SMC Networks SMCWBR 14-GM manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of SMC Networks SMCWBR 14-GM, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of SMC Networks SMCWBR 14-GM one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of SMC Networks SMCWBR 14-GM. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of SMC Networks SMCWBR 14-GM should contain:
- informations concerning technical data of SMC Networks SMCWBR 14-GM
- name of the manufacturer and a year of construction of the SMC Networks SMCWBR 14-GM item
- rules of operation, control and maintenance of the SMC Networks SMCWBR 14-GM item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of SMC Networks SMCWBR 14-GM alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of SMC Networks SMCWBR 14-GM, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the SMC Networks service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of SMC Networks SMCWBR 14-GM.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the SMC Networks SMCWBR 14-GM item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    [...]

  • Page 2

    1 SMCWBR14-GM W ir eless Br oadband Rout er with MIMO T echnology User ’ s Manual[...]

  • Page 3

    2 Copyright The contents o f this publication may no t be reproduced in any par t or as a whole, stored, transcribed in a n in form ation retrieval syste m, transl ated into an y lan guage, or transmitted in an y form or by any means, mechanical, magnetic, elec tronic, op tical, photoc opy ing , manual, or otherw ise, without the prior written perm[...]

  • Page 4

    3 T ab le of Contents Introduction Features System Requirem ents Package List Hardware Ports and Buttons LED Indicators Getting S tarted Configuring W ireless Broa d band Ro u ter System Settings W AN Settings LAN Settings W ireless Settings NA T Firewall Dynami c DNS Services UPnP System T ools[...]

  • Page 5

    4 Introduction Congratulati on s on your purchase of th is outstanding W ireless Broadband Router . This produc t is specifically d esigned for Small Office and Home Office needs. It provid es a complet e SOHO solution for Internet surfin g, and is easy to co nfigure and op erate even f or non-t echnical us ers. Instruct ions for installing a nd c [...]

  • Page 6

    5 Enable you to expose WWW , FTP and other services on your LAN to be accessible to Inte rnet users. User -Definable Applica tion Sensing T u nnel User can define the attributes to suppor t the special applica tions requiring m ultiple connections, like Internet ga m ing, video conferenc ing, Internet teleph ony and so on, then this prod uct can se[...]

  • Page 7

    6 VPN Pass-through The router also supports VPN pass-through. 802.1X support ed When the 802.1X function is enable d, the W ireless user must authentica te to this router fi rst to use the Network service. Support WPA-PSK and WPA When the WP A function is enabled, the W ireless user must authen tic ate to this router firs t to use the Networ k ser [...]

  • Page 8

    7 connection. TCP/IP and NetBIOS network protocol instal led. Internet Browser installed. The SMCWBR 14-G M requires an e xternal 12V , 1A power supply which is inc lude d in the SMCWBR14-GM packa ge. For safe operatio n, please use on ly the power adapter provid ed by SMCWBR14-GM. Package List W ireless broadban d router Installation CD- ROM Power[...]

  • Page 9

    8 W AN the port where you will connect your cable (or DSL) m odem or Ethernet ro uter . Port 1-4 the ports where you will connect ne tw or ked com puters an d other devices. LED Ind icat ors Front Panel Figure 1-2 Front Panel LED: LED Function Color Sta tus Description Powe r Powe r indication Green On Power is being a pplied to this product. Sta t[...]

  • Page 10

    9 Link. 1~4 Link status Green On An active station is connected to the corr espon din g LAN port. Blinking The correspon ding LAN port is sending or receiving data. Speed 10/100 Data Rat e Green On Data is tran smitting in 100Mbps on the co rresponding LAN port. Reset T o reset system settings to factory defaul ts Getting S tarted Proced ure for Ha[...]

  • Page 11

    10 Figure 2-1 Se tup o f LAN and W AN connections for this product. Setup W AN connection Prepare an Ether net cable for connectin g this product to your cable/xDSL modem or Eth ernet backbone. Fig ure 2-3 illustrates the W AN connection. Power on Connecting the power cord to power inlet an d turni ng the pow er switch on , this produc t wil l auto[...]

  • Page 12

    11 items in sequence: Is the Ethernet ca ble correctly connec te d between this product and your computer ? Configuring W ireless Broadband Router This product provides W eb based configuratio n scheme that is, conf iguring by your W eb browser , such as Netscape Communicator or Inter net Explorer . This appr oach can be adopte d in any MS W indows[...]

  • Page 13

    12 Activate your br owse r , and disa ble the proxy or add the IP addre s s of this pr oduct into the exceptions . Then, type this product’ s IP addre ss in the Location (for Ne tscape) or Address (for IE) field and press ENTER. For example: http://1 92.168.2.1 . After the conn ection is established, you will see the web user interface of this pr[...]

  • Page 14

    13 This option prov ide s the func tion for ob se rvin g thi s produc t’ s working status: W AN Port Status. If the W AN port is assigned a dynamic IP , there may appear a “ Rene w ” or “ Release ” button on the Sidenote c olumn. Y ou can click this bu tton to renew or r elea se IP m anually . Wiz a rd[...]

  • Page 15

    14 Setup W izard will guide you through a ba sic configuration pr ocedure step by s tep. Set the basic W ireless Parameters and P ress ”Next >” Setup Wizard - Select Time Z one[...]

  • Page 16

    15 Select the W AN Access T ype Set your username an d password. Y ou might select fr om the 3 diffe rent conn ec tion profiles. Be car eful with Always onlin e if you do not have a flatrat e-connection![...]

  • Page 17

    16 System Settings Tim e Zo ne Password Se ttin gs[...]

  • Page 18

    17 Enable / Disable Remote Managemen t W AN Setup This option is primar y to enable th is produc t to work proper ly . The setting items and the web[...]

  • Page 19

    18 appearance de pend on the W AN type. Choose cor rec t W AN type before you start. St a t i c I P A d d r e s s : ISP assigns you a static IP address. W AN IP Address, Subnet Mask, Gateway , Primary and Secondary DNS: enter the proper setti ng pr ovided by your ISP . Dynamic IP Address : Obtain an IP address from ISP automatica l ly . Host Nam e:[...]

  • Page 20

    19 the password, kee p it empty . Connectio n ID: optional. Input the con nection ID if your IS P requires i t. Maximu m Idle T ime: the ti me of no act ivity to d isconnect your P PTP session. Set it to zero or enable Auto-reconnect to disabl e this feature . If Auto-reconnect is ena ble d, this product will connect to ISP automatically , after sy[...]

  • Page 21

    20 DNS Set the prima ry and Secondar y DNS server(s) as assigne d by your ISP . If you are using dif f erent DNS servers than your ISP , the Internet response-times might be slower and some sites mig ht beco me inaccesib le.[...]

  • Page 22

    21 LAN & DHCP Server The settings of a TCP/IP environment include host IP , Subnet Mask, Gateway , and DNS configurations. It is not easy to manua ll y configure all the computers and dev ices in your network. For tunately , DHCP Server provides a rather sim ple approach to ha ndle all these sett ings. This product supports the fun cti on of DH[...]

  • Page 23

    22 W ireless Settings W ireless settin gs al low you to set the w ireles s configuration item s. Network ID (SSID) : Network ID is used for identifyi n g the W ireless LAN (WLAN). Client stations can roam freely over this product and other Access Points that have the same N etwork ID. (The factor y setting is “ default ”) Channel : The radio ch[...]

  • Page 24

    23 RADIUS Server : IP address or the 802.1X server’ s domain-name. RADIUS Sh ared Key Key value sha red by the RAD I US server and this router . This key value is consistent with the key value in th e RADIUS server . WP A-PSK Select Encryp tion and Pre-share Key Mode. If you select H EX, you have to fi ll in 64 hexadecimal (0, 1, 2…8, 9, A, B?[...]

  • Page 25

    24 WP A Check Box w as used to switch the funct ion of the WP A. When the WP A function is enab led, the Wi r e l e s s u s e r m u s t authenticate to this router first to use the Netw ork service. RADIUS Server IP address or the 80 2.1X server ’ s domain-name. Encrypt ion and RADIU S Shared Key If you select HEX , you have to fil l in 64 hexade[...]

  • Page 26

    25 the length of Pr e-share key is from 8 to 63. Key value sha red by the RAD I US server and this router . This key value is consistent with the key value in the RADIUS server . WP A-PSK /WP A2-PSK Select Encryp tion and Pre-share Key Mode. If you select H EX, you have to fi ll in 64 hexadecimal (0, 1, 2…8, 9, A, B…F) digits, if AS CII, the le[...]

  • Page 27

    26 Blue Line: W ireless B l a c k L i n e : W i r e If the Settings are ok, the client1 an d client2 can get I P from DHCP server . Of AP1.Then Client 1 and Client2 can get inform at ion each ot her . AP1 Setting : AP1 ÅÆ AP2 (Rem ote Mac: 00-50-1 8-00-0 f-fd) AP1 ÅÆ AP3 (Rem ote Mac: 00-50-1 8-00-0 f-fc )[...]

  • Page 28

    27 AP2 Setting : AP2 ÅÆ AP1 (Rem ote Mac: 00-50-1 8-00-0 f-fe ) AP3 Setting: AP3 ÅÆ AP1 (Rem ote Mac: 00-50-1 8-00-0 f-fe )[...]

  • Page 29

    28 NA T V irtual Server This product’ s NA T firewall filters out u nre cognized packet s to protect your Intranet, so a ll hosts behind this product are invisi ble to the outside world. If you wish, you can m ake some of them accessible by enab ling the V irtual Server Mapping. A virtual server is defined as a Service Port , and all requests to [...]

  • Page 30

    29 Some applicat i ons require multiple c onnections, like Inter net games, V ideo conferencing, Internet teleph on y , etc. Because of the fire wall function, these app lications cannot work w it h a pure NA T router . The Special App lications feature allo ws some of t hese applic ations to wo rk with this prod uc t. If the mechanism of S pecial [...]

  • Page 31

    30 Firewall Parent al Contro l This option lets you enable / disable web sites / services by setting up rules.[...]

  • Page 32

    31 MAC Filter This option le ts you control the W ireless clients connec tiong to your MIMO W ireless Router . Each on of them will be checked before letti ng them connect wirelessly . This option d oes not work for wired client PCs. Y ou can select from two differe nt policies: Allo w : will let all compu ters access the netw ork, except the ones [...]

  • Page 33

    32 URL (W ebsite) Blocking URL B locking will block LAN computer s to connect to pre-defined W ebsites. The major dif ference betwee n “Domain filter” a nd “URL Blocking” is Domain filter require user to input suf fix (like .com or .or g, etc), while URL Blocking require use r to input a keyword on ly . In other words, Dom ain filter can bl[...]

  • Page 34

    33 Advanced Fir ewall Se ttings Enable the Advanced F irewall Protectio n if you want: Hacker attack monito ring a nd logging Advanced System Log Email Notification Enable the Dis card Ping from W AN option if you don’ t want to be seen o n the Internet. Y ou can also enable / disable V PN protocols to pass t hrough your NA T Firewall Set up your[...]

  • Page 35

    34 Demilita rized Zone (DMZ) This option le ts you open all por ts to one workstation be hind your Router . Be careful with this option, because it let’ s everybody access that partic ular PC fr om ever yw here.[...]

  • Page 36

    35 Dynamic DNS Services T o host your server on a changing IP address, you have to use dy namic domain name service (DDNS). So that anyone wishing to reach your hos t only needs to know the name of it. Dynam ic DNS will map the name of your host to your current IP address, which changes each tim e you conn ect your Internet service provider . Befor[...]

  • Page 37

    36 UPnP The Universal Plug and Play architec t ure offer s pervasive pe er- to- peer network con nec tivi ty of PCs of all fo rm factors, int elligent appli ances, and wirel ess devices. UPnP en ables seamless proximity networ kin g in addi tio n to contro l and data trans fer among networked de vices in the home, office and everywhere in betw ee n[...]

  • Page 38

    37 Configuration T ools Firmwar e Upgrade Y ou can upgrade firmw are by clicki ng Apply button.[...]

  • Page 39

    38 Backup Settings Y ou can backup yo ur settings by clic king the Back up Se ttin g button and save it as a bin file. Once you want to restore these settin gs, please click Firm war e Upgrade button an d use the bin file you saved. Reset T o Factory Defaults Y ou can also re se t this product to fac tory default by clicking the Reset to default bu[...]

  • Page 40

    39 Appendix A TCP/IP Configuration f or W indows 95/98 This section i n troduces you how to ins tall TCP /IP protocol into your pe rsonal computer . A nd suppose you h ave been successfu lly installed one network car d on your persona l computer . If not, please refe r to your network car d manual. Moreover , the Section B.2 te lls you how to set T[...]

  • Page 41

    40 The TCP /IP protocol sha ll be listed in the Networ k window . Click OK to com plete the i nstall procedure and restart your PC to enab le t he TCP/I P protocol. A.2 Set TC P/I P Protoc ol for W orking with NA T Router Click St a r t button and cho ose Setti ngs , then click Contr ol Panel . Double cli ck Network icon. Select the TCP/IP line tha[...]

  • Page 42

    41 Click Pr operties button to set the TCP/IP protocol for this NA T Router . Now , you have two setting metho ds :[...]

  • Page 43

    42 Select Obtain an IP address automatically in the IP Address tab. Don’ t input any value i n the Gateway ta b.[...]

  • Page 44

    43 Choose Disable DNS in the DNS Configuration tab. Configur e I P manually Select Specify an IP address in the IP Address tab. The default IP address of this pr oduct is 192.168.2.1. So please use 192. 168.2.xxx (xxx is between 1 and 253) for IP A ddr ess field and 255.255.255. 0 for Subnet Mask fiel d.[...]

  • Page 45

    44 In the Gat eway tab, add the IP address of this product (default IP is 192.168.2.1) in the New gateway fiel d and click Add button. In the DNS Configuration tab , add the DNS values wh ich ar e provided by the ISP into DNS[...]

  • Page 46

    45 Server Search Order field and click Add button. Appendix B 802.1x Settin g Figure 1: T esting Environment (U se W indows 2000 Radius Server) 1 Equipment Details PC1:[...]

  • Page 47

    46 Microsoft W indows XP Professional without Service Pack 1. D-Link DWL-650+ wireless LAN adapte r Driver ver s ion: 3.0.5.0 (Driver da te: 03.05.2003) PC2: Microsoft W indows XP Professional with Service P a ck 1a. Z-Com XI-725 wireless LAN USB adapt er Driver ver s ion: 1.7.29.0 (Driver date: 1 0.20.2001) Authentica tio n S erver : W indows 2000[...]

  • Page 48

    47 Enable the 802.1X (check the “Enable chec kbox“). Enter the RADIUS server IP . Enter the sha red key . (The key shared by the RADIU S server and DUT). W e will chang e 802.1X encrypti on key le ngth to fit the vari able te st conditio n. Setup Network adapter on PC 1. Choose the IEEE8 0 2.1X as the authentication m ethod. (Fig 2) Note. Figur[...]

  • Page 49

    48 Figur e 2: En able IEE E 802. 1 X acce ss con t r ol[...]

  • Page 50

    49 Figure 3: Smart card or certificate pr operties 4. W indows 2000 RADIUS serv er Authentication testing: 4.1DUT authenticate PC1 us ing certificate. (P C2 fo llows the same test procedures.) Down load and i nstall the ce rtificat e on PC1. (Fi g 4) PC1 choose the SSID of DUT as the Access Point. Set authentication type o f wireless client and RAD[...]

  • Page 51

    50 Figur e 4: Certificate inf ormation on PC1 Figur e 5: Authenticating[...]

  • Page 52

    51 Figure 6: Authentication success 4.2 DUT authenticate P C2 using PEAP -TLS. PC2 choose the SSID of DUT as the Access Point. Set authentication type o f wireless client and RADIU S server both to PEAP_TLS. Disabl e the wire less conne ction and en able again . The DUT will send the user's certifica te to the RADI US server , and then send th[...]

  • Page 53

    52 Appendi x C WP A-PS K and WP A W ireless Route r : LAN IP: 192.168.2.1 W AN IP: 192.168.122. 216 Radius Server: 192.1 68.12 2. 1 UserA : XP W ireless C ard:T i-1 1g T ool: Ody ssey Client Manag er Refer to: www .funk.com Download: h t tp://www .funk.com/News&E vents/ody_c_w pa_preview_p n.asp[...]

  • Page 54

    53 Or Another Configuration: WPA-PSK In fact, it is not ne cessary for this funct ion to authentica te b y Radius Server, the clien t and wireless Router authenticate by the mselves. Method1: 1. Go to the Web m anage r of Wireless Router to confi gure, like below: 2. Go to Odyssey Client Manager , first choose “Netw ork” Before doing that, you [...]

  • Page 55

    54 Open “Adapter s” 3. Add and edi t som e settings:[...]

  • Page 56

    55 4. Back to Connection: Then Select “Connec t to network” Y ou will see: Method2:[...]

  • Page 57

    56 1. First, patch windows XP and have to install “Service pa ckage 1” Patch: http://www .microsoft.co m/downloads/d etails.aspx?dis playlang= en&FamilyID=5039e f4a-61e0-4 c44-9 4f0-c25c9de0a ce9 2. Then reboot. 3. Setting on the router and client: Router: Client: Go to “Network Connectio n” and select wireless ada pter . Choose “V ie[...]

  • Page 58

    57[...]

  • Page 59

    58 WP A: For this function, w e need the ser ver to authentica te. This function is like 802.1x. The above is our environmen t: Method 1: 1. The U serA or UserB have to ge t certificate from Radius, first. http://192. 168.122.1/certsrv account : fae1 passwd : fae1[...]

  • Page 60

    59 2. Then, Install this cer tifica te and fin ish. 3. Go to the Web m anage r of Wireless Router to confi gure, like below: 4. Go to Odyssey Client Mana ger , choose “Profiles” and Setu p Pr ofile na m e as “1”[...]

  • Page 61

    60 Login name and pa ssword are fae1 and fa e1. Remember that you ge t certificate from Radi us in Step1. 5. Then Choose “ certificate” like above.[...]

  • Page 62

    61[...]

  • Page 63

    62 6. Then go to A uthentication and first Remove EAP/ TLS and Add EAP/TLS again.[...]

  • Page 64

    63 7. Go “Netwo rk” and Select “1” and ok[...]

  • Page 65

    64 8. Back to Connect ion an d S elec t “12 3kk. If successfully , the wireless client has to authenticate w ith Radius Ser ver , like below: 9.Resu lt: Method 2: 1. The U serA or UserB have to get certificat e from Radius,first.[...]

  • Page 66

    65 http://192. 168.122.1/certsrv account:fae1 passwd:fae1 2. Then I nstall this certificate and finish. 3. Setting on the router and client: Router:[...]

  • Page 67

    66 Client: Go to “Network Connectio n” and select wireless ada pter . Choose “V iew available W ireless Networks” li ke be low: Advanced Æ choose “123kk” Select “W irelessCA and Ena b le” in T rusted root certificate authority:[...]

  • Page 68

    67 Then, if the w irele ss client wants to assoc iate, it has to re quest to authentica te. Appendix D F AQ and T roubleshoo ting Reset to factory Defau lt There are 2 m ethods to reset to default. Restore with RESET b utton First, turn of f the router and pr e ss the RESET button in. And then, power on the router and push the RESET button down unt[...]

  • Page 69

    38 T esla Irvine, CA 92618 Phone: (949) 679-8000 TE CHNICAL SUPPOR T F r om U.S.A. and C anada (2 4 hours a da y , 7 day s a week ) (800) SMC -4- Y OU Phn: (94 9) 6 7 9-8000 F ax: (94 9) 67 9-1481 ENGLISH T echnical S upport information a vailable at www .smc.c om FRENCH Inf ormations Support T echnique sur www .smc. com DEUTSCH T echnischer Suppor[...]