LevelOne WBR-6800 manual

LevelOne User Manual Ver. 1.0 WBR-6800 N Wireless 3G Router[...]

2 Safety FCC WARNING This equipment may generate or use radio frequency energy . Changes or modifications to this equipment may cause harmful interference unless the modifications are expressly approved in the instruction manual. The user could lose the authority to operate this equipment if an unauthoriz ed change or modification is made. This equ[...]

3 General Public Licen se This p roduct incorporates open source code into the softw are and therefore fa lls under the guidelines governed by the General Public License (GPL) agreement. Adhering to the GPL requirements, th e open sou rce code and open source license fo r the source code are available for free download at http://global.level1.com .[...]

4 Table of Con tent 1. INTRODUCTION ................................................................................................................................................................ 5 U SER M ANUAL O VERVIEW ...............................................................................................................................[...]

5 1. Introduction Congratulations on your purchase of LevelOne W BR-6800 N W ireless 3G Router. This product is specifically designed for Small Office and Home Office needs. It prov ides a complete SOHO solution for Internet surfing, and is easy to configure and operate ev e n for non-technical users. Instructions for installing and configuring thi[...]

6 2. Unpacking and Setup This chapter provides the package contents a nd setup information for the N Wireless 3G R outer . Features  Integrates with 1-Port Ethernet LAN: 10/100Mbps MDI-MDI-X Auto-Sensing  Provides 10/100Mbs RJ45 or 3G (USB) W AN inter face for Broadband Internet Access  Auto-fallback Feature to Ensure Always-On Connectivi [...]

7 3. Ha rd w are Installation Front View Label Status Indicators 3G Flashing Flashes when unit is ready (No 3G Modem is attached) On W hen unit is ready (3G Modem is attached) Off Power is Off LAN Flashing Flashes when data is b eing transferred On Indicates link is acti ve Off Indicates no active link WAN Flashing Flashes when data is b eing trans[...]

8 Rear View Antenna To connect the supp lied antenna WAN 10/100 RJ-45 Et hernet Port to connect to a modem or router LAN 10/100 RJ-45 to co nnect to Ethernet net work card or Hub/Switch Reset To reset the W BR-6 800 to fac tory default se ttings . Press and hold the reset button for 5 seconds. (All your custom ized settings will be lost) Power Conn[...]

9 Hardw are installation steps Decide where to place your Wireless Router You can place your Wireless Router on a des k or other flat surface. For optimal performance, place your W ireless Router in the center of your office (or your home) in a location that is away from any potential source of interference, such as a metal wall or microwave oven. [...]

10 4. Che ck Y our Net w ork S ettings 1. Please make sure your PC can get IP address automatically so the W BR- 6800 can communicate with your PC during configuration.  Select “Control Panel” > “Network Connections”.  Right click the “Local Area Connection” and choose “Properties”.  Select the TCP/IP protocol for your n[...]

11 5. Conf ig uration Wizard Once properly co nfigured, the W BR-6800 N Wireless 3G Router will obtain a nd assign IP add ress information automatically. Configuration settings can be established th roug h th e W eb -Based Configuration Menu. Open a web browser (Internet Explorer/Firefox/Safa ri) a nd type in the IP Address http://192.168.0.1 Note:[...]

12 Setup W iz ard will g uide you through a basic con figuration procedure step by step. Press Next to begin.[...]

13 Once the user finishes those steps and the router screen display ed as below. It means that th e Internet connection is now established.[...]

14 6. Advanced Setup To access the Advanced Setup, click on A dvanced Setup at the top of the page. Once in the Advanced Setup, you will be presented w ith the following menu.[...]

15 Basic Setting These are the b asic settings of the unit. Click on the menu on the left to a cc ess the respective settings page.[...]

16 Primary Setup This page lets you change the LAN (Local Area Ne twork) settings on your WBR-6800 N 3G W ireless Router and WAN ( W ide Area Network) connection. 1. LAN IP Address: The local IP address of this device. The computers on your network must use the LAN IP address of your product as their Default Gateway. You can change it if necessary.[...]

17 This option is primary to enable this product to w ork properly. The setting items and the web appearance depend on the W AN ty pe. Choose correct W AN type be fore you start. Static IP Address: ISP assigns you a static IP address. Dy namic IP A ddress : Obtain an IP address from ISP automatically. PPP over Ethernet: Some ISPs require the use of[...]

18 PPTP First, please check your ISP assigned and Select Static IP Address or Dynamic IP Address. 1. My IP Address and My Subnet Mask: The private IP address and subnet mask your ISP assigned to you. 2. Server IP Address: The IP address of the PPTP server. 3. PPTP Account and Passw ord: T he account and password y our ISP assigned to you. If you do[...]

19 3G For 3G W AN Networking. The W AN Fields may not be necessary for y our connection. T he information on this page will only be used when your service provide requires you to enter a User Name and Password to Connect to 3G network. Please refer to y our documentation or service provider for additional information. 1. APN: Enter the APN for your[...]

20 Virtual Computers (Only for Static and d y n amic IP address WAN type) Used when WAN is set as DHCP or Static IP, the user can assign a g lobal IP address to a LAN IP Address. Virtual Computer enables y ou to use the original NAT feature, and allow s you to setup the one - to -one mapping of multiple global IP address and local IP address.  G[...]

21 DHCP Server This page allows you to configure the DHCP serv er on the N Wireless 3G Router For more settings click on More . DHCP Server : To either Disable or Enable DHCP Server. Lease Time: DHCP lease time to the DHCP client IP Pool Starting/Ending Address: The pool of IP’s that can be allocated to clients Domain Name: To assign a Domain Nam[...]

22 Wireless Sett ings Wireless - Enabled by default. Disa bling this will turn off the wireless feature of this unit. Network ID (SSID): Service Set Id entifier (SSI D) is the n ame designated for a spe ci fic wireless local area network (W LAN). The SSID's factory d efault se tting is WBR-6 800 . The SSID can be easily changed to establish a [...]

23 Security: Security - You may select from three levels of encryption to secure y our wirel ess network: No Encryption, W EP, 802.1x RADIUS, W PA-PSK, WPA, W PA2-PSK (AES), W PA2 (AES), W PA-PSK / WPA2-PSK and WPA / WPA2. LevelOne recommends WP A 2 -PSK (AES) for simple and secure wireless encryption. After configuring the wireless security settin[...]

24 802.1X To use this security feature, you will need to ha ve a RADIUS se rv er on your netw ork to authenticate access. Please type in the details for y our RADIUS server. RADIUS Server IP Address, or th e RADIUS server’s domain -name. RADIUS Shared Key Key value shared by the RADIUS server and this router. This key v alue is consistent with th[...]

25 WPA- PSK This security is more secure compared to W EP. Select w hich type of encryption to use (either TKIP or AES) and then enter the key in the Passphrase field. The field needs to be between 8 and 63 characters long and can be any combination of letters and numbers i f ASCII setting is used.[...]

26 WPA/WPA2 Similar to 802.1X security but with TKIP or AES Encryption. You will need a RADIUS serv er for authentication. Please enter the details of your RADIUS server. RADIUS Server  IP address or th e RADIUS server’s domain -name.  Port number of the RADIUS Serv er  Enter the RADIUS Shared Key Key value shared by the RADIUS server an[...]

27 WPA-PSK, WPA2- PSK , WPA / WP A 2 -PSK This security is more secure compared to W EP. It will use either TKIP or AES for enhanced security. Please enter the key in the Passphrase field. The field can be between 8 and 63 characters long and can be any combination of letters and numbers under A S CII format.[...]

28 WPS (WiFi Protected Setup) W PS feature is fo llow ing the W i-Fi Alliance W PS standard and it eases the set up of se curi ty - enabled Wi-Fi networks in the home and small office environment. It reduces the user steps required to configure a network a nd supp orts tw o methods that are familiar to most consumers to configure a network and enab[...]

29 Enter PIN number of Wireless Adapter It is also possible to use the PIN number you have set on the wireless adapter. Set the adapter as Enrollee and enter the PIN you want.[...]

30 Push Button Method Select th e “ Push Button” mode and click the “Trigger” button. An alternative is to press the WPS button at the back of the router until the WLAN light starts flashing. This indicates that WPS is activated. Then press and hold the W PS button on y our wireless client for 1 second.[...]

31 If your device ha s no physical W PS push button, th en you can pu sh the software butt on in the utility.[...]

32 WDS (Wireless Distribution Sy stem) W DS operation as defined by the IEEE802.11 standard has been made available. Using WDS it is possible to wirelessly connect Access Points, and in doing so e xtend a wired infrastructure to locations where cabling is not possible or inefficient to implement. For maximum compatibility, it is recommended that W [...]

33 Forw arding Rules This page allows you to configure the port forwarding management of the W BR-6800. Use the menu on the left to access the setting pages. The port forwarding feature is required because the W ireless Router’s NAT (Network Address Translation) will block incoming traffic from the Internet to the LAN i f the specific port mappin[...]

34 Virtual Server A virtual server is d efined as a Service Port, an d all requests to this port will be redirected to the computer specified by the Server IP. Virtual Server can work with Scheduling Rules, and giv e user more flexibility on A ccess co ntrol. For Detail, please refer to Sc heduling Rule (Advanced Setting > Schedule).[...]

35 For example, if you have an FTP server (port 21) at 192.168.0.1, a W eb server (port 80) at 192.168.0.2, and a VPN server a t 1 92.168.0. 6, then you need to s pecify the following virtual server mapping table: You can specify different ports to be used for Public and Private source and destinati ons. Public Port Private Port Server IP Enable 20[...]

36 Special A P Some applications require multiple connections, like Internet games, Video conferencing, Internet telephony, etc. Because of the firewall function, these applications cannot w ork with the WBR- 6800 . The Special Applications feature allows some of these applications to work w ith this p roduct. If this fails to make an application w[...]

37 Miscellaneous Items IP Address of DMZ Host Here you can set the DMZ (Demilitarized Zone) Host. It is a c omputer that does not have the W BR- 6800 ’s built-in f irew all app lie d. It allows th e computer to b e e xposed to unrestricted communication to the Internet. This setting is most commonly used for Int erne t gaming, Video conferencing,[...]

38 Security Settings This section allows y ou to configure the security management of the unit. Click on the menu o n th e left to access the respective setting page.[...]

39 Packet Filter Packet Filters allows you to co ntrol what packets are allowed to p a ss through the W BR- 6800 . The Outbound Filter applies to all outbound packets and the Inbound Filter only applies to packets that are destined to Virtual Servers or the DMZ Host only . To enable the Outbound Filter, tick the Enable tick box. There are two types[...]

40 For so urce or destination IP address, you can define a single IP address (192.168.0.1) o r a range of IP addresses (192.168.0.100 – 192.168.0.200). An empty implies all IP addresses. For source or destination port, you can define a sing le port (80) or a ran ge of ports (1000 -19 99). Y ou also ne ed to add prefix "T" or "U&quo[...]

41 Dom ain Filter The Do main Filter e nables you to prevent users f rom accessing specific domain addresses (web sites). To enable Domain Filter, make sure to tick the Enable tick box.  Log DNS Query : Check if you want to log the action when someone accesses the specific URLs.  Privilege HOST / Netmask: Setting a group of computers that hav[...]

42 URL Blocking URL Blocking will block LAN computers from connecting to a pre -defined W eb Site. The major difference between Domain Filter and URL Blocking is that Domain Filter requires the user to input suffixes (eg: xxx.com, ttt.net) while URL Blocking only requires user to input a keyword. In other words, Domain filter ca n block speci fic w[...]

43 MAC A ddress Control The Do main Filter e nables you to prevent users f rom accessing specific domain addresses (web sites). To enable MAC Address Control, make sure to tick on Enable. There are two types of controls available:  Connection Control: To control which wired and wireless clients can connect to this device. If a client is denied a[...]

44 MAC Address MAC address indicates a specific client. IP Address Expected IP address of the corresponding client. Keep it empty if you don't care its IP address. C W hen " Connection control " is checked, check " C " will allow the corresponding client to connect to this device. A W hen " Association control " i[...]

45 Miscellaneous Items This page allows you to change various miscellaneous security settings. Remote Administrator Host/Port: By default, only LAN user can browse the built -in web configuration pages to perform administration task. This feature enables you to perform administration task from the Internet. If th is feature is e nabled, only the sp[...]

46 Adv anced Settings These pages allo w you to configure the m ore advanced settings on the unit.[...]

47 System Time This page allows you to set the time settings of the W BR-68 00. There are three ways to set up the System Time of the W BR-6800. 1. Get Date and Time by NTP Protocol : Se l ected if you want to get the Date and Time from an NTP server. A Time Serv er and time zone is requi red. Once entered, click Sync Now to sync the time with the [...]

48 System Log The WBR-6800 supports both Syslog (using UDP packets) and E-Mail alert. For Syslog, you will need to ente r the IP address of the host computer that will be rece iv ing the syslog messages and tick on Enable . For E-Mail alert, you will need to define the follow ing:  E-Mail Alert: Tick Enable to enable this feature.  SMTP Serve[...]

49 Dyn amic DNS Dynamic DNS is a f eature th at allows users to set u p a static domain name even when they h ave a dynamic internet IP address. So even if your IP address changes every time you connect t o your ISP, the IP add r ess can be mapped to a host name so that anyone who wants to connect to the W BR- 6800 , or any services behind the rout[...]

50 SNMP Setting SNMP (Simple Netwo rk Management Proto col) is de signed to give users the ability to remotely manage a computer or network device. To enable SNMP, please set the following:  Enable SNMP: You must check either Local or Remote or both to enable SNMP function. If Local is checked, this unit will r espond to requests f rom LAN. I f [...]

51 Routing W hen y ou have m ore than one W BR-6800, or router w ith different su bnets o n the netw ork, y ou will need to enable this function to allow the different subnets to co mmunicate with each other. There are two types of routing supported by the W BR-6800.  Dynamic Routing: This method uses Routing Information Protocol (RIP) to enable[...]

52 Destination Subnet Mask Gateway Hop Enabled 192.168.1.0 255.255.255.0 192.168.123.216 1  192.168.0.0 255.255.255.0 192.168.123.103 1  So if, for example, Client3 wants to send an IP data packet to 192.168.0.2, it would use the above table to determine that it had to go via 192.168.123.103 (Router 2) And if it sends Packets to 192.168.1.11 [...]

53 Schedule Rule This feature allows you to define the time schedule o f Virtual Server and Packet Filter rules. To enable Scheduling, tick Enable and click Save .[...]

54 Then create new rules by pressing the A dd N ew Rule button. Enter the Rule ’s Name and set the Start and End Times for each day. Then click Save to save th e new rule. Once defined, you can use it f or Virtua l Server and Packet Filters by e ntering the rule numbe r in the “Schedule Rule#” fields.[...]

55 QoS Rule Here you can set the parameters for QoS (Quality of Service). This function allows you to specify which types of data packets are given priority. For example you can increase the priority of Voice Over IP or gaming packets so that they are handled first by W BR-6800. To enable QoS Control, tick Enable. Local IP: Please input Client IP, [...]

56 Toolbox This section has some basic tools to maintain the W BR-6800 ’s sy stems.[...]

57 View Log View the Log of the router. It can also be exported to a text file.[...]

58 Firmw are Upgrade This page allows you to perform updates to t he firmware of the W BR- 6800 . To use, click Browse and locate the firmware image file, then click Upgrade . Note: Please connect to the W BR-6800 using a wired LAN connection a s if the connection b reaks during the u pdate, it will render the unit unworkable. Also d isable any ant[...]

59 Miscellaneous I tems MAC Address for Wake- on -LAN W ak e- on -LAN is a technology that enables you to power up a networked device remotely. In order to enjoy this feature, the target device must be Wake - on -LAN enabled and you have to know the MAC address of this device, say 00- 11 - 22 - 33 - 44 -55. Clicking " W ake up" button wil[...]

60 Appendix A 802.1x Setting Figure 1: Testing Environment (Use W indows 2000 Radius S erver) Equipment Details PC1: Microsoft Windows XP Professional without Service Pack 1 and LevelOne W ireless PCI Card PC2: Microsoft Windows XP Professional with Service Pack 1a or late r and LevelOne W ireless PCI Card. Authentication Server: Windows 2000 RADIU[...]

61 DUT and Windows 2000 Radius Server Setup Setup W i ndows 2000 RADIUS Server W e have to change authentication method to MD5_Challenge or using smart card or other certificate on RADIUS server according to the test condition. Setup DUT 1. Enable the 802.1X (check the “Enable checkbox “). 2. Enter the RADIUS serv er IP. 3. Enter the shared key[...]

62 Windows 2000 RADIUS server A uthentication testing: DUT authenticate PC1 using certificate. (PC2 follows the same test procedures.) 1. Download and install the certificate on PC1. (Fig 4) 2. PC1 chooses the SSID of DUT as the Access Point. 3. Set authentication type of wir eless cl ient and RADIUS server both to EAP_TLS. 4. Disable the wireless [...]

63 Figure 6: Authentication success DUT authenticate PC2 using PEAP-TLS. 1. PC2 chooses the SSID of DUT as the Access Point. 2. Set authentication type of wir eless cl ient and RADIUS server both to PEAP_TLS. 3. Disable the wireless connection and enable again. 4. The DUT will send the user's certificate to the RADIUS server, and then send the[...]

64 Appendix B FAQ and Tr oubleshoo ting What can I do when I have some trouble at the first time? 1. Why can ’t I configure the router even if the cable is plugged in the ports of Router and the LED is also lit ? A : First, m ake sure that w hich port is plugged. If the cable is in the WAN port, please change to plug in L AN port: Then, please ch[...]

65 2. Why can ’t I connect the router even if the cable is plugged in L AN port a nd the LED is light? A : First, p lease check Status LED . If the device is nor mal, the LED will blink once pe r sec ond. If not, please check the blinking Status LED as shown: Status LED stays constantly on or off: The system is frozen. Suggest powering off and on[...]

66 5. When I use Static IP A ddress to connect to the Internet, I can access or ping global IP addresses such as 202.93.91.218. Howeve r, I cannot access the a website by using it s domain name, for example http:/ /espn.com ? A : Please check the DNS configuration of Static IP Address. Please re fer to the informati on of ISP and assign one or two [...]

67 How do I connect router by using wireless? 1. How to start to use wireless? A: Fi rst, ma ke sure that you already installed wir eless client device in your computer. Then check th e configuration of wireless router. The default is below: About wireless client, you will see wireless icon:[...]

68 Then click and will see the AP list that wireless client can be accessed: If the client cannot find your wireless router, please refresh network list a gain. Choose the one that you will want to connect and connect: If successfully, the computer will show som ething similar. User will also retrieve IP from router, for example :[...]

69 2. How can I use A ES e ncry ption of WPA-PSK to connect ? A: First, you must check if the driver of wireless client supports AES encryption. Ple ase refer to the below: If SSID is default and click “Properties” to check if the driver of wireless client supports AES encryption. 3. When I use wireless to connect the router, but I find the sig[...]

70 Technical S pecifications General Model W BR- 6800 N Wireless 3G Router Data Transfer Rate 1, 2, 5.5, 6, 9, 11 , 12, 18, 24, 36, 48, 54 Mbps Max physical rate up to 150 Mbps in 8 02.11n mode Transm it Power 802.11b: 17± 2 dBm 802.11g: 15± 2 dBm 802.11n: 14± 2 dBm Frequency Range America/ FCC: 2.412 ~2.462GHz (11 Channels) Europe/ ETSI: 2.412 [...]