Sitecom WLR-4002B Bedienungsanleitung

WLR -4002B[...]

T A BLE OF C ONTENTS I NTRODUCTION 7 1 KEY FEA TURES 8 2 P ACKAGE CONTENTS 9 3 CAU TIONS 10 3.1 U SAGE C AUTIONS 10 3.2 P OWER 10 3.3 R EPAIR 10 3.4 D ISPOSING OF THE R OUTER 10 3.5 O THERS 10 4 PRODUCT LA YOUT 11 B ACKLABEL 12 LED D EFINITION 13 5 NETWORK + S YS TEM RE QUIREMENTS 14 6 WLR-4002B PL ACEME NT 14 7 SETUP LA N, W AN 15 8 PC NETWORK AD [...]

11 CONFIGURA TION WIZARD 30 12 WIRELESS SETTINGS 32 W IRELESS F UNCTION 32 B ASIC S ETTINGS 33 A DVANCED S ETTINGS 34 S ECURITY 36 ACL 42 WPS 43 13 FIREW ALL SETT INGS 45 DMZ 46 D ENIAL OF S ERVICE (D O S) 47 A CCESS 48 URL BLOCK 50 14 ADV ANCED SETTINGS 51 P ORT F ORWARDING 52 V IRTUAL S ERVER 54 S PECIAL A PPLICATION S 56 A PPLIC A TION L AYER G [...]

P ROFILE S ETTING 97 PPTP 100 L2TP 101 IPS EC 102 L2TP OVER IPS EC 106 U SER S ETTING 107 E XAMPLE OF CONFIGURING IPS EC S ITE TO S ITE ARCHITECT U RE 108 16 TO OLBOX 112 S ITECOM C LOUD S ECURITY 112 P ASSWORD CHANGE OPTIONS 117 T IME Z ONE 118 R EMOTE M ANAGEMENT 119 F IRMWARE U PGRADE 120 B ACKUP S ETTINGS 121 R ESET 122 DDNS 123[...]

[...]

125 Revision 2.0 © Sitec om Europe BV 2012 Note: All the i nformatio n containe d in t his manua l was correct at the t ime of publi cation. However , as our e ngi neers are always updat ing and i mprovin g the product, your device’s software may have a sli ghtly differ ent appearance or mod ifi ed functiona lity t han presented in th is manual.[...]

7 Introduction Congratulations on your purchase of the WLR -4 002B Wi reless Giga bit VPN Router 300N. The WLR-4002B is com pl iant wi th 802. 11n and up to 6 times faster than standard 802.11 g based routers whil e sti ll being compatib le wit h 802.1 1g & 802.11 b d evices. The WLR -40 02B i s not only a W ireles s A ccess Point, but als o do[...]

8 1 Key Features Features Advantages Incredi ble Data Rate up to 300Mb ps* Heavy data payloads such as MPEG video streaming IEEE 80 2.11n C ompliant and backwards compati ble with 802.1 1b/g Fully Interoperable with IEEE 802.11b / IEEE802.11g compliant device s with legacy protection Seven 10/10 0/1000 M bps gi gabit Switch Ports (Auto-Crossover) S[...]

9 2 Package Content s Open the package carefull y , and make sure that none of the items l isted below are missi ng. D o not d iscard the packing materials, in case o f return; the unit must be shipp ed back i n its origi nal pac kage. 1. The W LR -40 02B R out er 2. A 1 10V~24 0V to 1 2V 1 A Switchi ng Power Adap ter 3. A Q uick Insta ll Gui de 4.[...]

10 3 Cautions This router ’ s desi gn and manufa cturer has your safety in mi nd. In or der to safely an d effect ively us e this ro uter , p lease read the foll owi ng before usage. 3.1 Usage Cautions The user sho uld n ot modify t his router . The enviro nmental tem per ature should be w ithin + 5 ~ + 35 degre es Cels ius. 3.2 Power The router?[...]

1 1 4 Product Layout Port Description Power connector Connect the 12V DC ad apter to this port LAN (1~7) Connect your PC’s or network devi ces to th is po rt WAN Connect your ADS L/Cable mod em to this port[...]

12 Backlabel The backla bel d escribes the IP address , log in detai ls, SSI D, security co de and WPS button f unctio nality . Button Description OPS BUTT ON Press 1 - 5 seconds f or O PS mode Press 10-15 seconds t o reset th e router Press 15+ S econds to reset the rout er to factory defaults.[...]

13 LED Definition From left to r ight. Port Descr iption LAN ( Blue ) Shows the ca ble is conn ected. LAN ( Blue ) Shows the ca ble is conn ected. LAN ( Blue ) Shows the ca ble is conn ected. LAN ( Blue ) Shows the ca ble is conn ected. WAN ( Blue ) Shows the ca ble is conn ected. WiFi ( Blu e ) Shows WiF i activ ity . Po w er ( Red ) Shows the dev[...]

