NETPASSAGE NP25G User Manual
Table of Contents OVERVIEW THE PRODUCT .............................................................. 1 Introduction ................................................................................................... 1 Features ........................................................................................................ 2 Key Features............................................................................................... 2 Security Features .................................................
Setup WAN for Cable Internet with Dynamic IP Assignment ........... 54 Setup WAN for Cable Internet with Static IP Assignment ................. 56 ................................................................................................... 56 Setup WAN for ADSL Internet Using PPPoE .......................................... 57 Setup WAN for ADSL Internet using PPTP ............................................. 58 Setup WAN for ADSL Internet using L2TP..............................................
Reboot the System.................................................................................. 99 Change Your Login Password ............................................................. 100 View System Information .................................................................... 101 ................................................................................................................... 101 APPENDIX: LEARN ABOUT COMMONLY USED TERMS ............
Overview the Product Introduction NetPassage NP25G is a high-performance and low-cost IEEE802.11b/g Router using the latest AR5007 technology. Using Atheros System-onChip (SoC) solution, NP25G supports high-speed data transmission of up to 54Mbps. NetPassage NP25G combines 3 devices into one box. It works as a Wireless Access Point, which allows you to connect Wireless B/G devices to the network.
Features Key Features Wireless One-Touch Registration Remove the complexity of setting up a secured network – at a touch of a single access button, a shared security key is set up in the network.
Wireless multimedia (WMM) Suitable for simple applications that require Quality of Service (QoS), such as Voice over IP (VoIP), WMM prioritizes data traffic according to 4 access categories: Voice, Video, Best Effort and Background.
Bandwidth Control Available in Routing Mode, this feature gives the administrator the ability to manage the bandwidth of subscribers to prevent massive data transfers from slowing down the Internet access of other users. The Upload / Download bandwidth at WAN / LAN ports can be limited using either IP address or MAC address.
Compatible with IEEE 802.11g and IEEE 802.11b standards Adopting the industry standard 802.11g standard, the router provides fast wireless access within your office or home network. Since it is fully backward compatible with 802.11b, you can safeguard your existing network investments.
Static IP, Dynamic IP, PPP over Ethernet, PPTP and L2TP WAN types Whether you are going to use your router for broadband Cable or ADSL modem connection sharing, you will be up and running in no time using our fuss-free web-based configuration menu.
Auto MDI/MDI-X crossover support on all Ports Forget the confusing past! We no longer need to use crossover cables for uplinking! The router supports Auto MDI/MDI-X on all its ports, auto-detecting the inserted cable type.
Virtual Servers based on Port-forwarding, IP-forwarding The router allows you to set up application servers such as FTP file servers and HTTP web servers based on IP-forwarding and Portforwarding.
Domain Name System (DNS) Redirection To avoid repetitive setup of DNS addresses for every PC in your network, the router supports DNS redirection, which enables all DNS connection requests from your PCs to be automatically redirected by the router.
Static Routing By defining a Static Routing entry, you define a specific Router IP address to which data packets will be re-directed to reach a specific IP address or subnet.
Dynamic DNS The router supports Dynamic DNS. By automatically maintaining the relationship between the fixed URL name and the changing IP, it makes webhosting feasible, with easier implementation, control and flexibility.
De-Militarized Zone (DMZ) hosting The router supports a form of Virtual Server hosting known as DMZ so that you can operate specific applications that require the opening of multiple TCP/IP ports.
Universal Plug and Play (UPnP) UPnP allows you enjoy the benefits of NAT without elaborate configuration procedures. Working alongside an UPnP-aware operating system like Windows XP, other UPnP-enabled devices and applications can negotiate to open certain ports to traverse the NAT device.
Virtual Private Network (VPN) pass-through The router is an advanced device that will recognize tunneled packets (IPSec, PPTP) for VPN connections and allow them to pass through.
WDS2 WDS2 (Wireless Distributed System 2) links up access points to create a wider network in which mobile users can roam while still staying connected to available network resources.
Security Features WPA-PSK and 64/128-bit WEP encryption support for wireless security The router uses a private key encryption known as Wired Equivalent Privacy protocol with key lengths of either 64-bit or 128bit, so that data communication in your wireless network can be protected. Additionally, with WPA-PSK, the router provides home and SOHO users with the highest-level security.
Built-in “NAT” firewall As the router handles the incoming and outgoing traffic of data packets between the internal and external network, it checks whether incoming WAN packets are legitimate replies to requests from LAN users before allowing them to pass into the LAN. This checking provides effective firewall protection because rogue Internet packets will be automatically discarded.
Stateful Packet Inspection (SPI) firewall More than just a “NAT” firewall, there is a powerful Stateful Packet Inspection (SPI) firewall in the router. Stateful inspection compares certain key parts of the packet to a database of trusted information. SPI Firewall is unlike the normal firewall that only checks the headers of the packets, it also scrutinizes the contents of the packets, ensuring the integrity of the packets.
Internet Access Policies: Time-based Management, URL filtering, Packet filtering To complement the powerful firewall technologies incorporated into the router product, you can use the comprehensive set of security management features to regulate the types of Internet access permitted. You may set up time-based access policies and block objectionable websites from children, or even set up packet filtering rules to control the transmission of TCP, UDP packets for different ports.
