EnGenius ESR9850 manual

ESR9850 Wireless N Gigabit Router (IEEE 802.1 1 b/g/n) User Manua l[...]

Revision History V ersion Date Notes 1.0 2009/5/22 Initial[...]

T able of Conten t 1. INTRODUCTI ON ... ... .. ... ... ... ... .. ... ... ... .. ... ... ... ... .. ... ... ... .. ... ... ... ... .. ... ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... ... .. ... 1 1.1. S UMMAR Y .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... [...]

ii 8. A DV ANC ED .... ... ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... ... .. ... ... ... .. ... ... ... ... .. ... ... ... .. ... ... ... ... .. ... ... ... .. ... ... ... .. ... . 50 8.1. N ETWORK A DDRESS T RANSLA TION (NA T) .. ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... ... .. ... ... [...]

1 1. In tr oduction 1.1. Summary ESR9850 is a 2T2R W ire less 11N Gigabit Router that delivers up to 6x faster speeds and 3x extended coverage than 802.11g dev ices . ESR9850 suppo rts ho me network with su perior throughput and perfor mance and unparalleled wireless range. With easy to use on the WPS funct ion, i t helps users t o connect to w ire[...]

2 1.2. Key Features Features A dvantages Incredible Data Rate up to 600M bps** Heavy data pay loads such as MPEG video stream ing Multiple SSIDs Enhanced managemen t among multiple users groups Four 10/100/1000 M bps Fast Switch Ports (Auto-Crossov er) Scalability, extend your net work. Firewall supports Vi rtual Server Mapping, DMZ, IP Fil ter, IC[...]

3 1.3. Package Content s Open the package carefull y , and make sur e that none of the items listed below are missing. Do not discard the packing materials, in case of return; the unit must be shipped back in its o riginal p ackage.  1 * Dual Band Concur rent AP Router (ES R9850)  1 * 12V/1.25 A Power Adapter  1 * CA T 5 UTP cab le  1 *[...]

4 1.4. Product Lay out Physical In terface  WAN : 1 * 1 0/100/1000 Fast Etherne t RJ-45  LAN: 4 * 10/100 /1000 Fas t Ethernet RJ -45  Reset Button (5 second for reboot, 5~10 seconds fo r reset to fac tory default )  Power Jack  W PS push bu tton ( Wi-Fi Protected Setup)  Antenna: SMA Connecto r * 2 LEDs S tatus  Power/ S tatus [...]

5 2. Installation 2.1. Network + Sy stem Requirement s T o begin using the ESR9850, make sure you meet the following as minimum requirements:  PC/Notebook.  Operating System – Microsoft W indows 98SE/ME/XP/2000/VIST A  1 Free Ethernet port.  W iFi card/USB dongle (802.1 1 b/g/n) – optional.  External xDSL (ADSL) o r Cable modem w[...]

6 2.3. ESR9850 Placeme nt Y ou can place ESR9850 on a des k or other flat surface, or you can mount it on a wall . For optimal performance, place your device in t he center of your office (or your home) in a location that is away from any pot ential source of interference, such as a metal wall or microwav e oven. This location must be close to a po[...]

7 2.4. Setup L A N & W A N LAN connection: Connect Ethernet cable between y our PC/Notebook LAN por t & one of the 4 avail able LAN ports on ESR 9850. WA N connec tion: Connect Ethernet cable b etwe en W AN ports of y our ADSL/CABLE modem & INTERNET port of ESR9850. Make sure your ADSL/CABLE modem is wor king well. Contact your ISP if y[...]

8 2.5. PC Network A dap ter setup (Wi ndows XP)  Enter [Start Menu]  select [Control panel]  sele ct [Network].  Select [Local Area Connection]) ico n=>select [properties][...]

9  Select [Internet Protocol (TCP/IP)] =>Click [Propertie s].  Select the [General] tab.  select both [Obtain an IP address automa tically ] and [Obtain DNS server add ress automatically ].[...]

10 2.6. Smart Wizard CD Prerequisites: • A standard CD-ROM drive • ADSL / Cable M odem with RJ45 port. • Microsoft W indow s compatible PC/Noteboo k with Ethernet ne twork interface . • CAT 5 network cable (s), RJ45 port on PC /Notebook. STEP 1 Power up ESR9 850 . Please wait until W LA N starts blin king. STEP 2 Insert Wizard CD in to your[...]

1 1 Please click on [ Quick Setup ] and follow t he instructions given t o complete the device initiation configuration . Thank you for choosing EnGenius .[...]

12 2.7. Wizard Confi guration Click <Next> to enter mode selection. Select the mode that ESR9850 is going to be and set its configurations. A P Repeater mode does not enable WAN interface , Setup W iz ard will skip W AN Con f iguration. Click <Next> to automa t ically detect your Internet Network se ttings. Smart W izard ha s detected D[...]

13 Smart W izard ha s finished setting up WA N Configuration . Click <Next > to proceed. Enter the name for your wireless netwo rk (SSID) and security key Click <Next> to proceed To apply the entire con figuration, cli ck <Reboot> . NOTE: A fter Wirel ess se ttings are applied , you need to connect from y our WLA N client with the[...]

14 2.8. Initial Setup ESR9 850 ESR9850 provides web-inte rface for configuration through web browser , su ch as Internet Explorer , Firefox or Safari. 1. Open your browser (e.g. Intern et Explorer). 2. T ype in http://192.168.0.1 in the address bar and press [Enter]. 3. Click <OK> to navi gate into ESR9850 con figuration home page. 4. You wil[...]

15[...]

16 3. SYSTEM 3.1. St atus This pa ge allows you t o monitor the current status of your router. You can use the status page to quickly see if you have any updated firmware available (bug fixes, updates). You can navigate from this page with a few interesting options for reminding or skipping this page forever & so forth. Once y ou cl ick o n <[...]

17 WLAN Settings: This section displays the cu rrent W LAN configuration se t tings you’v e configured in the W izard / Basic Set tings / Wireless Settings section. W ireless configuration de tails suc h as SSID, S ecurity settings, BSS ID, Channel number, mode o f operation are brie fly shown.[...]

18 3.2. L A N The L AN Tabs reveals LAN settings which can be altered at will. If you are an entry level user, t ry accessing a website from your browser. If you can access website without a glitch, just do not chan ge any of these settings . Click <App ly> at the bottom of this screen to save the chan g ed configurations. LAN IP IP address :[...]

19 3.3. DHCP View t he current LAN clients which are assig ned with an IP Address by the DHCP-server. This page shows all DHCP clients (LAN PCs) currently connected to your netw ork. T he t able shows the assigned IP address, MA C address and expiration time f or each DHCP leased client. Use the <Refresh> button to upda te the availabl e inf [...]

20 3.4. Schedule This page allow s user to set up schedule function for Fi rewall and Pow er Saving. Add schedule, edit schedule options to allow conf iguration of firewal l and power savings services. Fill in the schedule and select type of service. Click < Apply > t o implement those settings. The schedule table lists the pre-schedule servi[...]

21 3.5. Event Log View operati on eve nt log . T his page shows the current system log of the Broadband router. It displays any event occurred after system start up. At the bottom of the page, the system lo g can be saved <Save> to a local f ile for further processing or the system lo g can be cleared <Clear > or it can be re freshed &l[...]

22 3.6. Monitor Show histogram for netw ork connection on WAN, LAN & WLAN. Auto refresh keeps information updated frequently.[...]

23 3.7. Language This W ireless Rou ter support multiple lan g uage of web pages, You could select your native language here.[...]

24 4. Wizard Please refer to Chapter 2.6 for W izard Configuration details[...]

25 5. INTERNET 5.1. St atus This page shows the current Internet conne ction ty pe and status[...]

26 5.2. Dynamic IP Use the MAC address when registering for Internet service, and do not change it unless required by your ISP . If your ISP use d the M AC address o f the Ethernet ca rd as an identifier , connect only the PC with the registered MAC address to the broadband router and click the <Clone M A C A ddress> butt on. This will r epla[...]

27 5.3. St atic IP If your ISP Provider has assigned a fixed IP address, enter the assign ed IP address, Subnet mask, De fault Gatew ay IP address, and Primary DNS of your ISP provider .[...]

28 5.4. Point-to-Point over Ethernet Protocol (PPPoE ) Login / Pass word: Enter t he PPPoE username and pa ssword assigned by your ISP Provider . Service Name: T his is n ormally optional. Maximum T ransmission Unit (MT U): This is the maxi mum size of the p acket s. T ype: Enable the Auto-reconnect option t o automatically re- estab lish the conne[...]

29 5.5. Point-to-Point T unneling Pr otocol (PPTP) PPTP allows the secure connection ov er the I nternet by simply dialing i n a local point provided by your ISP provider . The f ollow ing screen allow s client PCs to establish a normal PPTP session and prov ides hassle-free con figuration of the PP T P client on each client PC . Click <App ly&g[...]

30 6. WIRELESS 6.1. Basic Radio: You can turn on/o ff wireless radio. If wireless Radio is off, you cannot associate with AP through wi reless. Mode: In this device, we su pport three operatio n modes w hich are A P router , A P route with WDS (we will introduce t his f unction late r section), and repeate r . If yo u choose AP Router Mode, you can[...]

31 A uto Channel: Device will search all valid channels, then decide a most clean channel and change to t his channel if you enable t his function. Depend on this function enable or not, you w ill see different item below Auto Channel . Channel: If Auto Channel is disabled, you shoul d choose a static channel and AP will use this channel to co mmun[...]

32 6.2. Mode: WDS W ir eless Distribution System, a system t hat enables the w ireless inter connection of access point, allows a wireless network to b e expended using m ultiple access points without a w ired backbone to li k e the m. Each W DS APs need settin g as sa me channel a n d encryption type. MAC address 1~4: Please ent er t he MAC addres[...]

33 Fragment Threshold: T his specifies the maximum size of a packet during the fragmentation of data to be t ransmitted . If you set this value too low, it w ill result i n bad performance. RTS Threshold: W hen the packet size is smaller than the RTS t hresho ld, the wireless router will not use the RTS/CTS mechanis m to send this packet. Beacon In[...]

34 6.4. Security This Access Poi nt provides complete wireless LAN security function s, included are W EP , IEEE 802.1x, IEEE 802.1x with W EP, W PA with pre-shared key and WPA with RADIUS. W ith these security f unctions, you can prevent your wireless LAN f rom illegal access. Please make sure your wireless st ations use the same security function[...]

35 ESSID Selection: This broadband router support multiple ESSID, you could select and set up the wanted E SSID. Broadcast ESS ID: If you enabled “Broadcast ESSID”, every wireless st ation located within the coverage of this access point can discov er t his access point easily. If you are building a public wireless network, enabling this feat u[...]

36 WEP Encry ption W he n you select 64-bit or 128-bit W EP key, you have to enter W EP keys to encrypt dat a . You can generate the key by yourself and e nter it. You can enter f our W EP keys and select one o f t hem as a de f ault k ey. Then the router can receive a ny packets encrypted by one of the four keys. A uthentication Type: There are tw[...]

37 pre-shared k ey to authen ticate wireless stations and encrypt data during communication. It uses TKIP o r CC MP (AES) to change the encrypti on key frequently. So the encryption k ey is not easy to be crac k ed by hac kers. This is the best security availabl e. WP A-Radius Encryption W i- Fi Pr otected Access ( WPA ) is an adv anced security st[...]

38 6.5. Filter This wireless router supports MAC Address Control, which prevents unauthorized clients from accessin g your wireless networ k. Enable wireless acces s control: Enab le the wi reless access control fun c tion A dding an a ddress into the list Enter t he "MAC Address" and "Comment" of the wireless station to be adde[...]

39 6.6. WPS (Wi-Fi Pr otected Setup) W PS is the simples t way to establish a connectio n between the w ireless clie nts and the wireless router. You don’t have to select the encryp tion mode and f ill in a long encryption passphrase every time when you try t o setup a w ireless connection. Y ou only need to press a b utton on bo t h w ireless cl[...]

40 Interface: If device is set to repeater mode, you c an choose “Client” interface to connect with ot her AP by using W PS, otherwise you may choose “AP” interf ace to do W PS with other clients. WPS via Push Button: P ress the button to sta rt the W PS p rocess. T he ro uter w ill w ait for the W PS request from the wi reless devices with[...]

41 6.7. Client List This W LAN Clie nt Table show s the W ireless client associate to this W irele ss Router.[...]

42 6.8. Policy Policy provides a list of control policies. T hese settings define whether wireless or wired clients are able to “see” each in the LAN.  If you are offering Internet access to your clients, please enable WA N connection.  If you allow communication between W ir eless cl ients please e nable the second item.  If you allow[...]

43 7. F IREW ALL 7.1. Enable The Broadband router provides extensive f irew a ll protection by restricting connection parameters, thus limiting the risk o f hacker a ttacks, and defending against a wide array of common Internet attac ks. How ever, for applications that require unrestricted access to the Internet, you can con figure a speci fic clie[...]

44 7.2. Demilit arized Zone (DMZ) If you have a client PC that cannot run an Internet application (e.g. Games) pr operly from behind the NAT f irewal l, then you can open up the f irewall r estrictions to unrestricted two-way Internet access by defining a DMZ Host. T he DMZ f unction allow s you to re -direct all packets goin g to your WAN port IP [...]

45 7.3. Denial of Service (DoS) The Broadband router's firewall can block common hacker attacks, inclu ding Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet a ttacks occur the router can log the events. Ping of Death: Protecti ons from Ping o f Death attack. Discard Ping From WA N: The router’s WAN port wil l not respo[...]

46 7.4. - M A C Filter If you want to restrict us ers from accessing certain Internet applications / services ( e.g. Internet websites, email, FTP etc .), and then this is the place to set t hat configuration. Access Control allow s users to define the traffic t ype permitted in your LAN. You can control which PC cli ent can have access to these se[...]

47 A dd PC M AC Address Fill in “ LAN MAC A ddress ” and <Description > of the PC that is allow ed to access the Internet, and t hen click <Add> . If you f ind any typo before adding it and want t o retype again, just cl ick <Reset> and the fields will be cleared . Remove PC MAC Address If you want to remove some PC from the &[...]

48 7.5. IP F ilter Enable IP Filtering : Check to enable o r disable IP Fi ltering. Deny: If you select “ Deny ” then all clients w il l be all owed to access Intern et accept for the clients in the list below . A llow: I f you select “ A llow ” then all cl ients w ill be denied to access Inte rnet accept for the PCs in the list below . A d[...]

49 7.6. URL Filter You can block access to some W eb sites f rom particular PCs by entering a f ull URL address or just keyw or ds of the W eb site . Enable URL Blocking: Enable or disabl e URL Blockin g A dd URL Ke yword Fill in “URL/Keyword” and then click < A dd> . You can enter the f ull URL addres s or the keyw ord of the web site yo[...]

50 8. Ad v anced 8.1. Network A ddress T ransl atio n (N A T) Network Address T ranslation (NAT) a llow s multiple users at your local site to access the Internet through a sin gle Publi c IP Address or multip le Publi c IP Addresses . NAT p rovides Firewall prot ection f rom hacker attacks and has t he f lexi bility to allow y ou to m ap Private I[...]

51 Port Range: The ran ge o f ports to be forward to th e private IP. A dd Port Mapping Fill in the " Local IP ", “ Type ”, “ Port Range ” and " Description " of the setting to be added and then click " Add ". T hen t his Port Mapping setting will be added into the " Current Port Mapping T able " belo[...]

52 Remove Port Mapping If you want to remove a Port Mapping setting from the " Current Port Mapping Table ", select the Port Mapping setting that you want t o remove in the t able and then click D<Delete Selected> . If yo u want to remove all Port Ma pping settings from the table, click <Delete A ll > button. Clic k <Reset&[...]

53 Enable Port For warding: Enable or disabl e Port Forw arding. Description: The des cription of this setting. Local I P / Local Port: This is the LAN Client/H ost IP address and Port number that t he Public Port number pac ket will be sent to. Type: Select the port number protocol type (TCP, UDP or both). If you are unsure, then leave it to the d[...]

54 Enable Trigger Port : Enable or disable the Port Trigge r function. Trigger Port: T his is the outgoing (Outbound) range of port numbers for this particula r application. Trigger Ty pe: Select whether the outbound port protocol is “ T CP ”, “ UDP ” or “ BOT H ”. Public Port: Enter the In-coming (Inbound) port or port range for this t[...]

55 application to correctly pass through the NA T gatew ay. 8.6. UPNP W it h UPnP, all PCs in you Intranet will discover this router automatically. So, you don’t have to configure you r PC and it can easi ly access the Interne t through this router . Enable/Disable UPnP: You can enable or Disable the UPnP f eature here. After you enable the UPnP [...]

56 “Others”. T he r ule with a smaller pri ority number has a higher priority; the rule with a larger priority number has a l ower priority. Y ou can ad just the priority o f the rules by moving t hem up or down. Port-based Qos This is hardware port-based QoS control method. I t will limit t he pac kets throughput in LAN1~4, W AN por t. Enable [...]

57 Unlimited Prio rity Queue: T he LAN IP address w ill not be bounded in the QoS limita tion. High/Lo w Priority Queue: This can put the packets in the protocol and port range to High/Low QoS Queue . Bandwidth A l location: This can reserve / limit the throughput of specific protocols and port r ange. Y ou can set the upper bound and Lower bound. [...]

58 Policy: S pecify the policy t he QoS, Min option will reserve the selected data rate in QoS queue. Max option w ill limit the sele cted data rate in QoS queue. Rate: The dat a rate of Q oS queue. Disabled: This could turn off QoS feature. 8.8. Routing Y ou can set enable S tatic Routing to let the router forward pa cket s by your routin g policy[...]

59 9. TOOLS 9.1. A d min You can change the password required to log into the broadband router's system web-based mana gement. By default, the passw ord is: admin. Pas swords can contain 0 to 12 alphanumeric chara cters, and are case sen sitive. Current Pass word: Fill in the current passw ord to allo w changing to a new password. New Pass wor[...]

60 9.2. T ime The T ime Zone allows your r outer to reference or base its time on t he settings configured here, which will affect functions such as Log entries and Firew all sett ings. Time Zone: Select the time zone o f the country you are currently in. The router will set its time based on yo ur selection. NTP Time Server: The router can set up [...]

61 9.3. DDNS DDNS allows you to map the static domain name to a dynamic I P address. You must g et an account, password and your static domain name from the D DNS service providers. This router supports Dy nDNS, TZO and other com mon DDNS service providers. Enable/Disable DDNS : Enabl e or disable the DDN S function of this rou ter Server A ddress:[...]

62 9.4. Power Saving pow er in WLAN/Ethernet mode can be enabled/disab led in this page.[...]

63 9.5. Diagnosis This page could let y ou diagnosis your current netw or k status.[...]

64 9.6. Firmware This page allow s you to upgrade the router’s firmw ar e. To upgrade the firmware of y our Broadband router, you need to download the f irmw are file to your local hard disk, and enter that file name and path in the appropriate field on this page. You can also use the Browse button to find the firmware file on your PC . Once you?[...]

65 9.7. Back-Up This page allows you to save the current r outer configurations . W he n you s ave the configurations, you also can re-load t he saved configuratio ns in to t he router throu gh the Restore Settings . If extreme problems occur you can use the Restore to Factory Defaults to set all configurations to its original de fault settings. Ba[...]

66 9.8. Reset You can reset t he broadband router when system stops respondin g correctly or stop functions.[...]

67 Appendix A – FCC I nterference Stateme nt Federal Communication Commissi on Interference St atement This e quipment has been t ested and found to comply with the limits for a Class B digit al devic e, pursuant to Part 15 of the FCC Rules. These li mit s are designed to provide reasonable protection agai nst harmful interference in a residentia[...]

68 Appendix B – I C Interference Statement Industry Canada stat ement: This device complies with RSS-210 of th e Industry Canada Rules. Operation is subject to th e following two conditions: (1) This device may not cause harmful interference, and (2) this device m ust accept any i nterference received, including interference that may cause undesi[...]

69[...]