SMC Networks SMCWBR 14-GM manual

[...]

1 SMCWBR14-GM W ir eless Br oadband Rout er with MIMO T echnology User ’ s Manual[...]

2 Copyright The contents o f this publication may no t be reproduced in any par t or as a whole, stored, transcribed in a n in form ation retrieval syste m, transl ated into an y lan guage, or transmitted in an y form or by any means, mechanical, magnetic, elec tronic, op tical, photoc opy ing , manual, or otherw ise, without the prior written perm[...]

3 T ab le of Contents Introduction Features System Requirem ents Package List Hardware Ports and Buttons LED Indicators Getting S tarted Configuring W ireless Broa d band Ro u ter System Settings W AN Settings LAN Settings W ireless Settings NA T Firewall Dynami c DNS Services UPnP System T ools[...]

4 Introduction Congratulati on s on your purchase of th is outstanding W ireless Broadband Router . This produc t is specifically d esigned for Small Office and Home Office needs. It provid es a complet e SOHO solution for Internet surfin g, and is easy to co nfigure and op erate even f or non-t echnical us ers. Instruct ions for installing a nd c [...]

5 Enable you to expose WWW , FTP and other services on your LAN to be accessible to Inte rnet users. User -Definable Applica tion Sensing T u nnel User can define the attributes to suppor t the special applica tions requiring m ultiple connections, like Internet ga m ing, video conferenc ing, Internet teleph ony and so on, then this prod uct can se[...]

6 VPN Pass-through The router also supports VPN pass-through. 802.1X support ed When the 802.1X function is enable d, the W ireless user must authentica te to this router fi rst to use the Network service. Support WPA-PSK and WPA When the WP A function is enabled, the W ireless user must authen tic ate to this router firs t to use the Networ k ser [...]

7 connection. TCP/IP and NetBIOS network protocol instal led. Internet Browser installed. The SMCWBR 14-G M requires an e xternal 12V , 1A power supply which is inc lude d in the SMCWBR14-GM packa ge. For safe operatio n, please use on ly the power adapter provid ed by SMCWBR14-GM. Package List W ireless broadban d router Installation CD- ROM Power[...]

8 W AN the port where you will connect your cable (or DSL) m odem or Ethernet ro uter . Port 1-4 the ports where you will connect ne tw or ked com puters an d other devices. LED Ind icat ors Front Panel Figure 1-2 Front Panel LED: LED Function Color Sta tus Description Powe r Powe r indication Green On Power is being a pplied to this product. Sta t[...]

9 Link. 1~4 Link status Green On An active station is connected to the corr espon din g LAN port. Blinking The correspon ding LAN port is sending or receiving data. Speed 10/100 Data Rat e Green On Data is tran smitting in 100Mbps on the co rresponding LAN port. Reset T o reset system settings to factory defaul ts Getting S tarted Proced ure for Ha[...]

10 Figure 2-1 Se tup o f LAN and W AN connections for this product. Setup W AN connection Prepare an Ether net cable for connectin g this product to your cable/xDSL modem or Eth ernet backbone. Fig ure 2-3 illustrates the W AN connection. Power on Connecting the power cord to power inlet an d turni ng the pow er switch on , this produc t wil l auto[...]

11 items in sequence: Is the Ethernet ca ble correctly connec te d between this product and your computer ? Configuring W ireless Broadband Router This product provides W eb based configuratio n scheme that is, conf iguring by your W eb browser , such as Netscape Communicator or Inter net Explorer . This appr oach can be adopte d in any MS W indows[...]

12 Activate your br owse r , and disa ble the proxy or add the IP addre s s of this pr oduct into the exceptions . Then, type this product’ s IP addre ss in the Location (for Ne tscape) or Address (for IE) field and press ENTER. For example: http://1 92.168.2.1 . After the conn ection is established, you will see the web user interface of this pr[...]

13 This option prov ide s the func tion for ob se rvin g thi s produc t’ s working status: W AN Port Status. If the W AN port is assigned a dynamic IP , there may appear a “ Rene w ” or “ Release ” button on the Sidenote c olumn. Y ou can click this bu tton to renew or r elea se IP m anually . Wiz a rd[...]

14 Setup W izard will guide you through a ba sic configuration pr ocedure step by s tep. Set the basic W ireless Parameters and P ress ”Next >” Setup Wizard - Select Time Z one[...]

15 Select the W AN Access T ype Set your username an d password. Y ou might select fr om the 3 diffe rent conn ec tion profiles. Be car eful with Always onlin e if you do not have a flatrat e-connection![...]

