LevelOne WBR-6001 manual

LevelOne User Manual Ver. 1.0.0-0801 WBR-6001 N_Max Wireless Broadband Router i[...]

Safety FCC WARNING This equipment may generate or use radio freque ncy energy. Changes or modifications to this equipm ent ma y cause harmful interfe rence unless the modifications are expressly approved in the instruction manual. The user could lose the authorit y to operate this equipment if an unauthorized change o r modification is made. This e[...]

Table of Content TABLE OF CONTENT .................................................................................................................V 1. INTRODUCTION .................................................................................................................... 1 U SER M ANUAL O VERVIEW ..........................................[...]

URL Blocking ....................................................................................................................... 38 MAC Address Control .......................................................................................................... 40 Miscellaneous Items ................................................................[...]

1. Introduction Congratulations on your purchase of LevelOne N_Max Wireless Broadband Router . This product is specifically designed for Small Of fice and Home Office needs. It prov ides a complete SOHO solution for Internet surfing, and is easy to configure and oper ate even for non-technical us ers. Instructions for installing and configuring thi[...]

[...]

2. Unpacking and Setup This chapter provides the package contents and setup information for the N_Max Wireless Broadband Router. Features z Extended and high- speed wireless connectivity with wireless N technology z Advanced QoS Services for Intelligent Internet z Backward compliant with IEEE802.11g and 11b standards z Operates on the 2.4GHz freque[...]

[...]

3. Hardware Installation Product Layout – Front View 1) Reset Press the Reset button to reboot device or restores factory default setting. 2) Status A blinking light indicates the device is ready 3) WAN A solid light indicates the WAN port is connected. 4) WLAN A solid light indicates the Wireless segment is ready. LED blinks during wir eless dat[...]

Product Layout – Rear View 1) Power Jack Receptor for the supplied power adapter 2) LAN Ports (1~4) Connect Ethernet devices such as computers, switches or hubs. 3) WAN Port The WAN port is the connection for the Ether net cable to the Cable or DSL Modem. 4) Antenna Detachable antenna allows user s to change antenna if necessary. Hardware install[...]

3. Setup WAN connection Prepare an Ethernet cable for connecting this produc t to your cable/xDSL modem or Ethernet backbone. 4. Power on Connecting the power cord to power inlet and turning the power switch on, this product will automatically enter the se lf-test phase. When it is in the self-test phase, the Status indicator will be lighted ON for[...]

Network Check 1. Please make sure your PC can get IP addre ss automatically so the WBR-6001 can communicate with your PC during configuration. • Select “Control Panel” > “Network Connections”. • Right click the “Local Area C onnection” and choose “Properties”. • Select the TCP/IP protoc ol for your network card. • Click o[...]

Default Settings IP Address 192.168.0.1 Password password Wireless Mode Enable SSID WBR-6001 Security None Please enter the default system password in lowercase only.[...]

4. Configuring Wireless Router LED Indicator for N_Max Wireless Router LED Function Color Statu s Description Status flashed once per second to indicate system is alive. Status System status Green Blinking WAN WAN port activity Green On The WAN port is linked. Blinking The WAN port is sending o r receiving data. WLAN Wireless activity Green Blinkin[...]

Login to Configure from Wizard Activate your browser, and disable the proxy or add the IP address of this product into the exceptions. Then, type this product’s IP address in the Location (f or Netscape) or Address (for IE) field and press ENTER. For example: http://192.168.0.1 After the connection is established, you will see the web user interf[...]

Setup Wizard will guide you through a basic conf iguration procedu re st ep by step. Press ”Next ” Once the user finishes those steps and the router screen displayed as below. It means that the Internet connection is now established. 8[...]

[...]

Basic Setting Please Select “Advanced Setup” to Setup Primary Setup – WAN Type , Virtual Computers 10[...]

Press “Change”[...]

This option is primary to enable this product to work properly. The setting items and the web appearance depend on the WAN type. Choose co rrect WAN type before you start. 1. LAN IP Address: the local IP address of th is device. The computers on your network must use the LAN IP address of your pr oduct as their Default Gateway. You can change it if[...]

Dynamic IP Address 1. Host Name: optional. Required by some ISPs, for example: @Home. 2. Renew IP Forever: this feature enables this product to renew your IP address automatically when the lease time is expiring-- even when the system is idle. Dynamic IP Address with Road Runner S ession Management.(e.g. Telstra BigPond) 1. LAN IP Address is the IP[...]

1. My IP Address and My Subnet Mask: the private IP addre ss and subnet mask your ISP assigned to you. 2. Server IP Address: the IP address of the PPTP server. 3. PPTP Account and Password: the account and password your ISP assigned to you. If you don't want to change the password, keep it empty. 3. Connection ID: optional. Input the c onnecti[...]

Virtual Computers (Only for Static and dynamic IP address Wan type) Virtual Computer enables you to us e the original NAT feature, and a llows you to setup the one-to-one mapping of multiple global IP address and local IP address. • Global IP: Enter the global IP address assigned by your ISP. • Local IP: Enter the local IP address of your LA N [...]

DHCP Server Press “ More>> ” 1. DHCP Server: Choose “ Disable” or “Enable.” 2. Lease time: This is the length of time that the client may use the IP address it has been assigned by DHCP server. 3. IP pool starting Address/ IP pool starting Addr ess: Whenever there is a request, the DHCP server will automatically allocate an unused[...]

Wireless setting, 802.1X setting and WDS Wireless settings allow you to set t he wireless configuration items. Wireless: The user can enable or disable wireless function. Network ID (SSID): Network ID is used for identifying the Wireless LAN (WLAN). Client stations can roam freely over this product and other Access Points that have the same Network[...]

Security: Select the data privacy algorithm you w ant. Enabling the security can protect your data while it is transferred from one station to another. There are several security types to use: WEP: When you enable the 128 or 64 bit WEP key security, please select one WEP key to be used and input 26 or 10 hexadecimal (0, 1, 2…8, 9, A, B…F) digit[...]

WPA-PSK 1. Select Encryption and Pre-share Key Mode If you select HEX, you have to fill in 64 hexade cimal (0, 1, 2…8, 9, A, B…F) digits If user selects ASCII, the length of pr e-share key is from 8 to 63. 2. Fill in the key, Ex 12345678[...]

WPA Check Box was used to switch the function of the WPA. When the WPA function is enabled, the Wireless user must authenticate to this router firs t to use the Network service. RADIUS Server IP address or the 802.1X server’s domain-name. Select Encryption and RADIUS Shared Key If you select HEX, you have to fill in 64 hexade cimal (0, 1, 2…8, [...]

WPA2 (AES) Check Box was used to switch the function of the WPA. When the WPA function is enabled, the Wireless user must authenticate to this router firs t to use the Network service. RADIUS Server IP address or the 802.1X server’s domain-name. Select RADIUS Shared Key If you select HEX, you have to fill in 64 hexade cimal (0, 1, 2…8, 9, A, B?[...]

WPA/WPA2 Check Box was used to switch the function of the WPA. When the WPA function is enabled, the Wireless user must authenticate to this router firs t to use the Network service. RADIUS Server The router will detect automatically which Security type(Wpa-psk version 1 or 2) the client uses to encrypt. IP address or the 802.1X server’s domain-n[...]

WDS (Wireless Distribut ion System) WDS operation as defined by the IEEE802.11 standard has been made av ailable. Using WDS it is possible to wirelessly connect Access Points, and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement.[...]

24[...]

Change Password You can change Password here. We strongly re commend you to change the system password for security reason.[...]

Forwarding Rules 26[...]

Virtual Server This product’s NAT firewall filters out unrecognized packets to protect your Intranet, so all hosts behind this product are invisible to the outside wo rld. If you wish, you can make some of them accessible by enabling the Virtual Server Mapping. A virtual server is defined as a Service Port, and a ll requests to this port will be [...]

Special AP Some applications require multiple connections, like Internet games, Video conferencing, Internet telephony, etc. Because of the firewall function, these applications cannot work with a pure NAT router. The Special Applicat ions feature allows some of these applic ations to work with this product. If the mechanism of Special Applications[...]

Miscellaneous Items IP Address of DMZ Host DMZ (Demilitarized Zone) Host is a host without the protection of fi rewall. It allows a computer to be exposed to unrestricted 2-way co mmunication for Internet games, Video conferencing, Internet telephony and other special applications. NOTE: This feature should be used only when needed. Non-standard FT[...]

The device also supports this function. If the OS supports this function enable it. Security Settings 30[...]

Packet Filter Packet Filter enables you to control what packets are allowed to pass the router. Outbound filter applies on all outbound packets. However, Inbound filt er applies on packets that destined to Virtual Servers or DMZ host only. You can select one of the two filtering policies: 1. Allow all to pass except t hose match the specified rules[...]

For source or destination IP addre ss, you can define a single IP addr ess (4.3.2.1) or a range of IP addresses (4.3.2.1-4.3.2. 254). An empty implies a ll IP addresses. For source or destination port, you can define a singl e port (80) or a range of ports (1000-1999). Add prefix "T" or "U" to specify TCP or UDP protoc ol. For e[...]

(1.2.3.100-1.2.3.149) they are allow to send mail (port 25), and browse t he Internet (port 80) (1.2.3.10-1.2.3.20) they can do everything (block nothing) Others are all blocked. Example 2: (1.2.3.100-1.2.3.119) they can do everything except read net news ( port 119) and transfer files via FTP (port 21) Others are all allowed. After Inbound Packet [...]

(149.161.123.100-149.161. 123.149) they are allowed to send mail (port 25), receiv e mail (port 110), and browse Internet (port 80); port 53 (DNS) is necessary to resolve the domain name. (149.161.123.10-149.161.123. 20) they can do everyt hing (block nothing) Others are all blocked. Example 2: 34[...]

(149.161.123.100 and 149.161.123. 119) They can do everything exce pt read net news (port 119) and transfer files via FTP (port 21) Others are allowed After Outbound Packet Filter setting is configured, click the save button.[...]

Domain Filter Domain Filter Let you prevent users under this devic e from accessing specific URLs. Domain Filter Enable Check if you want to enable Domain Filter. Log DNS Query Check if you want to log the action w hen someone accesses the specific URLs. Privilege IP Addresses Range Setting a group of hosts and privilege these hosts to access netwo[...]

Example: In this example: 1. URL include “www.msn.com” will be blocked, and the action wil l be record in log-file. 2. URL include “www.sina.com” wil l not be blocked, but the action will be record in log-file. 3. URL include “www.google.com” will be blocked, but the action will not be record in log-file. 4. IP address X.X.X.1~ X.X.X.20[...]

URL Blocking URL Blocking will block LAN computers to c onnect to pre-define Websites. The major difference between “Domain f ilter” and “URL Blocking” is Domain filter require user to input suffix (like .com or .org, etc), while URL Blocking requi re user to input a keyword only. In other words, Domain filter can block specific website, wh[...]

In this example: 1. URL include “msn” will be blocked, and the action will be record in log-file. 2. URL include “sina” will be blocked, but the action will be record in log-file 3. URL include “cnnsi” will not be blocked, but the action will be record in log-file. 4. URL include “espn” will be blocked, but the action will be record[...]

MAC Address Control MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address. MAC Address Control Check “Enable” to enable the “MAC Addre ss Control”. All of the settings in this page will take effect only when “Enable” is checked. Connection control[...]

"Control table" is the table at t he bottom of the "MAC Address Contro l" page. Each row of this table indicates the MAC address and the expected IP addre ss mapping of a client. There are four columns in this table: MAC Address MAC address indicates a specifi c clie nt. Expected IP address of the corresponding client. K eep it [...]

In this scenario, there are three clients listed in the Control Tabl e. Clients 1 and 2 are wireless, and client 3 is wired. 1. The "MAC Address Control" function is enabled. 2."Connection control" is enabled, and all of the wired and wireless clients not listed in the "Control table" are "allowed" to connect[...]

6. Clients 1 and 2 are allowed to associate to t he wireless LAN, but a wireless client with a MAC address not specified in the Contro l table is denied to associate to the wireless LAN. Client 3 is a wired client and so is not affected by Association control. Miscellaneous Items Remote Administrator Host/Port In general, only Intranet user can bro[...]

Administrator Time-out The time elapses of no activity to logout automatica lly. Set it to zero to di sable this feature. Discard PING from WAN side When this feature is enabled, any host on the WAN cannot ping this product. SPI Mode When this feature is enabled, the router will record the packet information pass through the router like IP address,[...]

System Time Get Date and Time by NTP Protocol Select it if you want to Get Date and Time by NTP Protocol. Time Server Select a NTP time server to consult UTC time Time Zone Select a time zone where this device locates. Set Date and Time manually Select it if you want to Set Date and Time manually.[...]

Set Date and Time manually Select it if you want to Set Date and Time manually. Function of Buttons Sync Now: Synchronize system time wit h network time server Daylight Saving: Set up where the location is. System Log This page support two methods to export system logs to specific destination by means of syslog(UDP) and SMTP(TCP). The items you hav[...]

Input the SMTP server IP and port, which are conc ated with ':'. If you do not specify port number, the default value is 25. For example, "ma il.your_url.com" or "192.168.1.100:26". Send E-mail alert to Send e-mail alert to the recipient who will receive these logs. Y ou can assign more than 1 recipient by using '[...]

To enable Dynamic DNS click the check box next to Enable in the DDNS field. Next you can enter the appropriate info rmation about your Dynamic DNS Server. You have to define: Provider Host Name Username/E-mail Password/Key You will get this information when you regi ster an account on a Dynamic DNS server. Example: After Dynamic DNS setting is conf[...]

SNMP Setting In brief, SNMP, the Simple Network Management Protoc ol, is a protocol designed to give a user the capability to remotely manage a computer netw ork by polling and setting terminal values and monitoring network events. Enable SNMP You must check either local or remote or both to enable SNMP function. If Local is checked, this device wi[...]

Routing Routing Tables allow you to determine which physical interf ace address to use for outgoing IP data grams. If you have more than one routers and subnets, you will need to enable routing table to allow packets to find proper routing path and allow diffe rent subnets to communicate with each other. Routing Table settings are settings used to [...]

Configuration on NAT Router Destination SubnetMask Gateway Hop Enabled 192.168.1.0 255.255.255.0 192.168.123.216 1 ˇ 192.168.0.0 255.255.255.0 192.168.123.103 1 ˇ So if, for example, the client3 wanted to send an IP data gram to 192.168.0.2, it would use the above table to determine that it had to go via 192.168.123.103 (a gateway), And if it sen[...]

Schedule Rule You can set the schedule time to decide which serv ice will be turned on or off. Select the “enable” item. Press “Add New Rule” You can write a rule name and set which day and what time to schedule from “Start Time” to “End Time”. The following example configure “ ftp time” as everyday 14:10 to 16:20 52[...]

Schedule Enable Selected if you want to Enable the Scheduler press “ Edit” To edit the schedule rule, press “ Delete” To delete the schedule rule and the rule #of t he rules behind the delet ed one will decrease one automatically. Schedule Rule can be applied to Vi rtual server and Packet Filter.[...]

Qos Rule Local IP: Please input Client IP, Example: 192.168.12.33. Remote Priority: Please input Global IP and port, Example: 168.96.2.3 and port 21 54[...]

Toolbox System Log Firmware Upgrade You can upgrade firmware by clicking Firmware Upgrade button. Backup Setting You can backup your settings by clicking the Backup Setting button and save it as a bin file. Once you want to restore these settings, please click Firmware Upgrade button and use the bin file you[...]

saved. Reset to default You can also reset this product to factory default by clicking the Reset to default button. Reboot You can also reboot this product by clicking the Reboot button. Miscellaneous Items MAC Address for Wake-on-LAN Wake-on-LAN is a technology that enables you to power up a networked device remotely. In order to enjoy this featur[...]

Appendix A 802.1x Setting Figure 1: Testing Environment (Use Windows 2000 Radius Server) Equipment Details PC1: Microsoft Windows XP Professional without Serv ice Pack 1 and LevelOne Wireless PCI Card PC2: Microsoft Windows XP Professional with Service Pack 1a or latter and LevelOne Wireless PCI Card. Authentication Server: Windows 2000 RADIUS serv[...]

The following test will use the inbuilt 802.1X authentication method such as ,EAP_TLS, PEAP_CHAPv2(Windows XP with SP1 only) , and PEAP_TLS(Win dows XP with SP1 only) using the Smart Card or other Certificate of the Windows XP Professional. DUT and Windows 2000 Radius Server Setup Setup Windows 2000 RADIUS Server We have to change authentication me[...]

Figure 2: Enable IEEE 802.1X access control / Smart card or certificate properties Windows 2000 RADIUS server Authentication testing: DUT authenticate PC1 using ce rtificate. (PC2 follows the same test procedures.) 1. Download and install the ce rtificate on PC1. (Fig 4) 2. PC1 chooses the SSID of DUT as the Access Point. 3. Set authentication type[...]

Figure 4: Certificate information on PC1 Figure 5: Authenticating 60[...]

Figure 6: Authentication success DUT authenticate PC2 using PEAP-TLS. 1. PC2 chooses the SSID of DUT as the Access Point. 2. Set authentication type of wireless cli ent and RADIUS server both to PEAP_TLS. 3. Disable the wireless c onnection and enable again. 4. The DUT will send the user's certificate to the RADIUS server, and then send the me[...]

Appendix B WPA-PSK and WPA Wireless Router: LAN IP: 192.168.123.254 WAN IP: 192.168.122.216 Radius Server: 192.168.122.1 User A: XP Wireless Card:Ti-11g Tool: Odyssey Client Manager Refer to: www.funk.com Download: http://www.funk.com/News&Events/ody_c_wpa_preview_pn.asp Or Another Configuration: WPA-PSK In fact, it is not necessary for this fu[...]

Method1: 1. Go to the Web manager of Wireless Router to configure, like below: 2. Go to Odyssey Client Manager , first choose “Network” Before doing that, you should verify if the software can show the wireless card. Open “Adapters” 3. Add and edit some settings:[...]

4. Back to Connection: Then Select “Connect to network” You will see: Method2: 1. First, patch windows XP and have to install “Service package 1” Patch: http://www.microsoft.com/downloads/details .aspx?displaylang=en& FamilyID=5039ef4a- 61e0-4c44-94f0-c25c9de0ace9 64[...]

2. Then reboot. 3. Setting on the router and client: Router: Client: Go to “Network Connection” and select wireless adapter. Choose “View available Wireless Networks” like below: Advanced choose “123kk” WPA: For this function, we need the server to aut henticate. This function is like 802.1x.[...]

The above is our environment: Method 1: 1. The User A or User B have to get certificate from Radius, first. http://192.168.122.1/certsrv Account: fae1 Password: fae1 2. Then, Install this certificate and finish. 3. Go to the Web manager of Wireless Router to configure, like below: 66[...]

4. Go to Odyssey Client Manager, choose “Pro files” and Setup Profile name as “1” Login name and passwd are fae1 and fae1. Remember that you get certific ate from Radius in Step1. 5. Then Choose “certificate” like above.[...]

6. Then go to Authentication and first Remove EAP/ TLS and Add EAP/TLS again. 68[...]

7. Go “Network” and Select “1” and ok 8. Back to Connection and Select “123kk. If successfully , the wireless client has to authenticat e with Radius Server, like below:[...]

9.Result: Method 2: 1. The UserA or UserB have to get certificate from Radius, first. http://192.168.122.1/certsrv Account: fae1 Password: fae1 2. Then Install this certificate and finish. 3. Setting on the router and client: Router: 70[...]

Client: Go to “Network Connection” and select wireless adapter. Choose “View available Wireless Networks” like below: Advanced choose “123kk” Select “WirelessCA and Enable” in Tr usted root certificate authority:[...]

Then, if the wireless client wants to associ ate, it has to request to authenticate. 72[...]

Appendix C FAQ and Troubleshooting What can I do when I have some trouble at the first time? 1. Why can I not configure the router even if th e cable is plugged in th e ports of Router and the led is also light? A: First, make sure that which port is plugged. If t he cable is in the Wan port, please change to plug in LAN port 1 or LAN port 4: Then,[...]

2. Why can I not connect the router even if the cable is plugged in LAN port and the led is light? A: First, please check Status Led. If the device is normal, t he led will blink per second. If not, please check the blinking Status led shows. There are many ab normal symptoms as below: Status Led is bright or dark in work: The system hanged up .Sug[...]

5. When I use Static IP Address to roam Internet, I can access or ping global IP 202.93.91.218, But I can not access the site that inputs domain name, for example http://espn.co m ? A: Please check the DNS config uration of Static IP Address. Pleas e refer to the information of ISP and assign one or two in DNS item. How do I connect router by using[...]

Then click and will see the AP list that wireless client can be accessed: If the client can not access your wireless router, please refresh network list again. Choose the one that you will want to connect and connect: If successfully, the computer will show User will also retrieve IP from router: 2. When I use AES encryption of WPA-PSK to connect e[...]

If SSID is default and click “Properties” to check if the driver of wirel ess client supports AES encryption. 3. When I use wireless to connect the router, but I find the signal is very low even if I am close to the router? A: Please check if the wireless client is normal, first. If yes, please send the unit to the seller and verify what the pr[...]

78 Technical Specifications General Model WBR-6001 N_Max Wireless Broadband Router Data Transfer Rate 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54Mbps Max physical rate up to 300 Mbps in 802.11n mode Transmit Power 802.11b: 17±2dBm 802.11g: 15±2dBm 802.11n: 14±2dBm Frequency Range America/ FCC: 2.412~2.462GHz (11 Chann els) Europe/ ETSI: 2.412~2.[...]