14 5 Net w ork + Sy stem Requirement s T o b egi n using the WLR -4 002B, make sure you meet t he foll owin g as minimum requirements: • PC/Notebook. • Operating System – M icrosoft W indows X P/Vista/Seven • 1 Free Ethernet port. • WiFi card/USB dongl e (802. 11 b/g/n) – opti onal. • External xDSL (A DSL) or C able modem wi th an Eth[...]

15 7 Setup LAN, W AN WAN connection:[...]

16 LAN connectio n :[...]

17 8 PC Net w ork Adapter setup W indow s XP • Enter [Start Menu]  sele ct [Control pan el]  select [Netw ork]. • Select [L ocal Area Con nection]) icon=> select [pro perties][...]

18 • Select [I nternet Protocol (T CP/IP)] =>Cl ick [Prop erties]. • Select t he [General] tab. The router supports [DHCP] functi on, pl ease select both [Obtain an IP address automati cally] and [Obtain DNS server address automati cally].[...]

19 W indow s V ist a/Se ven • Enter [Start Menu]  sele ct [Control pan el]  select [V iew network status and tasks] -> s elect [M anage network co nnections]. • Select [L ocal Area Con nection]) icon=> select [pro perties][...]

20 • Select [I nternet Protocol V ers ion 4 ( T C P/IPv4)] =>Cli ck [Propertie s]. • Select t he [General] tab. The router sup ports [DH CP] functio n, please se lect both [Obtain a n IP address automaticall y] and [Obtai n DNS server addr ess automatical ly].[...]

21 9 Bringing up t he WLR-4002B Connect the sup plie d power-adapter to the power i nlet port and co nnect it to a wall o utlet. Sw itch on the pow er v ia the sw itch o n the back of the device. The WLR - 4002B automatical ly enters the se lf-test phase. Durin g self-test phase, the Power LED w il l be lit cont inuous ly t o indi cate that th is p[...]

22 3. T ype user nam e and passw ord (default username is ‘admin’ , the password can be fo und on th e back of he router). 4. Click OK . 5. Y ou wi ll s ee the home page of t he WLR -4 002B. The System status sect ion al lows you to monit or the current status of your rout er the U P ti me, ha rdware informatio n, ser ial number as well as f ir[...]

23 LAN settings The LAN tab g ives you the opportunity to c hange the IP sett ings of t he WLR - 4002B. Click <Ap ply> at the bottom of t his scr een to save any change s. IP address 192. 168.0 .1. It i s t he router’s LAN IP address (Y our L AN cli ents default gateway IP address). IP Subnet Mask 255. 255.25 5.0 S pecify a S ubnet Mask f o[...]

24 Lease T ime Forever . In the L ease Time setting you can spec ify the tim e period that the DHCP lends an IP address t o your LAN c lients. The DHCP w il l change your LAN cli ent’s IP address wh en this time thre shol d period is reache d. IP Address Po ol Y ou can sel ect a particu lar IP address range for your DHCP server to issu e IP addre[...]

25 Device Stat us View the Broadband rou ter ’ s current confi guration setti ngs. D evice Status displ ays the configuration setti ngs yo u’ve confi gured in the Wizard / Basic Settings / Wirel ess Sett ings se ction.[...]

26 Internet S tatus This page disp lays w hether the WAN port i s co nnected to a Cable/DSL connecti on. It al so dis plays the ro uter’s WAN IP ad dress, Subnet M ask, and ISP Gateway as well as MAC address, the Primary DNS . Press t he Renew button to renew your WAN IP address.[...]

27 DHCP Clien t Status This pag e s hows al l DH CP clients (LAN PCs) currently c onnected to y our network. The tabl e shows the ass igned IP addres s, MAC address and e xpiration ti me for each DHCP leas ed c lient. Us e the Refres h b utton to update th e availabl e informatio n. Y ou can check Enable Static DHCP IP . It i s possib le t o add mo[...]

28 WLR-4002B Log View the operation l og. This page shows th e cu rrent system l og o f the Broadband router . It disp lays any event o ccurred after system start up. At the bott om of t he page, th e system l og can b e saved <Save> to a local fil e f or further proces sing or the system l og can be c leared <Clear> or i t can be refre[...]

29 Statistics Shows the counters of packets sent an d receive d on WAN, LAN & WLAN .[...]

30 11 Configuration Wizard Click Wizard to confi gure the router . T he Setup w izard wil l now be di splayed; check that the m odem i s connect ed and cl ick N ext. Select yo ur country from the Cou ntry list. Sel ect your i nternet provid er . Cl ick Next.[...]

31 Dependi ng on th e ch osen pr ovider , you may need to enter your u ser name and passwor d, MAC address or hostname i n the foll owing wind ow . After you have entered the c orrect inf ormation, cl ick Nex t . Click AP PLY to compl ete the confi guration.[...]

