3Com 3CRWDR101A-75 manual

http://www.3Com.com/ Part No. 10015091 Rev . AA Published Mar ch 2006 Of ficeConnect ADSL Wir eless 54 Mbps 11g Fir ewall Router User Guide WL-552 ® 3CRWDR101A-75 3CRWDR101B-75[...]

3Com Corporati on 350 Campus Drive, Marlborough, M A USA 01752-3064 Copyright © 2004, 2005, 2006, 3Com Corpo ration. All rights re served. No part of this documentation may be repr oduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation ) without written permiss ion from 3Com Corpo[...]

C ONTENTS A BOUT T HIS G UIDE Naming Convention 7 Conventions 8 Feedback About This User Guide 8 Related Documentat ion 9 1 I NTRODUCING THE R OUTER OfficeConn ect ADSL Wireless 54 Mbps 11g Fir ewall Router 11 Router Advantages 13 Package Contents 13 Minimum System and Co mponen t Requirements 14 Physical Featur es 14 2 I NSTALLING THE R OUTER Intr[...]

4 R UNNING THE S ETUP W IZARD Accessing the Setup W izard 27 Setup W izard - Change Password 30 Setup Wizard - Time and Time Zone 30 Setup W izard - Connection T ype 31 Setup W izard - LAN Settings 36 Setup Wizard - W ireless Set tings 37 Setup W izard - Configuration Summary 38 5 C ONFIGURING THE R OUTER Navigating Thr ough the Router Configuratio[...]

Schedule Rule 74 PC Privileges 75 URL Filter 77 Server Control 79 Quality of Service 81 QoS Settings 81 Tr a f f i c M a p p i n g 8 1 T raffic Statistics 82 Advanced 83 Security 83 Static Routes 86 RIP 87 DDNS 88 SNMP 90 Syslog 91 Proxy ARP 92 System T ools 93 Restart Router 93 Configuration 93 Upgrade 94 Time Zone 95 Ping 96 T racerout e 97 DNS L[...]

Connecting to the Internet 104 Forgotten Pa ssword and Reset to Factor y Defaults 104 W ireless Networking 105 Recovering from Corru pted Softwa re 107 Freq uently Asked Questions 108 A IP A DDR ESSING The Internet Protocol Suite 109 Managing the Router over th e Network 109 IP Addr esses and Subnet Masks 109 How does a Device Obtain an IP Address [...]

G LOSSARY R EGULATORY N OTICES I NDEX[...]

[...]

A BOUT T HIS G UIDE This guide describes how to install and co nfigure the 3Com OfficeConnect © ADSL Wireless 54 Mbps 11g Firewall Router (3CRWDR101A-75/3CRWDR 101B-75). This guide is intended for use by th ose responsible for installing and setting up network equipment; consequ ently , it assumes a basic working knowledge of LANs (Local Area Netw[...]

8 A BOUT T HIS G UIDE Conventions Ta b l e 1 and Ta b l e 2 list conventions that are used throughout this guide. Ta b l e 1 Notice Icons Icon Notice Type Description Information note Information that describes important features or instructions. Caution Information that alerts you to potential loss of data or potential damage to an application, sy[...]

Feedback About This User Guide 9 Feedback About This User Guide Y our suggestions are ve ry important to us. Th ey will help make our documentation more useful to you. Please e-mail co mments about this document to 3Com at: pddtechpubs_comments@3com.com Please include the following information when commenting: ■ Document title ■ Document part n[...]

10 A BOUT T HIS G UIDE[...]

1 I NTR ODUCING THE R OUTER Welcome to the world of networking with 3Com ® . In the modern business environment, communication a nd sharing information is crucial. Computer networks have proved to be one of the fastest modes of communicatio n but, until r ecently , only large businesses could af ford the networking advantage. OfficeConnect ADSL Wi[...]

12 C HAPTER 1: I NTRODUCING THE R OUTER Figure 1 Example Network Without a Router When you use the Router in your netwo rk ( Figure 2 ), it becomes your connection to the Internet. Connections can be made directly to the Router , or to an OfficeConnect Switch or Hub, expanding the number of computers you can have in your network. Figure 2 Example N[...]

Router Advantages 13 Router Advantages The advanta ges of the Router include: ■ Shared Internet connection for both wired and wir eless computers ■ High speed 802.11g wireless networking ■ No need for a dedicated, “alway s on” computer serving as your Internet connection ■ Cross-platform operation for comp atibility with W indows, Unix [...]

14 C HAPTER 1: I NTRODUCING THE R OUTER Minimum System and Component Requirements Y our Router requires that the computer(s) and components in yo ur network be configured with at least the following: ■ A computer with an operating system that supports TCP/IP networking protocols (for example W indows 98/NT/Me/2000/XP , Unix, Mac OS 8.5 or higher)[...]

Physical Features 15 2P o w e r L E D Green Indicates that the Router is powered on, and the boot up is successful. 3S Y N C L E D Green If the LED is on it indicates that DSL co nnection is present. This LED flashes during configuration at power up. 4O n l i n e L E D Green If this LED is on, your username/password has been authenticated successfu[...]

16 C HAPTER 1: I NTRODUCING THE R OUTER The rear panel ( Figure 4 ) of the Router contains four LAN p orts, one ADSL port, a r eset button, a power OK LED, a nd a power adapter socket. Figure 4 Router - Rear Panel 7 Wir eless Ante nnae The antennae s hould be placed in a ‘V’ position when initially installed. CAUTION: Do not force the antennae [...]

2 I NSTALLING THE R OUTER Introduction This chapter will guide you thr ough a basic installation of the Router , including: ■ Connecting the Router to the Inter net. ■ Connecting the Router to your network. ■ Setting up your computers for networking with the Router . Safety Information Please note the following: WAR NI N G : Please read the ?[...]

18 C HAPTER 2: I NSTALLING THE R OUTER When positioning your Router , ensure: ■ It is out of direct sunlight and away from sour ces of heat. ■ Cabling is away from power lines, fluor escent lighting fixtures, and sources of electrical noise such as radios, transmitters and broadband amplifiers. ■ W ater or moisture cannot enter the case of th[...]

Powering Up the Router 19 Powering Up the Router T o power up the Router: 1 Plug the power adapter into the power adapter socket located on the back pane l of the Router . 2 Plug the power adapter into a standard electrical wa ll socket. 3 Press the power button located on the back of the Router . Connecting the Router The first step for installing[...]

20 C HAPTER 2: I NSTALLING THE R OUTER you can connect your phones and computer directly to the splitter as shown below ( Figure 6 ): or ■ If you are using a splitterless (G.lit e) connection, th en your service provider will attach the outside ADSL line d irectly to your phone system. In this case you can connect your phones and comp uter direct[...]

Connecting the Router 21 Figure 7 Installing without a splitter Y ou have now completed the hardwar e installation of your R outer . Next you need to set up your computers so that they can make use of the Router to communicate with the Internet. 3Com recommends that you perform the initial Router configuration from a computer that is dir ectly conn[...]

22 C HAPTER 2: I NSTALLING THE R OUTER[...]

3 S ETTING U P Y OUR C OMPUTERS The Router has the ability to dynamica lly allocate netw ork addr esses to the computers on your network, usi ng DHCP . However , your computers need to be configured correctly for this to take place. T o change t he configuration of your compu ters to a llow this, follow the instructions in this chapter . Obtaining [...]

24 C HAPTER 3: S ETTING U P Y OUR C OMPUTERS Figure 8 Local Ar ea Properties Scr een 6 Ensure that the opt ions Obtain an IP addr ess automatically , and Obtain DNS server address automatically are both selected as shown in Figure 9 . Click OK . Figure 9 Internet Protocol (TCP/IP) Properties Scr een 7 Restart your computer .[...]

Obtaining an IP Address Automatically 25 Windows XP 1 From the Windows Start Menu, select Control Panel . 2 Click on Network and Internet Connections . 3 Click on the Network Connections icon. 4 Double click on LAN or High Speed Connection icon. A screen titled Local Area Connection Status will appear . 5 Select Internet Protocol TCP/IP and click o[...]

26 C HAPTER 3: S ETTING U P Y OUR C OMPUTERS Disabling PPPoE and PPTP Client Software If you have PPPoE client software installed on your computer , yo u will need to disable it. T o do this: 1 From the Windows Start Menu, select Settings > Control Panel . 2 Double click on Internet Options. 3 Select the Connectio ns T ab. A screen similar to Fi[...]

4 R UNNING THE S ETUP W IZAR D Accessing the Setup Wizard The Router setup program is Web-based, which means that it is accessed through your W eb browser (Netscape Navigator 4.7 or higher , In ternet Explorer 5.0 or higher , or Mozilla 1.2.1 or higher). T o use the Setup Wizard: 1 Ensure that you have at least one computer connected to the Router [...]

28 C HAPTER 4: R UNNING THE S ETUP W IZARD 4 T o log in as an administra tor , enter the passwor d (the default passwor d is admin ) in the System Password field an d click Log in ( Figure 12 ). Figure 12 Router Login Scr een 5 When you have logged in, ■ if you are logging in for the first time, the Coun try Select ion scr een will appear ( Figur[...]

Accessing the Setup Wizard 29 Figure 14 W elcome Screen ■ Go to the Notice Board tab to see the current software information. T o view the W eb help, click the Help button. ■ Go to the Password tab to cha nge the passwor d ( Figur e 15 ). ■ Go to the Wiza rd tab to do a quick setup of the Router ( Figure 16 ). The password scr een allows you [...]

30 C HAPTER 4: R UNNING THE S ETUP W IZARD 3 Enter the time period in Login Timeout to set a maximum period of time for which the login session is mainta ined du ring inactivity (Default: 10 minutes). Setup Wizard - Change Password T o ensure the security of your Route r , it is recommended that you choose a new password - this should be a mix of l[...]

Accessing the Setup Wizard 31 4 Check the Enable box in the Daylight Savings field, if daylight savings applies to your area. 5 Click Next . Setup Wizard - Connection T ype The Connection T ype screen allows you to set up the Router for the type of Internet co nnection you have. Before setting up your connection type, have your account information [...]

32 C HAPTER 4: R UNNING THE S ETUP W IZARD PPPoE Mode T o set up the Router for use with a PPP over Ether net (PPPoE) connection, use the following procedur e: Figure 19 PPPoE Scr een 1 Enter your use r name in the Username field. 2 Enter your pa ssword in the Password field. 3 Re-type your pa ssword in the Retype Password field. 4 Enter your VPI a[...]

Accessing the Setup Wizard 33 PPPoA Mode T o set up the Router for use with a PPP over A TM (PPPoA ) connection, use the following procedur e: Figure 20 PPPoA Screen 1 Enter your use r name in the Username field. 2 Enter your pa sswor d in the Password field. 3 Re-type your pa ssword in the Retype Password field. 4 Enter your VPI and VCI informatio[...]

34 C HAPTER 4: R UNNING THE S ETUP W IZARD Bridge Mode (for a single PC) T o set up the Router for use with an RFC1483 bridged connection, use the following procedur e: Figure 21 Bridged Mode Scr een 1 Enter your VPI and VCI information in the VPI/VCI fields. 2 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu. This [...]

Accessing the Setup Wizard 35 1 Enter your Internet IP address in the WAN IP field. 2 Enter the subnet mask in the Subnet Mask field. 3 Enter the default gateway IP address in the Default Gateway field. 4 Enter the DNS address in the DNS field. 5 Enter your VPI and VCI information in the VPI/VCI fields. 6 Select the encapsulation type (LLC or VC MU[...]

36 C HAPTER 4: R UNNING THE S ETUP W IZARD T o assign a fixed IP address: 1 Enter your Internet IP address in the WAN IP field. 2 Enter the subnet mask in the Subnet Mask field. 3 Enter the default gateway IP address in the Default Gateway field. 4 Enter the DNS address in the DNS field. 5 Enter your VPI and VCI information in the VPI/VCI text boxe[...]

Accessing the Setup Wizard 37 Setup Wizard - Wireless Settings The W ireless Settings screen allows you to set up the SSID and radio channel used for the wireless connection. Figure 25 Wireless Settings Scr een 1 Select the channel you want to use from the Channel drop-down menu. 2 Specify the SSID to be used b y your W ireless Network in the SSID [...]

38 C HAPTER 4: R UNNING THE S ETUP W IZARD Setup Wizard - Configuration Summary When you have completed the Setup W izard, a configuration summary will appear . V erify the configuration information of the Router and then click Apply to save your settings. 3Com recommends that you print out this page for your recor ds. Figure 26 Configuration Summa[...]

5 C ONFIGURING THE R OUTER Navigating Through the Router Configuration screens This chapter describes all the scr eens available through the Router configuration screens, and is pr ovided as a reference. T o get to the configuration screens, enter the Router ’ s default IP in the location bar of your browser . Th e default IP is http://192.168.1.[...]

40 C HAPTER 5: C ONFIGURING THE R OUTER LAN Settings Y our Router is equipped wit h a DHCP se rver that will automatically assig n IP addresses to each computer on your network. The factory default settings for the DHCP server will work with most applications. If you need to make changes to the settings, you can do so. The LAN settings screen allow[...]

LAN Settings 41 1 Enter the Router’ s IP Address and Subnet Mask in the appropriate fields. The default IP addr ess is 192.168.1.1. 2 If you want to use the Router as a DHCP Server , select On in the DHCP Ser ver field. 3 Enter the IP address range in the IP Pool Start Address and IP Pool End Address fields. 4 Specify the DHCP Lease time by se le[...]

42 C HAPTER 5: C ONFIGURING THE R OUTER ■ Host Name — The client machine’ s ho st name, if configured. ■ MAC Address — The Media Access Contr ol (MAC) addr ess of the client’ s network card. ■ Client T ype — Whether the client is connected to the Router by wired or wireless connection. ■ Check the Fix checkb ox to permanently fix [...]

Wireless Settings 43 Wireless Settings The W ireless Settings screens allo w yo u to configure the settings for the wireless connections. Y ou can enable or disable the wireless connection for your LAN. When disabled, no wireless PCs can gain acce ss to either the Inter net or other PCs on your wired or wir eless LAN thr ough this Router . Figure 3[...]

44 C HAPTER 5: C ONFIGURING THE R OUTER Configuration The Wi reless Configuration Screen allows you to tur n on/ tur n off the wireless function, and set up basic wir eless settings. Figure 32 Wireless Configuration Scr een T o enable the wireless functio n: 1 Check Enable Wireless Networking checkbox. 2 Select the wireless channel you want to use [...]

Wireless Settings 45 Encryption This feature pr events any non-authorized par ty from r ead ing or changing your data over the wir eless network. Figure 33 Encryption Scr een Select the wireless security mode that you want to use fr om the drop-down menu, and click Apply . There ar e five sele ctions: ■ Disabled (see page 45 ) ■ 64-bit WEP (see[...]

46 C HAPTER 5: C ONFIGURING THE R OUTER 64-bit WEP WEP is the basic mechanism to t ransmit your d ata securely over the wireless network. Matching encrypti on keys must be setu p on your Router and wireless client devices to use WEP . Figure 34 64-bit WEP Scr een T o enable 64-bit WEP: 1 Y ou can enter the 64-bit WE P key manually: ■ enter the WE[...]

Wireless Settings 47 128-bit WEP WEP is the ba sic mechanism to tran smit your data securely over the wireless network. Matching encryption keys must be set up on your Router and wireless client devices to use WEP . Figure 35 128-bit WEP Scr een T o enable 128-bit WEP: 1 Y ou can enter the 128-bit WEP key manually: ■ enter your WEP key as 13 pair[...]

48 C HAPTER 5: C ONFIGURING THE R OUTER WP A-PSK (no server) WP A (W i-Fi Protected Access) pr ovides dynamic key changes and constitutes the best security solution. If your network do es not have a RADIUS server . Select the no server option. Figure 36 WP A-PSK (no server) Screen 1 Select WP A-PSK (no se rver) fr om the WP A drop-down menu. 2 Sele[...]

Wireless Settings 49 WP A (with RADIUS Server) WP A (W i-Fi Protected Access) pr ovides dynamic key changes and constitutes the best se curity solu tion. This fu nction r equires that a RADIUS server is running on the network. Figure 37 WP A (with RADIUS Server) Screen 1 Select WP A with RADIUS server from the Security Mode dr op-down menu. 2 Selec[...]

50 C HAPTER 5: C ONFIGURING THE R OUTER Connection Contr ol This feat ure is used to filter the clients based on th eir MAC addresses. Check the Enable MAC Address Filt ering checkbox, the Connection Control scr een will appear . Figure 38 Connection Contr ol Screen There are two options available in t he Access rule for registered MAC address fiel[...]

Wireless Settings 51 Client List Y ou can view the list of all wireless clients that are connected to the Router . Figure 39 Client List Screen Click Refresh to update the list. WDS Settings The Rou ter supports WDS (W ireless Distribution System). WDS enables one or more Access Points to rebr o adcast received signals to extend range and reach, th[...]

52 C HAPTER 5: C ONFIGURING THE R OUTER 3 Click Add to add the MAC addr ess of the AP to the list, the add WDS screen wil l appear (r efer to Figur e 41 ). Figure 41 Add WDS scr een Enter the MAC address(es) of one or more access points in the AP MAC Address table, and click Apply . Advance The Advance screen allows you to configure detailed settin[...]

Wireless Settings 53 ■ DTIM Interval: A DTIM (Delivery T raffic Indi cation Message) is a countdown mechanism used to inform your wireless clients of the next window for listening to broadcast and multicast messages. ■ Fragmentation Threshold: this is th e maximum size fo r dir ected data packets tran smitted. The use of frag mentation can in c[...]

54 C HAPTER 5: C ONFIGURING THE R OUTER Internet Settings Y ou can configure the settings for your DSL connection. AT M P V C Th is feature is used to co nfigure th e parameters for y our DSL conn ection. The information necessary to complete these screens should be obtained from your ISP . Check with your ISP first to find out what type of connect[...]

Internet Settings 55 PPPoE PPP over Ether net, provides routing fo r multiple PCs. T o configure this function correctly , you should obtain the information from your ISP . Figure 45 PPPoE Settings Scr een 1 Select PPPoE from the Protocol drop-down menu. 2 Enter the IP address and Subnet Mask information provided by your ISP into the IP address and[...]

56 C HAPTER 5: C ONFIGURING THE R OUTER ■ Manual - Start in Last State means that after re-booting the Router , the Inter net co nnection wi ll stay in the previous condition before the reboot. 5 If you want your Router to automatically disconnect from the Inter net after a period of inactivity , specify a time in the Idle Time (Minutes) field. ([...]

Internet Settings 57 13 Click Apply . PPPoA PPP over A T M, this is a popular choi ce among European DSL pr oviders. T o configure this function correctly , you should ob tain the information from your ISP . Figure 46 PPPoA Settings Screen 1 Select PPPoA from the Protocol drop-down menu. 2 IP assigned by ISP: ■ Select Ye s , if your ISP assigns y[...]

58 C HAPTER 5: C ONFIGURING THE R OUTER 4 Select th e connect ion type fr om the Connect T ype drop-down menu. ■ Always Connected means the Inter net connection to your ISP is always on. ■ Auto - T riggered by T raffic means your Router will automatically connect to your ISP every time a PC needs to access the Internet. ■ Manual - Start in Di[...]

Internet Settings 59 used for connections in which there is no fixed timing r elation ship between samples, but that still ne ed a guaranteed QoS. Compare with ABR, CBR, and UBR. ■ UBR (unspecified bit rate): the U BR service class is intended for delay-tolerant or non-real-time applications, for example, those which do not require tightly constr[...]

60 C HAPTER 5: C ONFIGURING THE R OUTER 4 Select the type of Quality of Service that you want fr om the QoS Class drop-down menu. ■ CBR (constant bit rate): the CBR service class is intended for real-time applications, for example, those r equiring tightly constrained delay and delay variation, such as voice and video applications. The consistent[...]

Internet Settings 61 Routing Mode over A TM (RFC 1483 Routed Mode) This mode is commonly used with eithe r dynamic or static IP addressing. In this mode the W AN ADSL port will be configured with an IP address provided by the ISP . T o configure the settings corr ectly , you should obtain the information on this screen from your ISP . Figure 48 Rou[...]

62 C HAPTER 5: C ONFIGURING THE R OUTER 8 Select the type of Quality of Service that you want fr om the QoS Class drop-down menu. ■ CBR (constant bit rate): the CBR service class is intended for real-time applications, for example, those r equiring tightly constrained delay and delay variation, such as voice and video applications. The consistent[...]

Internet Settings 63 Dynamic/Fixed IP in 1483 Bridge Mode (For Multiple PCs) In this example, the ISP uses fixed/dynamic IP to provide the Internet connection. T o configure this function correctly , you should obtain the information on this sc reen fr om your ISP . Figure 49 Dynamic/Fixed IP for Bridge Mode Scr een 1 Select Dynamic/Fixed IP in 148[...]

64 C HAPTER 5: C ONFIGURING THE R OUTER 8 Select the type of Quality of Service that you want fr om the QoS Class drop-down menu. ■ CBR (constant bit rate): the CBR service class is intended for real-time applications, for example, those r equiring tightly constrained delay and delay variation, such as voice and video applications. The consistent[...]

Internet Settings 65 DNS Domain Name Service (o r Server) is a n Internet service that tr anslates domain names into IP addresses. Be cause domain names are alphabetic, they'r e easier to r emember . The Intern et however , is really based on IP addresses. Every time you use a domain name, a DNS service must translate the name into the corresp[...]

66 C HAPTER 5: C ONFIGURING THE R OUTER Hostname & Clone MAC address T o configure the Hostname and Clone MAC Address information for your Router , select Internet Settings , then go to the Clone MAC address tab. The Hostname and MA C A ddress scr een displays. Figure 52 Hostname and MAC Addr ess Scr een 1 Some ISPs require a host name. If your[...]

Firewall 67 Firewall Fr om these screens, you can configure settings for the fir ewall. Y our Router is equipped with a firewall that will protect yo ur network from a wide array of common hacker attacks including Ping of Death (PoD) and Denial of Service (DoS) attacks. Y ou can tur n the firewall function off if needed. T ur ning off the fir ewall[...]

68 C HAPTER 5: C ONFIGURING THE R OUTER For low and medium levels of firewall protection, refer to Figur e 54 . For high level of firewall pr otection, refer to Figure 55 . Figure 54 Low and Medium Level Fir ewall Protection Scr een When abnormal network acti vity occurs, an alerting email will be sent out to you. Enter the following information to[...]

Firewall 69 Figure 55 High Level Fir ewall Protection Scr een If you select high level of protection, you will need to configur e additional parameters for the firewall. ■ Fragmentation half-open wait - Configures the number of seconds that a packet state structu re r emains active. When the timeout value expires, the Router drops the un-assemble[...]

70 C HAPTER 5: C ONFIGURING THE R OUTER ■ T otal incomplete TCP/UD P sessions HIGH - Defi nes the rate of new unestablished sessions that will cause the software to start deleting half-open sessions. ■ T otal incomplete TCP/ UDP sessions LOW - Defines the rate of new unestablished sessions that will caus e the software to stop deleting half-ope[...]

Firewall 71 Special Applications Special Applications let yo u choose speci fic ports to be open fo r specific applications to work properly with the Network Address T ranslation (NA T) feature of the Router . Figure 56 Special Applications Scr een A list of popular applications has been included to choose from. Select your application from the Pop[...]

72 C HAPTER 5: C ONFIGURING THE R OUTER Virtual Servers The Virtual servers feature allows you to route external (Inter net) calls for services such as a web server (port 80), F TP server (Port 21), or other applications through your Router to your inter nal network. Since your internal computers are protec ted by a firewall, machines fr om the Int[...]

Firewall 73 4 Y ou can enable or disable each Vi rtual Server entry by checking or unchecking the appropriate Enabled checkbox. 5 Click Apply to save the changes for each Vi rtual Server entry . DMZ If you have a client PC that cannot run an Inter net application properly from behind the fir ewall, you can open the client up to unrestricted two-way[...]

74 C HAPTER 5: C ONFIGURING THE R OUTER Schedule Rule The Rou ter can be co nfigured to restrict access to the Inter net, email or other netw ork service s at specific days and ti mes. Define the time in this screen, and define the rules in the PC Privileges screen (see page 75 ). Figure 59 Schedule Rule Scr een 1 Click Add Rule to add a schedule r[...]

Firewall 75 PC Privileges The Router can be configured to restrict access t o the Inter net, email or other netw ork service s at specific days and ti mes. Restrict ion can be set for a single computer , a range of co mputers, or mult iple computers. Y ou can define the traffic type permitted or not-permitted to the Internet. Figure 61 PC Privilege[...]

76 C HAPTER 5: C ONFIGURING THE R OUTER 3 Enter a descriptio n in the Client PC Description field, and the IP address or IP address range into the Client PC IP Address fields. 4 T o bypass the URL Filter and Cont ent Filter , check the corresponding Bypass checkbox. If you check the two options: Bypass URL Filter , and Bypass Content Filter , then [...]

Firewall 77 URL Filter T o configure the URL filter feature, use the table on the URL Filter scr een to specify the Web sites (www .somesit e.com) and/or keywords you want to filter on your network. For example, entering a keyword of xxx would block access to any URL that contains the string xxx . Figure 63 URL Filter Scr een 1 Check the Enable URL[...]

78 C HAPTER 5: C ONFIGURING THE R OUTER Content Filter Y ou can use the list on the Content Filter screen to specify the type of content that you want to filter out. The Router comes with a 14-day free trial of the 3Com Content Filter Serv ice (3CSBCFS). T o activate the 14-d ay free trial of the service, you must first register your Router at www [...]

Firewall 79 4 If you are not sur e about your subscription status, click CHECK in Subscription Filtering Statu s to find out if you ha ve a current, valid subscription. 5 Subjects are listed under Core Categories and Productivity Categories . Y ou can define what content should be viewed/block ed using the Allow/Deny option. The Deny option is used[...]

80 C HAPTER 5: C ONFIGURING THE R OUTER Figure 66 Server Contr ol Add Server Screen 1 Enter a descri ption in the Ser ver Description fi eld, and th e IP addr ess or IP address range into the Serv er IP Address field s. 2 Select the services that wil l be allowe d. A list of popular services is given on this screen, to unblock a particul ar service[...]

Quality of Service 81 Quality of Serv ice The QoS (Quality of Service) function allows you to differ entiate your network traffic and pr ovide it with high-priorit y forwarding service. QoS Settings The bandwidt h gap between LAN and W AN may signif icantly degrade performance of critical network applications, such as V oIP , gaming, and VPN. This [...]

82 C HAPTER 5: C ONFIGURING THE R OUTER Click Add to add a new traffic class rule (see Figure 69 ). Figure 69 Add New T r affic Class Rule Scr een T raffic Statistics Th is screen shows the W AN outbound traffic statistics of all the Diffserv forwarding groups in the last 12 hours. This scre en automatically updates every 5 minutes. Figure 70 T r a[...]

Advanced 83 Advanced From the Advanced screen, you can configure: ■ Security ■ Static Routes ■ RIP ■ DDNS ■ SNMP ■ Syslog ■ Proxy Arp Security Use the Security screen to set the advanced security set tings for the Router . Figure 71 Security Scr een ■ NA T — Before you enable NA T (Networ k Address T ranslatio n), make sur e you h[...]

84 C HAPTER 5: C ONFIGURING THE R OUTER you turn NA T off, the computers on your network will not be able to access the Internet. Other problems may also occur . ■ IPSEC NA T -T Pass- through — NA T -T (NA T T raversal) is an Inter net Draft proposed to IETF in o rder to help the problems associated with passing IPsec traffic through NA T Route[...]

Advanced 85 the MTU size on the W AN interface, the client sends an Inter net Control Message Pr otocol (ICMP) er ror to the external server to request that the server negotiate the TCP Maximum Segment Size (MSS). However , this message may be blocked by so me firewalls. When this occurs, the packet is dr opped. T o allow the message to go through [...]

86 C HAPTER 5: C ONFIGURING THE R OUTER Static Routes Y ou can configure static routes in this screen. T o add a static route entry to the table, click Add . T o change an existing entry , click Edit . T o delete an entry , click De lete . Figure 72 Static Routes Scr een This screen shows a list of current static route entries. Fo r each entr y , t[...]

Advanced 87 RIP RIP (Routing Information Protocol) - RI P allows the network admini strator to set up routing information on one RIP-enabled device and send that information to all RIP-enable d devices on the network. Figure 73 RIP Parameter Scr een Y ou can set up RIP independently on both LAN and W AN inter faces. 1 Check the Enable RIP checkbox.[...]

88 C HAPTER 5: C ONFIGURING THE R OUTER 5 Use the Poison Reverse dr op -down menu to enable or disable Poison Reverse on the Router . Enabling Poison Reverse on your Router allows it to indicate to other RIP-enabled devices that they have bo th routes that point to each other , preventing data loops. 6 Use the Authentication Requ ired field to choo[...]

Advanced 89 Before you set up DDNS, you must obtain an account, password or key and static domain name from your DDNS pr ovider . DDNS is disabled by default. Figure 74 Dynamic Domain Name Server (DDNS) Screen 1 Check Enable DDNS . 2 Select the provider , and then en ter the necessary info rmation provided by your DDNS provider . 3 Click Apply .[...]

90 C HAPTER 5: C ONFIGURING THE R OUTER SNMP SNMP (Simpl e Network Manage me nt Protocol) allows r emote management of your Router by a PC that has an SNMP management agent installed. Figure 75 SNMP Scr een T o Configure SNMP Community: 1 In the Community column, enter the name of the SNMP communication channel. Y our SNMP management agent needs to[...]

Advanced 91 Y ou can configure your Router to send status messages to the SNMP management agent if a problem occu rs on the network. T o configure SNMP traps: 1 In the IP Address field, enter the IP addr ess of the PC to which you want your Router to send status messages. 2 In the Community field, enter the name of the SNMP communication channel to[...]

92 C HAPTER 5: C ONFIGURING THE R OUTER Proxy ARP Proxy ARP is the technique in which one host, usually a Router , answers ARP requests intended for another machine. By "faking" its identity , the Router accepts responsibility for routing packets to the "real" or intended destination. This heightens the security for your network[...]

System Tools 93 System T ools These screens allow you to manage differ ent parameters of the Ro uter and perform certain administ rative functions. Restart Router Sometimes it may be necessary to restart (or reboot) the Router . Restarting the Router from this scr e en will not delete any of your configuration settings. Click the Restart the Router[...]

94 C HAPTER 5: C ONFIGURING THE R OUTER ■ Backup Configuration — Y ou can save your current configuration by clicking the Backup button. Saving your conf iguration will allow you to restor e it later if your setting s are lost or changed. It is re commended th at you backup your curr ent configuration be for e performing a firmware update. ■ [...]

System Tools 95 Time Zone Y ou can set the time settings for the Router on this screen. Figure 81 Time Zone Screen The Router keeps time by connecting to a Netwo rk T ime Protocol (NTP) server . This allows the Router to synchronize the system clock to the Internet. The synchronized clock in the Router is used to record the security log and control[...]

96 C HAPTER 5: C ONFIGURING THE R OUTER Ping The ping tool is used to test if the network is working properly . Figure 82 Ping Scr een 1 Enter the IP address or domain name in the IP Address or Domain Name field, and click Ping . 2 Select from the Number of times to Ping drop-down menu. 3 The Router keeps a log of the ping test, click Clear Log to [...]

System Tools 97 T raceroute T raceroute is the program that shows you the route over the network between two systems, listing all the intermediate r outers a connection must pass through to get to its destination. It can help you determine why your connections to a given serv er might be poor , and can often help you figure out wher e exactly the p[...]

98 C HAPTER 5: C ONFIGURING THE R OUTER DNS Lookup DNS Lookup is the process of resolving an IP address (i.e. 192.168.11.137) to a host name (i.e. xxxcompany .net). Figure 84 DNS Lookup Scr een 1 Enter the IP address or domain name in the IP Address or Domain Name field, and click Dns looku p. 2 The Router keeps a log of th e DNS lookup test, click[...]

Status and Logs 99 Status and Logs Y ou can use the Status Screen to view version numbers for your Router’ s software and hardwar e and check the status of connections to W AN, LAN and WLAN interfaces. Status Figure 85 Status Scr een This screen shows Router status and statistics. ADSL Status Figure 86 ADSL Status Scr een This screen shows ADSL m[...]

100 C HAPTER 5: C ONFIGURING THE R OUTER A TM PVC Status Figure 87 A TM PVC Status Screen This screen shows A T M PVC status and statist ics. ■ Click Release to release the IP address fr om your ISP . ■ Click Renew to obtain the IP addr ess from your ISP . Routing T able This screen displays details for the default routing used by your Router a[...]

Status and Logs 10 1 Logs This screen shows any attempts that have been made to gain access to your network as well as the system activities. Figure 89 Logs Scr een ■ Click Help to view the help file. ■ Click Save to save the log to the har d disk as a text file. When prompted for a location to save th e file to, specify a filename and location[...]

102 C HAPTER 5: C ONFIGURING THE R OUTER Support/Feedback Y ou can use the Support/Feedback sc reen to obtain support and help, and also provide feedback to 3Com. Support Figure 90 Support Scr een This screen shows support information. Feedback T o provide feedback to 3Com, please click Provide Fee dback , and this wil l connect you to the 3Com Web[...]

6 T R OUBLESHOOTING Basic Connection Checks ■ Check that the Router is connected to your computers and to the telephone line, and that all the e quipment is powered on. Check that the LAN Status and SYNC LEDs on th e Router are illuminated, and that any corresponding LEDs on the NIC ar e also illuminated. ■ Ensure that the computers have co mp [...]

104 C HAPTER 6: T ROUBLESHOOTING ■ If you cannot b rowse to the Router , use the winipcfg utility in Wind ows 98/ME to verify that your computer has received the corr ect address information fr om the Router . From the Start menu, choose Run and then enter winipcfg . Check that the computer has an IP address of the form 192.168.1.xxx (where xxx i[...]

Wireless Networking 105 4 Press and hold the Reset button on the r ear panel (see “ The r ear pane l ( Figure 4 ) of the Router contains four LAN ports, one ADSL port, a reset button, a power OK LED, and a power adapter socket . ” on page 16 ) for 5 seconds. 5 The Router will r estart, and when th e start-up sequence has completed, browse to: h[...]

106 C HAPTER 6: T ROUBLESHOOTING For more ef fective coverage you ca n try reorientating your antennae. Place one antenna vertically and one hor izontally to improve coverage. Additionally consider moving the wireless computer closer to the Router to co nfirm that the building stru cture or fittings are not adversely affecting the connectivity . If[...]

Recovering from Corrupted Software 107 Recovering from Corrupted Software If the system softwar e has become corrupted, the Router will enter a “rec overy” state; DHCP is enabled, and the LAN IP addr ess is set to 192.168.1.1. Follow the instructions below to upload a new copy of the system software to a Router unit in this state. Ensure that o[...]

108 C HAPTER 6: T ROUBLESHOOTING Frequently Asked Questions How do I re set the Router to Factory Defaults? See “ Forgotten Password and Reset to Factory Defaults ” on page 104 . How many computers on the LAN does the Router sup port? A maximum of 253 computers on the LAN are supported. How many wireless clients does the Router support? A maxim[...]

A IP A DDR ESSING The Internet Protocol Suite The Internet Pr otocol su ite consis ts of a well-de fined set of communicat ions pr otocol s and severa l standar d appl ication protocols. T ransmission Control Protocol/Interne t Protocol (TCP/IP) is probably the most widely known and is a combination of two of the protocols (IP and TCP) working toge[...]

110 A PPENDIX A: IP A DDRESSING For your network to work correctly , all devices on the network must have: ■ The same sub-network ad dress. ■ The same subnet mask. The only value that will be different is the specific host device number . This value must always be unique. An example IP address is ‘192.168. 100.8’. However , the size of the [...]

How does a Device Obtain an IP Addr ess and Subnet Mask? 111 This type of IP Address operates on a subnet mask of ‘255.255.0.0’. See Ta b l e 4 for an example about how a network (only four computers repr esented) and a Router might be configur ed. Ta b l e 4 IP Addressing and Subnet Masking How does a Device Obtain an IP Address and Subnet Mas[...]

112 A PPENDIX A: IP A DDRESSING an IP address at random fr o m th e indu stry standard subnet of 169.254.x.x (with a s ubnet mask of 255.255.0 .0). If t wo devices allocate themselves the same address, the c onflict is detected and one of the devices allocates itse lf a new addr ess. Automatic IP addressing support was intr oduced by Microsoft in t[...]

B T ECHNICAL S PECIFICATIONS This section lis ts the technical spec ifications for the OfficeConnect ADSL Wi reless 54Mbps 11g Fir ewall Router . OfficeConnect ADSL Wireless 54Mbps 11g Firewall Router Interfaces DSL connection LAN connection — four 10 Mbps/100 Mbps dual speed Ethernet ports (10BASE-T/100BASE-TX) WLAN Interfaces Standard IEEE 802.[...]

114 A PPENDIX B: T ECHNICAL S PECIFICATIONS Operating T emperature 0 °C to 40 °C (32 °F to 105 °F) Power 8V A, 25 BThU/hr Humidity 0% to 90% (non-condensing) humidity Dimensions ■ Wi dth = 220 mm (8.7 in.) ■ Depth = 133 mm (5.2 in.) ■ Height = 38 mm (1.5 in.) Wei g ht Approximately 550 g (1.1 lbs) Standards Functional: ISO 8802/3 IEEE 802[...]

OfficeConnect ADSL Wireless 54Mb ps 11g Firewall Router 115 System Requirements Operating Systems The Router will support the fo llowing Operating Systems: ■ Wi ndows 98Se ■ Wind ows NT 4.0 ■ Wi ndows ME ■ Wi ndows 2000 ■ Wi ndows XP ■ Mac OS 8.5 or higher ■ Unix Ethernet Performance Th e Router complies to the IEEE 802.3i, u and x sp[...]

116 A PPENDIX B: T ECHNICAL S PECIFICATIONS[...]

C S AFETY I NFORMATION Important Safety Information WAR NI N G : War nings conta in direct ions that you must follow for your personal safety . Follow all directions carefu lly . Y ou must read the following safety information carefully before you install or remove the unit: WAR NI N G : The Router generates and uses radio frequency (rf) energy . I[...]

118 A PPENDIX C: S AFETY I NFORMATION WARNING: RJ-45 ports. These are shielded RJ-4 5 data sockets. They cannot be used as telephone so ckets. Only conn ect RJ-45 data connectors to these sockets. Wichtige Sicherheitshinweise VORSICHT : Warnhinweise enthalten Anweisungen, die Sie zu Ihrer eigenen Sicherheit befolgen müssen. Alle Anweisun gen sind [...]

119 VORSICHT : Es sind keine von dem Benutzer zu ersetzende od er zu wartende T eile in dem Gerät vorhanden. Wenn Sie ein Problem mit dem Router haben, das nicht mittels der Fehleranalyse in dieser Anleitung behoben werden kann, setz en Sie sich mit Ihrem Lieferante n in V erbindung. VORSICHT : V or dem Ausbau des Gerä ts das Netzadapterkabel her[...]

120 A PPENDIX C: S AFETY I NFORMATION conditions ne sont maintenues que si l'équipement auquel il est raccordé fonctionne dans les mêmes conditions. A VERTISSEMENT : Il n’y a pas de parties remplaceables par les utilisateurs ou entretenues pa r les utilisateurs à l’in térieur du moyeu. Si vous avez un problème physique av ec le moyeu[...]

D E ND U SER S OFTWAR E L ICENSE A GR EEMENT 3Com Corporation END USER SOF TW ARE LICEN SE AGREEMENT YOU SHOULD CAREFULLY READ THE FOLLOWING TERMS AND CO NDITIONS BEFORE DOWNLOADING, INSTALLING AND USING THIS PRODUCT, THE USE OF WHICH IS LICENSED BY 3COM CORPORATIO N ("3COM") TO ITS CUSTOMERS FOR THEIR USE ONLY AS SET FORTH BELOW. DOWNLOA[...]

122 A PPENDIX D: E ND U SER S OFTWARE L ICENSE A GREEMENT and developed solely at private expense. Th e Sof tware is delivered as "Commercial Comp uter Software" as defined in DFARS 252.22 7-7014 (June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is p rovided with onl y such rights as are provided in this Ag reemen[...]

E O BTAINING S UPPORT FOR Y OUR P R ODUCT Register Y our Product W arranty and other service benefits start from the date of purchase, so it is important to register your product quickly to ensure you get full use of the warranty and other service benefits available to you. W arranty and other service benefits are enabled thr ough product re gistra[...]

124 A PPENDIX E: O BTAINING S UPPORT FOR Y OUR P RODUCT T roubleshoot Online Y ou will find support tools posted on the 3Com W eb site at www.3com.com . 3Com Knowledgebase helps you troubleshoot 3Com products. This query-based interactive tool is located at http://knowledgebase.3com.com and contains thousands of technical solutions written by 3Com [...]

Contact Us 125 T o send a product directly to 3Com for repair , you must first obtain a return authorization number (RMA). Products sent to 3Com, without authorization numbers clearly marked on the outside of the package, will be r etur ned to the sender unopened, at the sender’ s expense. If your product is r egistered and under warranty , you c[...]

126 A PPENDIX E: O BTAINING S UPPORT FOR Y OUR P RODUCT Austria Belgium Denmark Finland France Germany Hungary Ireland Israel Italy 0800 297 468 0800 71429 800 17309 0800 11315 3 0800 91795 9 0800 182 150 2 06800 12813 1 800 553 1 17 1800 945 379 4 800 879489 Luxembourg Netherlands Norway Poland Portugal South Africa Spain Sweden Switzerland U.K. 8[...]

Contact Us 127 US and Canada T el ephone T echni cal Suppor t and Repair 1 800 876 3 266 Country Telephone Number Country Telephone Number[...]

128 A PPENDIX E: O BTAINING S UPPORT FOR Y OUR P RODUCT[...]

G LOSSARY 802.11b The IEEE specification for wireless Ethe rnet which allows speeds of up to 11 Mbps. The standard pr ovides for 1, 2, 5.5 an d 11 Mbps data ra tes. The rates will switch automatically depending on range and environment. 802.11g The IEEE specification for wireless Ethe rnet which allows speeds of up to 54 Mbps. The standard pr ovide[...]

130 G LOSSARY Auto-negotiation Some devices in the range su pport auto -negotiation. Aut o-negotiation is where two devices sharing a link, automa tically configure to use the best common speed. The order of prefer ence (best first) is: 100BASE-TX full duplex, 100BASE-TX half duplex, 10BASE-T full duplex, an d 10BASE-T half duplex. Auto-negotiat io[...]

G LOSSARY 131 DNS Server Address DNS stands for Domain Name Syst em, which allows Internet host computers to have a domain name (s uch as 3com.com) and one or more IP addresses (such as 192.34.45.8). A DNS server keeps a database of host computers and th eir respective do main names and IP addresses, so that when a domain name is requested (as in t[...]

132 G LOSSARY Hub A device that regenerates LAN traffic so that the transmission distance of that signal can be extended. Hubs are similar to repeaters, in that they connect LANs of the same type; howe ver they connect more LANs than a repeater and ar e gener ally more sophisticated. IEEE Institute of Electrical and Electr onics Engineers. This Ame[...]

G LOSSARY 133 LAN Local Area Network. A network of end stations (such as PCs, printers, servers) and network devices (hubs a nd switches) that co ver a relati vely small geographic ar ea (usually not larg er than a floor or building). LANs are characterized by high transmission speeds over short distances (up to 1000 metres). MAC Media Access Contr[...]

134 G LOSSARY RJ-45 A standard connector used to connect Ether net networks. The “R J” stands for “registered jack”. Router A device that acts as a central hub by connecting to each computer's network interface card and managing the data traffic between the local network and the Inter net. Server A computer in a network that is shared [...]

G LOSSARY 135 Tr a f f i c The movement of data packets on a network. Universal Plug and Play Universal Plug and Play is a system wh ich allows compatible applications to read some of their settings fr om the Router . This allows them to automatically configure some, or all, of their settings and need less user configuration. URL Filter A URL Filte[...]

136 G LOSSARY WLAN Wi reless Local Ar ea Network. A WLAN is a group of computers and devices connected together by wireless in a r elatively small area (such as a house or office). WP A W i-Fi Protected Access. A dynamically changing encryption mechanism for wireless networking. Encryption strength is 256 bit.[...]

137 R EGULATORY N OTICES For The Office Connect ADSL Wir eless 54Mbps 11g Fir ewall Router G ENERAL S TATEMEN TS The 3Com OfficeConnect ADSL Wireless 54 Mbps 11g Fire wall Router (WL-552) must be installed and used in strict accordance with the manufacturer 's instructions as described in the user document ation that comes with the product. Th[...]

138 Complies with Part 15 of the FCC rules. Operation is subject to the following two co nditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, inclu ding interference that may cause undesired operation. I NDUSTRY C ANADA - RF C OMPLIA NCE This device complies with RSS 210 of Industr[...]

139 Intended use: ADSL 802.11g/b Firewall Router For connection to ADSL net works NOTE: To ensure product operation is in complian ce with local regulations, selec t the country in which the product is ins talled. Refer to 3 CRWDR101A-75 User Guide. Č esky [Czech ] 3Com Coporation tímto prohlašuje, ze tent o RLAN device je ve shod ě se základn[...]

140 A copy of the signed Declaration of Conformity can be downloaded from the Product Support web page for the 3Com OfficeConnect ADSL Wireless 54 Mbps 11g Firewa ll Router a t http:/ /www.3Com. com. Also available at http://support. 3com.com/doc/WL-55 2_EU_DOC.pdf. EU - R ESTRICTIONS FOR U SE IN THE 2.4GH Z BAND This device may be operated indoors[...]

141 前項合法通信，指依電信規定作 業之無線電信。 低功率射頻電機須忍受合法通信 或工業， 科學及醫療用 電波輻射性電機設備之干擾。 RTTE01: 1. 本機限在不干擾合法 電台與不受被干擾保障條件下於室內 使用 2. 為減少電波干擾 ，請妥適使用[...]

142[...]

I NDEX Numbers 128-bit WEP 46 128-bit WEP Screen 46 1483 Bridge Mode 55 64-bit WEP Screen 47 A Access Control Scr een 62 Add PC Screen 63 Add Schedule Rule Screen 65 Addresses IP 85 Admin Password Screen 75 ADSL Status Screen 77 Advanced Screen 68 Automatic Addressing 87 B Backup/Restore Settings Scr een 74 Bridge Mode for Si ngle PC Screen 53 Brid[...]

142 I NDEX configuring 56 MAC Address Filte ring Screen 66 mode 30 N NA T (Network Address T ranslation) 68 NA T -T (NA T T raversal) 68 Network addresses 8 5 Networking wirele ss 81 NIC wirele ss 14 P Passwor d 27, 75 Poison Reverse 58 PPPoA 31 PPPoA Screen 31 PPPoA Settings Screen 52 PPPoE 26, 30, 31 PPPoE Screen 30 PPPoE Settings Screen 51 R Rem[...]