SMC WBR14-3GN Barricade manual

Barricade TM N Dr aft 11n Wir eles s 3G Br oadband R out er 802. 11b / g/ n Wirele ss AP /R outer SMCWBR14 - 3GN[...]

[...]

20 Mason Ir vine, CA 92618 Phone: (949) 67 9-8000 802.11b/g/n Wireless AP/Router User Guide February 2009 Pub. # 149100043400A E022009-AP-R01[...]

Information furnished by SMC Networ ks, Inc. (SMC) is believed to be accurate and reliable. However , no responsibility is as sumed by SMC for its use, nor for any infringements of patents or other rights of third p ar ties which may result from its use. No license is granted by im plication or otherwise under any patent or patent rights of SMC. SM[...]

v Limited Warranty Limited Warranty S tatement: SMC Networks, Inc. (“SMC”) warrants its product s to be free from defects in workmanship and materi als, under normal use and service, for the applicable warranty term. All SMC pr oducts ca rry a standard 90-day limited warranty from the date of purchase from SMC or its Authoriz ed Reseller . SMC [...]

vi NOT BE LIABLE UNDER THIS W ARRANTY IF ITS TESTING AND EXAMINA TION DISCLOSE THE ALLEGED DEFECT IN TH E PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER’S OR ANY THIRD PERSON’S MISUSE, NEGLECT , IMPROPER INST ALLA TION OR TESTING , UNAUTHORIZED A TTEMPTS T O REP AIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT , FI[...]

vii Compliances Federal Communication Commission Interferenc e Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Ru les. These limits are designed to provide reasonable protection against harmful interfer ence in a residential installation. This equipment genera[...]

viii EC Conformance Declara tion Marking by the above symbol indicates comp liance with the Essential Requiremen ts of the R&TTE Directive of the European Uni on (1999/5/EC). T his equipment meets the following conformance standards: • EN 60950-1: 2001 Safety of Information Technology Equipment • EN 50392: 2004 Generic standard to demonstra[...]

ix This device is intended for use in the fo llo wing European Community and EFT A countries: Czech Estonian Eesti Käesolevaga kinnitab SMC seadme Radio LAN device vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatu d direktiivist tulenevatele teistele asjakohastele sätetele. English Hereby, SMC, declares that th is Radio LAN device is in [...]

x Lithuanian Maltese Malti Spanish Español Por medio de la presente SMC declara que el Radio LAN device cumple con los requisitos esen ciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE Polish Polski Portuguese Português SMC declara que este Radio LAN device está conforme com os requisitos essenciais e out[...]

xi About This Guide Purpose This guide details the hardware features of the wireless AP/Router , including its physical and performance-related characteristics, and how to install the device and use its configuration software. Audience This guide is for PC users with a working k nowledge of computers. Y ou should be familiar with Windows operating [...]

xii[...]

Table of Contents Chapter 1: Intr od uction 1-1 Package Checkl ist 1-1 Hardware Description 1-2 LED Indicators 1-4 Ethernet RJ-45 Ports 1-5 3G Modem USB Port 1-5 3G Button 1-5 Power Socket 1-5 Reset Button 1-6 WPS Button 1-6 Chapter 2: Ins tallation 2-1 Router Mode 2-1 AP Mode 2-2 Chapter 3: Networ k Planning 3-1 Internet Gateway Router 3-1 LAN Acc[...]

Contents Management IP 5-4 WAN Setting 5-5 WAN Connection 5-5 Backup WAN 5-5 Common Settings 5-6 DHCP 5-7 Static IP 5-8 PPPoE 5-9 3G 5-11 PPTP 5-14 L2TP 5-15 Bigpond 5-17 Wi-Fi 5-18 LAN Setting 5-19 QoS Setting 5-20 Wireless Settings 5-22 Basic Settings 5-23 Advanced Settings 5-25 WLAN Security 5-27 MAC Access Control Lists 5-37 Wi-Fi Protected Set[...]

System Logs 5-68 3G Access History 5-69 Appendix A: Tr oubleshooting A-1 Appendix B: Specifications B-1 Appendix C: License Information C-1 The GNU General Public License C-1 Glossary Index[...]

Contents[...]

1-1 Chapter 1: Introduction The SMCWBR14-3GN wireless AP/Router is an IEEE 802.1 1n wireless gateway router that connects your Internet access device (cable or ADSL modem) to your PC or local area network, or to it s own secure wireless network. The wireless AP/Rou ter can b e automaticall y configured wi th other Wi-Fi Protected Setup (WPS) device[...]

Introduction 1-2 1 Hardware Description Figure 1-1. Rear Panel Ethernet WAN RJ-45 Port Ethernet LAN RJ-45 Ports Security Slot 3G Modem USB Port Reset Button Power Socket[...]

Hardwar e Description 1-3 1 Figure 1-2 . Front Panel Figure 1-3. Botto m Panel Antennas WLAN Button WPS Butto n 3G Butt on AP/Router Mode Switch[...]

Introduction 1-4 1 LED Indicators The wireless AP/Router includes nine st atus LED indicators, as described in the following fi gure and t able. Figure 1-4. LED Indicators LED Status Description POWER On Green Indicates that t he system is working norma lly . W AN On/Flash ing Green Indicates a valid link on the W AN Ethernet port. Flashing indicat[...]

Hardwar e Description 1-5 1 * Slow flashing is an on-off cy cle of once every 2 seconds. The flashing lasts for 10 seconds then stops. **Fast flashing: on-off cycle of once of every 0.5 seconds ***Untra Fast flashing: on-off cycle of once of every 0.2 seconds Ethernet RJ-45 Ports The wireless AP/Router has the f ollowing RJ-45 port s: • The fo ur[...]

Introduction 1-6 1 Reset Button The Reset button can be used to re start th e wireless AP/Router or restore the factory default configuration. If you press the button f or less than 5 seconds, the wireless AP/Router will restart. If you press and hold down the button for 5 seconds or more, any configuration change s you may have made are removed an[...]

2-1 Chapter 2: Installation The wireless AP/Router has two basic operating modes that can be set through the switch on the bottom p anel of the device: • Router Mode — Normal gatewa y mode that connects a wired LAN and wireless clients to an Inte rnet access device, such as a cable or DSL modem. This is the factory set default mode. • AP Mode[...]

Installation 2-2 2 T o connect the wireless AP/Router in Router Mode for use as an Internet gateway , follow these step s: 1. Connect an Ethernet cable from the wi reless AP/Router’s W AN port to your Internet connecte d cable or ADSL modem. 2. Connect an Ethernet ca ble from the wirel ess AP/Router’s LAN port to your PC. Alternatively , you ca[...]

AP Mode 2-3 2 Figure 2-2 . AP Mode Connection T o connect th e wireless AP/Router for use as a n access point, follow th ese steps: 1. Using Ethernet cables , connect the wireless AP/Rout er ’s LAN and W AN ports to PCs or a LAN switc h. 2. Power on the wireless AP/Router by conne cting the AC power a dapter and plugging it into a powe r source. [...]

Installation 2-4 2[...]

3-1 Chapter 3: Network Planning The wireless AP/Router i s designed to be very flexib le in its dep loyment options. It can be used as an Internet gateway for a small net work, or as an access point to extend an existin g wired network to support wirel ess users. It also support s use as a wireless bridge t o connect two wi red LANs. This chapter e[...]

Network Planning 3-2 3 The private loca l network, connected to the LAN port or wireless interface, provi des a Dynamic Host Configuration Protocol (DHCP) server for all ocating IP addresses to local PCs and wireless cl ients, and Network Address T ranslation (NA T) for mapping the multiple "i nternal" IP addresses t o one "external&[...]

Wireless Client 3-3 3 Wireless Client The wireless AP/Router can operate as a wireless client on one V AP interface, which enables a connection to another Wi-Fi network. When the wire less client option is enabled as a W AN connection, the client V AP interface functions as an external gateway W AN port. When the wireless client option is en abled [...]

Network Planning 3-4 3 Wireless Bridge The IEEE 802.1 1 st andard defines a Wi reless Distribu tion System (WDS) for bridge connections between ac cess points. The wireless AP/Router can use WDS to forward traffi c on links between unit s. A single WDS bridge link can be speci fied for the WLAN1 interface. One end of a link must be configured as th[...]

4-1 Chapter 4: Initial Configuration The wireless AP/Router of fers a user-friendly web-based management interf ace for the configuration of al l the unit’ s features. Any PC direct ly attached to th e unit can access the management interf ace using a web browser , such as Internet Explorer (version 6.0 or above). This chapter describes the wirel[...]

Initial Configuration 4-2 4 Using the Setup Wizard There are only a few basic steps you nee d to set up the wireless AP/Router and provide a connection fo r network access for other wirele ss stations . The Setup Wizard t akes you through configuration procedures for the general network settings. Fo llow these steps: 1. Launch the Setup Wizard – [...]

Using the Setup Wizard 4-3 4 3. W AN Configuration – S pecifies the Interne t connection paramet ers for the wireless AP/Router’s W AN port. Click Next after completing the setup. The interface provides th e facility for Dual W AN connections for purposes of backing up th e main internet connection. Figure 4-4. Se tup Wizard - WAN Con figuratio[...]

Initial Configuration 4-4 4 Common Settings The common settings for ea ch W AN Connection mode are identical and are described in the secti on below . Figure 4-5. Com mon Settings W AN Ethernet MAC — Some ISPs limit Internet connections to a specified MAC address of one PC. This setting allows you to manual ly change the MAC a ddress of the wirel[...]

Using the Setup Wizard 4-5 4 Static IP Configures a st atic IP for the W AN port. Figure 4-6. Setup Wizard - W AN Static IP • IP Address : The IP address o f the wireless AP/Route r. Valid IP addresses cons ist of four decimal numbers, 0 t o 255, separated by periods. • Subnet Mask : The mask that identifies the host address bits used for routi[...]

Initial Configuration 4-6 4 DHCP Enables Dynamic Ho st Configuration Proto col (DHCP) for the WAN p ort. This setting allows the wireless AP/Router to automa tically obt ain an IP address from a DHCP server normally operated by the Internet Servi ce Provider (ISP). Figure 4-7. Setup Wizard - WAN DHCP[...]

Using the Setup Wizard 4-7 4 PPPoE Enable the wireless AP/Rou ter IP address to be assigned automat ically from an Internet service pr ovider (ISP) throug h an ADSL modem using Point-to-Poi nt Protocol over Et hernet (PPPoE). Figure 4-8. Setup Wizard - WAN PPPo E • PPPoE Network Mode : Sets a PPPoE netwo rk mode. (Default: DHCP) • PPPoE IP Addr[...]

Initial Configuration 4-8 4 3G Enables a 3G/3.5G wide-area wireless cellu lar link on the W AN port using an optional USB modem. Note: To use this option you need to first c onnect a 3G/3.5G USB modem to the USB port on the back of the unit and have regi stered an accoun t with a cellular operator. The following example shows the W AN function enab[...]

Using the Setup Wizard 4-9 4 The following c autionary message wi ll appear each time you save your setti ngs. Figure 4-10. Setup Wizard - WAN 3G PIN Code Warning An unauthenticat ed connection will displa y the message “Not dial yet” ben eath the PIN code, as shown in the following examp le. Figure 4-11. Setup Wizard - WAN 3G Un authenticated [...]

Initial Configuration 4-10 4 •D i a l C o d e : A dialled access code that connects th e USB device to the service provider. • A PN Servic e : The name that uniquel y identifies the cel lular operato r, access point name (APN). •3 G U s e r n a m e : The username of the acc ount registered wit h the service provider. • 3G Pa ssword : The pa[...]

Using the Setup Wizard 4-11 4 • Budget Policy : Enable or disa ble the action “Drop Current Cellula r connection” or “Disallow New Cell ular connection” if over budget. - Trigger by Limit Budget : - By Time: Set the specified percent age of time limit. - By Data : Set the specified pe rcentage of data limi t. - Action if Over Budget: Send[...]

Initial Configuration 4-12 4 • PPTP Network Mode : Sets a PPTP network mode. (Defaul t: DHCP) • IP Address : Sets the static I P address. (Default: 0.0.0.0, avai lable when PPTP Network Mode is set t o static IP.) • Subnet Mask : Set s the static IP subnet mask. (Default: 255.255.2 55.0, availabl e when PPTP Ne twork Mode is set to static IP.[...]

Using the Setup Wizard 4-13 4 • L2TP Network Mode : Sets a L2TP network mode. (Default: DHCP) • IP Address : Sets the static I P address. (Default: 0.0.0.0, avai lable when L2TP Network Mode is set t o static IP.) • Subnet Mask : Sets the static IP subnet mask. (Defaul t: 255.255.255.0, available when L2TP Network Mode is set to static IP.) ?[...]

Initial Configuration 4-14 4 WiFi Enables a W AN connection to a normal remote AP o ver a wireles s 802.1 1b/g/n connection. For t his W AN setting, the wireless AP/Rou ter operates as a Wi-Fi clien t to the remo te AP . Figure 4-16. Setup Wizard - WAN WiFi • Wirel ess MTU : Sets the maximum packet size that the WAN port may transmit. The Maximum[...]

Using the Setup Wizard 4-15 4 4. WLAN Settin g – Enables the wireless inte rface, select s the operating channel and configures SSIDs for both V APs. Click Next after compl eting the setup. Figure 4-17. Setup Wizard - WLAN Config uration The displayed items on this p age can be described as follows: • WLA N – Enables the communicat ion for th[...]

Initial Configuration 4-16 4 5. WLAN1/WLAN2 Security — Sets the wireless security encryptio n key for the wireless network. Figure 4-18. Setup Wizard - WLAN1 Security Authentication Mode – Configures the auth entication mode used by clien ts. See “Authentication Mode” on p age 5-29 for more information. (WLAN1/WLAN2 Default s: Open) 6. Clic[...]

5-1 Chapter 5: System Configuration The wireless AP/Router of fers a user-friendly web-based management interf ace for the configuration of al l the unit’ s features. Any PC directly at tached to th e unit can access the management interf ace using a web browser , such as Internet Explorer (version 6.0 or above). This chapter describes the wirel [...]

System Confi guration 5-2 5 The System Information page displays th e System, Management IP , WAN, LAN, WLAN, and WDS settings. Figure 5- 21. Syste m Information (Router mode )[...]

5-3 5 The information in this c hapter is organized to reflect th e structure of the web management screens for ea sy reference. The Configuration p ages include the options in the t able below . For detai ls on configuration fo r each feature, see the correspondi ng page number . Note: The displayed pages and se ttings may di ffer depending on whe[...]

System Confi guration 5-4 5 Network Settings The Network Settings p ages allow you to manage basic system con figuration settings. Note: In AP mode, the wireless AP/Router’s Netw ork Settings options are significantly reduced. Management IP Assigns an IP address for connecting to th e wireless AP/Router . Click on "Network Settings" fol[...]

W AN Setting 5-5 5 • Management IP Addr ess – Specifies an IP ad dress for management of the wireless AP/Router. Valid IP addresses consist of four de cimal numbers, 0 to 255, separated by periods. (Defau lt: 192.168.2.1 .) • Subnet Mask – Ind icates the loc al subnet mas k. Select the desired mask f rom the drop down menu. (Def ault: 255.2[...]

System Confi guration 5-6 5 Common Settings Common Settings are t he same for each W AN settings. This section describ es the common parameters. Figure 5-23. W AN Common Settings (Ro uter Mode) W AN Ethernet Speed — Configures the W AN Ethernet connection speed. (Default: Auto-Negoti ated) • Auto-Negotiated – Enables auto-negotiation. • 100[...]

W AN Setting 5-7 5 to identify netwo rk hosts by familiar names inst ead of the IP addresses. If you have one or more DNS servers located on the local network, type the IP addresses in the text fields provide d. Otherwise, leave the addres ses as all zeros (0.0.0.0). • Secondary DNS Serv er : The IP address of the Seconda ry Domain Name Se rver o[...]

System Confi guration 5-8 5 Static IP Configures the unit to use th e same IP address each time it conne cts. Figure 5-25. WAN Settings for Stat ic IP (Router mode) St a tic IP — Configures a static IP for the W AN port. • Static IP MTU : Sets the m aximum packet size that the WAN por t may transmit. The Maximum Transmission Unit (MTU) is expre[...]

W AN Setting 5-9 5 • WAN IP Alias – Adds more than one IP address to the network interface for multiple connectivi ty. - Enable : Enables the specifi ed IP address. - Add : Specifies a WAN IP alias. - Change : Changes the already specif ied IP alias. - Delete : Deletes the IP alias. PPPoE Enable the wireless AP/Rou ter IP address to be assigned[...]

System Confi guration 5-10 5 • PPPoE MRU : Sets the maximum p acket size that the uni t may receive from other units on th e network and s ends a message to inform the m of the set threshold. Maximum Receive Unit (MRU) is expressed in bytes. (Default: 1492 bytes) Note: Only change the default MTU and MRU values if specifically instr ucted by the [...]

W AN Setting 5-11 5 3G 3G technologies enable cellular netwo rk op erators to off er users a wider range of more advanced services while achievin g greater network cap acity throu gh improved spectral ef ficiency . Services include wide-a rea wireless voice telephony , video calls, and broadband wireless dat a, all in a mobile environment. T o use [...]

System Confi guration 5-12 5 - Manually: If the 3G start mode is set to “Manually”, then you can only connect to the 3G Internet s ervice by pressin g the 3G button on the wireless AP/ Router or by using the web interface. Figure 5-28. Manually Start 3G • Pin Code Protect : Enables the use of a PIN code (personal identificati on number) to en[...]

W AN Setting 5-13 5 • Budget Control : You can set a monthly limit on ti me or the total data. For more details, please refer to the following table. • Budget Criterion : - By Time : S pecify the amount of time (in hours) that can be used per month. - By Data : S pecify how much Download/Upload data (i n MBytes) can be transmitted per month. ?[...]

System Confi guration 5-14 5 PPTP Enable the Point-to-Point T unneling Protocol (PPT P) for implementing virtual private networks. The service is provided in many European countri es. Figure 5-29. WAN Settings for PPTP (Router mode) PPTP — Enable the Poin t-to-Point T unneling Protocol (PP TP) for implementing virtual private net works. • PPTP [...]

W AN Setting 5-15 5 • PPTP Username : Sets the PPTP user name for the WAN port. (Default: PPTP_USERNAME; Range: 1~32 charac ters) • PPTP Password : Sets a PPTP password for the WAN port . (Default: PPTP_PASSWORD; Range: 1~32 characters) • PPTP Server : Configures the IP address of the PPTP server interface. (Default: 0.0.0.0) L2TP Enable the [...]

System Confi guration 5-16 5 • Only change the default MTU an d MRU values if s pecifically i nstructed by the PPTP service provider. • L2TP Network Mode : Sets t he L2TP IP address assignment to Static IP or DHCP. (Default: DHCP) • IP Address : Sets the static IP address as given by the L2TP service provider. (Default: 0.0 .0.0, available wh[...]

W AN Setting 5-17 5 Bigpond BigPond is an Australian Int ernet service provider , is a subsidiary of T elstra and owns a majority share of Interne t access in Australia. Figure 5-31. WAN Settings for Bigpond (Router mode) Bigpond — Enables the settings o f T elstra Bigpond network service in Australi a. • Bigpo nd Username : Sets t he Bigpond u[...]

System Conf iguration 5-18 5 Wi-Fi Enables a W AN connection to a normal remote AP o ver a wireles s 802.1 1b/g/n connection. For t his W AN setting, the wireless AP/Rou ter operates as a Wi-Fi clien t to the remo te AP . Figure 5-32. WAN Settings for Wi-Fi (Router mode) Wireless Clie nt — Enable s the WLAN1 V AP to act as a wire less connecti on[...]

LAN Setting 5-19 5 LAN Setting The wireless AP/Router must have a vali d IP address for man agement using a web browser and to support other fe atures. The unit has a defa ult IP address of 192.168.2.1. Y ou can use this IP address or assign anoth er address that is compatibl e with your existing lo cal network. Cl ick on "Network Settings&quo[...]

System Confi guration 5-20 5 QoS Setting The QoS setting page is us ed to configure Quality of Service (QoS) for T raffi c Prioritization and Ba ndwidth Manageme nt. Qu ality of Service (QoS) prov ides users the control ove r which type of ou tgoing dat a traf fic is given pri ority by the router . The throughput rate of bot h the upload and downlo[...]

LAN Setting 5-21 5 • WAN Upload Bandwidth – Sets the maximum W AN upload bandwidth. (Default: 102400 kbp s) • L AN Download Bandwidth – Se ts the maximum LAN downl oad bandwidth. (Default: 102400 kbp s) Tr a f f i c C o n t r o l Q o S — The feature is applied when the ap plications use st atic ports to provide services. The wireless AP/R[...]

System Confi guration 5-22 5 Wireless Settings The IEEE 802.1 1n interfaces incl ude configuration optio ns for radio signal characteristics and wireless sec urity features. The wireless AP/Router can operate in five modes, mixed 80 2.1 1b/g/n, mixe d 802.1 1b/g , 802.1 1b only , 802.1 1g only or 802.1 1n only . Also note that 802.1 1g is backward [...]

Wireless Settings 5-23 5 Choosing to reboot af ter making configuration changes trigge rs a count down window that requires 60 seconds to compl ete. Figure 5-36. Implementing Changed Settings Basic Settings The Basic Setti ng page al lows you to en able the wireless interface, selec t which radio mode to use, choose the transmit frequency and confi[...]

System Confi guration 5-24 5 - 802.11b/g Mi xed : Both 802.11b and 802.11g client s can communicate with the wireless AP/Router (up to 108 Mbps), but dat a transmission rates may be slowed to compensa te for 802.11b clients. Any 802.11n clients will al so be able to communicate wit h the wireless AP/R outer, but they wi ll be limited to 802.11g pro[...]

Wireless Settings 5-25 5 Advanced Settings The Advanced Setting pa ge allows you to configure the more advanced radio settings, many of whi ch are enabled by default. Click “Wireless Set tings” fol lowed by “Advanced Set ting.” Figure 5-38. Advanced Radio Settings • b/g Protection – Enables a backward compatible protection system for 80[...]

System Confi guration 5-26 5 Note: Some 802.11n wireless clients may be capable of transmission rates of up to 600 Mbps, however the w ireless AP/Router will only be able to connect to them at a maximum transmission rate of 300 Mbps. 802.11b/g packets are referred to as non-HT packets, being transmit ted at lower throughput rates. HT mix ed format [...]

Wireless Settings 5-27 5 WLAN Security The wireless AP/Router’s wireless interfac e is configured by default as an “open system,” which broadcast s a beacon signal including the conf igured SSID. Wireless client s with a configured SSID of “ANY ” can read the SSID from the bea con, and automatically set their SSID to allo w immediate conn[...]

System Confi guration 5-28 5 Figure 5-39 . WLAN1 Settin gs Figure 5-40 . WLAN2 Settin gs[...]

Wireless Settings 5-29 5 Security Settings — The security set tings determine t he authenticatio n mode and enable WEP keys. • Authentication Mode – Configu res the authenticati on mode used by clients. (WLAN1/WLAN2 Defaults : Open) - Open : Open-system authentication accepts any client attempting to con nect the wireless AP/Rout er without v[...]

System Confi guration 5-30 5 - WPA Enterprise or WPA2 Enterprise : The WPA Enterprise mode uses IEEE 802.1X as its basic fra mework for user authenticati on and dynamic k ey management. IEEE 802.1X access sec urity uses Extensible Authentic ation Protocol (EAP) and req uires a configure d RADIUS authenticatio n server to be accessible in the ent er[...]

Wireless Settings 5-31 5 - TKIP/AES : Uses either TKIP or AES keys for encryption. WPA/WPA2 mixed modes allow both WPA and WPA2 clie nts to associate to a common SSID interface. In mixed mode, the unicast e ncryption cipher (TKIP or AES-CCMP) is negotiated for each cl ient. • Default Key ID – Sets the WEP key u sed for authentication . (Default[...]

System Confi guration 5-32 5 exchange and associati on. Pre-authenticat ion support attaches a secu rity flag to the packet he ader. (Default: Di sabled) RADIUS Remote Authenticati on Dial-in User Service (RADIUS) is an authenticat ion protocol that uses sof tware running on a central serve r to control access to RADIUS-aware devices on the network[...]

Wireless Settings 5-33 5 WDS Settings The WLAN1 radio interface can be confi gured to operate in a mode that allows it to forward traffi c directly to other access point uni ts. T o set up links between access point unit s, you must configure the Wirele ss Distribution System (WDS) forwarding table by spec ifying the wireles s MAC address of all un[...]

System Confi guration 5-34 5 WDS Setting — Configures WDS related parameters. Up to four MAC addres ses can be specified for each un it in the WDS network. WDS l inks may either be manually configure d (Bridge and Repeater modes) or auto-dis covered (Lazy mode). • WDS – Selects the WDS mod e of WLAN1. (Defaul t: Disabled) - Disabled : WDS is [...]

Wireless Settings 5-35 5 - AES : Uses Advanced Encrypt ion Standard (AES) keys for encryption. Use of AES-CCMP encryption is specifi ed as a standard requiremen t for WPA2. Before implementing WPA2 in t he network, be sure client devic es are upgraded to WPA2-compliant hard ware. - TKIP/AES : Use both TKIP and AES keys for encryption. WPA2 defines [...]

System Confi guration 5-36 5 - Open : Enables t he AP/Router to connect to a Wi-Fi network that does not require any authentic ation. In this mode th e default encrypti on type is "None." - Shared : The shared-key approach uses Wired Equivalent Privacy (WEP) to verify client ident ity by distri buting a shared key to clients before atte m[...]

Wireless Settings 5-37 5 Standard keys are either 5 or 13 alphanumer i c characters; or 10 or 26 hexadecimal digits. (Defau lt: ASCII, no prese t value) • WPA/WPA2 Pre-Shared Key – This option i s available onl y when Authenticat ion Mode is set to WPA Personal, WPA2 Personal or WPA/WPA2 Personal. Ente r a key as an easy-to-rememb er form of le[...]

System Confi guration 5-38 5 • R eset – Restores the previous MAC Acc ess Policy configurat ion information. •E n a b l e – Activates the MAC address into the ACL. • MAC Address – MAC Address to filter, specifi ed in the form of 12 hexadecimal digits, “xx:xx:xx:xx:xx:x x”. • Desc ription – An opt ional parameter to help identify[...]

Wireless Settings 5-39 5 Wi-Fi Protected Setup (WPS) Wi-Fi Protected Setup (WPS) is designed to ease inst allation and activa tion of security features in wirel ess networks. WPS has two basic modes of opera tion, Push-button Configurat ion (PBC) and Perso nal I dentificatio n Number (PIN). The WPS PIN setup is optional to the PBC setup and provi d[...]

System Confi guration 5-40 5 clients that were retaine d in memory. Only new cli ents will require authent ication. (Default: Disabl ed) • Submit – Enables the WPS con figuration. • Reset – Restores th e previous WPS configuratio n information. AP Security Information — Provides detailed WPS st atistical inf ormation. • WPS Configured ?[...]

Routing 5-41 5 • Add Enrollee PIN Code – In Registrar mode enter the PIN Code for the WDS device that want s to join the network. • P IN Code of this AP – In Enrollee mode this displays the PIN Code for the wi reless AP/Router. The defaul t is exclusive for each unit . • Start WPS Config – Sends a handshake beacon to device s wanting to[...]

System Confi guration 5-42 5 - Edit : Click "Edit" to highlight an entry in the static MAC list for chan ging its parameters. - Delete : Deletes a static ro ute from the list. Dynamic Route The wireless AP/Router support s RIP 1 and RIP 2 dynamic routing protocol. Routi ng Information Protocol (RIP) is the most widely used method for dyna[...]

Routing 5-43 5 Multicast Routing Multicasting is used to support real-time applications such as vide oconferencing or streaming audio. A mul ticast server does not have to est ablish a sep arate connection wi th each clien t. It merely broad casts it s service to the network, and any hosts that want to receive the multicast register with thei r loc[...]

System Confi guration 5-44 5 W AN Mu lticast Routing — IP addresses of up stream multicast routers on the W AN interface. Y ou can add, edit, and dele te IP addresses from the list. • IP Address – Specifies an IP address to route to. • Net Mask – Speci fies a network mask. Firewall The wireless AP/Router provi des extensive fi rewall prot[...]

Firewall 5-45 5 Figure 5- 49. NAT ( Router mode) NA T Setting — Enables NA T related settings. • Network Address Translation – En ables the forwarding of TCP/UDP pac kets through a NA T device. • IPSec Pa ss Through – Enables tunnel ling encrypte d Internet Protocol Se curity (IPSec) packet s through a NA T device. • P PTP Pass Thro ugh[...]

System Confi guration 5-46 5 • DMZ LAN IP – S pecifies the IP address of the DMZ. • N on-standar d FTP port – Enables routin g of traf fic through a non-sta ndard FTP port. • Submit – Saves t he current NAT config uration. • Reset – Restores th e previous NAT configurati on information. Virtual Server Mapping — Using the NA T V ir[...]

Firewall 5-47 5 - Add : Adds a newly configure d port trigger to the list. - Edit : Click "Edit" to highlight a port trigger rule in the list for changing it s parameters. - Delete : Deletes a p ort trigger rule from the list. Port Forward — Port forwarding (sometimes referred to as tunn eling) is the act of forwarding a network port fr[...]

System Confi guration 5-48 5 Packet Filtering The wireless AP/Route r provides extens ive firewall protecti on through pa cket filtering. Packet filtering rest ricts connection paramet ers to limit the risk of int rusion and defends against a wi de array of common hacker att acks. Packet filterin g allows the unit to permi t, deny or proxy traff ic[...]

Firewall 5-49 5 - Change : By selecting a packet f iltering confi guration from the table its parameters display in an editable form. Click "Change" to save parame ters once you have updated them. - Add : Adds a newly configured pac ket filter th at denies forwarding in to the local area ne twork to t he list. - Edit : Click "Edit&qu[...]

System Confi guration 5-50 5 - Edit : Click "Edit" to highlight a pre configured packet filte ring rule for changing its parameters. - Delete : Deletes a packet filteri ng rule from the list. URL Filter By filtering inboun d Uniform Resource Loca tors (URLs) the risk of compromising th e network can be red uced. URLs are commo nly used to[...]

Firewall 5-51 5 Security Setting The Security Setting p age enables intrusion detection (ID), a typ e of security management system for computers and ne tworks. An ID system gathers and analyzes info rmation from various areas within a compute r or a network to identify possible security breaches, which inclu de both intrusions (attacks fro m outsi[...]

System Confi guration 5-52 5 Service Settings DHCP The wireless AP/Router i ncludes a Dynamic Host Configuration Pro tocol (DHCP) server that can assign temporary IP addresses to any att ached host requesting the service. The unit can support up to 253 local cli ents. Addresses are assigned to client s from a common address pool configured on t he [...]

Service Settings 5-53 5 • DHCP Static Map – Maps client MAC addresses to static IP addresses. This allows specified clien ts to always be assigned the same IP when th ey request settings. (Maximum 32 en tries are allowed.) - MAC: The physica l layer address used to uniquely i dentify the st atic IP address to be assigned to the speci fied clien[...]

System Confi guration 5-54 5 UPnP Setting UPnP (Universal Plug and Play) provides inter-connectiv ity between devices supported by the same st andard. UPnP is based on st andard Internet pro tocols, such as TCP/IP , U DP , a nd HTTP . Click on “Network Settings” foll owed by “UPnP .” Figure 5-54. UPnP Setting (Route r mode) UPnP Setting —[...]

Service Settings 5-55 5 DDNS Settings Dynamic DNS (DDNS) provid es users on the Internet wit h a method to tie a specific domain name to the unit’ s dynamically assigned IP address. DDNS allows y our domain name to fo llow your IP address automa tically by changi ng your DNS records when your IP address changes. The wireless AP/Router provi des a[...]

System Confi guration 5-56 5 System Log Settings The wireless AP/Router sup ports a logging process that controls error messages saved to memory o r sent to a Sysl og server . The logged me ssages serve as a valuable tool for is olating wireless AP/Router and net work problems. The System Log Set tings pa ge controls the type of log ging message th[...]

Service Settings 5-57 5 • Total Log Size – Indicates the amount of RAM or Flash memo ry available for loggi ng messages. (Default: 10 Kbytes; Range : 10 or 20 Kbytes) • Remote Log – Enables remote storage of system logs on a Syslog server. (De fault: Disabled) • Remote Log Server Address – The address of the remote logging server. (Defa[...]

System Confi guration 5-58 5 • Dayli ght Saving – Enables daylight savings for summerti me. Daylight Saving Time begins for most of the Uni ted States at 2:00 a. m. on the first Sund ay of April. Time reverts to standard ti me at 2:00 a.m. on the last Sunday of October. In the U.S., each t ime zone switches at a different ti me. In the Euro pea[...]

Service Settings 5-59 5 Ping Test The wireless AP/Router provi des the function of “pinging” a specified IP add ress or URL to test for connectivity . Figure 5-59. Ping Test - success Figure 5-60. Ping Test - failure • PING Des tination – The desti nation IP address to test. • PING – Sends the reques t.[...]

System Confi guration 5-60 5 Management Settings The wireless AP/Router’s Management Se ttings menu provides the same configurati on options in both Router and AP Mode. Thes e settings allow you to change the operati ng mode, set the system time , configure a management acces s password, a nd upgrade the sy stem software. Admin Accounts and Remot[...]

Management Settin gs 5-61 5 Admin Accounts — Configures acc ess levels, usernames and passwords. (Maximum 32 entries are allowed. ) • Acce ss Level – Configures the access pri vileges that the us er has. - Admin : Grants administrator level acces s, no restrictions. - User : Grants user level access , some restrictions. - Guest : Grants g ues[...]

System Confi guration 5-62 5 Config Settings The Config Sett ing page allows you to save the wire less AP/Router’s current configuration or restore a previously sa ved configuratio n back to the de vice. Figure 5-62 . Config Sett ings • Save – Save s the current configurati on locally. • Restore – Restores a previousl y saved configuratio[...]

Status Information 5-63 5 Firmware Upgrade Y ou can update the wire less AP/Router firmware by using the Firmware Upd ate facility . Figure 5-6 4. Firmware Upgrade Firmware Update — Allows you to upload new firmware manually b y specifying a file path. Make sure the fi rmware you want to use is on the local comp uter by clicking Browse to search [...]

System Confi guration 5-64 5 • Model Na me – The device name and model number. • Firmware Versi on – The version number of the current wireless AP/Route r software. •H o s t N a m e – The web address assigned as an alias for the wireless AP/Router , enabling the device to be uniquely identif ied on the network. • System Date – The c[...]

Status Information 5-65 5 • Gateway Address – The default gateway is the IP address of the router for the wireless AP/Router , which is used if the reque sted destination add ress is not on the local subnet • DNS 1 (Primary) / DNS 2 (Secondary) – The IP address of Domain Name Servers on the network. A DNS maps n umerical IP addresses to dom[...]

System Confi guration 5-66 5 WLAN — Displays the basic WLAN information: • WLAN Status –Displays if the radio is enabled or disabled. • C ountry – The count ry for which the wireless AP/Router has been set for use. • WLAN Mode – Displays the radio mode bei ng used. • Frequency – The channel frequency being used by the radio. •W [...]

Status Information 5-67 5 • Flags – Possible flags i nclude: U: route is up, H: target is a host , G: use gateway, C: cache entry, ! : Reject route. • Metric – A number used to i ndicate the cost of the route so that the best route, among potentiall y multiple routes to th e same destination, can be selected. • Ref – Number of reference[...]

System Confi guration 5-68 5 System Logs The wireless AP/Router sup ports a logging process that controls error messages saved to memory o r sent to a Sysl og server . The logged me ssages serve as a valuable tool for is olating wireless AP/Router and net work problems. The Events Log p age displays the latest messages logged in chrono logical orde[...]

Status Information 5-69 5 • Refresh – Ref reshes the System L og display to di splay the most recent messages received. • Date Ti me – The date and time of receival of the system log message. • Faci lity Priority – The priority leve l of the system log message. • Category – The cate gory of system log message. •I n f o – Additio[...]

System Confi guration 5-70 5 • When the time limit is o ver the budget. Figure 5-76. 3G Access History (over time budget limit)[...]

A-1 Appendix A: Troubleshooting Check the following items bef ore you contact l ocal T echnical Support. 1. If wireless clie nts cannot access the ne twork, check the following: • Be s ure the access poi nt and the wirel ess clients are conf igured with t he same Service Set ID (SSID). • If au thentication or encrypti on are enabled, ensure tha[...]

Tr oubleshooti ng A-2 A Diagnosing LED Indicators T roubleshooting Chart Symptom Action POWER LED is Off • The AC power adapter may be disconnected. Check connection s between the wireles s AP/Router, the p ower adapter, and the wall outlet. WLAN LED is Off • The wireless AP/Router’s radio has been disabled through it’s web management inter[...]

B-1 Appendix B: Specifications Operating Freq uency 802.1 1g/ n: 2.4 ~ 2.4835 GHz (US , Canada) 2.4 ~ 2.4835 GHz (E TSI, Japan) 2.412 ~ 2.462 GHz (T aiwan) 802.1 1b: 2.4 ~ 2.4835 GHz (US , Canada) 2.4 ~ 2.4835 GHz (E TSI) 2.4 ~ 2.497 GHz (Japan) 2.412 ~ 2.462 GHz (T aiwan) Data Rate 802.1 1b: 1, 2, 5.5, 1 1 Mbps per channel 802.1 1g: 6, 9, 12, 18, [...]

Specifications B-2 B EN 55022B EN 55024 EN61000-3-2 EN61000-3-3 Radio Signal Certification FCC Part 15C 15.2 47, 15.207 (2.4 GHz) EN 300 328 EN 301 489-1 EN 301 489-17 Stand ar ds IEEE 802.1 1 b/g IEEE 802.1 1 n draft v2.0 Physical Size 21.0 x 16.5 x 4.0 cm (8.27 x 6.50 x 1.57 in) Wei ght 350 g (12.3 oz)[...]

C-1 Appendix C: License Information This product includes copyri ghted third-part y software subje ct to the terms of the GNU General Public Lic ense (GPL), GNU Lesser General Public License (LGPL), or other related free sof tware licenses. The GPL code used in this product is di stributed WITHOUT ANY W ARRANTY and is subject to the copyrig hts of [...]

License Informatio n C-2 C We protect your ri ghts with two step s: (1) copyright the software, and (2) of fer you this license which gives you legal permission to copy , distribute and/or modif y the software. Also, for each author's protectio n and ours, we want to make certai n that everyone understands that there is no warranty for this fr[...]

The GNU General Public Licen se C-3 C a). Y ou must c ause the modif ied files to c arry prominent notices st ating that you changed th e files an d the date of any change. b). Y ou must cause any work that you dis tribute or publish, that i n whole or in part cont ains or is derived from the Program or any part thereof, to be licensed as a whole a[...]

License Informatio n C-4 C c). Accompany it wit h the information you received as to the offer to d istribute corresponding source code . (This alternative is allowed only for noncommercial distribution an d only if yo u received the p rogram in objec t code or executab le form with such an of fer , in accord with Subsection b above.) The source co[...]

The GNU General Public Licen se C-5 C consequence you may not dist ribute the Program at all. For exampl e, if a patent l icense would not permit royalty-free redistribution of the Program by all those who receive copies directl y or indirectly through you, t hen the only way you could satisfy both it and this License would be to re frain entirely [...]

License Informatio n C-6 C NO W ARRANTY 1. BECAUSE THE P ROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO W ARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITT ED BY APPLICABLE LAW . EXCEPT WHEN OT HERWISE ST A TED IN WRITIN G THE COPYRIG HT HOLDERS AN D/OR OTHER P ARTIES PROVIDE THE PROGRAM "AS IS" WI THOUT W ARRANTY OF ANY KIND, EI THER EXPRES[...]

Glossary-1 Glossary 10BASE-T IEEE 802.3-2005 spec ification for 10 Mbps Ethe rnet over two p airs of Category 3 or better UTP cable. 100BASE-TX IEEE 802.3-2 005 specification for 100 Mbp s Fast Ethernet o ver two pai rs of Category 5 or better UTP cabl e. Access Point An internetworking device that seamlessly connects wired and wireless networks. A[...]

Glossary Glossary-2 Encryption Data p assing between the access poi nt and clients can use encryption to protect from interception and evesdropping. Ethernet A popular local area dat a communications network, which accept s transmission from computers and terminals . File Transfer Protocol (FTP) A TCP/IP protocol us ed for fil e transfer . Hypertex[...]

Glossary-3 Glossary Open System A security option which broadcasts a beacon si gnal including the access poi nt’s configured SSID. Wi reless client s can read the SSID from the beacon, and automatically reset their SSID to allow immedi ate connection to the nearest access point. Orthogonal Freq uency Division Multiplexing (ODFM) OFDM allows multi[...]

Glossary Glossary-4 Virtual Access Point (VAP) Virtu al AP technology multiplie s the number of Access Points pres ent within the RF footprint of a sing le physical access device. With V i rtual AP te chnology , WLAN users within the device’ s footprint can associate with what appears to be dif ferent access points and their associ ated network s[...]

Index-1 A AC power adapt er 1-5 ACL confi guration 5-37 administrator account s 5-61 administrator password 5-61 administrator username 5-61 Advanced Setting menu 5-25 AES 5-30, 5-35, 5-36 AP mode 2-1, 2 -2 authenticati on mode 4-16, 5-29, 5-34 , 5-35 B bridge 3-4, 5-34 C channels, maximum B-1 clients, maximum B-1 contents, package 1-1 D DDNS 5-55 [...]

Index-2 Index S secondary DNS server 4-4, 5-7 software displaying version 5-56 static IP 4-5, 5-7 subnet mask 4-5, 5-5, 5-19 , 5-64 system Information 5-63 system log 5-68 T time zone 5-57 TKIP 5-30, 5-34, 5-36 troubleshooting A-1, C-1 U UPnP 5-54 URL filter 5-50 URLs 5-50 V virtual server mapping 5-46 W WAN packet filt er 5-48 WAN settin g 5-5 WDS[...]

[...]

20 Mason • Irvine, CA 92618 • Phn: 949 -679-8000 • www. smc.com 20 Mason • Irvine, CA 92618 • Phn: (949) 679-8000 • www.smc.com SMCWBR14 - 3GN[...]