32 12 Wireless Settings Y ou can set parameters that are used for the wirel ess statio ns to con nect to t his router . The parameters inc lude Mode, ESSID, Channel Number a nd Asso ciated Client. Wireless Function Enable or Disab le Wire less f unction here. Cl ick Apply and wait for mod ule to be ready & l oaded.[...]

33 Basic Settings Mode Allo ws you to set AP or WDS m ode. Band Allows you to s et the AP fixed at 802. 11b or 802. 11g m ode. Y ou can also s elect B+G mode to a ll ow 8021 1b an d 802.1 1g cl ients at th e same tim e. Enable SSID # Allow s you to enable u p to four SSIDs for th is router . SSID This is th e name of t he wirel ess s ignal whic h i[...]

34 Advanced Se ttings This tab al lows you to set the a dv a nced wirele ss o ptions. The opti ons i ncl uded are Authenti cation T ype, Fragment Threshol d, RTS Thres hold, Beacon Interval, an d Preambl e T ype. Y ou s houl d n ot c hange these parame ters unl ess you know what ef fect th e changes w il l have on the r outer . Authentication T ype[...]

35 Beacon Interval i s the i nterv al of tim e that thi s wirel ess router broadc asts a beacon. A B eacon is used t o synchronize the wir eless network. Data Rate The “Data Rate” is th e rate that this access point u ses to transmit data packets. T he acces s point will use t he h ighest possi ble se lected transmission rate to transmit the da[...]

36 Security This Acc ess Point provid es compl ete wirel ess LA N security f unctio ns, i ncluded are WEP , IEE E 8 02.11x, IE EE 80 2.11x wi th W EP , WPA w ith pre-share d key and WPA w ith RA DIUS. With t hese security functi ons, you can prevent your wirel ess LAN from ill egal ac cess. Pl ease make s ure yo ur wire less stati ons use the same [...]

37 Disable When yo u ch oose to disabl e en cryption, it is very insec ure to op er ate the router .[...]

38 Enable 802.1 x Auth IEEE 802.1x is an a uthenticat ion protocol. Every user must use a valid account to l ogin to t his Acces s Point bef ore access ing th e w ireless LAN. The authenticati on i s processed by a RADIU S s erver . Thi s mode on ly a uthenticat es users by IEE E 802. 1x, but it does not encrypt t he data d uring commu nicatio n.[...]

39 WEP When you sele ct 6 4-bit or 128-bit WEP key , you have to enter WE P keys to encrypt data. Y ou ca n gen er ate t he key by yourself and enter it. Y ou can enter four W EP keys and s elect o ne of th em as a default key . Then the router can receive any packets encrypted by one of t he fo ur keys. Key Length Y ou can select the W EP key l en[...]

40 Click “ Apply ” at th e bottom of t he screen t o s av e the a bove conf igurations. Y ou can now confi gure oth er secti ons b y c hoosi ng Contin ue, or choos e App ly to appl y the sett ings a nd reboot the devic e. WPA Pre-sha red Key Wi-Fi Protected A ccess ( WP A ) is an advanced security standard. Y ou can use a pre-shared key to auth[...]

41 WPA-Radius Wi-Fi Protected Acc ess ( WPA ) is an advanced security standard. Y ou can use an external R ADIUS server to authe nticate wi reless stations and pr o vi de the session key t o e ncrypt data d uring communic ation. It uses T KIP or CCMP ( AES ) to change t he encryption key freq uently . Press Apply button wh en you are done.[...]

42 ACL This wirel ess router sup ports MAC Address Control, w hich prevents unauthorized cl ie nts from acces sing your w irele ss network. Enable wireless access c ontrol Enabl es the w ireless access contro l funct ion Adding an address into the list Enter t he "MAC Ad dress" and "Co mment" of the wir eless station to be add e[...]

43 WPS Wi-Fi Protecte d S etup (WPS) i s th e si mplest way to estab lish a c onnection between the w ireless cli ents and the wir eless router . Y o u don’ t hav e to sel ect the encrypti on m ode and fi ll i n a long e ncryption passp hra se every time wh en you try to setu p a w ireless connectio n. Y ou only nee d to press a button on both wi[...]

44 WPS Check the b ox t o ena ble WPS functi on and u ncheck it to di sable the WPS funct ion. WPS Current S tatus If the wi reless s ecurity (encryption) f unction of t his wirel ess rout er is pro perly set, y ou’ll s ee a ‘Config ured’ messag e here. Otherwise, you’ll see ‘UnConfi gured’ . Self P in Code This i s the WPS PIN c ode of[...]

45 13 Fire w all Setti ngs The Broadband router provides extensi ve f irewall protection by restricti ng connecti on parameters, thus li mitin g the risk of hacker attacks, a nd d efendi ng against a wide array of common Internet attacks. H owever , for appli cation s that require u nrestricted acce ss to the Intern et, you can conf igure a s pecif[...]

46 DMZ If yo u have a clie nt PC that cannot run an Internet appli cation (e. g. Games) properly from behind the NA T fi rewall, th en you can ope n up t he firewal l restricti ons to unrestric ted two-wa y Intern et a ccess by de fini ng a DMZ Host. The DMZ f unction al lows you to re-direct all packets goi ng t o your WAN port IP address to a par[...]

47 Denial of Servic e (DoS) The Broadba nd router's fi rewall can bl ock common hacker attacks, in cludi ng Denial of Servi ce, Pi ng of Deat h, Port Scan and Sync Flood. If Internet attacks occur the router ca n lo g the events. Ping of Death Protections from P ing of Death attack Discard Ping From WAN The router’ s WAN port wi ll not respo[...]

48 Access Y ou can r estrict users from acce ssing certain Intern et ap plicat ions/servi ces (e.g. I nternet we bsites, email , FTP etc.), Access Control al lows users to defi ne the traffi c type permitte d in your LAN . Y ou can control whi ch PC c li ent can have access to these services . Deny If you select “Deny” t hen all c lients wil l [...]

49 Selecte d". If you want to r emove all PCs from the table, just cl ick the "De lete All" button. Filter client PC by MAC Check “Enable MAC Filteri ng” to enab le MAC Filteri ng. Add PC Fi ll in “Cl ient PC MA C Address” and “Comment” of the PC that is allowe d to acce ss th e Internet, a nd t hen c li ck “ Add ” . [...]

50 URL block Y ou can b lock ac cess to some W eb sites from particular PCs by enter ing a f ull URL address or j ust keywords of the Web site. Enable URL Blocki ng Enabl e/disab le URL Block ing Add URL Keyword Fill in “UR L/K eyword” a nd then cli ck “ A dd” . Y o u can e nter the ful l URL a ddress or t he keyword of th e web site y ou w[...]

51 14 Ad v a nced Settings Network A ddress T ranslation (NA T) a llow s mu lti ple users at your l ocal sit e to access t he I nternet through a singl e Public IP Ad dress or mu ltip le P ubli c IP Addresses. NA T provid es F irewall protectio n from hacker attacks and has the flexi bil ity to all ow you to map Private IP A ddresses to Pub lic IP [...]

52 Port Forwarding Po rt Forwarding a llow s you to re- direct a part icular range of s ervice p ort numbers (from t he Internet/WAN Po rt) to a par ticular LAN IP address. It hel ps you to host servers behin d the router NA T f irewal l. Enable Port Forwa rdi ng Ena ble Port F orwardi ng Private IP This is th e private IP of th e server behi nd th[...]

53 Remove Port Forwarding If you want to r emove a Port Fo r warding setting from the "Current Port Forwa rd ing T a ble", s elect the P ort F orwa rdi ng setting that you want to remove in th e ta ble and th en cli ck "D elete Se lecte d". If you want to remove a ll Port Forwarding setti ngs from th e t able, j ust cl ick "[...]

54 Virtual Serv er Use the V irtual Server functi on w hen you want dif ferent servers/cli ents i n your LAN to ha ndle d ifferent service/Internet ap plicat ion type (e. g. Email, FTP , W eb server etc.) from the Internet. Computers use numbers calle d port numbers to reco gnize a partic ular se rvi ce/Internet a ppli cation type. T he Virtual Ser[...]

55 Comment The descri ption o f thi s setting . Add Virtual S erve r Fi ll in t he "Pri v ate IP", "Private P ort", "T ype", “Publ ic Po rt ” an d "Comment" of t he sett ing to be add ed and then cl ick "A dd". Then this V irtual Server s etting w il l be ad ded into t he "Current Virtual S[...]

56 Special Applica tions Some app lic ations re quire multip le c onnecti ons, such as Internet games, video Conf erencin g, Int ernet te lepho n y and others. I n this sect ion you can confi gure the router t o su pport mult iple co nnectio ns for these ty pes of appli cations. Enable T rigger Port Enable the Sp ecial A ppl ication functio n. Trig[...]

57 Popular applications This s ection l ists t he more po pular a ppli cations that require multi ple connect ions. S elect a n a ppli cation from the P opular Appl ications sel ection. O nce you have sel ected an a ppl ication, se lect a locatio n (1-1 0) in the C opy to selecti on b ox and t hen cl ick t he Copy t o b utton. This wil l a utomatic[...]

58 Application Laye r Gateway In the cont ext of compu ter networkin g, an appl icati on-level gateway (also know n as ALG or app licati on l ayer gatewa y ) consists of a sec urity component that augments a f irewall or NA T emp loyed in a computer ne twork. It all ows customize d NA T travers a l f ilters t o be p lugge d into t he gateway to sup[...]

59 UPnP With UPnP , al l PCs in you I ntranet w ill disc over this rout er aut omaticall y , so you don’ t have to conf igure your PC and i t can easi ly acce ss the Inter net through thi s router . UPnP Feature Y ou can enable or Disable the UP nP feature here. Aft er you enable the UPnP feature, al l cl ient systems that support UPnP , l ike Wi[...]

60 QoS QoS can let you clas sify Int ernet app licatio n traffic by source/desti nation I P address and port number . Y ou can as sign pr iority for each type of a ppli cation and reserve bandwi dth for it . Th e packets of appl ication s wit h h igher priority wil l al ways go f irst. Low er pri ority app licati ons wil l g et ban dwidth after h i[...]

61 Edit a QoS rule Select the rule you want to edi t and clic k “Edit ” , t hen enter the d etail form of the QoS rule. Cli ck “ App ly ” after e ditin g t he form and the rule wi ll be saved. Adjust QoS rule p riority Y ou can se lect the r ule and cl ick “Move Up” t o make it s priority high er . Y ou also can select the rul e an d c [...]

62 15 VPN A Virtual Private Networ k (VPN) provid es a secure c onnectio n between t wo or more computers or protected netw orks over the p ubl ic Internet. It provides authenti cation to e nsure that the informatio n is g oin g to and from t he correct parties a nd securi ty to protect th e inf ormation from vi ewin g or tamperi ng en route. T he [...]

63 Using the W izard to Configu re the WLR-4002B for a PPTP VPN t unnel. 1. In the T op M enu on t he right side, cli ck VPN . 2. In the su bmenu, c lick Wizard to ad d a VPN prof ile. 3. Click Ne xt to create a VPN prof il e. 4. In the Name f ield , enter a name for the PPTP V PN tunnel . This name is for reference p urposes. Cl ick Next to contin[...]

64 5. Click PP TP and cli ck NEXT to cont inue. 6. Complete t he fol lowi ng fi elds : User Name Enter a name for aut henticat ion. Password Enter a passw ord for a uthentication. Server IP Enter any private IP address on a dif ferent s ubnet than the LAN IP a ddress of t he comp uter connected behind t he WLR - 4002B.(When WLR400 2 is on defa ult [...]

65 8. Enable t he VPN pol icy , and the n cli ck App ly to s av e the V PN profi le.[...]

66 Using the W izard to Configu re the WLR-4002B for L2T P over IPSec VPN tunnel. 1. In the T op M enu on t he right side, cli ck VPN . 2. In the su bmenu, c lick Wizard to add a V PN profi le. 3. Click Ne xt to create a VPN prof il e. 4. In the Name f ield , enter a name for the L 2TP VPN tunn el. Th is name i s for reference p urposes. Cl ick Nex[...]

67 6. Complete t he fol lowi ng fi elds: User Name Enter a name for aut henticat ion. Password Enter a passw ord for a uthentication. Server IP Enter any IP address on a di fferent su bnet than t he LAN IP ad dress of the computer conn ected behi nd the WLR -4002B.(W hen WLR40 02 i s on defau lt setti ngs, the LAN IP addre ss is 192.16 8.0. 100. In[...]

68 8. Enable the VPN policy , and then cl ick Ap ply to save the VPN profi le.[...]

69 In the f ollow ing examples i t i s assumed that t he WLR -4 002B i s pla ced beh ind a bridge d modem. Th is means t hat the Router wi ll re ceive a p ubli c IP add ress on the WAN side. T he WAN/ Internet IP address can be found on the I nternet status page of the WLR-4002B. If the WAN IP add ress of the WLR - 4002B i s not a p ubli c IP addre[...]

70 Configuring a Mic rosoft Window s 7 VPN Clie nt 1. Click t he Start button an d open t he Control Panel . 2. From the Control Panel , sel ect Network and Internet .(If your c ontrol panel v iew has been set to Icons you can d irectly go to step 4)[...]

71 3. From Network and internet , select Network and Sharing center . 4. Under Network and Sharing Center , select Setup a new connect ion or network .[...]

72 5. Click Co nnect to a work p lace , and cl ick Use my internet connect ion (VPN) .[...]

73 6. Comp lete the foll owin g fie lds: Internet Address Enter the WLR -4 002B WAN IP address. Destination name Enter a name f or the VPN cl ient. W e recomme nd to sel ect: Do n’t co nnect now. Just set i t up so I can connect later . Clic k next to cont inue. 7. Comp lete the foll owin g fie lds: User name Enter the username used t o lo g onto[...]

74 8. When the foll owing screen ap pears, cli ck the C lose button to cl ose the VPN connecti on setti ng. 9. Select C hange adapter se ttings on t he left sid e of the w indow.[...]

75 10. Select t he VPN con nection you ju st set, ri ght-cli ck VPN Connecti on, and select P roperties. 11. Go to the Se curity tab an d confi gure the fo ll owing s etting s : Under the T ype of VPN , select th e Protocol t hat has be en set i n the W LR - 4002B, Poi nt to poi nt tunneling protocol(PPTP) or Layer 2 Tunneling Protocol with IPsec ([...]

76 12. Go to Network and Sharing Center on the bottom-ri ght of th e win dows. Under VPN Conn ection c lick C onnect.[...]

77 Configuring a Mic rosoft Window s XP VPN Clie nt 1. Click t he Start button an d open t he Control Panel . 2. From the Control Panel , Clic k on Network Connections .[...]

78 3. Click on Create a network from th e left side of the w indow. 4. Click Ne xt to contin ue to set up the VPN cl ie nt.[...]

79 5. Select C onnect to the n etwork at my workplace and cli ck Next to continu e. 6. Select V irtual Private network connecti on and cl ick Next t o contin ue.[...]

80 7. Enter a Company name , this name is o nly for reference pur poses. 8. Enter the Hostname , t his sh ould be the WLR-4002B WAN IP address an d cli ck Next to conti nue.[...]

81 9. Click Fini sh to conti nue, you may choose to add a s hortcut for thi s connecti on on th e Desktop by cli cking th e checkb ox before you c lick Finish . 10. Click on Properties .[...]

82 11. Click on the Security T ab from the to p in t he wi ndow and s elect Advanced, click Settings to cont inue.[...]

83 12. Configur e the fol low ing sett ings: Under Data encryption , se lect Opti onal encryption ( connect even if no encryptio n) Check Un encrypted p assword (PAP) Check Ch allenge Han dsh ake Authenticati o n Protocol (SPAP) Uncheck Microsoft CHAP (MS-CHAP) Check Microsoft CHAP Version 2 (MS-CHAP v2) Clic k OK to conti nue. 13. Click Y es to co[...]

84 14a. If the VPN T ype of the tunn el you have set up i n the WLR - 4002B i s L2T P over IPSec Y ou have also entered a Sh ared key in the W LR -400 2B(see step 7 of chapter Using the Wizard to Configure the WL R-4002B for L2TP over IPSec for reference ) . Click on IPSec Settings… 14b. Check Use pre-shared key for authe ntication. Key , Enter t[...]

85 Configuring a Mac OS VP N Client 1. S elect System Pref erence s. 2. On the System preferences panel, Cli ck Network .[...]

86 3. Click on the + s ign on the bottom left. 4. Select t he VPN int erface.[...]

87 5. Under the V PN Type dropdown , se lect th e option that corresponds t o the VPN Type you have confi gured i n the WLR-4002B. Enter a nam e for thi s profil e (thi s name is for reference purpose o nly) 6. Complete t he fol lowi ng fi elds: Server address Enter the WAN IP address of the W LR -400 2B. Account Name Enter the name used to log ont[...]

88 7. Complete t he fol lowi ng fi elds: Password Enter the passw ord that bel ongs to t he Accou nt name which you have entered in step 6 of thi s Guid e. Shared Key If the VPN T y pe of the V PN tunnel you have set u p in the WLR -4 002B i s L2TP over IPSec Y ou have also entered a Shared key i n the WLR - 4002B(se e step 7 of chapter Using the W[...]

89 9. Select t he check box Send all traffic ove r VPN connectio n. Clic k OK to cont inue. 10. If the VPN t unnel is alr eady connect ed, cl ick Disconnect and Connect again f or the changes made i n step 9 to take eff ect.[...]

90 Configuring a V PN client on iOS 1. Click Settin gs on the Spri ngboard. 2. Select G eneral on from the panel of the l eft si de and Cl ick on Network.[...]

91 3. Click on VPN . 4. cli ck on Add VPN Configuration…[...]

92 3. Select the VPN Type that corresp onds to t he VPN Type you have confi gured i n the WLR-4002B. Complet e the fol low ing f ield s: Description Enter a name for your V PN connecti on, this name is for reference p urposes only . Server Enter the WLR-4002B WAN IP address Account Enter Enter the name used t o log onto the VPN tunnel(thi s must b [...]

93 4. Set the Sw itch to ON to connect to the VPN Network.[...]

94 Configuring a V PN client on Androi d 1. Click on Settings. 2. cli ck on More.. f rom the Setti ngs men u on the upper l eft. Then Cl ick on V PN.[...]

95 2. Cl ick on Add VPN Net work. 3. Select the VPN Type that corresp onds to t he VPN Type you have confi gured i n the WLR-4002B. Complete t he fol lowi ng fi elds: Description Enter a name for your V PN connecti on, this name is for reference p urposes only . Server Enter the WLR-4002B WAN IP address Account Enter the name us ed to l og onto the[...]

96 4. Click on the VPN network you have just create d to conn ect.[...]

97 Profile Sett ing This page all ows you to Add, E dit and D elete V PN profi les. Add cli ck here if you w ish to manually a dd a new V PN profi le. Edit to edi t an exi sting profil e, sel ect one f rom the l ist b y select ing th e correspondi ng radio b utton and c lick ‘ Edit ’ . Click “ Ap ply ” to save the settin gs and ap ply the c[...]

98 Add Users to a n existing P rofile Click on Profile Setting . Select the Profile for whi ch you w ish to mod ify us er settin gs and cl ick on E dit . Then Cl ick on th e protocol name you sel ected to edit.[...]

