security VPN This type of VPN can be used for either Site to Site VPN or Client Server VPN however the most common application for this type is a Site to Site VPN This type of VPN can...

Page 69: ...n IP address different from the LAN IP is entered PPTP VPN clients will be allowed to access router LAN and not the Internet 5 In the Client IP field enter an IP address range within the same LAN IP s...

Page 70: ...l IP address If using the same as the router LAN IP address make sure to assign a range different from your LAN DHCP server IP range e g 192 168 10 10 192 168 10 20 MS DNS 1 Enter the IPv4 address of...

Page 71: ...nd click the Settings icon Start Button Settings icon 2 Click Network Internet 3 Click VPN in the left panel 4 Under VPN click Add a VPN connection 5 Click the VPN provider drop down list and select W...

Page 72: ...AN network It is strongly recommended to enable L2TP VPN server with IPsec instead of L2TP VPN only due to the higher degree of security offered and supported on most modern computers and mobile devic...

Page 73: ...L2TP VPN server with IPsec encryption PSK 1 Log into your router management page see Access your router management page on page 8 2 Click on Network click VPN and click the L2TP Server tab 3 Under Se...

Page 74: ...rview enter a tunnel name and click Add e g L2TPwIPsec 143 Click the Connection type drop down list and select Remote Access Roadwarrior 14 Click the Authentication type drop down list and select L2TP...

Page 75: ...ients after they establish VPN connectivity This parameter is optional e g 8 8 8 8 DNS Server 2 Enter the IPv4 address of the secondary DNS server to distribute to L2TP VPN clients after they establis...

Page 76: ...ddress under Status Overview under Network in the IPv4 status section 8 Click the VPN type drop down list and select L2TP IPsec with pre shared key 9 Enter the IPsec pre shared key PSK 10 Click the Ty...

Page 77: ...ress 10 10 10 10 VPN Router B WAN1 Internet IP Address 10 10 10 20 Make sure the LAN IP network on each VPN router is a different IP subnet Note Changing the LAN IP address of your router will change...

Page 78: ...ts by click the add icon e g 192 168 20 0 24 8 In the Remote field enter the remote WAN1 IP e g 10 10 10 20 This can also be a domain name ex dynamic DNS host name 9 In the Remote subnet field enter t...

Page 79: ...wn list and select IPSec IKEv2 PSK 6 For the Local field enter the local WAN1 IP address e g 10 10 10 20 This can also be a domain name ex dynamic DNS host name 7 For the Local subnet field enter the...

Page 80: ...click Apply e g 1234567890 Setting up IPsec server VPN PSK with xAUTH 1 Log into your router management page see Access your router management page on page 8 2 Click on Network click VPN and click the...

Page 81: ...s upon connectivity and click Apply e g 192 168 30 0 24 The IP address range subnet should be different from the local LAN IP subnets and also different from the remote client side 9 Under Authenticat...

Page 82: ...cation hash algorithm used for IPsec phase 1 SHA2 256 bit offers highest degree of security o DH exchange The Diffie Hellman group used for IPsec phase 1 key exchange Group 14 2048 bit offers the high...

Page 83: ...ses assigned to both routers under the Status Overview page In this example we will assume the following static IP WAN info and LAN IP settings below Example VPN Router A WAN1 Internet IP Address 10 1...

Page 84: ...unnel1 8 Click the Connection type drop down list and select Site to Site 9 Click the Failover drop down list and select Enable 10 Click the Authentication type drop down list and select IPSec IKEv2 P...

Page 85: ...the remote LAN IP subnet e g 192 168 210 0 24 and click Apply You can add additional local subnets by click the add icon e g 192 168 30 0 24 Based on the example the network settings will be the follo...

Page 86: ...check Enable Tracking on both WAN1 and WAN2 and enter an IP address or IP addresses on the Internet to check for connectivity and quickly determine if the WAN interface is up or down e g 8 8 8 8 Set...

Page 87: ...by click the add icon e g 192 168 30 0 24 14 In the Remote field enter the remote WAN1 IP address e g 172 16 0 1 This can also be a domain name ex dynamic DNS host name 15 Click to add an additional I...

Page 88: ...nter the city name e g Torrance 8 In the Organization Name field enter your company name e g TRENDnet 9 In the Org Unit field enter the section group or department e g IT 10 In the Email Address field...

Page 89: ...access to your LAN network and the Internet o Internet Redirect This setting will allow your SSL VPN clients access only the Internet only via full tunneling but no access to your LAN network Cipher...

Page 90: ...ENDnet User s Guide TEW 829DRU 83 5 At the installation window click Next 6 At the license agreement window review the license agreement and click I Agree 7 At the choose components window click Next...

Page 91: ...ows adapter click Install 10 At the installation completion window click Next 11 Make sure to uncheck the Show Readme and Start OpenVPN GUI options and click Finish 12 Copy the client configuration fi...

Page 92: ...the configuration menu 15 After right clicking the icon the menu will appear Click Connect to establish your VPN connection to your router 16 If the VPN connection is successful you will receive the n...

Page 93: ...etting this parameter is optional for IPsec VPN RSA Local Name Enter the name of the city for the certificate e g Torrance Note Setting this parameter is optional for IPsec VPN RSA Organization Name E...

Page 94: ...ficate e g US State or Province Name Enter the name of the state or province for the certificate e g California Local Name Enter the name of the city for the certificate e g Torrance Organization Name...

Page 95: ...ied Enable HTTPS Checking this option will enable secure HTTPS SSL access to the router management page on the selected local interfaces Enable Telnet Checking this option will enable command line int...

Page 96: ...to start the connectivity test and the results will appear at the bottom of the page o Interface Select the interface used to run the connectivity test Default Uses the internal loopback interface to...

Page 97: ...e see Access your router management page on page 8 2 Click on Administrator then click on Backup Flash Firmware 3 Next to Restore backup click Browse or Choose File 4 A separate file navigation window...

Page 98: ...function 1 Log into your router management page see Access your router management page on page 8 2 Click on Administrator click on Reboot and click on Setting tab 3 Click the Automatic reboot by sched...

Page 99: ...r to factory defaults Administrator Backup Flash Firmware You may want to reset your router to factory defaults if you are encountering difficulties with your router and have attempted all other troub...

Page 100: ...rade requires router to be connected to Internet When your router has detected a new firmware available online a notification will appear at the top of the router management page You can click the lin...

Page 101: ...s Do not upgrade the firmware using a wireless connection only using a wired network connection Any interruptions during the firmware upgrade process may permanently damage your router 1 Log into your...

Page 102: ...tchdog feature Ping Host Interface Enter the IP address to monitor and send ping requests to check connectivity Note You can additional host IP address entries to monitor by clicking o ALL Check all l...

Page 103: ...y loaded firmware version and date o Serial Number Displays the device serial number o Local Time Displays the current device time and date o Uptime Displays the total amount of time the router has be...

Page 104: ...such as SSID Channel Bitrate BSSID wireless MAC encryption and multiple SSID status Associated Stations Displays the currently connect wireless client devices Dynamic DNS Displays the current DDNS con...

Page 105: ...troubleshooting or monitoring purposes 1 Log into your router management page see Access your router management page on page 8 2 Click on Status and click on Routes ARP Displays the router ARP table...

Page 106: ...Access your router management page on page 8 2 Click on Administrator click on System and click on the Logging tab System log buffer size You can increase or decrease the router buffer size Enter the...

Page 107: ...penVPN HMAC Authentication SHA1 SHA256 SSL VPN Certificate RSA IPsec VPN Server Site to Site Up to 8 tunnels IPsec Encryption DES 3DES AES 128 256 IPsec Authentication MD5 SHA1 SHA2 256 Certificate X...

Page 108: ...AT sessions Internal system logging Manual or online firmware upgrade and notification Backup and restore configuration Internal logging Ping watchdog Diagnostic tools Built in ping traceroute and ns...

Page 109: ...able 1U height Weight 1 24kg 2 74 lbs Disclaimers Maximum wireless signal rates are referenced from IEEE 802 11 theoretical specifications Actual data throughput and coverage will vary depending on in...

Page 110: ...automatically and click OK Note If you are experiencing difficulties please contact your computer or operating system manufacturer for assistance Q I am not sure what type of Internet Account Type I...

Page 111: ...ote If you are experiencing difficulties please contact your computer or operating system manufacturer for assistance How to configure your network settings to obtain an IP address automatically or us...

Page 112: ...etwork settings can be used as general guidelines however it is strongly recommended that you consult your computer or operating system manufacturer directly for assistance on the proper procedure for...

Page 113: ...r your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter Country Code selection feature to be disabled for products marketed to the US CANA...

Page 114: ...nement en association avec une autre antenne ou transmetteur Le pr sent metteur radio IC 6337A TEW829DRU a t approuv par Industrie Canada pour fonctionner avec les types d antenne num r s ci dessous e...

Page 115: ...net shall reserve the right at its expense to repair or replace the defective product or part and deliver an equivalent product or part to the customer The repair replacement unit s warranty continues...

Page 116: ...IGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY TO THE FULL EXTENT ALLOWED BY LAW TRENDNET ALSO EXCLUDES FOR ITSELF AND ITS SUPPLIERS ANY LIABILITY WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGE...

Page 117: ......

Search results

Summary of Contents for TEW-829DRU

Reviews:

TRENDnet TEW-829DRU, User Manual, Page: 3 / 117

Search results

Summary of Contents for TEW-829DRU

Reviews: