Intellinet 524582 manuale d’uso

1 INT-524582-UM-0309-01[...]

2 Introduction ........... ........... ........... ........... ........... ........... ........... . 4 Section 1: Hardware ........... ........... ........... ........... ........... ........... ........... . 7 1.1 Back Panel ........... ........... ........... ........... ........... ........... ........... . 7 1.2 Front Panel ........... ........[...]

3 3.6.3 Special Applications ....... ........... ........... ........... ........... .......... 53 3.6.4 UPnP ........... ........... ........... ........... ........... ........... ........... . 55 3.6.5 ALG ........... ........... ........... ........... ........... ........... ........... . 56 3.6.6 Static Routing ........... ........... .......[...]

4 INTRODUCTION The INTELLINET NETWORK SOLUTIONS Wireless G 4-Port VPN Router lets you experience fast speeds as you surf the Web, download music or photos, and play online games. This wireless router works with 802.11g as well as the older 802.11b products, and also includes a four-port 10/100 LAN switch so you can connect using network cable or go[...]

5 Regulatory Statements FCC Part 15 This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of FCC Rules. These limits a re de s i gne d t o pr ov id e rea so n abl e pro te c t ion ag ai n st har mf u l i nt e rfe re n ce in a residential installation. This equipment generates, uses and [...]

6 Safety This equipment is designed with the utmost care for the safety of those who install and use it. However, special attention must be paid to the da nge rs of el ect ri c s ho ck an d s tat ic el ec tr ici ty whe n wor ki ng wi th el ec tric al equ ipm ent. A ll FC C an d co mput er manu fa ctur er g ui de li ne s m ust th ere fo re be follow[...]

7 1 HARDWARE 1.1 Back Panel The diagram below shows the broadband router’s back panel. The router’s back panel is divided into three sections: LAN , WAN and Reset : Local Area Network (LAN) The router’s four LAN ports (1-4) are where you connect your LAN’s PCs, printer servers, hubs and switches, etc. Wide Area Network (WAN) The WAN port co[...]

8 1.2 Front Panel LED lights inform you of the router’s current status. LED Status Description PWR On Router’s power supply is on. WLAN-G On Wireless LAN has been activated. Off Wireless LAN is disabled. Flashing Wireless LAN has activity (ACT): data being sent. WAN10/100M On WAN port 100 Mbps is connected. Off WAN port 10 Mbps is connected. WA[...]

9 1.3 Setup Diagram The image below depicts a typical setup for a local area network (LAN).[...]

10 2 QUICK SETUP 2.1 Getting Started Once you have your network configured (see the sample setup diagram in Section 1.3 above), you need to set your LAN PC clients so they can obtain an IP address automatically. All LAN clients require an IP address: Just like a street address, it allows LAN clients to find one another. (If you have already configu[...]

11 4. In the Internet Protocol (TCP/IP) Properties window, select “Obtain an IP address automatically” and “Obtain DNS server address automatically.” 5. Click “OK” to confirm the setting. Your PC will now obtain an IP address automatically. Proceed to the Login section below. NOTE: Make sure that the Wireless G VPN Router’s DHCP serve[...]

12 5. In the Internet Protocol (TCP/IPv4) Properties window, select “Obtain an IP address automatically” and “Obtain DNS server address automatically.” 6. Click “OK” to confirm the setting. Your PC will now obtain an IP address automatically. Proceed to the Login section below. NOTE: Make sure that the Wireless G VPN Router’s DHCP ser[...]

13 Login Once you have configured your PCs to obtain an IP address automatically, the Wireless G VPN Router’s DHCP server will automatically give your LAN clients an IP address. By default, the DHCP server is enabled to do this. To see if you have obtained an IP address, see the Appendix near the back of this manual. NOTE: As stated in the proced[...]

14 General Setup (Section 3) If you want to use more advanced features that this router has to offer, then you’ll need to configure the Quick Setup Wizard and the General Setup section. Alternatively, you can just configure the General Setup section, since the General Setup/WAN and the Quick Setup Wizard contain the same configurations. Status In[...]

15 2.2 Quick Setup Wizard If you only want to start using the broadband router as an Internet access device, then you only need to configure the screens in this Quick Setup Wizard section. 2.2.1 Time Zone The Time Zone allows your router to base its time on the settings configured here, which will affect functions such as Log entries and Firewall s[...]

16 Start Daylight Saving Time Select the period in which you wish to start daylight Saving Time. End Daylight Saving Time Select the period in which you wish to end Daylight Saving Time. Click “Next.” 2.2.2 Broadband Type In this section, you have to select one of four types of connections that you will be using to connect your router’s WAN p[...]

17 2.2.2.4 PPTP Your ISP requires you to use a Point-to-Point Tunneling Protocol (PPTP) connection. 2.2.2.5 L2TP Your ISP requires you to use a Layer Two Tunneling Protocol (L2TP) connection. 2.2.2.6 Telstra BigPond This protocol is only used for Australia’s ISP connection. Click “Back” to return to the previous screen. 2.2.2.1 Cable Modem Ch[...]

18 Host Name If your ISP requires a Host Name, type in the host name provided by your ISP; otherwise, leave it blank if your ISP does not require a Host Name. MAC Address Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC’s MAC address that your ISP had originally connected your I[...]

19 Parameters Description IP This is the IP address that your ISP has given you. Gateway IP This is the ISP’s IP address gateway . DNS This is the ISP’s DNS server IP address . Subnet Mask Enter the Subnet Mask provided by your ISP (e.g. , 255.255.255.0) . Click “OK” when you have finished the configuration above. You have completed the con[...]

20 Password Enter the password provided by your ISP for the PPPoE connection Service Name This is optional. Enter the service name if your ISP requires it; otherwise, leave it blank. MTU Enter the MTU value provided by your ISP. Connection Type If you select “Continuous,” the router will always connect to the ISP. If the WAN line breaks down an[...]

21 2.2.2.4 PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by automatically DHCP before connecting to the PPTP server. Use the following IP The ISP give[...]

22 PPTP Gateway If your LAN has a PPTP gateway, then enter that PPTP gateway IP address here. If you do not have a PPTP gateway, then enter the ISP’s gateway IP address above. Connection ID This is the ID given by ISP. This is optional. BEZEQ-ISRAEL Select this item if you are using the service provided by Bezeq in Israel. Connection Type If you [...]

23 2.2.2.5 L2TP Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by automatically DHCP before connecting to the L2TP server. MAC Address Your ISP may require [...]

24 IP Address This is the IP address that your ISP has given you to establish an L2TP connection. Subnet Mask Enter the subnet mask provided by your ISP (e.g., 255.255.255.0). Gateway Enter the IP address of the ISP gateway. User ID Enter the username provided by your ISP for the PPTP connection. Password Enter the Password provided by your ISP for[...]

25 work with some ISPs. Make sure this function can work properly when you use this function the first time, especially if your ISP charges you by time used. Click “OK” when you have finished the configuration above. You have completed the configuration for the L2TP connection. You can start using the router now. 2.2.2.6 Telstra BigPond Select [...]

26 3 GENERAL SETUP Once you click “General Setup” at the Home Page, you should see the screen below. If you have already configured the Quick Setup Wizard you do not need to configure anything thing in the General Setup screen to start using the Internet. General Setup contains advanced features that allow you to configure the router to meet yo[...]

27 3.1.1 Time Zone Time Zone allows your router to reference or base its time on the settings configured here, which will affect functions such as log entries and firewall settings. Parameter Description Set Time Zone Select the time zone of the country you’re in. The router will set its time based on your selection. Time Server Address The route[...]

28 Parameter Description Current Password Enter your current password for the remote management administrator to log in to your router. Note: By default there is no password. New Password Enter your new password. Confirmed Password Enter your new password again for verification. Note: If you forget your password, you’ll have to reset the router t[...]

29 Parameter Description Host Address This is the IP address of the host on the Internet that will have remote management/configuration access to the router. This means if you’re at home and your home IP address has been designated the Remote Management host IP address for this router (located in your company office), then you’re able to config[...]

30 3.2 WAN Use the WAN Settings screen if you have already configured the Quick Setup Wizard section and you would like to change your Internet connection type: Dynamic IP, Static IP Address, PPPoE, PPTP, L2TP, Telstra BigPond, DNS and DDNS. Once you’ve made a selection, click “More Configuration” at the bottom of the screen and proceed to th[...]

31 3.2.5 L2TP Select if your ISP requires the L2TP protocol to connect to the Internet. Your ISP should provide all the information required in this section. (see Section 2.2.2 for more details). 3.2.6 Telstra BigPond Select if your ISP requires the Telstra BigPond protocol to connect you to the Internet. Your ISP should provide all the information[...]

32 Click “ Apply ” at the bottom of the screen to save the above configurations. You can now configure other advance d sections or start using the router (with the advanced settings in place). 3.2.8 DDNS DDNS allows you to map the static domain name to a dynamic IP address. You must get an account, password and your static domain name from the [...]

33 3.3 LAN Use this screen to specify a private IP address for your router’s LAN ports (LAN IP panel), as well as a subnet mask for your LAN segment (DHCP Server panel). Parameter Default Description IP Address 192.168.2.1 This is the router’s LAN port IP address (your LAN clients’ default gateway IP address). IP Subnet Mask Specify a subnet [...]

34 period that the DHCP lends an IP address to your LAN clients. The DHCP will change your LAN clients’ IP address when this time threshold period is reached . Start IP / End IP You can select a particular IP “address pool” for your DHCP server to issue IP addresses to your LAN clients. Note: By default, the range is 192.168.2.100 (Start IP) [...]

35 Click “Apply” at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place). 3.4.1 Basic Settings Set the parameters that are used for the wireless stations to connect to this router. The screens for the six Mode options — “AP, ?[...]

36 Station–Infrastructure mode: AP Bridge–Point to Point mode:[...]

37 AP Bridge–Point to Multi-Point mode: AP Bridge–WDS mode:[...]

38 Parameter Default Description Mode Select one of the six modes shown above. Band Fix the AP at 802.11b or 802.11g mode, or select the B+G mode to allow the AP to select either 802.11b or 802.11g automatically. ESSID Default This is the name of the wireless LAN. All the devices in the same wireless LAN should have the same ESSID. Channel Number 1[...]

39 3.4.2 Advanced Settings Among the advanced wireless LAN parameters you can set are Authentication Type, Fragment Threshold, RTS Threshold, Beacon Interval and Preamble Type. Note: You should not change these parameters unless you know what effect the changes will have on this router. Parameter Description Authentication Type There are two authen[...]

40 RTS Threshold When the packet size is smaller the RTS threshold, the wireless router will not use the RTS/CTS mechanism to send this packet. Beacon Interval This is the interval of time that this wireless router broadcasts a beacon, which is used to synchronize the wireless network. Data Rate This is the rate this access point transmits data pac[...]

41 Parameter Default Description Key Length 64-bit Select “64-bit” or “128-bit.” The larger WEP key length will provide a higher level of security, but the throughput will be lower. Key Format You can use ASCII characters (alphanumeric format; e.g., “guest”) or hexadecimal digits (in the "A-F," a-f" and "0-9" ra[...]

42 3.4.3.2 802.1x Only IEEE 802.1x is an authentication protocol. Every user must use a valid account to log in to this Wireless G VPN Router before accessing the wireless LAN. The authentication is processed by a RADIUS server. This mode only authenticates a user by IEEE 802.1x; it does not encrypt the data during communication. Parameter Descript[...]

43 For the WEP settings, refer to Section 3.4.3.1 (WEP Only). For the 802.1x settings, refer to section 3.4.3.2 (802.1x Only ). 3.4.3.4 WPA Pre-Shared Key Wi-Fi Protected Access (WPA) is an advanced security standard. You can use a pre-shared key to authenticate wireless stations and encrypt data during communication. It uses TKIP or CCMP (AES) to [...]

44 Parameter Description WPA (TKIP) TKIP can change the encryption key frequently to enhance the wireless LAN security. WPA2 (AES) This uses the CCMP protocol to change the encryption key frequently. AES can provide high-level encryption to enhance the wireless LAN security. WPA2 Mixed This will automatically use TKIP or AES based on the other comm[...]

45 Parameter Description WPA(TKIP) TKIP can change the encryption key frequently to enhance the wireless LAN security. WPA2(AES) This uses the CCMP protocol to change the encryption key frequently. AES can provide high-level encryption to enhance the wireless LAN security. WPA2 Mixed This will automatically use TKIP or AES based on the other commun[...]

46 Add MAC address Fill in the "MAC Address" and "Comment" fields for into the list the wireless station to be added and click "Add." This wireless station will then be added into the Current Access Control List that will display. Click "Clear" to empty both "MAC Address" and "Comment" fie[...]

47 Parameter Description Enable/Disable QoS Select to activate the QoS function for the WAN port. De-select to disable it. Add a QoS rule Click “Add” to enter a form of the QoS rule. Click into the table “Apply” after filling out the form and the rule will be added into the table. Remove QoS rules To remove some QoS rules from the table, se[...]

48 Parameter Description Rule Name Enter a name for this rule. Bandwidth Select “Download” or “Upload” and assign a value (in Kbps). You can limit the maximum bandwidth consumed by this rule by selecting “Maximum.” You also can reserve enough bandwidth for this rule by selecting “Guarantee.” Local IP Address Enter the local IP addre[...]

49 3.6 NAT Network Address Translation (NAT) allows multiple users at your local site to access the Internet through a single public IP address or multiple public IP addresses. NAT provides firewall protection from hacker attacks and has the flexibility to allow you to map private IP addresses to public IP addresses for key services such as Web sit[...]

50 Parameter Description Enable Port Forwarding Select to activate the function. Private IP This is the private IP of the server behind the NAT firewall. Note: You need to give your LAN PC clients a fixed/static IP address for Port Forwarding to work properly. Type This is the protocol type to be forwarded. You can choose to forward “TCP” or ?[...]

51 Parameter Description Enable Virtual Server Select to activate the function. Private IP This is the LAN client/host IP address that the public port number packet will be sent to. Note: You need to give your LAN PC clients a fixed/static IP address for the virtual server to work properly. Private Port This is the port number (of the above private[...]

52 added to the Current Virtual Server Table below. To change or correct an entry before adding it, click "Clear" and re-enter. Remove Virtual Server Select the Virtual Server settings you want to remove from the Current Virtual Server table and click "Delete Selected." To remove all Virtual Server settings from the table, click[...]

53 3.6.3 Special Applications Some applications — such as Internet games, video conferencing and Internet telephone — require multiple connections. On this screen, you can configure the router to support multiple connections for these types of applications. Parameter Description Enable Trigger Port Select to activate the function. Trigger Port [...]

54 require multiple connections. Select an application from the list, select a location (1-10) in the “Copy to” selection box, then click “Copy to.” This automatically lists the public ports required for this popular application in the location (1-10) you’ve specified. Add Special Application Fill in the "Trigger Port," "Tr[...]

55 3.6.4 UPnP With UPnP, all PCs in you intranet will discover this router automatically: You do not need to do any configuration for your PC and can access the Internet through this router easily. Parameter Description UPnP Feature Select “Enable” or “Disable” (the default is “Disable”). After you enable the feature, all client systems[...]

56 3.6.5 ALG You can select applications that need Application Layer Gateway for support. Parameter Description Enable Select to enable Application Layer Gateway for any of the listed items. The router will then let that application correctly pass through the NAT gateway. Click “Apply” at the bottom of the screen to save the above configuration[...]

57 Parameter Description Enable Static Routing Select to enable the function (it’s disabled by default). Destination LAN IP Enter the network address of the destination LAN. Subnet Mask Enter the subnet mask of the destination LAN. Default Gateway Enter the next stop gateway of the path toward the destination LAN. This is the IP of the neighbor r[...]

58 3.7 Firewall This router provides extensive firewall protection by restricting connection parameters, thus limiting hacker attacks and defending against common Internet attacks. However, for applications that require unrestricted access to the Internet, you can configure a specific client/server as a Demilitarized Zone (DMZ). Note: To enable the[...]

59 Parameter Description Enable MAC Filtering Select to filter client PC s by MAC addresses. Deny Select for all PCs to be allowed Internet access, except for the PCs in the table below. Allow Select for all PCs to be denied Internet access, except for the PCs in the table below. Add PC Fill in the “Client PC MAC Address” and “Comment” fiel[...]

60 Access Control Add PC: Parameter Description Client PC Description Enter a description for this client PC rule, if desired. Client PC IP Addresses Enter the IP address range you want to apply to this Access Control rule. This is the user’s IP address(es) that you want to set up an Access Control rule for. Note: You need to give your LAN PC cli[...]

61 Port Range You can enter (then click “Add”) up to five port ranges. The router will block clients from accessing Internet services that use these ports. Reset Click “Reset” to clear all fields. Click “Apply Changes” at the bottom of the screen to save the above configurations. You can now configure other sections or start using the r[...]

62 3.7.2 URL Blocking Access can block access to some Web sites from particular PCs by entering a full URL address or just keyword of the Web site. Parameter Description Enable URL Blocking Select to activate the function. Add URL Keyword Fill in the “URL/Keyword” field and click “Add.” You can enter the full URL address or the keyword of t[...]

63 3.7.3 DoS The router's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur, the router can log the events. Intrusion Detection Feature Description Ping of Death Protects from Ping of Death attack. Discard Ping From WAN The router’s WAN port will not resp[...]

64 3.7.4 DMZ If you have a local client PC that cannot run an Internet application (e.g., games) properly from behind the NAT firewall, you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your L[...]

65 3.8 VPN Virtual Private Network (VPN) provides a secure, private communication tunnel between two or more devices across the Internet. These VPN devices can be either a computer running VPN software or a special device like a VPN-enabled router. It allows your home computer to be connected to your office network or can allow two home computers i[...]

66 Parameter Description Enable IPSEC VPN Select to activate the function. Enable NAT Traversal Enabling the NAT Traversal function allows clients behind NAT to connect to this VPN server. Generate RSA Key Click to automatically generate the RSA Public Key. Show RSA Public Key Click to show the RSA public key (below) . Current VPN Connection This t[...]

67 Edit Connection: Parameter Description Enable Tunnel # Select to enable this tunnel setting. Connection Name Enter a name for this connection. Note: Each of the names needs to be unique ( not duplicated ) . Local Site Choose a type for the local site: single site or subnet. Remote Site Choose a type for the remote site: single site, subnet, any [...]

68 tunnel will connect only when you click “Connect.” Local/Remote ID Specify the ID of the local and remote sites. It can be an IP address, domain name, or e-m ail address. Auth Method Choose “PSK” or “RSA” and enter the key for the authentication. Click “Apply Changes” at the bottom of the screen to save the above configurations. [...]

69 Diffie Hellman Choose which Diffie Hellman protocol you want to use for Phase 1. Key Life Time Enter the life time for the key. After this time interval, the key will expire. PFS If you select “On,” the keys that protect data transmission are not used to derive additional keys. Also, seeds used to create data transmission keys are not re-use[...]

70 Parameter Description Enable L2TP Server Click to enable the operation of a virtual private network (VPN) over the Internet. Server IP Address Specify the IP address the L2TP clients communicate with. Note: The Server IP Address can be different from the LAN IP or WAN IP. Client IP Pool Specify the IP address for L2TP clients to use. Authenticat[...]

71 Parameter Description Enable PPTP Server Click to enable the operation of a virtual private network (VPN) over the Internet. Server IP Address Specify the IP address PPTP clients communicate with. Note: The Server IP Address can be different from the LAN IP or WAN IP. Client IP Pool Specify the IP address for PPTP clients to use. Authentication [...]

72 4 STATUS The Status section allows you to monitor the current status of your router: WAN/ LAN interface connections, the current firmware and hardware version numbers, any illegal attempts to access your network, information on all DHCP client PCs currently connected to your network, and more. 4.1 Internet Connection View the router’s current [...]

73 4.2 Device Status View the router’s current configuration settings established in the Quick Setup Wizard and/or General Setup sections, such as the LAN port’s current LAN IP address and subnet mask, and whether the DHCP Server function is enabled or disabled. 4.3 System Log View the operation log of the system, including any event that has o[...]

74 Parameter Description Save Click to save the system log to a local file for further processing. Clear Click to clear the log entries. Refresh Click to get the most updated situation. 4.4 Security Log View any attempts that have been made to illegally gain access to your network. When the system is powered down, the security log will disappear if[...]

75 4.6 Statistics View the statistics of packets sent and received on WAN, LAN and wireless LAN. Click “Refresh” to get the most updated situation.[...]

76 5 TOOLS This section presents three basic, but important, sub-sections: Configuration Tools (to save or restore configuration settings), Firmware Upgrade (to upgrade system firmware) and Reset. 5.1 Configuration Tools This screen allows you to save (back up) the router’s current configuration, which provides added protection and convenience sh[...]

77 Restore Settings Click “Upload” to restore the saved configuration to the router. Restore to Factory Click “Reset” to force the router to perform a power Defaults reset and restore the original factory settings. 5.2 Firmware Upgrade This screen allows you to upgrade the router’s firmware. Download the firmware file to your local hard d[...]

78 APPENDIX This shows you how to manually find your PCs IP and MAC addresses. 1. In Windows, open the Command Prompt program 2. Type “Ipconfig /all” and press <Enter>. • Your PC’s IP address: 192.168.1.77 • The router’s IP address: Default Gateway 192.168.1.254 • Your PC’s MAC address: Physical Address 00-50-FC-FE-02-DB[...]

79 GLOSSARY Default Gateway (Router): Every non-router IP device needs to configure a default gateway’s IP address. When the device sends out an IP packet, if the destination is not on the same network, the device has to send the packet to its default gateway, which will then send it out toward the destination. DHCP: Dynamic Host Configuration Pr[...]

80 11111111.11111111.11110000.00000000, it means the device’s network address is 11011001.10110000.10010000.00000000, and its host ID is 00000000.00000000.00000000.00000111. This is a convenient and efficient method for routers to route IP packets to their destination. ISP Gateway Address: (see ISP). This is an IP address for the Internet router [...]

81 Protocol: A protocol is a set of rules for interaction agreed upon among multiple parties so that when they interface with each other based on such a protocol, the interpretation of their behavior is well defined and can be made objectively, without confusion or misunderstanding. Router: A router is an intelligent network device that forwards pa[...]

82 SPECIFICATIONS Standards • IEEE 802.1d (Spanning Tree Protocol) • IEEE 802.1x (Wireless User Authentication) • IEEE 802.11b (11 Mbps Wireless LAN) • IEEE 802.11g (54 Mbps Wireless LAN) • IEEE 802.3 (10Base-T Ethernet) • IEEE 802.3u (100Base-TX Fast Ethernet) General • LAN ports: 4 RJ45 10/100 Mbps data ports • LAN ports with Auto[...]

83 - Access control based on MAC address - DMZ (demilitarized zone) • Supports UPnP (Universal Plug and Play) • Supports DHCP (client/server) Wireless • Chipset: RTL8225 • Wireless frequency range: 2.412 - 2.484 GHz • Modulation technologies: - 802.11b: Direct Sequence Spread Spectrum (DSSS): DBPSK, DQPSK, CCK - 802.11g: Orthogonal Freque[...]

84 • WLAN Link/Act • WAN Link/Act • WAN 10/100 Mbps • LAN 1-4 Link/Act • LAN 1-4 10/100 Mbps Environmental • Dimensions: 187 (W) x 100 (L) x 30 (H) mm (7.4 x 3.9 x 1.2 in.) • Weight: 0.8 kg (1.7 lbs.) • Operating temperature: 0 – 40°C (32 – 104°F) • Operating humidity: 10 – 90% RH, non-condensing • Storage temperature: -[...]