99 From here all current users t hat you have created wi ll be show n. In the Available box exist ing users are be d ispl ayed that do not hav e access to th is VPN T unnel yet. The Member box di spl ays users that alread y have access to t his VPN T unnel. T o Add or remove users to the VPN T un nel, c li ck the on t he username you wish you A dd [...]

100 PPTP The Point-t o-Point Tun neli ng Protocol (PPTP) is a method for impl ementin g virtual private netw orks. PPTP uses a control c hannel over TCP and a GR E tunnel operating t o encapsul ate PPP packets. The PPTP spec ificat ion d oes not d escribe encryptio n or authenti cation f eatures and reli es on t he PPP protocol bei ng tunne led to [...]

101 L2TP In computer networking , Layer 2 T unne ling Protocol (L 2TP) is a tu nneli ng protocol u sed to s upport virtu al pri va t e networks (VPNs). It does not provide any encryption or confi dential ity by itself; it rel ies on an encrypti on protoco l that it passes w ith in the t unnel to provide privacy . General This page all ows you to co[...]

102 IPSec IPSec (Internet Prot ocol S ecurity) i s a protocol suit e for securi ng Intern et Protocol (IP) commu nicatio ns by authent icati ng and e ncrypting each IP packet o f a communicati on ses sion. IPSec als o inc ludes protocols f or estab lis hing m utual authenticat ion between agents at the begi nning of the ses sion an d negoti ation o[...]

103 SA (Security Association) A Securit y Associ ation (S A) is th e establ ishment of shared secur ity attribute s between tw o network e ntities to supp ort secure commu nicati on. An SA may incl ude attri butes such as: cryptographic a lgorit hm and mod e; traffic e ncryption key; and parameters f or the network data to b e passe d over the co n[...]

104 IPSec (Phase 2) P ro posal Protocol Select ES P (Encaps ulating S ecurity Payl oad) or AH (Authenticati on Header) for traffi c through t he VPN. • AH (Authentication Hea d er) to pro vide co nnectionl ess integrit y and data ori gin authenticat ion for I P datagrams and to provide protection a gainst re play attacks. • ESP (Encapsulating S[...]

105 Advanced This page all ows you to confi gure advanced V PN settin gs. Nat Traversal Enabli ng NAT Traversa l allow IPSec traffi c from thi s endpoi nt to traverse throu gh the translat ion process during NA T. The remote VPN endp oint must a lso support thi s feature and it must be enab led to function properly over the VPN. Dead Peer Detect io[...]

106 L2TP over IPS ec L2TP over IPSec V PNs enabl e a busi ness to transport data over the I nternet, whil e sti ll mai ntaini ng a hi gh l evel of security to protect data. You can use this ty pe of se cure conne ction f or small or remote offi ce cl ients t hat need acces s to the cor porate network. Yo u can als o use L 2TP over IPSec VPNs f or r[...]

107 User Setting This page all ows you to maintain V PN users. Add a user Enter the d esired name and password, for verif icatio n th e password has to be entered twi ce. C lick ‘Add’ to add the user to the current VPN user ta ble Reset This button wi ll cl ear all values from the i nput boxes. Current VPN user table sho ws all existi ng V PN u[...]

108 Example of config uring IPSec Site t o Site archi tectur e In this gui de we g ive an exampl e how to set up a IPSec Si te to Si te archite cture. The values i n thi s example are only t o give an impressio n of how to do the confi guration.[...]

109 Configuring Locati on B 1. Click on VPN i n the top menu then c lick Wizard i n the s ubmenu. Click Ne xt to conti nue. 2. In the Name f ield , enter a name for the IPS ec VPN tunn el. Th is name i s for reference purposes. Click Ne xt to conti nue. 3. Click I PSec and cl ick NEXT to conti nue. 4. Click Si te to Site and cl ick NEXT to contin u[...]

1 10 5. Complete t he fol lowi ng fi elds : Security Gateway Type Choose the type of Security Gateway you wish to use(In thi s exampl e we use IP address. Security Gateway Enter the WAN IP address of the remote VPN Server ( In our exampl e this is the WAN IP address of t he WLR -400 2B in Lo cation A, 77.193 .12.2 0) Remote Address Enter an IP addr[...]

1 1 1 7. Enable the VPN policy , and then cl ick Ap ply to save the VPN prof ile . 8. Repeat these steps 1~7 for the other VPN server . 9. Once Both VPN rout ers have been com pletely set u p. Click on Status in t he submen u of the V PN menu and c lic k Connect to establ ish the IPS ec Sit e to Si te connect ion.[...]

1 12 16 T OOLBOX Sitecom Cloud Se curity Antivi rus s oftware a lone i s not saf e enough. Y ou can now benefit f rom additi onal built-i n securi ty in your modem or router . Protect all devic es i n your home network against cybercrime wh ile browsi ng. Acti v ated automatical ly , your network and d evices are better secured t han ever before. Y[...]

1 13 The Sitecom C loud Secu rity service offers the f oll owin g protecti on optio ns: 1 Anti-Malware 2 Anti-Phish ing 3 Pro tecti on against unsafe we bsites 4 Advertisement b locki ng With the protection of unsafe we bsites acti vated the S itecom Cloud Security wil l always chec k if a w ebsi te is safe. If it i s not saf e it wi ll inf orm you[...]

1 14 If you w ish to c hange your security opti ons or to extend y our s ubscript ion at any time, op en http://www.sitecomc loudse curity .com from your web browser . Y ou w il l be asked for a username and passwo rd. T hese can be f ound on the backlabel on the bottom of your S itecom router or modem. If the login succee ded you can cl ic k o n ?[...]

1 15 Or click ‘License’ to renew your subscript ion.[...]

1 16 If you w ish t o disabl e S itecom C loud S ecurity a t any time, open the we bpage of your Sit ecom produ ct and log in w ith th e sup plie d credential s (thes e can be found on t he back label on the b ottom of your Site com devi ce). Go to T ool box and sel ect “Sit ecom Cloud Securi ty” . Click t he “ Disable ” radio b utton and c[...]

1 17 Password change options Y ou can change the password req uired t o lo g i nto t he broadband router's system web- based manag ement. Passwords can contain 0 to 12 a lphanumer ic characters, and are case sens itive. Current P assword Fil l i n th e c urrent pa ssword to a ll ow c hangin g to a new password. New Password Enter your n ew pas[...]

1 18 Time Zone The Time Zone al lows your rout er to base it s time on the setti ngs conf igured here, whi ch wi ll affect f unctions such as Lo g entri es and Fir ewall sett ings. Set Time Zone S elect t he time zone of the c ountry you ar e currently in. The router wil l set its t ime based on your sel ectio n. Time Server Address Y ou can set an[...]

1 19 Remot e Manag ement The remote management functi on allow s you to desi gnate a host in the Internet t he ab ility t o co nfig ure the Broadband router from a re mote s ite. Enter the d esignated host IP A ddress i n the Host IP Address f iel d. Host Address This is the IP address of the host in t he I nternet that w il l have management/conf [...]

120 Firmware Upg rade This page all ows you to upgrade the router ’ s f irmware. Enable automatic firmware update When enabled the router wil l periodi call y check if a new f irmware is availabl e, I a new f irmware is detected the router wi ll give a n otificat ion. Firmware Upgrade This t ool al lows you to up gr ade th e Broadband r outer’ [...]

121 Backup Settings The Backup scree n allo ws you to save (Backup) the r outer’ s current confi guration settings. When you save the c onfig uration s etting (Backup) you can re-l oad t he sav e d c onfiguratio n i nto t he router through the Restore select ion. If extreme probl ems o ccur you can use the Restore to Facto ry Defaults s electi on[...]

122 Reset Y ou can reset the router’s system shoul d an y prob lem exist. Th e reset function essentia lly re-boots your router’s system.[...]

123 DDNS DDNS al lows yo u to m ap the stati c domai n name to a dynami c IP address. Y ou must get an acco unt, passw ord an d your static domai n name fro m the DDNS service provid ers. This router sup ports DynDNS, TZO and other common DDNS s ervice providers. Enable/Disable Enabl e or di sable th e DDNS f unction of this router Provider Sel ect[...]

124[...]

125[...]

126 Parts of the firmware of the WLR -4002B Wireless VPN Gigabit Router are subject to the GNU general public license. Appendix A : Licensing Info rmation This product includes third-party software licensed under the terms of the GNU Gener al Public License. . Y ou can modify or redistri bute this free software under the terms of the GNU Gen eral P[...]

127 No W arranty The free software included in this product is distributed in the hope that it will be useful, but WITHOUT ANY LIABILITY OF OR ANY WARRANTY FROM THE LICENSOR. Appendix B: GNU GENERA L PUB LIC LICENSE V ersion 2, June 1991 Copyrigh t (C) 1989, 1991 Free Software Foundation, Inc. 59 T emple Place - Suite 330, Boston, MA 02111-1307, US[...]

128 any medium, provided that y ou conspicuously and appropriately publish on each cop y an appropriate copyright notice and disclaim er of warranty; ke ep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. Y ou may charge [...]

129 grants you pe rmission t o modify or distribute the Program or its derivative works. T hese actions are prohibited by law i f you do n ot accept this License. T herefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copyin[...]

130 INCLUDING, BUT NO T LIMITED TO, THE IMPLIED WARRANTIES OF MERC HANT ABILITY AND FITNESS FOR A PAR TICULAR PURPOSE. THE ENTIRE RI SK AS TO THE QUALITY AND PERFORMANCE OF THE PRO GRAM IS WI TH YOU . SHOULD THE PROGRA M PROVE DEFECTIVE, YOU ASSUME THE C OST OF ALL NECESSARY SERVICING, REP AIR OR CORRECTIO N. 12. IN NO EVENT UNLES S REQUIRED BY APP[...]