16 System Settings Tim e Zo ne Password Se ttin gs[...]

17 Enable / Disable Remote Managemen t W AN Setup This option is primar y to enable th is produc t to work proper ly . The setting items and the web[...]

18 appearance de pend on the W AN type. Choose cor rec t W AN type before you start. St a t i c I P A d d r e s s : ISP assigns you a static IP address. W AN IP Address, Subnet Mask, Gateway , Primary and Secondary DNS: enter the proper setti ng pr ovided by your ISP . Dynamic IP Address : Obtain an IP address from ISP automatica l ly . Host Nam e:[...]

19 the password, kee p it empty . Connectio n ID: optional. Input the con nection ID if your IS P requires i t. Maximu m Idle T ime: the ti me of no act ivity to d isconnect your P PTP session. Set it to zero or enable Auto-reconnect to disabl e this feature . If Auto-reconnect is ena ble d, this product will connect to ISP automatically , after sy[...]

20 DNS Set the prima ry and Secondar y DNS server(s) as assigne d by your ISP . If you are using dif f erent DNS servers than your ISP , the Internet response-times might be slower and some sites mig ht beco me inaccesib le.[...]

21 LAN & DHCP Server The settings of a TCP/IP environment include host IP , Subnet Mask, Gateway , and DNS configurations. It is not easy to manua ll y configure all the computers and dev ices in your network. For tunately , DHCP Server provides a rather sim ple approach to ha ndle all these sett ings. This product supports the fun cti on of DH[...]

22 W ireless Settings W ireless settin gs al low you to set the w ireles s configuration item s. Network ID (SSID) : Network ID is used for identifyi n g the W ireless LAN (WLAN). Client stations can roam freely over this product and other Access Points that have the same N etwork ID. (The factor y setting is “ default ”) Channel : The radio ch[...]

23 RADIUS Server : IP address or the 802.1X server’ s domain-name. RADIUS Sh ared Key Key value sha red by the RAD I US server and this router . This key value is consistent with the key value in th e RADIUS server . WP A-PSK Select Encryp tion and Pre-share Key Mode. If you select H EX, you have to fi ll in 64 hexadecimal (0, 1, 2…8, 9, A, B?[...]

24 WP A Check Box w as used to switch the funct ion of the WP A. When the WP A function is enab led, the Wi r e l e s s u s e r m u s t authenticate to this router first to use the Netw ork service. RADIUS Server IP address or the 80 2.1X server ’ s domain-name. Encrypt ion and RADIU S Shared Key If you select HEX , you have to fil l in 64 hexade[...]

25 the length of Pr e-share key is from 8 to 63. Key value sha red by the RAD I US server and this router . This key value is consistent with the key value in the RADIUS server . WP A-PSK /WP A2-PSK Select Encryp tion and Pre-share Key Mode. If you select H EX, you have to fi ll in 64 hexadecimal (0, 1, 2…8, 9, A, B…F) digits, if AS CII, the le[...]

26 Blue Line: W ireless B l a c k L i n e : W i r e If the Settings are ok, the client1 an d client2 can get I P from DHCP server . Of AP1.Then Client 1 and Client2 can get inform at ion each ot her . AP1 Setting : AP1 ÅÆ AP2 (Rem ote Mac: 00-50-1 8-00-0 f-fd) AP1 ÅÆ AP3 (Rem ote Mac: 00-50-1 8-00-0 f-fc )[...]

27 AP2 Setting : AP2 ÅÆ AP1 (Rem ote Mac: 00-50-1 8-00-0 f-fe ) AP3 Setting: AP3 ÅÆ AP1 (Rem ote Mac: 00-50-1 8-00-0 f-fe )[...]

28 NA T V irtual Server This product’ s NA T firewall filters out u nre cognized packet s to protect your Intranet, so a ll hosts behind this product are invisi ble to the outside world. If you wish, you can m ake some of them accessible by enab ling the V irtual Server Mapping. A virtual server is defined as a Service Port , and all requests to [...]

29 Some applicat i ons require multiple c onnections, like Inter net games, V ideo conferencing, Internet teleph on y , etc. Because of the fire wall function, these app lications cannot work w it h a pure NA T router . The Special App lications feature allo ws some of t hese applic ations to wo rk with this prod uc t. If the mechanism of S pecial [...]

30 Firewall Parent al Contro l This option lets you enable / disable web sites / services by setting up rules.[...]

31 MAC Filter This option le ts you control the W ireless clients connec tiong to your MIMO W ireless Router . Each on of them will be checked before letti ng them connect wirelessly . This option d oes not work for wired client PCs. Y ou can select from two differe nt policies: Allo w : will let all compu ters access the netw ork, except the ones [...]

32 URL (W ebsite) Blocking URL B locking will block LAN computer s to connect to pre-defined W ebsites. The major dif ference betwee n “Domain filter” a nd “URL Blocking” is Domain filter require user to input suf fix (like .com or .or g, etc), while URL Blocking require use r to input a keyword on ly . In other words, Dom ain filter can bl[...]

33 Advanced Fir ewall Se ttings Enable the Advanced F irewall Protectio n if you want: Hacker attack monito ring a nd logging Advanced System Log Email Notification Enable the Dis card Ping from W AN option if you don’ t want to be seen o n the Internet. Y ou can also enable / disable V PN protocols to pass t hrough your NA T Firewall Set up your[...]

34 Demilita rized Zone (DMZ) This option le ts you open all por ts to one workstation be hind your Router . Be careful with this option, because it let’ s everybody access that partic ular PC fr om ever yw here.[...]

35 Dynamic DNS Services T o host your server on a changing IP address, you have to use dy namic domain name service (DDNS). So that anyone wishing to reach your hos t only needs to know the name of it. Dynam ic DNS will map the name of your host to your current IP address, which changes each tim e you conn ect your Internet service provider . Befor[...]

36 UPnP The Universal Plug and Play architec t ure offer s pervasive pe er- to- peer network con nec tivi ty of PCs of all fo rm factors, int elligent appli ances, and wirel ess devices. UPnP en ables seamless proximity networ kin g in addi tio n to contro l and data trans fer among networked de vices in the home, office and everywhere in betw ee n[...]

37 Configuration T ools Firmwar e Upgrade Y ou can upgrade firmw are by clicki ng Apply button.[...]

38 Backup Settings Y ou can backup yo ur settings by clic king the Back up Se ttin g button and save it as a bin file. Once you want to restore these settin gs, please click Firm war e Upgrade button an d use the bin file you saved. Reset T o Factory Defaults Y ou can also re se t this product to fac tory default by clicking the Reset to default bu[...]

39 Appendix A TCP/IP Configuration f or W indows 95/98 This section i n troduces you how to ins tall TCP /IP protocol into your pe rsonal computer . A nd suppose you h ave been successfu lly installed one network car d on your persona l computer . If not, please refe r to your network car d manual. Moreover , the Section B.2 te lls you how to set T[...]

40 The TCP /IP protocol sha ll be listed in the Networ k window . Click OK to com plete the i nstall procedure and restart your PC to enab le t he TCP/I P protocol. A.2 Set TC P/I P Protoc ol for W orking with NA T Router Click St a r t button and cho ose Setti ngs , then click Contr ol Panel . Double cli ck Network icon. Select the TCP/IP line tha[...]

41 Click Pr operties button to set the TCP/IP protocol for this NA T Router . Now , you have two setting metho ds :[...]

42 Select Obtain an IP address automatically in the IP Address tab. Don’ t input any value i n the Gateway ta b.[...]

43 Choose Disable DNS in the DNS Configuration tab. Configur e I P manually Select Specify an IP address in the IP Address tab. The default IP address of this pr oduct is 192.168.2.1. So please use 192. 168.2.xxx (xxx is between 1 and 253) for IP A ddr ess field and 255.255.255. 0 for Subnet Mask fiel d.[...]

44 In the Gat eway tab, add the IP address of this product (default IP is 192.168.2.1) in the New gateway fiel d and click Add button. In the DNS Configuration tab , add the DNS values wh ich ar e provided by the ISP into DNS[...]

45 Server Search Order field and click Add button. Appendix B 802.1x Settin g Figure 1: T esting Environment (U se W indows 2000 Radius Server) 1 Equipment Details PC1:[...]

46 Microsoft W indows XP Professional without Service Pack 1. D-Link DWL-650+ wireless LAN adapte r Driver ver s ion: 3.0.5.0 (Driver da te: 03.05.2003) PC2: Microsoft W indows XP Professional with Service P a ck 1a. Z-Com XI-725 wireless LAN USB adapt er Driver ver s ion: 1.7.29.0 (Driver date: 1 0.20.2001) Authentica tio n S erver : W indows 2000[...]

47 Enable the 802.1X (check the “Enable chec kbox“). Enter the RADIUS server IP . Enter the sha red key . (The key shared by the RADIU S server and DUT). W e will chang e 802.1X encrypti on key le ngth to fit the vari able te st conditio n. Setup Network adapter on PC 1. Choose the IEEE8 0 2.1X as the authentication m ethod. (Fig 2) Note. Figur[...]

48 Figur e 2: En able IEE E 802. 1 X acce ss con t r ol[...]

49 Figure 3: Smart card or certificate pr operties 4. W indows 2000 RADIUS serv er Authentication testing: 4.1DUT authenticate PC1 us ing certificate. (P C2 fo llows the same test procedures.) Down load and i nstall the ce rtificat e on PC1. (Fi g 4) PC1 choose the SSID of DUT as the Access Point. Set authentication type o f wireless client and RAD[...]

50 Figur e 4: Certificate inf ormation on PC1 Figur e 5: Authenticating[...]

51 Figure 6: Authentication success 4.2 DUT authenticate P C2 using PEAP -TLS. PC2 choose the SSID of DUT as the Access Point. Set authentication type o f wireless client and RADIU S server both to PEAP_TLS. Disabl e the wire less conne ction and en able again . The DUT will send the user's certifica te to the RADI US server , and then send th[...]

52 Appendi x C WP A-PS K and WP A W ireless Route r : LAN IP: 192.168.2.1 W AN IP: 192.168.122. 216 Radius Server: 192.1 68.12 2. 1 UserA : XP W ireless C ard:T i-1 1g T ool: Ody ssey Client Manag er Refer to: www .funk.com Download: h t tp://www .funk.com/News&E vents/ody_c_w pa_preview_p n.asp[...]

53 Or Another Configuration: WPA-PSK In fact, it is not ne cessary for this funct ion to authentica te b y Radius Server, the clien t and wireless Router authenticate by the mselves. Method1: 1. Go to the Web m anage r of Wireless Router to confi gure, like below: 2. Go to Odyssey Client Manager , first choose “Netw ork” Before doing that, you [...]

54 Open “Adapter s” 3. Add and edi t som e settings:[...]

55 4. Back to Connection: Then Select “Connec t to network” Y ou will see: Method2:[...]

56 1. First, patch windows XP and have to install “Service pa ckage 1” Patch: http://www .microsoft.co m/downloads/d etails.aspx?dis playlang= en&FamilyID=5039e f4a-61e0-4 c44-9 4f0-c25c9de0a ce9 2. Then reboot. 3. Setting on the router and client: Router: Client: Go to “Network Connectio n” and select wireless ada pter . Choose “V ie[...]

57[...]

58 WP A: For this function, w e need the ser ver to authentica te. This function is like 802.1x. The above is our environmen t: Method 1: 1. The U serA or UserB have to ge t certificate from Radius, first. http://192. 168.122.1/certsrv account : fae1 passwd : fae1[...]

59 2. Then, Install this cer tifica te and fin ish. 3. Go to the Web m anage r of Wireless Router to confi gure, like below: 4. Go to Odyssey Client Mana ger , choose “Profiles” and Setu p Pr ofile na m e as “1”[...]

60 Login name and pa ssword are fae1 and fa e1. Remember that you ge t certificate from Radi us in Step1. 5. Then Choose “ certificate” like above.[...]

61[...]

62 6. Then go to A uthentication and first Remove EAP/ TLS and Add EAP/TLS again.[...]

63 7. Go “Netwo rk” and Select “1” and ok[...]

64 8. Back to Connect ion an d S elec t “12 3kk. If successfully , the wireless client has to authenticate w ith Radius Ser ver , like below: 9.Resu lt: Method 2: 1. The U serA or UserB have to get certificat e from Radius,first.[...]

65 http://192. 168.122.1/certsrv account:fae1 passwd:fae1 2. Then I nstall this certificate and finish. 3. Setting on the router and client: Router:[...]

66 Client: Go to “Network Connectio n” and select wireless ada pter . Choose “V iew available W ireless Networks” li ke be low: Advanced Æ choose “123kk” Select “W irelessCA and Ena b le” in T rusted root certificate authority:[...]

67 Then, if the w irele ss client wants to assoc iate, it has to re quest to authentica te. Appendix D F AQ and T roubleshoo ting Reset to factory Defau lt There are 2 m ethods to reset to default. Restore with RESET b utton First, turn of f the router and pr e ss the RESET button in. And then, power on the router and push the RESET button down unt[...]

38 T esla Irvine, CA 92618 Phone: (949) 679-8000 TE CHNICAL SUPPOR T F r om U.S.A. and C anada (2 4 hours a da y , 7 day s a week ) (800) SMC -4- Y OU Phn: (94 9) 6 7 9-8000 F ax: (94 9) 67 9-1481 ENGLISH T echnical S upport information a vailable at www .smc.c om FRENCH Inf ormations Support T echnique sur www .smc. com DEUTSCH T echnischer Suppor[...]