background image

 

 

 

LevelOne 

 
 

WBR-3407 

 

11g Wireless ADSL  

VPN Router 

 

 

 

 

 

 

 

 

User’s Manual 

         

  Ver 1.00-0510 

Содержание WBR-3407

Страница 1: ...LevelOne WBR 3407 11g Wireless ADSL VPN Router User s Manual Ver 1 00 0510...

Страница 2: ...ts 37 Linux Clients 37 Other Unix Systems 37 Wireless Station Configuration 38 Wireless Configuration on Windows XP 38 CHAPTER 5 OPERATION AND STATUS 48 Operation Router Mode 48 Status Screen 48 Conne...

Страница 3: ...ew 108 General Problems 108 Internet Access 108 Wireless Access 109 APPENDIX B ABOUT WIRELESS LANS 111 Modes 111 BSS ESS 111 Channels 112 WEP 112 WPA PSK 112 Wireless LAN Configuration 113 APPENDIX C...

Страница 4: ...rt Switching Hub for 10BaseT or 100BaseT connections Figure 1 Wireless ADSL Router Wireless ADSL Router Features The Wireless ADSL Router incorporates many advanced features carefully designed to prov...

Страница 5: ...me even if you have a dynamic IP address which changes every time you connect URL Filter Use the URL Filter to block access to undesirable Web sites by LAN users Firewall As well as the built in firew...

Страница 6: ...a from the Wireless ADSL Router to your PC and restore upload a previously saved configuration file to the Wireless ADSL Router Remote Management The Wireless ADSL Router can be managed from any PC on...

Страница 7: ...Wireless ADSL VPN Router User Guide 4 unavailable The Wireless ADSL Router incorporates protection against DoS attacks...

Страница 8: ...If any of these items are damaged or missing please contact your dealer immediately The Wireless ADSL Router Unit 1 Cat 5 Ethernet LAN cable 1 RJ 11 ADSL cable 1 RJ 11 to RJ45 cable Germany only Power...

Страница 9: ...BaseT and Blinking if data is being transferred via the corresponding LAN port If neither LED is on there is no active connection on the corresponding LAN port WLAN LED On Wireless enabled Off No Wire...

Страница 10: ...Router to restart using the factory default values Power port Connect the supplied power adapter here Power switch Press IN for power ON OUT for power OFF 10 100BaseT LAN connections Use standard LAN...

Страница 11: ...eless Access Point all Wireless devices must be compliant with the IEEE 802 11g or IEEE 802 11b specifications Procedure Figure 4 Installation Diagram 1 Choose an Installation Site Select a suitable p...

Страница 12: ...he ADSL terminator provided by your phone company 4 Power Up Connect the supplied power adapter to the Wireless ADSL Router Use only the power adapter provided Using a different one may cause hardware...

Страница 13: ...Router you wish to use Use the table below to locate detailed instructions for the required functions To Do this Refer to Configure PCs on your LAN Chapter 4 PC Configuration Check Wireless ADSL Route...

Страница 14: ...on the same LAN segment The Wireless ADSL Router must be installed and powered ON If the Wireless ADSL Router s default IP Address 192 168 0 1 is already used by another device the other device must...

Страница 15: ...r 4 PC Configuration for details on checking your PC s TCP IP settings Ensure that your PC and the Wireless ADSL Router are on the same network segment If you don t have a router this must be the case...

Страница 16: ...y b IP Address allocated to you and related information such as Network Mask Gateway IP address and DNS address PPPoE PPPoA You connect to the ISP only when required The IP address is usually allocate...

Страница 17: ...ain menu also contains two 2 buttons Log Out When finished you should click this button to logout Restart Use this if you wish to restart the Wireless ADSL Router Note that restarting the Router will...

Страница 18: ...LAN segment to which the Wireless ADSL Router is attached the same value as the PCs on that LAN segment DHCP Server If Enabled the Wireless ADSL Router will allocate IP Addresses to PCs DHCP clients o...

Страница 19: ...Using the Wireless ADSL Router s DHCP Server This is the default setting The DHCP Server settings are on the LAN screen On this screen you can Enable or Disable the Wireless ADSL Router s DHCP Server...

Страница 20: ...cess Point feature use the Wireless link on the main menu to reach the Wireless screen An example screen is shown below Figure 7 Wireless Screen Data Wireless Screen Identification Region Select the c...

Страница 21: ...ilable 802 11g Wireless Stations will only be able to use the Wireless ADSL Router if they are fully backward compatible with the 802 11b standard Channel No Select the Channel you wish to use on your...

Страница 22: ...All wireless stations can use the access point provided they have the correct SSID and security settings Trusted Wireless stations only Only wireless stations you designate as Trusted can use the Acce...

Страница 23: ...cryption Select the desired option and ensure the Wireless Stations use the same setting 64 Bit data is encrypted using the default key before being transmitted You must enter at least the default key...

Страница 24: ...rity Figure 9 WPA PSK Data WPA PSK Screen Security System WPA PSK Like WEP data is encrypted before transmission WPA is more secure than WEP and should be used if possible WPA PSK is the version of WP...

Страница 25: ...ted Other Wireless Stations This list any Wireless Stations detected by the Access Point which you have not designated as Trusted Name The name assigned to the Trusted Wireless Station Use this when a...

Страница 26: ...field and the Add button will change to Update 3 Edit the address MAC or physical address as required 4 Click Update to save your changes Add Update To add a Trusted Station which is not in the Other...

Страница 27: ...een Old Password Enter the existing password in this field New password Enter the new password here Verify password Re enter the new password here You will be prompted for the password when you connec...

Страница 28: ...e a DHCP Server on your LAN to provide IP addresses to the Wireless clients using this Access Point All traffic received on either the Wireless or LAN interface will be sent over the ADSL connection N...

Страница 29: ...d configured on each PC TCP IP Settings Overview If using the default Wireless ADSL Router settings and the default Windows TCP IP settings no changes need to be made By default the Wireless ADSL Rout...

Страница 30: ...gure 15 IP Address Win 95 Ensure your TCP IP settings are correct as follows Using DHCP To use DHCP select the radio button Obtain an IP Address automatically This is the default Windows setting Using...

Страница 31: ...Your LAN administrator can advise you of the IP Address they assigned to the Wireless ADSL Router Figure 16 Gateway Tab Win 95 98 On the DNS Configuration tab ensure Enable DNS is selected If the DNS...

Страница 32: ...ng TCP IP Settings Windows NT4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 18 Windows NT4 0 TCP IP 2 Click the Properties button to see a...

Страница 33: ...ver Restart your PC to ensure it obtains an IP Address from the Wireless ADSL Router Specify an IP Address If your PC is already configured check with your network administrator before making the foll...

Страница 34: ...Gateway 2 The DNS should be set to the address provided by your ISP as follows Click the DNS tab On the DNS screen shown below click the Add button under DNS Service Search Order and enter the DNS pr...

Страница 35: ...and Dial up Connection 2 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 22 Network Configuration Win 2000 3 Select the TCP IP proto...

Страница 36: ...obtains an IP Address from the Wireless ADSL Router Using a fixed IP Address Use the following IP Address If your PC is already configured check with your network administrator before making the foll...

Страница 37: ...Network Connection 2 Right click the Local Area Connection and choose Properties You should see a screen like the following Figure 24 Network Configuration Windows XP 3 Select the TCP IP protocol for...

Страница 38: ...an IP Address from the Wireless ADSL Router Using a fixed IP Address Use the following IP Address If your PC is already configured check with your network administrator before making the following cha...

Страница 39: ...k and Internet Connections 2 Select Set up or change your Internet Connection 3 Select the Connection tab and click the Setup button 4 Cancel the pop up Location Information screen 5 Click Next on the...

Страница 40: ...changes Fixed IP Address By default most Unix installations use a fixed IP Address If you wish to continue using a fixed IP Address make the following changes to your configuration Set your Default Ga...

Страница 41: ...Security By default Wireless security on the Wireless ADSL Router is disabled If Wireless security remains disabled on the Wireless ADSL Router all stations must have wireless security disabled If Wi...

Страница 42: ...ction If the SSID is not listed for details of dealing with this situation 4 The next step depends on whether or not Wireless security has been enabled on the Wireless ADSL Router If Wireless Security...

Страница 43: ...P Data Encryption If WEP data encryption has been enabled on the Wireless ADSL Router Windows will detect this and show a screen like the following Figure 29 WEP Windows XP To connect Enter the WEP ke...

Страница 44: ...lick Configure to see a screen like the following Figure 31 Wireless Network Properties WEP Configure this screen as follows Set Network Authentication to match the Wireless ADSL Router If the setting...

Страница 45: ...ust match the default key index on the Wireless ADSL Router The default value is 1 Ensure the options The key is provided for me automatically and This is a computer to computer ad hoc network are unc...

Страница 46: ...r it does not matter which network is selected on the screen below Just click the Advanced button Figure 33 Wireless Networks Windows XP You will then see a screen like the example below Figure 34 Adv...

Страница 47: ...to WPA PSK For Data Encryption select TKIP For the Network key and Confirm network key enter the network key PSK used on the Wireless ADSL Router Ensure the option This is a computer to computer ad ho...

Страница 48: ...d If the Broadcast SSID setting on the Wireless ADSL Router has been disabled its SSID will NOT be listed on the screen below Figure 37 Wireless Networks Windows XP In this situation you need to obtai...

Страница 49: ...n like the example below Figure 39 Add Wireless Network 3 Configure this screen as follows Enter the correct SSID as used on the Wireless ADSL Router Remember the SSID is case sensitive so be sure to...

Страница 50: ...ails of WEP and WPA PSK Uncheck the options The key is provided for me automatically and This is a computer to computer ad hoc network Click OK to save and exit 4 This wireless network will then be li...

Страница 51: ...hapter 8 Modem Mode Operation Router Mode Once both the Wireless ADSL Router and the PCs are configured operation is automatic However there are some situations where additional Internet configuration...

Страница 52: ...as set in the Setup Wizard Connection Status This indicates the current status of the Internet Connection Active Connection exists Idle No current connection but no error has been detected This condit...

Страница 53: ...ess Point feature is enabled Broadcast Name This indicates whether or not the SSID is Broadcast This setting is on the Wireless screen Buttons ADSL Details View the details of each VC Virtual Circuit...

Страница 54: ...rrently established If the connection does not exist the Connect button can be used to establish a connection If the connection currently exists the Disconnect button can be used to break the connecti...

Страница 55: ...he remote Gateway or Router associated with the IP Address above DHCP Server The IP address of your ISP s DHCP Server DNS Server The IP address of the Domain Name Server which is currently used Lease...

Страница 56: ...Operation and Status 53...

Страница 57: ...nection Details Fixed Dynamic IP Address Data Fixed IP address Screen Internet IP Address The IP Address of this device as seen by Internet users This address is allocated by your ISP Internet Service...

Страница 58: ...ed Features Overview The following advanced features are provided Internet DMZ Special Applications URL filter Dynamic DNS Firewall Rules Firewall Services Schedule Virtual Servers VPN Internet This s...

Страница 59: ...en required Special Applications If you use Internet applications which use non standard connections or port numbers you may find that they do not function correctly because they are blocked by the Wi...

Страница 60: ...for data you receive If the application uses a single port number enter it in both the Start and Finish fields Finish Enter the end of the range of port numbers used by the application server for dat...

Страница 61: ...can use this feature The URL filter will check each Web site access If the address or part of the address is included in the block site list access will be denied On the Advanced Internet screen selec...

Страница 62: ...ter String To add to the current list type the word or domain name you want to block into the field provided then click the Add button Filter strings should be as specific as possible Otherwise you ma...

Страница 63: ...desired Domain name 3 Enter your DDNS data on the Wireless ADSL Router s DDNS screen and enable the DDNS feature 4 The Wireless ADSL Router will then automatically ensure that your current IP Address...

Страница 64: ...dress Password Enter your current password for the DDNS Service TZO com calls this a key Domain Name Enter the domain name allocated to you by the DDNS Service If you have more than one name enter the...

Страница 65: ...le screen is shown below Figure 49 Firewall Screen Data Firewall Rules Incoming Rules For the default rule this will display Default For rules which you create this will display a radio button which a...

Страница 66: ...Enable Indicates whether or not the rule is currently enabled For rules you have added this column will contain a checkbox allowing you to easily enable or disable the rule Click Save after making any...

Страница 67: ...e Block BLOCK always BLOCK by schedule otherwise Allow Note Any inbound traffic which is not allowed by rules you create will be blocked by the Default rule BLOCK rules are only useful if the traffic...

Страница 68: ...ly it matches this rule The action is determined by this rule Not Match Log traffic which is considered by this rule but does not match The action is NOT determined by this rule Outgoing Rules Outboun...

Страница 69: ...PC or Server on your LAN which will be covered by this rule WAN Users These settings determine which packets are covered by the rule based on their source WAN IP address Select the desired option Any...

Страница 70: ...reen Data User defined Services Services Existing Services This lists any Services you have defined If you have not defined any Services this list will be empty Once you define some services they will...

Страница 71: ...it Service Data Add Edit Service Services Name If editing this shows the current name of the Service If adding a new service this will be blank and you should enter a suitable name Type Select the pro...

Страница 72: ...Disabling this option provides a slight increase in security MTU Size Enter a value between 1 and 1500 Note MTU Maximum Transmission Unit size should only be changed if advised to do so by Technical S...

Страница 73: ...me using a 24 hr clock Local Time Time Zone In order to display your local time correctly you must select your Time Zone from the list Adjust for Daylight Savings Time If your region uses Daylight Sav...

Страница 74: ...Advanced Features 71 Current Time This displays the current time on the Wireless ADSL Router at the time the page is loaded...

Страница 75: ...ferent protocols To Internet users all virtual Servers on your LAN have the same IP Address This IP Address is allocated by your ISP This address should be static rather than dynamic to make it easier...

Страница 76: ...nt PC Server Select the PC for this Server The PC must be running the appropriate Server software For each entry the PC must be running the appropriate Server software If the desired Server type is no...

Страница 77: ...Wireless ADSL VPN Router User Guide 74 From the Internet ALL Virtual Servers have the IP Address allocated by your ISP...

Страница 78: ...have to create one policy for each site you wish to connect to The remote VPN Gateway or client needs to have matching configuration Traffic covered by an enabled policy will automatically be sent vi...

Страница 79: ...The address of the remote VPN endpoint Type The Type is Auto or Manual as explained above Local LAN IP address or subnet on your local LAN Traffic must be from or to these addresses to be covered by...

Страница 80: ...Policy Screen This screen is displayed when you click the Add Auto Policy button on the VPN Policies screen or when you edit an existing Auto Policy It allows you to define or edit an Auto VPN policy...

Страница 81: ...ded as follows Single address Enter an IP address in the IP address field Typically this setting is used when you wish to make a single Server on your LAN available to remote users Subnet address Ente...

Страница 82: ...WAN IP Address your Internet IP address Fully Qualified Domain Name your domain name Fully Qualified User Name your name E mail address or other ID Remote Identity Type Select the desired option to ma...

Страница 83: ...e SA Life Time This setting applies to both IKE and IPSec SAs IPSec PFS Perfect Forward Secrecy If enabled security is enhanced by ensuring that the key is changed at regular intervals Also even if on...

Страница 84: ...y Screen Data VPN Manual Policy Screen General Policy Name Enter a unique name to identify this policy This name is not supplied to the remote VPN endpoint It is used only to help you manage the polic...

Страница 85: ...remote endpoint If this option is selected no additional data is required Single address Enter an IP address in the IP address field This must be an address on the remote LAN Typically this setting i...

Страница 86: ...3 Authentication Select the desired Authentication Algorithm and enter the key in the field provided For MD5 the key should be 16 ASCII characters 32 Hex characters For SHA 1 the key should be 20 ASCI...

Страница 87: ...x number to identify the incoming connection For Auto policies the SPI is automatically generated For Manual policies the SPI must be entered when the policy is configured SPI Out This is a unique ind...

Страница 88: ...n you select the DMZ PC or a Virtual Server This database is maintained automatically but you can add and delete entries for PCs which use a Fixed Static IP Address Config File Backup or restore the c...

Страница 89: ...mple PC Database screen is shown below Figure 62 PC Database PCs which are DHCP Clients are automatically added to the database and updated as required By default non Server versions of Windows act as...

Страница 90: ...ot powered On you will not be able to add it Buttons Add This will add the new PC to the list The PC will be sent a ping to determine its hardware address If the PC is not available not connected or n...

Страница 91: ...if this matches the PC s hostname IP Address Select the appropriate option Automatic The PC is set to be a DHCP client Windows Obtain an IP address automatically The Wireless ADSL Router will allocat...

Страница 92: ...of this the MAC address can NOT be left blank Buttons Add as New Entry Add a new PC to the list using the data in the Properties box If Automatic discovery for MAC address is selected the PC will be s...

Страница 93: ...hown below Figure 64 Config File Screen Data Config File Screen Backup Config Use this to download a copy of the current configuration and store the file on your PC Click Download to start the downloa...

Страница 94: ...uter log data can also be E mailed to your PC Use the E mail screen to configure this feature Figure 65 Logging Screen Data Logging Screen Logs Current Time The current time on the Wireless ADSL Route...

Страница 95: ...cked this will log connections TO this Router rather than through this Router to the Internet Router operation If checked other Router operations not covered by the selections above will be logged Kno...

Страница 96: ...ss Outgoing SMTP Mail Server Enter the address or IP address of the SMTP Simple Mail Transport Protocol Server you use for outgoing E mail My SMTP Mail Server requires authentication To stop spanners...

Страница 97: ...ct the desired option for sending the log by E mail Never default This feature is disabled Logs are not sent When log is full The time is not fixed The log will be sent when the log is full which will...

Страница 98: ...se wait a few seconds and try again Ping Button After entering the IP address click this button to start the Ping procedure The results will be displayed in the Ping Results pane DNS Lookup Internet n...

Страница 99: ...example below Port Number Enter a port number between 1 and 65535 The default for HTTP Web connections is port 80 but using port 80 will prevent the use of a Web Virtual Server on your LAN So using a...

Страница 100: ...enter HTTP followed by the Internet IP Address of the Wireless ADSL Router If the port number is not 80 the port number is also required After the IP Address enter followed by the port number e g HTT...

Страница 101: ...eless ADSL Router and ensure the following Windows 2000 settings are correct Open Routing and Remote Access In the console tree select Routing and Remote Access server name IP Routing RIP In the Detai...

Страница 102: ...ble using the data shown in the Properties area on screen The entry selected in the list is ignored and has no effect Edit Update the current Static Routing Table entry using the data shown in the tab...

Страница 103: ...LAN must use the Wireless ADSL Router s Local Router as the Default Route The entries will be the same as the Wireless ADSL Router s local router with the exception of the Gateway IP Address For a ro...

Страница 104: ...168 2 0 Network Mask 255 255 255 0 Standard Class C Gateway IP Address 192 168 0 100 Metric 3 For Router A s Default Route Destination IP Address 0 0 0 0 Network Mask 0 0 0 0 Gateway IP Address 192 16...

Страница 105: ...e the following Figure 71 Router Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will appea...

Страница 106: ...the IP address does not change but the DHCP server is disabled However your PC will usually retain the IP address provided by the DHCP Server so the connection will be automatically re established Yo...

Страница 107: ...ble are Mode change back to Router mode if desired LAN set IP address mask and gateway This is the same as in Router mode except that the DHCP server is not available while in Modem mode Wireless this...

Страница 108: ...s transparent it does not perform any operations or make any changes to the network traffic passing through it You need to have a DHCP Server on your LAN to provide IP addresses to the Wireless client...

Страница 109: ...alled ADSL Modem Status This indicates the status of the ADSL modem component DownStream Connection Speed Displays the speed for the DownStream Connection UpStream Connection Speed If connected displa...

Страница 110: ...Channel This shows the Channel currently used as set on the Wireless screen Wireless AP This indicates whether or not the Wireless Access Point feature is enabled Broadcast Name This indicates whethe...

Страница 111: ...ress ensure that it is using an IP Address within the range 192 168 0 2 to 192 168 0 254 and thus compatible with the Wireless ADSL Router s default IP Address of 192 168 0 1 Also the Network Mask sho...

Страница 112: ...Router must have the same setting for WEP The default setting for the Wireless ADSL Router is disabled so your wireless station should also have WEP disabled If WEP is enabled on the Wireless ADSL Rou...

Страница 113: ...You can experiment by switching other devices Off and see if this helps Any noisy devices should be shielded or relocated RF Shielding Your environment may tend to block transmission between the wirel...

Страница 114: ...ly function in Infrastructure mode and can communicate only with Wireless Stations which are set to Infrastructure mode BSS ESS BSS A group of Wireless Stations and a single Access Point all using the...

Страница 115: ...standard for encrypting data before it is transmitted This is desirable because it is impossible to prevent snoopers from receiving any data which is transmitted by your Wireless Stations But if the d...

Страница 116: ...ions should use the same SSID ESSID as the Access Point they wish to connect to Alternatively the SSID can be set to any or null blank to allow connection to any Access Point Wireless Security The Wir...

Страница 117: ...nection There are two security modes possible with IPSec Transport Mode the payload data part of the packet is encapsulated through encryption but the IP header remains in the clear unchanged The Wire...

Страница 118: ...e multiple Policies for the same remote site However you should only Enable one 1 policy at a time VPN Configuration The general rule is that each endpoint must have matching Policies as follows VPN E...

Страница 119: ...guration since it is not acting as a VPN endpoint Client PC to VPN Gateway Figure 76 Client PC to VPN Server In this situation the PC must run appropriate VPN client software in order to connect via t...

Страница 120: ...N tunnel will be established and what systems on the remote LAN can be accessed once the VPN connection is established It is possible to have simultaneous VPN connections to many remote sites VPN Exam...

Страница 121: ...Wireless ADSL VPN Router User Guide 118 Configuration Settings Gateway A Gateway A should be configured as shown below Figure 79 Gateway A Configuration...

Страница 122: ...ting LAN A Gateway LAN B Gateway Notes Policy Name Example Example Name does not affect operation Select a meaningful name Remote VPN Endpoint Fixed IP Address 205 17 11 43 Fixed IP Address 202 11 13...

Страница 123: ...ress IP address IP address is the most common ID method Remote Identity WAN IP address WAN IP address IP address is the most common ID method SA Parameters Encryption 3DES 3DES Must match Authenticati...

Страница 124: ...on 1 RJ11 for ADSL line LEDs 13 Power Adapter 12 V DC External Wireless Interface Standards IEEE802 11b IEEE802 11g WLAN 802 11G plus Texas Instruments proprietary enhanced mode Frequency 2 4 to 2 483...

Страница 125: ...enced radio TV technician for help To assure continued compliance any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate...

Страница 126: ...ing to the GPL requirements the open source code and open source license for the source code are available for free download at http global level1 com If you would like a copy of the GPL or other open...

Отзывы: