TRENDnet TEW-829DRU Скачать руководство пользователя страница 107

Страница: 107 / 117

TRENDnet User’s Guide

TEW-829DRU

100

Technical Specifications

Standards



IEEE 802.3



IEEE 802.3u



IEEE 802.3x



IEEE 802.3ab



IEEE 802.1Q



IEEE 802.1X



IEEE 802.11a



IEEE 802.11b



IEEE 802.11g



IEEE 802.11n (up to 400Mbps @ 256QAM)*



IEEE 802.11ac (5GHz

: up to 1733Mbps, 5GHz

: up to 867Mbps @ 256QAM)*

Device Interface



8 x Gigabit LAN ports



2 x Gigabit WAN ports (WAN failover / Load balancing)



1 x USB 3.0 (Samba)



1 x RJ-45 console port



Power switch



Reset button



LED indicators

Performance



NAT (LAN-to-WAN) throughput: 900Mbps



Routing performance: 900Mbps



Maximum concurrent sessions: 32,000



Maximum number of VLANs: 8 (ID: 1-4094)



IPsec VPN (AES-256/SHA-256/LAN-to-LAN) throughput: 90Mbps



SSL VPN (OpenVPN®) Throughput (Blowfish/SHA-1/Bridge): 15Mbps

VPN



SSL VPN Server (Up to 4 tunnels)



OpenVPN Encryption: BF-CBC, AES-128-CBC, AES-256-CBC



OpenVPN HMAC Authentication: SHA1, SHA256



SSL VPN Certificate: RSA



IPsec VPN Server / Site-to-Site (Up to 8 tunnels)



IPsec Encryption: DES, 3DES, AES-128/256



IPsec Authentication: MD5, SHA1, SHA2-256, Certificate: X.509v3



IPsec Key Exchange: IKE: IKEv1/2, Main Mode, RSA, Pre-shared Key, DH Groups
1/2/5/14



IPsec Protocols: ESP (Transport/Tunnel), PFS DH Groups 1/2/5/14, DPD,
Local/Remote ID: IP Address, FQDN



IPsec NAT Traversal



IPsec VPN failover support



PPTP/L2TP VPN Server (Up to 8 tunnels)



L2TP with IPsec VPN Server (Up to 8 tunnels shared with L2TP)



PPTP/L2TP Encryption: MPPE 40-bit, 128-bit, IPsec



PPTP/L2TP Authentication: MS-CHAPv1/2

Networking



WAN Modes: NAT, Classical Routing



NAT Modes: NAT, PAT, One-to-One NAT



WiFi client bridge mode



ISP IPv4 WAN Modes: DHCP, Static IP, PPPoE, PPTP, L2TP



ISP IPv6 WAN Modes: Static, Auto-configuration (SLAAC/DHCPv6), Link-Local,
PPPoE



VLAN ID assignment on WAN interface



Routing: Static, RIPv1/v2, OSPFv/2, routing policies (Up to 20 entries)



Static ARP (Up to 32 entries)



Inter-VLAN Routing (Up to 8 VLANs, 8 IP interfaces)



SSID per VLAN assignment

Содержание TEW-829DRU

Страница 1: ...TRENDnet User s Guide Cover Page...

Страница 2: ...2 interfaces for Internet connectivity 16 IPv6 settings 18 Virtual LANs VLANs 19 Create a port based VLAN 19 Create a port based VLAN with 802 1Q tagging 20 Assigning VLAN IDs to Wireless SSIDs 23 App...

Страница 3: ...ol Security 70 Setting up IPsec site to site VPN PSK 70 Setting up IPsec server VPN PSK with xAUTH 73 Setting up IPsec site to site VPN Failover PSK 76 Secure Socket Layer VPN SSL OpenVPN 81 SSL VPN S...

Страница 4: ...users Dual WAN ports smooth network loading minimize network downtime and allow employees to access your network from the Internet all with a single router This wireless router features advanced mana...

Страница 5: ...igently prioritize voice video and other data traffic to improve network efficiency and overall performance Rack Mount Design Sturdy metal housing with rack mount brackets included Wall Mountable Wall...

Страница 6: ...e TEW 829DRU 3 Product Hardware Features Front Panel View Rear Panel View Ground Point Security Slot RJ 45 Console Port USB 3 0 Port Gigabit LAN Ports 1 8 WAN1 Port WAN2 Port LED Indicators High Gain...

Страница 7: ...on and handling Grounding wire and screw not included Security Slot Allows for an optional cable lock attachment to secure the device to a physical location RJ 45 Console Port Using the included RJ 45...

Страница 9: ...entilation Install the Router on a sturdy level surface that can support its weight or in an EIA standard size equipment rack For information on rack installation see the next section Rack Mounting Wh...

Страница 10: ...osition them for the best WiFi coverage It is recommended that you position all antennas vertically as shown for initial installation and adjust as needed later on 2 Connect a network cable from the W...

Страница 11: ...owser on the connected computer and in the address bar enter http tew 829dru or http 192 168 10 1 and press Enter to access the router web configuration page 7 Enter the default User Name and Password...

Страница 12: ...sword field and re type the new password in the Confirmation field Click Apply to save and commit the changes 10 To change your router s LAN IPv4 address settings click on Network and click LAN 11 Und...

Страница 13: ...the Internet connection settings please contact your ISP for details After you have completed the Internet connection settings click Apply to save and commit the changes 14 To configure your wireless...

Страница 14: ...ame SSID is the name your WiFi clients will need to search and discover when connecting to your router wireless network 16 To change the wireless encryption key for the selected wireless band under In...

Страница 15: ...iguration changes In the router management page pages may include all some or one of the options below Some configuration changes may require a device reboot Reset Clicking this option will reset all...

Страница 16: ...the included wireless sticker in the router package contents or on device label located on the bottom of the router Set your router date and time Administrator System It is recommended to set the rout...

Страница 17: ...ge on page 8 2 Click on Administrator and click Schedule 3 Review the settings below Click Add to add the new schedule to the list and Apply to save and commit the changes Name Enter a name for the ne...

Страница 18: ...the total amount of data received by the LAN interface in MB of packets since the start of the currently displayed uptime o Tx Displays the total amount of data transmitted by the LAN interface in MB...

Страница 19: ...s 192 168 50 1 entering 200 will define the last IP address of the DHCP pool is 192 168 50 200 Lease Time Enter the lease time in hours h or minutes m DHCP clients will hold their IP address settings...

Страница 20: ...HCP Checking this option the enables the DHCP server to distribute IPv4 address settings dynamically to clients If this option is unchecked IPv4 address settings will only be assigned to DHCP clients...

Страница 21: ...ddress settings through DHCP e g AA BB CC DD EE FF IPv4 Address Enter the IPv4 address to assign to the computer or network device for the reservation You can also click the drop down list to select f...

Страница 22: ...on WAN 1 Log into your router management page see Access your router management page on page 8 2 Click on Network and click LAN 3 Under the Static ARP section click the MAC Address drop down list to s...

Страница 23: ...d by the WAN1 WAN2 interface in MB of packets since the start of the currently displayed uptime o Tx Displays the total amount of data transmitted by the WAN1 WAN2 interface in MB of packets since the...

Страница 24: ...ng the highest priority Typically this parameter does not need to be modified Use DNS servers advertised by peer If checked automatically obtains DNS service IP address settings from your ISP If unche...

Страница 25: ...ng Less transmission overhead and smaller routing tables Easier configuration of addressing Note In order to use IPv6 Internet connection settings it is required that your ISP provide you with the IPv...

Страница 26: ...select Enabled to enable communication between the LAN and other VLAN interfaces Click Apply to save and commit the changes Example We will remove ports 5 8 from the default VLAN VID 1 LAN interface s...

Страница 27: ...AN configuration example any computers or devices connecting to ports 5 6 will obtain 192 168 50 x 255 255 255 0 address settings and use the VLAN 50 IP interface 192 168 50 1 as the Internet gateway...

Страница 28: ...e VLAN IP interface configuration under IP Address and Subnet Mask Example In the example below we will enter the VLAN 50 interface IP address as 192 168 50 1 and subnet mask 255 255 255 0 7 Under DHC...

Страница 29: ...necting to the untagged VLAN ports PVID 50 on the managed web smart will obtain 192 168 50 x 255 255 255 0 address settings and use the VLAN 50 IP interface 192 168 50 1 as the Internet gateway and ga...

Страница 30: ...AN VID 1 LAN click the Inter VLAN Routing drop down list and select Enabled and click Apply to commit and save the changes 4 To create a new 802 1Q VLAN under the VLANs section click Add 5 Under VID e...

Страница 31: ...LAN configuration example a managed web smart switch with 802 1Q VLAN support can be connected and pass VLAN 50 traffic between the router and switch and 2 4GHz wireless SSID Any computers or devices...

Страница 32: ...et Mask The IP address and subnet mask assigned to a specific VLAN interface Mode Configures the DHCP server settings for a specific VLAN interface o Disabled Disables DHCP on a specific VLAN interfac...

Страница 33: ...local networks through other routers Generally different networks can be determined by the IP addressing assigned to those networks Generally speaking and for the case of this example your network may...

Страница 34: ...changes RIP enable Check the option to enable the RIP dynamic routing protocol globally on the router In the Overview table you can enable and configure RIP for each interface by clicking Edit next t...

Страница 35: ...ing on the specified interface Network type Select the OSPF network type Select only Point to Point or Point to Multi point if connecting to your networking using PPP protocol otherwise select Broadca...

Страница 36: ...n the total upload download speed specified to ensure the values entered are the absolute maximum value limits entered Default class When QoS is enabled select the default priority class used for all...

Страница 37: ...fic source host IP address from the list or select Custom to define a particular source IP address not listed Destination Host Click the drop down list to select All any IP address a specific destinat...

Страница 38: ...n page 8 3 Click on Services and click on Dynamic DNS 4 Review the DDNS settings below When complete click Apply to save and commit your changes Enabled Check the enabled option to enable dynamic DNS...

Страница 39: ...the standard default WORKGROUP If you change this setting you will need to change the workgroup name on all computers in your network that are allowed access to the USB storage in order to discover i...

Страница 40: ...e 1 Log into your router management page see Access your router management page on page 8 2 Click on Services and click on Wake on LAN 3 Review the settings below When complete click Apply to save and...

Страница 41: ...to to automatically scan and use the best channel available when the device is powered on If you are encountering interference or connectivity issues on the current channel you can select a different...

Страница 42: ...Hide ESSID Checking this option will hide your wireless network name from being discovered by wireless client devices scanning for available wireless networks This will not disable the wireless band...

Страница 43: ...hich cause instability if there are too many neighboring 2 4GHz wireless networks Multiple SSID This tab involves the configuration parameters for the additional SSIDs for a specific wireless band Up...

Страница 44: ...nt unwanted users from accessing your network and network resources personal documents media etc In general it is recommended that you choose the security type with the highest strength and performanc...

Страница 45: ...es will operate at 802 11g 802 11a to connect using this standard 802 11a b g n ac Highest Performance Under This Setting Up to 54Mbps Highest data rate supported by wireless device Encryption Strengt...

Страница 46: ...The following section outlines options when selecting WPA2 EAP or WPA EAP WPA2 EAP Mixed Mode EAP or RADIUS This security type is also known as EAP Extensible Authentication Protocol or RADIUS Remote...

Страница 47: ...Secure your wireless network sections for details configuring wireless security Note You can only select WPA2 PSK or WPA PSK WPA2 PSK Mixed Mode EAP security cannot be applied to the wireless guest n...

Страница 48: ...less network you can plug in the device in the area where you would like to bridge network connectivity to wired client devices using the LAN switch ports 1 8 In this mode the device can only connect...

Страница 49: ...n page 8 2 Click on Network and click on WPS 3 To add a wireless device to your network under WPS Method next to Push Button click the PBC Start button Then push the WPS button on the wireless device...

Страница 50: ...unction enrollee mode instead of registrar mode For security purposes it is recommended to leave this settings unchecked disabled WPS Method Push Button o PBC Start PBC Again Clicking this button will...

Страница 51: ...formance so if your wireless signal is weak place the router in several locations and test the signal strength to determine the ideal position 2 Building materials can have a large impact on your wire...

Страница 52: ...or not Enabling this function will set the router to drop all packets found to be invalid without any response to the sender which can increase security and prevent denial of service DoS attacks Inpu...

Страница 53: ...to allow TCP UDP TCP UDP or Other External Interface Click the drop down list to select the external WAN interface s to allow WAN1 WAN2 or WAN1 WAN2 For example choosing WAN1 will only allow the port...

Страница 54: ...the list and Apply to save and commit your changes Name Enter a name for the new port trigger rule Match Protocol Click the drop down list to select the match port protocol for the service to allow TC...

Страница 55: ...is the source IP address or device IP address to filter Click the drop down list to select a device from the list or enter the local internal IP address of the device to filter or restrict Dst IP This...

Страница 56: ...ion to enable MAC filtering and select Mode Note Please make sure to add the MAC addresses in the list first before clicking Apply Enable Check this option to enable MAC filtering Mode Select the mode...

Страница 57: ...per second for a specific session Burst This value limits the total amount of packets that can be received and stored in buffer memory for a specific session DMZ Host Network Firewall DMZ Host You may...

Страница 58: ...service Public Enter the additional static public Internet IP address you would like to map to the local internal IP address External Interface Click the drop down list to select the external WAN inte...

Страница 59: ...ces to resolve the additional public static IP addresses from the local interfaces e g LAN VLAN Unchecking this option will not allow to devices to resolve the additional public static IP addresses fr...

Страница 60: ...ck this option to enable RADIUS authentication Server IP Address Enter the IP address of the external RADIUS server Server Port Enter the port used for the RADIUS service Note The default port used fo...

Страница 61: ...ys the current status of the WAN interfaces of your router Tracking is enabled using physical link status and L2 based methods but the tracking status displayed refers to the status of IP based link t...

Страница 62: ...only through WAN2 and will only route to WAN1 if the WAN2 primary fails or is disconnected If WAN2 connectivity is restored all Internet traffic will revert back to the primary WAN2 interface o WAN1 F...

Страница 63: ...per functionality of the Router Limits feature Web management filtering content services are offered for complimentary along with account sign up Additional paid upgrades may be available Services may...

Страница 64: ...ur router management page If the pairing code does not match you can click Auto Detect to automatically copy the router pairing code into the field or you can manually enter the correct pairing code A...

Страница 65: ...splays the groups and devices assigned to each group Content filters and scheduling can be assigned for each group By default new devices are assigned to the Guest group New groups can be created and...

Страница 66: ...Ls to block access Exceptions This setting allows you to configure exceptions and allow access Options o Safe Search Enables this setting enforces the use safe search to be enabled for Google and Bing...

Страница 67: ...t This page will display provide support on information on the Router Limits web management system and allow you to submit support tickets if needed You can access and manage your Router Limits accoun...

Страница 68: ...ternet Protocol Security VPN This type of VPN can be used for either Site to Site VPN or Client Server VPN however the most common application for this type is a Site to Site VPN This type of VPN can...

Страница 69: ...n IP address different from the LAN IP is entered PPTP VPN clients will be allowed to access router LAN and not the Internet 5 In the Client IP field enter an IP address range within the same LAN IP s...

Страница 70: ...l IP address If using the same as the router LAN IP address make sure to assign a range different from your LAN DHCP server IP range e g 192 168 10 10 192 168 10 20 MS DNS 1 Enter the IPv4 address of...

Страница 71: ...nd click the Settings icon Start Button Settings icon 2 Click Network Internet 3 Click VPN in the left panel 4 Under VPN click Add a VPN connection 5 Click the VPN provider drop down list and select W...

Страница 72: ...AN network It is strongly recommended to enable L2TP VPN server with IPsec instead of L2TP VPN only due to the higher degree of security offered and supported on most modern computers and mobile devic...

Страница 73: ...L2TP VPN server with IPsec encryption PSK 1 Log into your router management page see Access your router management page on page 8 2 Click on Network click VPN and click the L2TP Server tab 3 Under Se...

Страница 74: ...rview enter a tunnel name and click Add e g L2TPwIPsec 143 Click the Connection type drop down list and select Remote Access Roadwarrior 14 Click the Authentication type drop down list and select L2TP...

Страница 75: ...ients after they establish VPN connectivity This parameter is optional e g 8 8 8 8 DNS Server 2 Enter the IPv4 address of the secondary DNS server to distribute to L2TP VPN clients after they establis...

Страница 76: ...ddress under Status Overview under Network in the IPv4 status section 8 Click the VPN type drop down list and select L2TP IPsec with pre shared key 9 Enter the IPsec pre shared key PSK 10 Click the Ty...

Страница 77: ...ress 10 10 10 10 VPN Router B WAN1 Internet IP Address 10 10 10 20 Make sure the LAN IP network on each VPN router is a different IP subnet Note Changing the LAN IP address of your router will change...

Страница 78: ...ts by click the add icon e g 192 168 20 0 24 8 In the Remote field enter the remote WAN1 IP e g 10 10 10 20 This can also be a domain name ex dynamic DNS host name 9 In the Remote subnet field enter t...

Страница 79: ...wn list and select IPSec IKEv2 PSK 6 For the Local field enter the local WAN1 IP address e g 10 10 10 20 This can also be a domain name ex dynamic DNS host name 7 For the Local subnet field enter the...

Страница 80: ...click Apply e g 1234567890 Setting up IPsec server VPN PSK with xAUTH 1 Log into your router management page see Access your router management page on page 8 2 Click on Network click VPN and click the...

Страница 81: ...s upon connectivity and click Apply e g 192 168 30 0 24 The IP address range subnet should be different from the local LAN IP subnets and also different from the remote client side 9 Under Authenticat...

Страница 82: ...cation hash algorithm used for IPsec phase 1 SHA2 256 bit offers highest degree of security o DH exchange The Diffie Hellman group used for IPsec phase 1 key exchange Group 14 2048 bit offers the high...

Страница 83: ...ses assigned to both routers under the Status Overview page In this example we will assume the following static IP WAN info and LAN IP settings below Example VPN Router A WAN1 Internet IP Address 10 1...

Страница 84: ...unnel1 8 Click the Connection type drop down list and select Site to Site 9 Click the Failover drop down list and select Enable 10 Click the Authentication type drop down list and select IPSec IKEv2 P...

Страница 85: ...the remote LAN IP subnet e g 192 168 210 0 24 and click Apply You can add additional local subnets by click the add icon e g 192 168 30 0 24 Based on the example the network settings will be the follo...

Страница 86: ...check Enable Tracking on both WAN1 and WAN2 and enter an IP address or IP addresses on the Internet to check for connectivity and quickly determine if the WAN interface is up or down e g 8 8 8 8 Set...

Страница 87: ...by click the add icon e g 192 168 30 0 24 14 In the Remote field enter the remote WAN1 IP address e g 172 16 0 1 This can also be a domain name ex dynamic DNS host name 15 Click to add an additional I...

Страница 88: ...nter the city name e g Torrance 8 In the Organization Name field enter your company name e g TRENDnet 9 In the Org Unit field enter the section group or department e g IT 10 In the Email Address field...

Страница 89: ...access to your LAN network and the Internet o Internet Redirect This setting will allow your SSL VPN clients access only the Internet only via full tunneling but no access to your LAN network Cipher...

Страница 90: ...ENDnet User s Guide TEW 829DRU 83 5 At the installation window click Next 6 At the license agreement window review the license agreement and click I Agree 7 At the choose components window click Next...

Страница 91: ...ows adapter click Install 10 At the installation completion window click Next 11 Make sure to uncheck the Show Readme and Start OpenVPN GUI options and click Finish 12 Copy the client configuration fi...

Страница 92: ...the configuration menu 15 After right clicking the icon the menu will appear Click Connect to establish your VPN connection to your router 16 If the VPN connection is successful you will receive the n...

Страница 93: ...etting this parameter is optional for IPsec VPN RSA Local Name Enter the name of the city for the certificate e g Torrance Note Setting this parameter is optional for IPsec VPN RSA Organization Name E...

Страница 94: ...ficate e g US State or Province Name Enter the name of the state or province for the certificate e g California Local Name Enter the name of the city for the certificate e g Torrance Organization Name...

Страница 95: ...ied Enable HTTPS Checking this option will enable secure HTTPS SSL access to the router management page on the selected local interfaces Enable Telnet Checking this option will enable command line int...

Страница 96: ...to start the connectivity test and the results will appear at the bottom of the page o Interface Select the interface used to run the connectivity test Default Uses the internal loopback interface to...

Страница 97: ...e see Access your router management page on page 8 2 Click on Administrator then click on Backup Flash Firmware 3 Next to Restore backup click Browse or Choose File 4 A separate file navigation window...

Страница 98: ...function 1 Log into your router management page see Access your router management page on page 8 2 Click on Administrator click on Reboot and click on Setting tab 3 Click the Automatic reboot by sched...

Страница 99: ...r to factory defaults Administrator Backup Flash Firmware You may want to reset your router to factory defaults if you are encountering difficulties with your router and have attempted all other troub...

Страница 100: ...rade requires router to be connected to Internet When your router has detected a new firmware available online a notification will appear at the top of the router management page You can click the lin...

Страница 101: ...s Do not upgrade the firmware using a wireless connection only using a wired network connection Any interruptions during the firmware upgrade process may permanently damage your router 1 Log into your...

Страница 102: ...tchdog feature Ping Host Interface Enter the IP address to monitor and send ping requests to check connectivity Note You can additional host IP address entries to monitor by clicking o ALL Check all l...

Страница 103: ...y loaded firmware version and date o Serial Number Displays the device serial number o Local Time Displays the current device time and date o Uptime Displays the total amount of time the router has be...

Страница 104: ...such as SSID Channel Bitrate BSSID wireless MAC encryption and multiple SSID status Associated Stations Displays the currently connect wireless client devices Dynamic DNS Displays the current DDNS con...

Страница 105: ...troubleshooting or monitoring purposes 1 Log into your router management page see Access your router management page on page 8 2 Click on Status and click on Routes ARP Displays the router ARP table...

Страница 106: ...Access your router management page on page 8 2 Click on Administrator click on System and click on the Logging tab System log buffer size You can increase or decrease the router buffer size Enter the...

Страница 107: ...penVPN HMAC Authentication SHA1 SHA256 SSL VPN Certificate RSA IPsec VPN Server Site to Site Up to 8 tunnels IPsec Encryption DES 3DES AES 128 256 IPsec Authentication MD5 SHA1 SHA2 256 Certificate X...

Страница 108: ...AT sessions Internal system logging Manual or online firmware upgrade and notification Backup and restore configuration Internal logging Ping watchdog Diagnostic tools Built in ping traceroute and ns...

Страница 109: ...able 1U height Weight 1 24kg 2 74 lbs Disclaimers Maximum wireless signal rates are referenced from IEEE 802 11 theoretical specifications Actual data throughput and coverage will vary depending on in...

Страница 110: ...automatically and click OK Note If you are experiencing difficulties please contact your computer or operating system manufacturer for assistance Q I am not sure what type of Internet Account Type I...

Страница 111: ...ote If you are experiencing difficulties please contact your computer or operating system manufacturer for assistance How to configure your network settings to obtain an IP address automatically or us...

Страница 112: ...etwork settings can be used as general guidelines however it is strongly recommended that you consult your computer or operating system manufacturer directly for assistance on the proper procedure for...

Страница 113: ...r your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter Country Code selection feature to be disabled for products marketed to the US CANA...

Страница 114: ...nement en association avec une autre antenne ou transmetteur Le pr sent metteur radio IC 6337A TEW829DRU a t approuv par Industrie Canada pour fonctionner avec les types d antenne num r s ci dessous e...

Страница 115: ...net shall reserve the right at its expense to repair or replace the defective product or part and deliver an equivalent product or part to the customer The repair replacement unit s warranty continues...

Страница 116: ...IGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY TO THE FULL EXTENT ALLOWED BY LAW TRENDNET ALSO EXCLUDES FOR ITSELF AND ITS SUPPLIERS ANY LIABILITY WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGE...

Страница 117: ......

Результаты поиска

Содержание TEW-829DRU

Отзывы:

TRENDnet TEW-829DRU, Руководство пользователя, Страница: 107 / 117

Результаты поиска

Содержание TEW-829DRU

Отзывы: