background image

WL-G200 Series Router User Manual

68

3.7 Firewall

1) IP/MAC/Port Filtering
This part used to intercept packages from router’s WAN/Celluar interface to Internet.
Test case:
1.1 Only allow three devices (MAC/LAN/WLAN) can access to Internet via WAN:
110.110.10.10
1.2 Only allow three devices (MAC/LAN/WLAN) can access to the router page
(192.168.1.1)

2) Key Word Filtering
This part used to filter key word packages from router’s WAN/Cellular interface to Internet.

3) URL Filtering

This part used to filter URL from router’s WAN/Cellular interface to Internet.

Summary of Contents for WL-G200 Series

Page 1: ...WL G200 Series Router User Manual 1 V1 0 http www wlink tech com March 2018 User Manual Apply to WL G200 Series 4G 4G Router V3 1 http www wlink tech com March 2020...

Page 2: ...rading we may renew the content of this file and this file only for reference All statement information suggestion etc in this file does not compose any form of guarantee and we WLINK reserves the rig...

Page 3: ...to Install 8 2 Router Configuration 10 2 1 Local Configure 10 2 2 Status 11 2 3 Overview 11 2 4 Traffic Stats 12 2 5 Device List 12 2 6 Tool Column 13 2 7 Basic Network 15 2 8 WLAN Setting 24 2 9 Adv...

Page 4: ...L G200 Series Router User Manual 4 3 2 WAN Backup WAN as Main Cellular Backup 57 3 3 Port Forwarding 59 3 4 IP Passthrough 60 3 5 Captive Portal 62 3 6 GPS Settings 65 3 7 Firewall 68 3 8 VPN Tunnel 6...

Page 5: ...Structure WLINK Tech G200 series Front Rear There are some difference on Antenna interface and indicator light for the device with extended Wi Fi GPS features Table 1 2 Router Interface Port Instructi...

Page 6: ...User Manual 6 Port Instruction Remark WAN LAN 100 1000Base TX MDI MDIX self adaption Default as LAN Reset Reset button press on button at least 5 seconds PWR Power connector 7 5 32VDC DC V and V Seri...

Page 7: ...Signal Status Quick Blinking 0 5s Offline Slow Blinking 1 5s 3G online Solid light 4G online WLAN Green Solid light WLAN port open but no data sending Green Blinking quickly Data is in transmitting Gr...

Page 8: ...y a switch 1 4 3 4G and Wi Fi Antenna Plug Connect the two magnetic 4G antennas to Main and Aux interfaces and the two paddle shape Wi Fi antennas to Wi Fi1 and Wi Fi2 interfaces Wi Fi antenna support...

Page 9: ...hernet cable and antenna connect power supply adaptor or power cable Please connect the antenna before power on otherwise the signal maybe poor because of impedance mismatching Notice Step 1 Check the...

Page 10: ...port you could specify a static IP or set as DHCP The default IP address is 192 168 1 1 subnet mask is 255 255 255 0 please refer to following Step 1 Click start control panel find Network Connection...

Page 11: ...traffic Stats and device list after login router Especially suggest change the password according to the prompts because of security requirement The UI will display already changed login password suc...

Page 12: ...Traffic Stats Click Status Traffic Stats to enter the traffic stats GUI to check Cellular WAN traffic in real time Figure 2 4 Traffic Stats GUI 2 5 Device List Click Status Device List to enter the d...

Page 13: ...nter ping test GUI Used to test the reachability of a host on an Internet IP network and to measure the round trip time for messages sent from the originating host to a destination server 2 6 1 2 Trac...

Page 14: ...nected devices via WOL protocol Clock left mouse button to wake up the device 2 6 1 4 Log Click Tools Log to enter Log GUI Use to check logs in GUI download GUI and send logs to server 2 6 1 5 Capture...

Page 15: ...ndwidth to enter bandwidth graphic GUI Used to check cellular LAN Wi Fi real time bandwidth 2 6 3 System Click system to choose software reboot hardware reboot and logout GUI 2 7 Basic Network 2 7 1 W...

Page 16: ...ruction Parameter Instruction Type Support DHCP PPPoE Static IP address Step 2 After setting please click save to finish the device will reboot End 2 7 2 Cellular Setting Step 1 Basic Network Cellular...

Page 17: ...IP and port by TCP protocol SMS Code Remote control the router by SMS Only the configured SMS code will work Operator Lock Lock a specified operator for the router by MCC MNC code Dual SIM Mode Fail...

Page 18: ...if carrier can provide this service ICMP Check and Cellular Traffic Check are alternative ICMP Check Enable ICMP Router will automatically check whether the defined IP address is reachable per 60s If...

Page 19: ...g please click save icon End 2 7 3 LAN Setting Step 1 Basic Network LAN to enter below interface Table 2 3 LAN Setting Instruction Parameter Instruction Bridge Supports 4 LAN IP address for br0 to br3...

Page 20: ...Lease The valid time unit as minute Add Add LAN IP address supports 4 LAN IP addresses Step 2 After setting please click save to finish the device will reboot End 2 7 4 VLAN Step 1 Basic Network VLAN...

Page 21: ...uter User Manual 21 2 7 5 Schedule Step 1 Basic Network VLAN to enter the Schedule setting page Step 2 Please Click Save to finish End 2 7 6 Dynamic DNS Setting Step 1 Basic Network DDNS to enter the...

Page 22: ...mized protocol please contact Wlink engineer Usually use default IP 0 0 0 0 Auto refresh time Set the interval of the DDNS client obtains new IP suggest 240s or above Service provider Select the DDNS...

Page 23: ...ion IP address Gateway Next hop IP address which the router will reach Subnet Mask Subnet mask for destination IP address Metric Metrics are used to determine whether one particular route should be ch...

Page 24: ...al 24 2 8 WLAN Setting It s mainly for router which support Wi Fi you can modify and configure WLAN parameter through Web GUI below is the common setting 2 8 1 Basic Setting Step 1 WLAN Basic Setting...

Page 25: ...width for 866Mbps Enable wireless Enable or Disable the Wireless Wireless mode Support AP mode Wireless Network protocol Support Auto b g n optional for 2 4G Support Auto A N optional for 2 5G SSID Th...

Page 26: ...twork Setting 2 9 1 Port Forwarding Step 1 Advanced Network Port Forwarding to enter the GUI you may modify the router name Host name and Domain name according to the application requirement Table 2 8...

Page 27: ...The destination address inside the LAN Description Remark the rule Step 2 Please click save to finish End 2 9 2 Port Redirecting Step 1 Advanced Network Port Redirecting to enter the GUI you may modif...

Page 28: ...ion Address The destination address inside the LAN Source Address Restriction If no IP address inside it will allow all IP address to access If define IP address it will just allow the defined IP addr...

Page 29: ...ddress Enable DHCP of device Configure device Mac Device will be assigned SIM IP Gateway If WL G200 connect to multiple device input other device gateway The device might access to router GUI Step 2 P...

Page 30: ...your computer is using a specified outgoing port for specific traffic Step 2 Please click save to finish End 2 9 6 Captive Portal Step 1 Advanced Network Triggered to check or modify the relevant para...

Page 31: ...ctivity if no network activity from Wi Fi User If User need to re login Captive page to surf internet Ignore LAN If enabled LAN devices will bypass the Captive Portal page Redirecting Router will redi...

Page 32: ...ial port Serial Timeout Serial Timeout is the waiting time for transmitting the data package that is less the Packet payload If the last package equals to the Packet payload Serial port will transmit...

Page 33: ...efault Stop Bit 1bit as default Step 2 Please click save to finish End 2 9 8 UPnp NAT PMP Setting Step 1 Advanced Network Upnp NAT PMP to check or modify the relevant parameter Step 2 Please click sav...

Page 34: ...for specified IP IP Range MAC Address DL Rate Mix Download rate DL ceil Max download rate UL Rate Mix Upload rate UL ceil Max upload rate Priority The priority of a specific user Default Class If no...

Page 35: ...inish End 2 9 11 Static DHCP Setting Step 1 Advanced Network Static DHCP to check or modify the relevant parameter Step 2 Please click save to finish End 2 10 Firewall 2 10 1 IP URL Filtering Step 1 F...

Page 36: ...ring Instruction Parameter Instruction IP MAC Port Filtering Support IP address MAC address and port filter Accept Drop options for filter policy Key Word Filtering Support key word filter URL Filteri...

Page 37: ...dify the relevant parameter Table 2 17 Domain Filtering Instruction Parameter Instruction Default Policy Support black list and white list Local IP Address Local IP address for LAN Domain Support Doma...

Page 38: ...address Tunnel Destination GRE Remote IP address Usually a public IP address Keep alive GRE tunnel keep alive to keep GRE tunnel connection Interval Keep alive interval time Retries Keep alive retry...

Page 39: ...port Interface Type Tap and Tun type are optional Tap is for bridge mode and Tunnel is for routing mode Protocol UDP and TCP optional Server Address The Openvpn server public IP address and port Firew...

Page 40: ...ient check router s status as interval time Redirect Internet Traffic Configure Openvpn as default routing Access DNS As the configuration requested Encryption As the configuration requested Compressi...

Page 41: ...nt Certificate Keep client certificate as the same as server Client Key Keep client key as the same as server Table 2 22 Status of OpenVPN Instruction Parameter Instruction Status Check Openvpn status...

Page 42: ...requested Password As the configuration requested Firewall Firewall For VPN Tunnel Local IP Defined Local IP address for tunnel Table 2 24 L2TPAdvanced Instruction On L2TP Advanced enable Name L2TP T...

Page 43: ...50bytes as default MRU MRU is 1450bytes as default MPPE As the configuration requested MPPE Stateful As the configuration requested Customs As the configuration requested Table 2 26 SCHEDULE Instructi...

Page 44: ...dify the relevant parameter Table 2 27 IPSec Group Setup Instruction parameter Instruction IPSec Extensions Support Standard IPSec GRE over IPSec L2TP over IPSec Local Security Interface Defined the I...

Page 45: ...g for Remote subnet Step 2 Please click save to finish 2 11 4 2 IPSec Basic Setup Step 1 IPSec Basic Setup to check or modify the relevant parameter Table 2 28 IPSec Basic Setup Instruction parameter...

Page 46: ...1 Group2 Group5 from list It must be matched to remote IPSec setting Phase 2 Encryption Support 3DES AES 128 AES 192 AES 256 Phase 2 Authentication Support HASH MD5 and SHA Phase 2 SA Life Time IPSec...

Page 47: ...c advanced setting such as left right ID Step 2 Please click save to finish End 2 12 Administration 2 12 1 Identification Setting Step 1 Please click Administrator Identification to enter the GUI you...

Page 48: ...Router User Manual 48 Parameter Instruction Domain name Default is empty support maximum up to 32 character it is the domain of WAN no need to configure for most application Step 2 Please click save...

Page 49: ...nual 49 2 12 2 Time Setting Step 1 Please click Administrator time to check or modify the relevant parameter If the device is online but time update is fail please try other NTP Time Server Step 2 Ple...

Page 50: ...onvenient for usage Please note the password is the router system account password Step 2 Please click save iron to finish the setting End 2 12 4 Schedule Reboot Setting Step 1 Please click Administra...

Page 51: ...ing to check and modify relevant parameter Step 2 Please click save iron to finish the setting WL G200 series router doesn t support extra storage The storage path is Router as default End 2 12 7 M2M...

Page 52: ...ation Setting Step 1 Please click Administrator Configuration to do the backup setting Figure 3 1 Backup and Restore Configuration GUI Restore Default would lose all configuration information please b...

Page 53: ...9 System Log Setting Step 3 Please click Administrator Logging to start the configuration you can set the file path to save the log Local or remote sever Figure 3 2 System log Setting GUI Step 4 After...

Page 54: ...also use this way Reset button is near to Console port in WL G200 panel This button can be used when the router is in use or when the router is turned on Press the RST button and keep more than 8 sec...

Page 55: ...mainly for configured test case there would be some difference between the scheme and real object But the difference doesn t have any influence to products performance 3 1 VLAN WL G200 supports VLAN...

Page 56: ...WL G200 Series Router User Manual 56 2 If untag for br1 ad br2 it won t be accessed between SW1 and SW2 3 If tag for br1 and br2 it will be accessed between sw1 and sw2 End...

Page 57: ...switch traffic to Cellular link2 when WAN link1 fails and WL G200 brings you a stable network experience 1 Navigate to Basic Network WAN you may configure the WAN parameters with your situation 2 Nav...

Page 58: ...er dial up to network via modem wan The router dial up to network via WAN DHCP PPPOE Static IP Ethernet ICMP Check When the ICMP Check fails the switching action between Link1 and Link2 will be trigge...

Page 59: ...ckly switches traffic to Cellular when the WAN fails End 3 3 Port Forwarding 1 The router online and got a public IP address 14 31 134 94 Note It s based on SIM card carrier 2 The PC is connected to r...

Page 60: ...G200 Series Router User Manual 60 4 The PC can be accessed via 14 31 134 94 443 over Internet End 3 4 IP Passthrough 1 The router online 2 Configure IP passthrough destination MAC address PC Ethernet...

Page 61: ...WL G200 Series Router User Manual 61 3 Set the PC to DHCP 4 Check the Ethernet status and ping test...

Page 62: ...s Router User Manual 62 5 Set the PC Ethernet as DHCP to release the IP and access to router GUI again End 3 5 Captive Portal Please click Advanced Network Captive Portal to check or modify the releva...

Page 63: ...er under the Administration Storage Settings menu Furthermore also might upload splash with images together Each Ad file just supports 3 Ad portal images Picture format is acceptable for png jpg and i...

Page 64: ...WL G200 Series Router User Manual 64 Finally we can see the results by connect to router WIFI...

Page 65: ...eries Router User Manual 65 2 Modify portal file storage path Modify portal file storage for In storage as below End 3 6 GPS Settings Please click Advanced Network GPS to view or modify the relevant p...

Page 66: ...PS Format NMEA and M2M_FMT WLINK Server IP Port GPS server IP and port Heart Beat If choose M2M_FMT format heart beat ID will be packed into GPS data Interval GPS data transmit as the interval time St...

Page 67: ...dress 2 gps_date yymmdd 150904 Date in year month day 3 gps_time hhmmss ss s 043215 0 UTC Time Time of position fix 4 gps_use numeric 06 Satellites Used Range 0 to 12 5 gps_latitude ddmm mm mm 2234 24...

Page 68: ...Only allow three devices MAC LAN WLAN can access to Internet via WAN 110 110 10 10 1 2 Only allow three devices MAC LAN WLAN can access to the router page 192 168 1 1 2 Key Word Filtering This part us...

Page 69: ...ernet to router s WAN Celluar interface Test case 4 1 Intercept all TCP packets accessing the router s WAN Celluar 110 110 10 10 4 2 Only two devices MAC LAN WLAN are allowed to be accessed from Inter...

Page 70: ...WL G200 Series Router User Manual 70 Navigate to Basic Network LAN Navigate to VPN Tunnel GRE 2 WL G200 B Config Navigate to Basic Network LAN...

Page 71: ...WL G200 Series Router User Manual 71 Navigate to VPN Tunnel GRE...

Page 72: ...meter Instruction Start with WAN Enable the Openvpn feature for 4G 3G WAN port Interface Type Tap and Tun type are optional Tap is for bridge mode and Tunnel is for routing mode Protocol UDP and TCP o...

Page 73: ...ck router s status as interval time Redirect Internet Traffic Configure Openvpn as default routing Access DNS As the configuration requested Encryption As the configuration requested Compression As th...

Page 74: ...ame as the server Client Certificate Keep client certificate same as the server Client Key Keep client key same as the server Parameter Instruction Status Check OpenVPN status and data statistics Clic...

Page 75: ...running on Windows 7 8 10 Access to http openvpn net release and download the file openvpn 2 3 0 install exe or higher After installing OpenVPN please find the OpenVPN folder to generate the certifica...

Page 76: ...re vas bat sample to complete the initialization step and keys Configure the client keys to WLINK OpenVPN client GUI when you create the server and client certificate in the path OpenVPN easy rsa keys...

Page 77: ...Series Router User Manual 77 OpenVPN easy rsa keys Ping test to your server when the tunnel is established End 3 8 3 L2TP PPTP Please click VPN Tunnel PPTP L2TP Client to view or modify the relevant p...

Page 78: ...WL G200 Series Router User Manual 78 Configured as PPTP Note The Custom Options are based on your server End 3 8 4 IPSec IPSec between WL G200 and Cisco Router 1 Cisco Config main mode...

Page 79: ...e group 2 crypto isakmp key test1234 address 0 0 0 0 0 0 0 0 crypto ipsec transform set Tran set esp 3des esp sha hmac crypto ipsec nat transparency spi matching 2 WLINK Config Navigate to VPN Tunnel...

Page 80: ...WL G200 Series Router User Manual 80 End...

Reviews: