LevelOne WBR-6603A manuale d’uso

LevelOne User Ma nual Ver. 1.0 WBR-6603 150 Mbps Wireless A DSL2+ Mod em Router[...]

2 Safety FCC WARNING This equipment may gene rate or use radio frequency energy. Changes or modifications to this equipment may cause harmful inte rference unless the modifications are expressly approved in the instruction manual. The use r could lose the authority to operate this equipment if an unauthorized change or modification is made. This eq[...]

3 General Public License This product incorporates op en source code into the software a nd therefore falls unde r the guidelines governed by the Gene ral Public License (GPL) agreement. Adhering to t he GPL requirements, the open source code a nd open source license for the source code are available for free d ownload at http://global.level1.com .[...]

4 Table of Content TABLE OF CONTENT ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ...... 4 1. INTRODUCT ION ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ........ ......... ...[...]

5 1. Introduction Congratulations on your pu rchase of LevelOne W BR-6603 150Mbps Wireless ADSL2+ Modem Router . This product is specifica lly designed for Small Office and Home Office needs. It provides a complete SOHO solution for Internet surfing, and is easy to configure and operate even for non- technical users. Instructions for installing and[...]

6 2. Unpacking and Setup This chapter provides the package contents and setup information for the 150Mbps Wireless ADSL2+ Modem Router . Features  Integrates 4-Port 10/100Mbps Fast Ethernet Switch with Auto-MDI/MDIX  Compatible with IEEE 802 .11n standard and up to 150Mbps data rates  Allows several users to acce ss Internet through Networ[...]

7 3. Har d w are In stallation Front View 1) Status • A steady blinking light indicates the device is read y 2) ADSL • A solid light indicates the ADSL port is connected . 3) WLAN • A solid light indicates the Wireless LA N is turned on and ready for use. • Off indicates W ireless LAN is turned off. • LED blinks during wireless data trans[...]

8 Rear View 1) Antenna  2dBi fix antenna. 2) LAN Ports (1~4)  Connect Ethernet devices su ch as computers, switches or hubs. 3) DSL Port  The DSL port is the connect ion for the RJ-11 telephone cable to the ADSL terminator connection . 4) Power Jack  Receptor for the supplied power adapte r[...]

9 Hardw are installation ste ps Decide where to place y our Wirele ss A DSL Router You can place your W ireless ADSL Router on a desk or other flat surface. For optimal performance, place your W ireless ADSL Router in the center of your office (or your home) in a lo cation that is away from any potential source of interfe rence, such as a metal wal[...]

10 4. Check Your Network Settings 1. Please make sure your PC can get IP address automatically so the WBR-6603 can communicate with your PC during configuration. • Select “Control Panel” > “Network Connections”. • Right click the “Local Area Connection” and choose “Properties”. • Select the TCP/IP protocol for your network [...]

11 5. Getting Start Configurati on Wizard Once properly co nfigured, the W BR-6603 150Mbps Wireless A DSL2+ Mod em Router wi ll obtain and assign IP add ress inform ation automatically. Configuration settings can be established through the W eb-Based Configuration Menu. Open a web browser (Inte rnet Explorer/Firefox/Safari) and type in the IP Add r[...]

12 Setup W izard wi ll guide you th rough a basic configuration procedure step by step. Press Next to begin. Step 1: You can change system password in this p age, set up your system password. Press “Next”[...]

13 Step 2: Setup W AN Type of your internet, then press “Next” Step 3: If you choose W AN type of B ridge mode with NAT - Dynamic IP address, Setup the LAN I P, Host Name information, and W AN Mac address, t hen press “Next” If you choose W AN type of B ridge mode with NAT - Static IP address, s etup the LAN IP, WAN IP, Gateway, Subnet Mask[...]

14 Step 4: If you choose W AN type of PPP over E thernet, please fill in PPPoE service in formation which is provided by your ISP. After setup, press “Next” Step 5: Set up your W ireless settings, you can Enable/Disable wireless, setup, setup your Network SSID information, and configure wireless channel in this page. After setup, press “Next?[...]

15 Step 6: Check all settings is correct, then click “Apply Setting” button. The device will automatically rebo ot to make the settings effect. Once the user finishes those steps and the router screen displayed as below. It means that th e Internet connection is now established.[...]

16 System Stat us This option provides the function fo r observing this product’s working status: WAN Port Status: If the W AN p ort is assigned a dynamic IP, there may appear a “ Renew ” or “ Release ” button on the sidenote column. You can click this button to renew or release IP manually. Wireless Status: You can check your W ireless s[...]

17 6. Advanced Setup To access the Advanced Setup, click on Advanced Setup at the top of the page. Or, for first time installation, choose Advanced Se tup and click Enter . Once in the Advanced Setup, you will be presented with the following menu.[...]

18 Basic Settin g These are the basic settings of the unit. Click o n the menu on the left to a ccess the respe ctive settings page.[...]

19 Primary Setup This page lets you change the LA N (Local Area Net work) set tings o n your W BR-6603 150Mbp s W ireless ADSL2+ Modem Router and WAN (W ide Area Netw ork) connectio n. 1. LAN IP Address: The local I P address of this device. The computers on your network must use the LAN IP address of your product as their Default Gateway . Yo u ca[...]

20 This option is primary to enab le this product to work properly. The setting items and the web appearance depend on the W AN type. You can choose a correct one from the following options: A . Etherne t Over ATM (RFC 1483 Bridge d) w ith NA T B. IP over ATM (RFC 1483 Routed). C. PPP over ATM (RFC 2364). D. PPP over Ethernet (RFC 2516). A. Eth ern[...]

21 B. Eth ernet Over A TM w ith Dynamic IP Address 1. LAN I P Address: The local IP addres s of this device. The computer on your net work m ust use the LAN IP address of this d evice as th eir Default Gat ewa y. You can change it if necessar y. 2. Host Name: T he nam e that shown on clie nt list at serv er side. 3. WAN’s M AC Address: Yo u can m[...]

22 C. IP Ov er ATM with Static IP Address 1 LAN IP Address: T he l ocal I P addres s of this device. The com puter on your net work m ust use the LAN IP address of this d evice as th eir Default Gat ewa y. You can change it if necessar y. 2 WAN IP Address, Subnet M ask, Gatew ay, Primary and Secondary DN S : Enter the prop er settings pr ovided b y[...]

23 D. IP Ov er ATM with Dynami c IP Address 1. LAN I P Address: The local IP addres s of this device. The computer on your net work m ust use the LAN IP address of this d evice as th eir Default Gat ewa y. You can change it if necessar y. 2. Host Name: T he nam e that shown on clie nt list at serv er side. 3. WAN’s M AC Address: Yo u can m anuall[...]

24 E. PPP Over ATM 1. LAN I P Address: The local IP addres s of this device. The computer on your net work m ust use the LAN IP address of this d evice as th eir Default Gat ewa y. You can change it if necessar y. 2. PPPo A Account , Passwo rd, Primar y and Secondar y DNS : Enter t he proper se ttings provided by your ISP. 3. Maximu m Idle T ime : [...]

25 F. PPP Ov er Ethernet 1. PPPoE Account and Pass wo rd : The account and pa ssword your ISP assigned to you. For s ecurit y, this field appears blank . If y ou don't want to change the pass word, leave it bl ank. 2. Primary and S econdar y DNS: Enter the pro per settin gs provided b y your ISP. 3. Maximu m Idle Time : the am ount of tim e of[...]

26 Virtual Computers (Only for Static a nd dynamic IP address W A N type) Used when WAN is set as DHCP or Static IP, user can assign a global IP add ress to a LAN IP Address. Virtual Comput er enables you to use the original NAT feature, a nd allows you t o setup the one-to-one mapping of multiple globa l IP address and local IP address. • Global[...]

27 DHCP Server This page allows you to configure the DHCP server on the 150Mbps Wireless ADSL2+ Modem Router For more settings click on More . DHCP Server : To either Disable or Enable DHCP Server. Lease Time: DHCP lease t ime to the DHCP client IP Pool Starting/Ending Address: The p ool of IP’s that can be allocated to clients Domain Name: To as[...]

28 Wireless Settings Wireless: Enabled by def ault. Disabling this feature will turn off the wireless function of th is unit. Network ID (SS ID): Service Set Identifier (SSID) is the n ame designate d for a specific wireless local area ne twork (WLAN). Th e SSID's facto ry def ault setting is LevelOne . The SSID can be easily changed to establ[...]

29 Channel: The radio channel n umber. The permissible channels depend on the Regulatory Domain. The default is AUTO which means t he W BR-6603 will find the least used channe l to avoid interference. Note: Channel range depends o n your regional regul ations. Please se e speci fications for Channel deta ils. Schedule Rule: You can Enab le / Disabl[...]

30 Enter PIN number of Wire less A dapter It is also possible to use the PI N number you have set on the wireless adapter. Set the adapter a s Enrollee and enter the PIN you want. Enter the enrollee’s (com puter’s wireless adapter) PIN number and then click the “Trigger” but ton to initiate WPS.[...]

31 Push Button Method Select the “Software Button” mode and click the “Trigger” button. An alternative is to press the W PS button at the front of the router for 1 second, until the WLAN light starts flashing. This indicates that W PS is activated. Then press and hold the W PS button on your w ireless clien t for 1 second. If your device ha[...]

32 WDS (Wireless Distribution System) W DS operation as defined by the IEEE802.11 standard has been made available. Usin g WDS it is possible to wirelessly connect A ccess Points, and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement. For maximum compatibility, it is recommended t hat W[...]

33 Securit y : Security - You may select from three levels of encryption to secure your wireless net work: No Encryption, W EP, 802.1x RADIUS, W PA-PSK, W PA, W PA2-PSK (AES), WPA2 (AES), WPA-PSK / W PA2-PSK and W PA1 / W PA2. LevelOne recommends WP A 2-PSK ( AES) for simple and secure wireless encryption. After configuring the wireless secu rity s[...]

34 802.1X To use t his security f eat ure, you will need to h ave a RADIUS serv er on your n etwork to authenticate access. Please type in the details for your RADIUS server. RADIUS Server IP Please enter your RADIUS server IP Add ress. Radius port You can change RA DIUS server port by manually. RADIUS Shared Key Key value shared by the RADIUS se r[...]

35 WPA-PSK This security is more secure compared to W EP. Select which type of encryption to use (either TKIP or AES) and then enter the key in the Passp hrase field. The field needs to be between 8 and 63 characters long and can be an y combination of letters and numbers if A SCII se tting is used.[...]

36 WPA, WPA2(AES) WPA1/WP A 2 Similar to 802.1X security but with T KIP or AES Encryption. You will need a RADIUS server for authentication. P lease enter the details of your RADIUS server. RADIUS Server • IP address or the RADIUS se rver’s IP address. • Port number of the RADIUS Server • Enter the RADIUS Shared Key Key value shared by the [...]

37 WPA-PSK, WP A 2-PSK(AES), WPA / WPA2-PSK This security is more secure compared to W EP. It will use either TKIP or AES fo r enhanced security. Please enter the key in the Passphrase field . The field can be between 8 and 63 characters long and can be a ny combination of letters and numbers under ASCII format. Wireless Client List: You can use th[...]

38 Change Pass word This page a llows you to change the W BR-6603 W eb Con figuration password. Please type in the old password (factory default p assword is admin ) and then type in the new password. If you change the password, make su re you u se the new password next time you lo gin the web configuration page. Click Save to save the settings a n[...]

39 Forw arding Rules This page allows you to configure the po rt forw arding mana gement of the WBR-6603. Use the menu on the left to access the se tting pages. The port forwarding feature is required be cause the ADSL Router’s NAT (Network Address Translation) will block incom ing traffic from the Internet to the LAN if the specific port mapping[...]

40 Virtual Server A virtual server is defined as a Service Port , a nd all requests t o this port will b e redirected to the computer specified by the Server IP . Virtual Server can work w ith Scheduling Rules , and give us er more f lexibility on Access control. For De tail, plea se refer to S cheduling Ru le (Ad vanced Se tting > Schedule Rule[...]

41 Special A P Some applications require mult iple connections, like Internet games, Video confe rencing, Internet telephony, etc. Because of the firewall function, these applications cannot work with the WBR-66 03. The Special A pplications feature allows some of the se applications to work with this product. If this fails to make an application w[...]

42 Miscellaneous - IP Address of DMZ Host DMZ (Demilitarized Zone) Host is a h ost without the protection of firewall. It allows a com puter to be exposed to unrestricted 2-way co mmun ication f or Internet games, Video conferencing, Internet telephony and other special a pplications. To enable DMZ, enter the IP address of the PC and tick on Enable[...]

43 Security Settings This section allows you to conf igure t he security m anagement of the unit. Click on the menu on the left to access the respective settin g page.[...]

44 Packet Filter Packet Filte rs allows you to co ntrol what packet s are a llowed to pa ss throu gh the W BR- 6603. T he Outbound Filter applies to all outb ound packets and the Inbound Filter on ly applies to packets that are destined to Virtual Servers or the DMZ Host only. To enable the Outbound Filter, tick the Enable tick box. There are two t[...]

45 For source or d estination IP a ddress, you can defin e a single IP address (192.168.1.1) or a range of IP addresses (192.168.1.100 – 192.168 .1.200). An empty implies all IP addresses. For source or destination port, you can define a single p ort (80) or a range of p orts (1000-1999 ). You also need to add p refix "T" or " U&qu[...]

46 Example 2 : ( 1.2.3.100-1.2.3.199) Remote hosts can do everything except read net news (port 199) and transfer files via FTP (port 21) beh ind Router Server. Others are all allowed. After Inbound Packet Filter setting is configured, click the save button.[...]

47 Outbound Filter : To enable Outbound Packet Filte r click the check box next to Enable in the Outbound Packet Filter field. Example 1: (192.168.1.100-192.168.1.149 ) Lo cated ho sts a re o nly a llowed to send mail (po rt 25), receive mail (port 110), and browse Inte rnet (port 80); port 53 (DNS) is necessary to resolve the domain name. (192.168[...]

48 Example 2: (192.168.1.100 and 192.1 68.1.119) Located Hosts can do everything except read net news (port 119) and transfer files via FTP (port 21) Others are allowed. After Outbound Packet Filter setting is co nfigured, click the save button.[...]

49 Domain Filter The Doma in Filter enables you to p revent users from accessing specific domain addresses (web sites). To enable Domain Filter, make sure to tick t he Enable tick box. • Log DNS Quer y : Check if you want to log the action when someone accesses the specific URLs. • Privilege IP A ddresses Range: Setting a range of hosts and pri[...]

50 URL Blocking URL Blocking will block LAN computers from c onnecting to a pre-defined W eb Site. The major difference between Domain Filter and URL Blocking is that Domain Filter requires the user t o input suffixes (etc: xxx.com, ttt.net) while URL Blocking only requires user to input a keyword. In o ther words, Do main f ilter can block specifi[...]

51 MAC Con trol MAC Add ress Control allows you to assign different acce ss right for diff erent users and to assign a specific IP address to a certain MAC address. To enable MAC Add ress Control, make sure to tick on Enable. All of the settings in this pa ge will take effect only when “ Enable ” is checked. There are two types of contro l meth[...]

52 MAC Address MAC ad dress indicates a specific client. IP Address Expected IP address of the correspond ing client. Keep it empty if you don't care its IP address. C W hen " Connection control " is checked, check " C " will allow the corresponding client to connect to this de vice. A W hen " A ssociation control &quo[...]

53 Miscellaneous This page allows you to change various m iscellaneous security settings. Remote Administrator Host/Port: In general, o nly intranet user can brow se the built-in web configuration pa ges to perform adm inistration task. This feature enables you to p erform administration task from the Internet. If this feature is enabled, only th e[...]

54 Advanced Setting s These pages allow you to conf igure the more advanced settings on the unit.[...]

55 System Time This page allows you to set the time settings of the W BR-6603. There are three ways to se t up the System Time of the WBR-6603. 1. Get Date a nd Time by NTP Protocol: Selected if you want to get the Date and Time f rom an NTP server. A Time Server and time zone is required. Once entered, click Sync Now to sync the time with the Time[...]

56 System Log The WBR-6603 supports bo th Syslog (using UDP packets) and E-Mail alert. It suppo rt two methods t o export system logs to specific destination by m eans of syslog (UDP) and E- mail (TCP). The items you have to setu p including: Syslog setting: For S yslog, you will nee d to ente r the IP address of the host computer that will be rece[...]

57 Dynamic DNS Dynamic DNS is a feature that allows users to set up a static domain name even when they have a dynamic internet IP address. So even if your IP address changes every time you connect to your ISP, the IP address can be m apped to a ho st name so that an yone who wants to conne ct to the W BR- 6603, or any se rvices be hind the router [...]

58 SNMP Setting SNMP (Sim ple Ne twork Ma nagement Protocol) is designe d to give use rs the ab ility to remotely manage a computer or network device. To enable SNMP, please set the fo llowing: • Enable SNMP: You must check either Local or Remote or both to enable SNMP funct ion. If Local is checked, this unit will respond to requests from LAN. I[...]

59 Routing W hen you h ave more than one W BR-6603, or router with diff erent subnets on the network, you will need to enable this function to a llow the different subnets to communicate with each othe r. There are two types of routing suppo rted by the WBR-6603. • Dynamic Routing: This method uses Routing Inf ormation Protocol (RIP) to enable th[...]

60 Destination Subnet M ask Gateway Hop Enabled 192.168.1.0 255.255.255.0 192.168.123.21 6 1  192.168.0.0 255.255.255.0 192.168.123.10 3 1  So if, for example, Client3 wants to send an IP data packet to 192.168.0.2, it would use the above table to determine that it had to go via 192.168.123.103 (Router 2) And if it sends Packets to 192 .168.1[...]

61 Schedule Rule This feature allows you to define the time schedule of Virtual Server and Packet Filter rules. To enable Scheduling, tick Enable and click Save . Then create new rules by pressing the A dd New Rule bu tton. Enter the Rule ’s Name and set t he Start and End Times f or each day. Then click Save to save the new rule. Once defined, y[...]

62 W hen you set up the schedule rule, it will have rules in rule table as following: Schedule Enable Selected if you want to enable the Schedu le. Edit To edit the schedule rule. Delete To delete the schedule rule, and the rule# of the rules behind the deleted one will decrease one automatically.[...]

63 Toolbox This section has some basic t ools to maintain the W BR-6603 systems.[...]

64 View Log You can View system log by clicking the View L og button.[...]

65 Firmw are Upgrade This page allows you to perform update s to the firmware of the W BR-6603. To use, click Browse and locate the firmware image file, then click Upgrade . Note: P lease connect to the W BR-6 603 using a wired LAN connection as if the conn ection breaks during the update, it will ren der the unit unworkable. Also disa ble a ny a n[...]

66 Miscellaneou s MAC Address for Wake-on-L A N W ake-on-LAN is a technology that enables you to power up a networked device remote ly. In order to enjoy this feature, the target de vice must be Wake-on-LAN enabled and you have to kno w the MAC address of this device, say 00-11-2 2-33-44-55. Clicking " W ake up" button will make the route[...]

67 Appendix A 802.1x S etting Figure 1: Testing En vironment (Use W indows 2000 Radius Server) Equipment Details PC1: Microsoft W indow s XP Professional witho ut Service Pack 1 and LevelOne W ireless PCI Card PC2: Microsoft W indow s XP Professional with Service Pack 1a or later and LevelOne W ireless PCI Card. Authentication Server: W indows 2000[...]

68 DUT and Windows 2000 Ra dius Server Setup Setup W indows 2000 RADIUS Server W e have to change authentication method to MD5_Challenge or using smart card or othe r certificate on RADIUS server according to the test condition. Setup DUT 1. Enable the 802.1X (check the “Enab le checkbox“). 2. Enter the RADIUS server IP. 3. Enter the shared key[...]

69 Windows 2000 R AD IUS server Authentication testing: DUT authenticate PC1 usin g certificate. (PC2 follows the same test procedures.) 1. Download and insta ll the certificate on PC1. (Fig 4) 2. PC1 chooses the SSID of DUT a s the Access Point. 3. Set authentication type of wireless client and RA DIUS server both to EAP_TLS. 4. Disable the wirele[...]

70 Figure 6: Authentication su ccess DUT authenticate PC2 usin g PEAP-TLS. 1. PC2 chooses the SSID of DUT a s the Access Point. 2. Set authentication type of wireless client and RA DIUS server both to PEAP_TLS. 3. Disable the wireless con nection and enable again. 4. The DUT will send the u ser's certificate to the RADIUS server, and then send[...]

71 Appendix B FAQ and Tr oubleshooting This chap ter covers some common problems that m ay be e ncountered while using th e W ireless ADSL Router and so me possible solutions to them. If you follow the suggested steps and the W ireless ADSL Router still does not function properly, contact your dealer for further advice. What can I do when I have so[...]

72 2. Why c an’t I connect the router even if the c able is plugged in LA N port and the LE D is light? A : First, please check Statu s LED. If the device is normal, the LED will blink once per se cond. If not, please check the blinkin g Status LED as shown: Status LED stays constantl y on or off: The system is frozen. Suggest powering off and on[...]

73 How do I connect router b y using wirele ss? 1. How to start to use wireless? A : First, m ake sure t hat you a lready insta lled wireless client device in your compute r. Then check the configuration of wireless route r. The default is below: About wireless client, you will see wireless icon :[...]

74 Then click and will see th e AP list that wireless client can be accessed: If the client cannot find your wireless rout er, please refresh network list again. Choose the one that you will want to connect and connect: If successfully, the computer will show someth ing similar. User will also retrieve IP from rou ter, for example:[...]

75 2. How can I use A ES encr yption of WPA- PSK to conne ct? A : First, you must check if the driver of wireless clien t supports AES encryption. Plea se refer to the below: If SSID is default and click “Properties” to check if the driver of wireless client suppo rts AES encryption. 3. When I use wireless to connec t the router, but I find the[...]

76 Technical Specifica tions General Model W BR-6603 150Mbps W ireless ADS L2+ Modem Ro uter Data Transf er Rate 1, 2, 5.5, 6, 9, 11 , 12, 18, 2 4, 36, 48, 54Mbps Max physical rate up to 150 Mbps in 802. 11n m ode Transm it Power 802.11b: 17±2dBm 802.11g: 14±2dBm 802.11n: 14±2dBm Frequenc y Range America/ FC C: 2.412~2.46 2GHz (11 Ch annels) Eur[...]