Overview the LEDs Figure 1 Page 20
Setup the Software PC Configuration Configuring PCs to be Wired to the Router The first step is to make sure the PC gets an IP address that it will use to communicate with the router and with other PCs across the network. You can begin by setting up your PC to function as a DHCP client, which will obtain an IP address automatically from router. Alternatively, you may want to give your PC a static IP address if you are an expert user.
! Page 22 Important: By default, Windows 98SE, ME, 2000 and XP have the TCP/IP protocol installed and set to obtain an IP address automatically.
Configuring PC to dynamically obtain an IP address for Windows 98SE or ME… 1. Click the Start button. Select Settings and click the Control Panel icon. Then double-click the Network icon. You will see the Network dialog on the right. 2. On the Configuration tab, highlight the TCP/IP line corresponding to your Ethernet adapter and click on the Properties button. You will be brought to the TCP/IP Properties page below. 3. Click on the IP Address tab, and select Obtain an IP address automatically. 4.
Configure PC to dynamically obtain IP address for Windows 2K or XP 1. Click the Start button. Select Settings and click the Control Panel icon. Then double-click the Network and Dial-up Connection (Windows 2000) or Network Connection (Windows XP) icon. 2. Double-click the Local Area Connection icon for the network adapter applicable to your Internet connection, and click the Properties button. You will be brought to the dialog page below. 3.
Configure PC with static IP address for Windows 98SE or ME 1. To begin the Static IP address configuration, follow steps 1 & 2 of Part 1(a) to get to the page on the right. 2. Click on the IP Address tab. Then type in an IP address and Subnet Mask as 192.168.168.X and 255.255.255.0 respectively, where X is any number from 2 to 254. (Note that the default IP address of the router is 192.168.168.1) 3. Next, click the Gateway tab to see the dialog page on the left. 4.
Configure PC with static IP address for Windows 2K or XP 1. To begin the Static IP address configuration, follow steps 1, 2 & 3 of Part 1(b) to get to the page on the right. 2. Select Use the following IP address, and then key in 192.168.168.X for the IP address field, where X is any number from 2 to 254. Following that, enter 255.255.255.0 for the Subnet mask, and key in the IP address of the router as the Default gateway. (Note that the default IP address of the router is 192.168.168.1) 3.
Configuring PCs to be Wireless Clients The first step is similar to that of wired PCs connected to the Fast Ethernet. We have to ensure that the wireless client gets an IP address that it will use to communicate with the router and other PCs across the network. Hence, please note that in Windows XP, you will need to select the wireless network connection corresponding to the wireless adapter you use.
Configure Wireless Client for Windows XP 1. Right-click on Wireless Network Connection corresponding to the wireless adapter you wish to connect with the router, and click on Properties. 2. On the dialog box presented, click the Wireless Networks tab, and click on the Add button. 3. Next, key in the Network name (SSID) of the wireless network. It must be the same as the SSID of the router in Part 2.
Perform Basic Router Setup In this basic setup, you will find information on how you may configure the router to function in your network and to access the Internet. Use UConfig The powerful uConfig utility has been developed to provide you hassle-free access to the router’s web-based configuration page. If you do not wish to modify the TCP/IP settings of your PC, or you have changed but forgotten the router’s management IP address, uConfig will bring you to the router’s setup – every time! It is simple.
Step 3: When the uConfig window is prompted, click Yes to proceed. With the router selected under Products List, click on Open Web.
Access Web Interface 1. Open your web browser. At the Address bar, enter the IP address of the router, as http://192.168.168.1 and hit the Enter key. Note: If your PC has a TCP/IP setting differing from the steps described in Part 1, or if you have changed but forgotten the management IP of the router, you may be unable to access the web-configuration page with step 1. The powerful uConfig utility has been developed to bring you directly to the router setup. 2.
Setup Secured Wireless Connection Setup Secured Wireless Connection with One-Touch Registration The router supports the new Wireless One-Touch Registration feature using WSC (Wireless Simple Config). WSC allows users unfamiliar with network security to set up a secured wireless connection. The router has a Wireless One-Touch Registration button which when pressed lets router automatically setup a WPA-PSK secured wireless connection with the client computer.
Step 2: On the Client computer, run the JumpStart program. In the Welcome to JumpStart page, select the Join a wireless network radio button. Click the Next button. Step 3: In the Join a wireless network page, select the Push the button on my access point radio button. The Automatically select the network checkbox is selected by default, for convenient setting up of the connection, leave this option enabled. Click the Next button.
Step 4: Configuring the wireless network screen appears. The client device found NP25G and negotiating with NP25G to do the registration. Step 5: The Wireless Configuration Completed page displays, indicating that configuration was successfully. Click on the Finish button to exit the page. On NP25G the WSC light indicator will change to flash slowly at a rate of about 1 flash per second. This indicates client registration has completed successfully. WSC light indicator status Action After pressed once.
Setup Secured Wireless Connection Without Using One-Touch Registration For users using older wireless adapters without Jumpstart support, a secondary SSID which by default has no wireless security enabled is available for connection setup. * Note:This unsecured connection is only available in factory default mode and has not been registered a client before through the one-touchregistration process.
Step 2: Click the Connect Anyway button when prompted. Connection to the secondary SSID (compex-np25g) will commence. Step 3: Click the Close button to complete the connection.
Step 4: In the web-based configuration page, select Configuration – WLAN Setup – Virtual AP to view the Virtual AP List. Select the secondary SSID (compex-np25g). Step 5: Set the Security Mode to WPA-Personal and click on the Apply button. Please refer to the Setup WPA section for detailed configuration of the security mode. Reboot the router to apply changes.
Perform Configuration This part of the setup for the router is meant for the advanced user who requires more than the essential information to set up a wired/wireless network infrastructure. Adopting a top-down approach to explain the features found on the router, what follows is a detailed walkthrough of the configurable settings available within the web-based administration menu: Once you have successfully logged in, you shall find a comprehensive list of configurable features as shown.
Configure Wireless Setup The router supports wireless LAN connectivity that is fully compliant with the IEEE 802.11g and IEEE 802.11b standards. ESSID : Enter a preferred name for the wireless network. Your wireless clients must be configured with the same ESSID (or sometimes simply referred to as SSID). Wireless Profile : Select from the list of wireless modes available: a. 802.11b only This mode supports wireless B clients with data rates of up to 11Mbps in the frequency range of 2.4Hz. b. 802.
Set Security Mode Security plays a vital role in securing wireless 802.11 networks to prevent unauthorised users from accessing and using the network resources. Disable Security To disable the Security mode (not recommended), follow these instructions: Under the CONFIGURATION command menu, you will find the Wireless Setup page. Click on the Change button next to the Security mode. Then check the radio button next to Disable, followed by the Apply button.
Setup WEP Wired Equivalent Privacy is implemented in the network. It is a security protocol in a wireless local area network. To set the Security mode to WEP, follow these instructions: 1 You can define up to 4 WEP keys. Click Edit to set the keys. 2 For hexadecimal key entry: 1. Select the Hex radio button. 2. Select the radio button of the key to be entered. 3. Select the key encryption mode from the drop down menu. 4. Fill in the key value.
3 For ASCII key entry: 1. Select the ASCII radio button. 2. Select the radio button of the key to be entered. 3. Select the key encryption mode from the drop down menu. 4. Fill in the key value. An ASCII value can take in any alphanumeric character and is NOT case-sensitive. For 64-bit encryption: Your WEP key has to be 5 characters long. For 128-bit encryption: Your WEP key has to be 13 characters long. 5. Click on Save. 6.
Setup WPA Follow these steps to setup the router for using WPA Personal, WPA2 Personal, and WPA Auto Personal. At the WPA1/2-PSK Setup page, Step 1: Specify the key entry type, by selecting either: • Passphrase (Alphanumeric characters) • Hexadecimal Step 2: Fill in the pre-shared network key: If you are using the Passphrase format, your entry can consist of a minimum of 8 alphanumeric characters or a maximum of 63 alphanumeric characters.
Set the Cipher Type to Auto to allow the router to automatically detect the cipher type to use. Step 4: Enter the GTK (Group Transient Key) Updates. This is the length of time after which the router will automatically generate a new shared key to secure multicast/broadcast traffic among all stations that are communicating with it. By default, the value is 600 seconds. Step 5: Click the Apply button and reboot your system, after which your settings will become effective.
Setup WSC Follow these steps to setup the router for using WSC. At the WPA1/2-PSK Setup page, in the WSC Particular Setup section, Step 1: Specify whether you wish to enable the Pushbutton Mode. Pushbutton Mode is required for Wireless One-Touch Registration. S t ep 2 : If you wish to create a new PIN: Click on the Create New PIN button and in the Count New PIN page, enter in the desired PIN and click on the Count button. Step 3: Click on the Apply button.
Configure the Advanced WLAN Settings Follow these steps to change the radio settings of the router. 1 1. Click on WLAN Setup from the CONFIGURATION menu. 2 Select Advanced 2 1. Set the Beacon Interval (the time lapse between every beacon sent) to any value between 20 and 1000. It is preset as 100 seconds. 2. Set the Data Beacon Rate from 1 to 16384.
Set Wireless Multimedia Wireless Multimedia (WMM) is a QoS (Quality of Service) standard in IEEE802.11E that we have adopted to improve and support the user experience for multimedia, video, and voice applications by prioritizing data traffic. QoS can be realized through 4 different Access Categories (AC). Each AC type consists of an independent transmit queue, and a channel access function with its own parameters.
Follow these steps to change the setup Wireless Multimedia on your router. 1 1. Click on WLAN Setup from the CONFIGURATION menu. 2. Select Advanced. Click WMM Settings. 2 3 Page 48 1. Select to Enable Wireless Multimedia (WMM) 2. Enter the desired WMM parameters. Using the default parameters is recommended. 3. Click Apply to apply the WMM settings, click Default to reset all parameters to default, or click Back to discard any changes and return to WLAN Basic Setup page.
AIFs (Arbitrary Inter-Frame Space) WMM Parameters (for advanced users) Arbitrary Inter-Frame Space is the minimum wait time interval between the wireless medium becoming idle and the start of transmission of a frame over the network. Cwmin (Contention Window Minimum) CwMax (Contention Window Maximum) TxOp limit (Transmit Opportunity Limit) Contention Window Minimum is the minimum random wait time drawn from this interval or window for the backoff mechanism on the network.
Setup WDS2 WDS2 (Wireless Distributed System 2) links up access points to create a wider network in which mobile users can roam while still staying connected to available network resources. The wireless client and root access point has to be set up with the same channel frequency. This allows them to connect even when the link is lost, as the channel frequency setting is preserved. In this example, there are 2 access points: Access Point 1 and Access Point 2, with Access Point 1 as the root access point.
Follow these steps to change the setup the root access point. Setup access point 1: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub-menus expanded under WLAN Setup. Click on Basic. Ensure that The Current Mode is set to Access Point. Select Act as RootAP. Select the Channel common to both access point 1 and access point 2.
Follow these settings to setup access point 2. Setup access point 2: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub-menus expanded under WLAN Setup. Click on Basic. Select the Channel common to both access point 1 and access point 2.
Configure WDS2 link: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub-menus expanded under WLAN Setup. Click on Advanced. Under Extended Features, click on the WDS2 Settings button. Set WDS2 Link Status to Enable. Options for configuring WDS2 link: • By Remote AP MAC – Enter the Remote AP MAC OR • By Remote AP SSID – Uncheck the Remote AP MAC checkbox and enter the Remote AP SSID. Click Apply..
Setup Management Port Follow these steps to define the IP addresses. Step 1: Click on TCP/IP Settings from Management Setup from the CONFIGURATION menu. Step 2: In the Management Port Setup page, refer to the table below to replace the default settings with appropriate values to suit the needs of your network. Step 3: Click on the Apply button to save your new parameters. This table describes the parameters that can be modified in the Management Port Setup page.
To Setup DHCP Server There are 3 DHCP Modes: • NONE Select NONE if you do not wish to use a DHCP server. • DHCP Server Select this mode to setup a DHCP server. • DHCP Relay Select this mode to setup a DHCP relay. By default, DHCP broadcast messages do not cross router interfaces. DHCP Relay supports DHCP Clients and DHCP Servers on different networks by configuring the router to pass selective DHCP messages. Follow these steps if you do not wish to use DHCP.
The following will guide you to setup the DHCP Server. Step 1: Click on Advanced Settings from Management Setup from the CONFIGURATION menu. Step 2: Set DHCP Mode to DHCP Server. In DHCP Server Setup, refer to the table below to set the appropriate values to suit the needs of your network. Step 3: Click on the Apply button.
This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN. DHCP Start IP Address This is the first IP address that the DHCP server will assign and should belong to the same subnet as the router. For example if the router IP address is 192.168.168.1 and the network mask is 192.168.168.
DHCP Lease Time This is the length of time that the client may use the assigned address before having to check with the DHCP server to see if the Address is still valid. Always use these DNS servers Enable this checkbox if you only want to use the DNS server(s) you have specified. Primary DNS IP Address Your ISP usually provides the IP address of the DNS server. Secondary DNS IP Address This optional setting is the IP address of a secondary DNS server.
The following will guide you to setup the DHCP Relay. Step 1: Click on Advanced Settings from Management Setup from the CONFIGURATION menu. Step 2: Set DHCP Mode to DHCP Relay. In DHCP Server Setup, refer to the table below to set the appropriate values to suit the needs of your network. Step 3: Click on the Apply button.
This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description DHCP Server IP This is the IP address of the DHCP server. DHCP Gateway IP Though the DHCP server usually also acts as the Default Gateway of the DHCP client, the router allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client.
View Active DHCP Leases Step 1: Select Management Setup from the CONFIGURATION menu. Step 2: Go to the Advanced DHCP Server Options section and click on the Show Active DHCP leases button. The DHCP Active Leases table displays: • The Host Name of the DHCP client. • The IP Address allocated to the DHCP client. • The Hardware (MAC) Address of the DHCP client. • The Lease Expired Time.
Reserve IP Addresses for Predetermined DHCP Clients A reserved IP address is excluded from the pool of free IP addresses the DHCP server draws on for dynamic IP address allocation. For instance if you set up a publicly accessible FTP or HTTP server within your private LAN, while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
Step 3: Fill in: The IP Address to be reserved. The Hardware Address, in pairs of two hexadecimal values. Press the Apply button to effect your new entry. The DHCP Server Reservations page refreshes to display the currently reserved IP addresses.
Delete DHCP Server Reservation Step 1: Select the reserved IP address to delete. Step 2: Click on the Delete button. The DHCP Server Reservations table refreshes to display your changes.
View Statistics Follow these steps to view the WLAN detailed connections statistics per WLAN station. 1 1. Click on WLAN Setup from the CONFIGURATION menu. 2. Select Statistics. 2 1. Select the WLAN connection to view statistics of. • • 3 The WLAN connection’s statistics displays. Click Back to return to WLAN Basic Setup page. Page 65 Click Refresh to refresh the WLAN Connection List. Click Back to return to the WLAN Basic Setup page.
Set Virtual AP In Virtual AP a single wireless card can setup 2 virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes. Virtual AP delivers multiple services by network segmentation: making the network think there are many SSIDs available and channeling each connection through different segments to the respective virtual network segments on the Ethernet network. Follow these steps to setup Virtual AP.
Setup WAN A correct WAN Setup allows you to successfully share your Internet connection among the wired and wireless clients of the router. To do so, you need to identify the type of broadband Internet access you are subscribed to: i. Cable Internet where your ISP dynamically assigns a WAN IP address ii. Cable Internet where your ISP provides you with a fixed WAN IP address (or a range of fixed IP addresses) iii. ADSL Internet that requires standard PPP over Ethernet (PPPoE) for authentication iv.
Setup WAN for Cable Internet with Dynamic IP Assignment The router is pre-configured to support a WAN type that dynamically obtains an IP address from the ISP. However, you may verify the WAN settings with the following steps: 1. Under the CONFIGURATION on the command menu, click on WAN Setup. 2. On the WAN Dynamic Setup screen that follows, verify that the WAN Type reads Dynamic (DHCP) in red colour. Otherwise, click on the Change button. 3. Simply select Dynamic IP Address and hit the Apply button. 4.
Note: There are exceptional cases where additional configuration is required before your ISP allocates an IP address to the router. b. Certain ISPs log the MAC address of the first device used to connect to the broadband channel and will not release a WAN IP address unless the MAC address matches the one in their log. Therefore, if yours is not a new Cable Internet subscription (i.e.
Setup WAN for Cable Internet with Static IP Assignment If you have an ISP that leases a static WAN IP for your subscription, you will need to configure your router’s WAN type accordingly. For example, if the ISP provided you with the following setup information, you can set up your WAN as described below: IP Address : 203.120.12.47 Network Mask : 255.255.255.0 Gateway IP Address : 203.120.12.15 1. Under the CONFIGURATION on the command menu, click on WAN Setup. 2.
Setup WAN for ADSL Internet Using PPPoE If you subscribe to an ADSL service using PPP over Ethernet (PPPoE) authentication, you can set up your router’s WAN type as follows. For example, you may configure an account whose username is ‘guest’ as described below: 1. Under the CONFIGURATION on the command menu, click on WAN Setup. 2. Access the Select WAN Type page and choose PPP over Ethernet before clicking the Apply button. You will then be brought to the following page requiring your inputs. 3.
Setup WAN for ADSL Internet using PPTP If you subscribe to an ADSL service using Point-to-Point Tunneling Protocol (PPTP) authentication, you can set up your router’s WAN type from the steps that follow. For example, if the ISP provided you with the following set up information, you can set up your WAN as described below: IP Address Network Mask VPN Server : : 203.120.12.47 255.255.255.0 : 203.120.12.15 1. Under the CONFIGURATION on the command menu, click on WAN Setup. 2.
3. Fill in the information, followed by clicking the Apply button. • • • • • • • • Select whether to enable DHCP. Enter in the client IP Address. Enter in the Network Mask. Enter in the Gateway. Enter in the Username of your Internet account. Enter in the Password of your Internet account. Enter the IP address of your VPN Server. Enter an Idle Timeout value between 30-3600 seconds. Entering 0 will disable this feature.
Setup WAN for ADSL Internet using L2TP L2TP (Layer 2 Tunneling Protocol) is an extension to the PPP protocol used for Virtual Private Networks (VPNs) that supports multiple protocols and unregistered and privately administered IP addresses over the Internet. 1 Select L2TP as your WAN Type at Select WAN Type page. 2 At the WAN L2TP Setup page: 1. 1. 2. 3. 4. 5. 6. 7. 8. 9. 1. 2. Page 74 Select whether to enable DHCP. Enter Client IP Address. Enter Network Mask. Enter the Gateway.
Configure Static Routing The router allows the network administrator to add a static routing entry into its routing table so that the router can re-route IP packets to another network router. This feature is very useful for a network with more than one router. ! Important: You do NOT need to set any routing information if you are simply configuring the router for broadband Internet sharing. Improper routing configuration will cause undesired effect.
1. Under the CONFIGURATION command menu, click on Routing to be brought to the System Routing Table shown (on the right). Initially, the table will contain the default routing entries built into the router. 2. Click on the Static Routing Table button above. 3. On this page, click the Add button. 4. You may specify the Destination IP Address, Destination Net Mask and Gateway IP Address here. For this example, they are 192.168.100.0, 255.255.255.0 and 192.168.168.254 respectively.
Configure NAT The basic purpose of NAT is to share a single public IP address when there are multiple PCs in the private network by using different TCP ports to identify requests coming from different PCs. NAT is enabled by default. Due to NAT, computers in the private LAN behind the router will not be directly accessible from the Internet. However, employing virtual Servers lets you host Internet servers behind the NAT by way of IP/Port Forwarding as well as De-Militarized Zone hosting.
Configure Virtual Server Based on DMZ Host When NAT is enabled, an Internet request from a client within the private network first goes to the router. Upon receiving a request, the router keeps track of which client is using which port number. Since any reply from Internet goes to the router first, the router (from the port number in the reply packet) knows to which client to forward the reply. If the router does not recognize the port number, it will discard the reply.
Configure Virtual Servers Based on Port Forwarding Virtual Server based on Port Forwarding is implemented to forward Internet requests arriving at the router’s WAN interface, based on their TCP ports, to specific PCs in the private network. 1. Under the CONFIGURATION command menu, click on NAT. You will find the Advanced NAT Options available near the bottom of the page. 2. Click the Port Forwarding button to configure Virtual Servers based on Port Forwarding. 3.
4. On the following Add Port Forward Entry screen, you can set up a Virtual Server for a Known Server type by selecting from a drop-down menu OR you can define a Custom Server.
5. For standard server applications (HTTP/FTP/POP3/Netmeeting), go to Known Server: 1. Enter the Private IP Address. 2. Pick the appropriate Server Type. 3. Enter the range in the From: and To: fields. 4. Click Add. To set up Internet applications not included under Known Server, go to Custom Server: 1. Enter the Private IP Address. 2. Define the Port numbers to use. 3. Select the relevant Protocol from the drop down list. 4. Identify the Server Type. 5. Enter the in the From: and To: fields. 6.
6. NAT Static Port Based Entries reflects the new entry. To assign more servers in your LAN: 1. Click Add. This will bring you back to Add New NAT Port-Based Entry. 2. Repeat Step 3 above. To delete table entries: 1. Select the entry to delete. 2. Click Delete. The table will refresh.
Configure Virtual Server Based on IP Forwarding When you have subscribed for more than one IP address from your ISP, you may define Virtual Servers based on IP Forwarding for which all Internet requests, regardless of ports, are forwarded to defined computers in the private network. 1. Under the CONFIGURATION command menu, click on NAT. You will find the Advanced NAT Options available near the bottom of the page. 2. Click the IP Forwarding button to configure Virtual Servers based on IP Forwarding. 3.
Configure Bandwidth Control for WAN Bandwidth Control allows you to decide the available bandwidth in levels of 1kbit. Follow these steps to setup Bandwidth Control for WAN. 1 Click Bandwidth Control from the CONFIGURATION menu. 2 Select whether to Enable or Disable Bandwidth Control and click Apply. 3 To apply Bandwidth Control on WAN, in WAN Bandwidth Control Setup: 1. Enter the Download Total Rate in kbit. This restricts the bandwidth available for downloading. 2. Enter the Upload Total Rate in kbit.
Configure Bandwidth Control for LAN Bandwidth Control allows you to decide the available bandwidth in levels of 1kbit. Follow these steps to setup Bandwidth Control for LAN. 1 Click Bandwidth Control from the CONFIGURATION menu. 2 Select whether to Enable or Disable Bandwidth Control and click Apply. 3 Click Add to add a Bandwidth Control Entry 3 1. Enter the Bandwidth Control Rule Name. 2. Enter the Committed Rate in kbit. This sets the bandwidth committed. 3. Enter the Ceil Rate in kbit.
Use Remote Management The advanced network administrator will be delighted to know that remote management is supported on the router. With this feature enabled, you will be able to access the router’s web-based configuration pages from anywhere on the Internet and manage your home/office network remotely. 1. Under the CONFIGURATION command menu, click on Remote Management, and you will be brought to the following screen. 2. By default, Remote Management is disabled.
Use Parallel Broadband The router is equipped with the exclusive Parallel Broadband technology to provide scalable Internet bandwidth with Load Balancing and Fail-Over Redundancy.
Before you begin, ensure that each of the routers within the network is properly configured to connect to its individual broadband Internet account. Then ensure that either: • each of the routers is connected to an Ethernet port in the network as illustrated above or • the routers are wired to each other. Finally, you are ready to access the web-based configuration of each of your router to enable the Parallel Broadband feature.
Configure Email Notification The router provides this feature to notify you by email when there is a change in the WAN IP address that was supplied to you earlier. 1. Under the CONFIGURATION command menu, click on WAN Setup, and you will be brought to the following screen. 2. Click on the Email Notification button. 3. Click on the Enable button and key in the following fields as described below: Email address of Receiver: This is the email address of the receiver to whom the message would be sent.
This is the mail account user’s name that should be entered if authentication is required. Password: This is the mail account user’s password that should be entered if authentication is required. Email address of Sender: This is the email address of the sender from whom the message will appear to come. By default, the checkbox next to Needs Authentication is not ticked. This option allows you to specify whether the SMTP server requires authentication. 4. Then click button.
Use Static Address Translation If you use a notebook for work at the office, it is probable that you also bring it home to connect to the Internet and retrieve emails or surf the web. Since it is most likely that your office’s and your home’s broadband-sharing network subnets are differently configured, you would have to struggle with reconfiguring your TCP/IP settings each time you use the notebook in a different place.
Use DNS Redirection When you enter a URL in your Internet browser, the browser requests for a name-to-IP address translation from the Domain Name System (DNS) servers to be able to locate the web server hosting the website you want to access. The DNS server, in turn, looks for the answer in its local cache and if an appropriate entry is found, sends back this cached IP address to the browser. Otherwise, it would have to contact other DNS servers until the query can be resolved.
! Page 93 Note: For Internet access, please do NOT leave the DNS Server field of the PC’s TCP/IP Properties blank. Simply key in any legal IP address for it (e.g. 10.10.10.10) even though you do not have the exact DNS IP address.
Setup DDNS It is difficult to remember the IP addresses used by computers to communicate on the Internet. It gets even more complicated when ISPs change your public IP address regularly, as is the case when the Internet connection type is Dynamic IP or PPPoE with Dynamic IP. If you are doing some web hosting on your computer and are using Dynamic IP, Internet users would have to keep up with the changing IP address before being able to access your computer.
DDNS List 1. Under the HOME USER FEATURES command menu, click on Dynamic DNS Setup. 2. If you have already created a list earlier, click on the Refresh button to update the list. 3. To add a new Dynamic DNS to the list, click on the Add button and you will see the Choice DDNS Provider page appear. There are two default providers that you can use. The following parameters are explained below: Choice : This allows you to check the radio button of your preferred DDNS provider.
Select 2MyDNS as DDNS Service Provider 1. Under the Choice column in the Choice DDNS Provider check the radio button next to the 2MyDNS – DNS Service Provider. Then click on the Next button to proceed. Enter your Domain Name. Select Auto Detect to let the DDNS server learn your current WAN IP address. Enter your DDNS account Username and Password. (Optional) If you enable the wildcard service, your hostname would be allowed multiple identities. For example, if you register: mydomain.2mydns.
3. The new domain is added to the Dynamic DNS list table. It will appear as a hyperlink that you can click to go back to the Dynamic DNS Edit page. From this page, you can update any of the parameters, delete the domain name or reset all parameters to be blank again.
Select DtDNS as DDNS Service Provider 1. Under the Choice column in the table of Choice DDNS Provider check the radio button next to the DtDNS. Then click on the Next button to proceed. Enter your Domain Name. Select Auto Detect to let the DtDNS server learn your current WAN IP address. Enter your DtDNS account Username and Password. 2. Then click on the Add button. 3. In our example, while the new domain name, cool.3d-game.
Configure UPnP The following are issues that can arise when using NAT: Some network applications assume the IP address and port that the client has been assigned are global routable values that can be used on the Internet directly. Often, this is not the case as the client has been assigned a private IP address that can only be used on the LAN. • Other network applications send requests using a socket on a port “A” and expect to receive the reply from a different listening socket on port “Z”.
Although NAT traversal does not solve all NAT-related issues, it allows several applications to run behind NAT-enabled devices. It is recommended that you enable UPnP when running: • • • • Multi-player games Peer-to-peer connections Real-time communications Remote Assistance 1. Under the HOME USER FEATURES command menu, click on UPnP Configuration 2. Simply choose Enable or Disable for the Status of UPnP. Complete the setup by clicking the Apply button.
Configure Security Configure Packet Filtering As part of the comprehensive security package found on the router, you may perform IP packet filtering to selectively allow/disallow certain applications from connecting to the Internet. 1. Under the SECURITY CONFIGURATION command menu, click on Packet Filtering. Example: Packet Filtering Type set to Disabled. Example: Packet Filtering Type set to Sent. Example: Packet Filtering Type set to Discarded. 3.
4. Click on the Add button and you will be able to define the details of your Packet Filter Rule from the screen on the right. 4a). Enter Rule Name for this new packet filtering rule. For example, BlockCS 4b). Enter MAC Address for this new packet filtering rule. 4c). From the IP Address drop down list, select whether to apply the rule to: A Range of IP addresses In this case, you will have to define (From) which IP address (To) which IP address, your range extends.
define (From) which port (To) which port, your rule applies. A Single TCP port Here, you need only specify the source port in the (From) field. Any IP port You may here, leave both, the (From) as well as the (To) fields, blank. Here, the rule will apply to all ports. 4e).
The Filtering Configuration table will then be updated. 5. In this example, let us say we would like to block an application called CS from all PCs (any IP address within the network) from Monday to Friday 7am to 6pm, and this application is using the port number 27015. Therefore, for a rule we name BlockCS, and add the entries depicted on the left. Clicking on the Add button will make your packet filter rule effective. 6. Packet Filter Configuration page displays the packet filter rule.
Configure URL Filtering The router supports URL Filtering that allows you to easily set up rules to block objectionable web sites from your LAN users. 1. Under the SECURITY CONFIGURATION command menu, click on URL Filtering. 2. You may now define the URL Filter Type by clicking the Change button. 3. Select Block or Allow, and then click on the Apply button. The default is Disabled, which allows all websites to be accessed. 4. When you will be returned to the page shown above, then click the Add button. 5.
Configure Firewall More than just a “NAT” firewall, there is a powerful Stateful Packet Inspection (SPI) firewall option that can be activated on the router. Stateful inspection compares certain key parts of the packet to a database of trusted information before allowing it through. Common hacker attacks like IP Spoofing, Port Scanning, Ping of Death and SynFlood can be easily thwarted with the router’s SPI firewall. The following steps explain the configuration of the router’s SPI firewall.
Rule Name : Enter a unique name to identify this firewall rule. Disposition Policy : This parameter determines whether the packets obeying the rule should be accepted or denied by the firewall. Choose between Accept and Deny. Protocols : Users are allowed to select the type of data packet from: TCP, UDP, ICMP, IGMP or ALL. Note: If users select either ICMP or IGMP, they are required to make further selection in the ICMP Types or IGMP Types respectively.
IGMP Types : This IP protocol is used to establish host memberships in particular multicast groups on a single network. The mechanisms of the protocol allow a host to inform its local router, using Host Membership Reports. Host Membership Report Host Membership Query Leave Host Message Information that is from the IGMP data packet. Information that is from the IGMP data packet.
to their Time-To-Live (TTL) value available options are: 1. Equal 2. Less than 3. Greater than 4.
View Firewall Logs When the router’s SPI firewall is in operation, valuable traffic patterns in your network will be captured and stored into the Firewall Logs. From these logs, you can extract detailed information about the type of data traffic, the time, the source and destination address/port as well as the action taken by the SPI firewall. You can choose which type of packets to log from the Firewall Configuration. 1. Under the SECURITY CONFIGURATION command menu, click on Firewall Logs. 2.
Administer the System Use the SYSTEM TOOLS Menu Use the Ping Utility This feature lets you determine whether your router can communicate (ping) with another network host. 1. Select Ping Utility under the SYSTEM TOOLS command menu. 2. Enter the IP address of the target host where the target host you want the router to ping to. 3. To ping the router, click Start. 4. The Ping messages will be displayed.
Set the Time The router is specially designed with Simple Network Time Protocol (SNTP) compatibility so that the router’s clock can be synchronized with that of the managing computer. The router’s clock is an important feature that affects all the time-based functions. It is a simple 2 steps process to ensure that the router’s clock is synchronized. However, please ensure that the router is connected to the Internet: 1. Select Set Router’s Clock under the SYSTEM TOOLS command menu. 2.
Upgrade the Firmware Significantly, the router is built with upgradability in mind. You can keep your router updated with the latest capabilities by means of a simple firmware upgrade obtainable from your vendor. 1. Select Firmware Upgrade under the SYSTEM TOOLS command menu. The screen displays a notice to inform you that the services being used will be terminated. Click OK to continue. 2. Ensure that you have downloaded the latest firmware into a location on your hard disk drive. 3.
Settings Profile A useful feature is built into the router allowing you to save configuration profiles, especially the painstakingly crafted firewall security rules, and the intricate IP and Port settings of your Virtual Servers that effect a host of network applications. You may choose to save the configuration profile onto the router as a backup onto your hard disk drive. If needed, you may also restore an earlier profile, or reset the router to its factory default. 1.
Reboot the System This feature serves an important function so that the router settings will become effective. 1. Select Reboot Router under the SYSTEM TOOLS command menu. 2. The router will prompt you to confirm your decision before executing a reboot. Hit the Reboot button again when you are ready.
Change Your Login Password This feature serves an important security so that the router will not be misused or abused by unauthorized users. 1. Select Change Password under the SYSTEM TOOLS command menu. 2. Type in the Current Password, the New Password and allow verification by keying your new password in the Confirm Password field. Then click Apply.
View System Information The About System page gives the administrator an overview of the router customizations/settings. This is a useful summary of the operating parameters you have put in place. 1. Click About System under the HELP command menu, and you will be brought to the following System Information page. 2. The System Information page reveals the router’s settings that you have executed.
Appendix: Learn About Commonly Used Terms 10Base-T An IEEE Ethernet standard for 10Mbps data transmission using unshielded twisted pair wires 100Base-Tx An IEEE Ethernet standard for 100Mbps data transmission using two pairs of Category 5 UTP wire 802.11b An IEEE standard for wireless networking standard specifying a maximum data transmission rate of 11Mbps using DSSS modulation and an operating frequency of 2.4GHz. 802.
Driver A piece of software developed to interface a piece of hardware with its immediate upper-layer software (i.e. operating system) so that it can be recognized and operated. DSSS Direct Sequence Spread Spectrum is a modulation scheme employed by the 802.11b standard that uses a chipping code (redundant bit) during its transmission to reject interference.
Membership Reports that it wants to receive messages addressed to a specific multicast group. All hosts conforming to level 2 of the IP multicasting specification require IGMP. IEEE It is the Institute of Electrical and Electronic Engineers. The IEEE is a professional technical body promoting the development and application of technology. IP Address At the moment, IP address is a 32-bit binary digit that defines each sender or receiver of information across an IP network.
particular network device (IP address) is available online. It works by sending out a packet to the device and waiting for its response. PPPoE Point-to-Point Protocol over Ethernet is a method encapsulation of PPP packets over Ethernet frames. PPTP PPTP stands for Point-to-Point Tunneling Protocol. It is a protocol that allows authorized users to extend their own networks through private “tunnels” over the ISP or online service.
Appendix: View the Technical Specifications Industry Standards Wired: IEEE 802.3 10Base-T IEEE 802.3u 100Base-Tx IEEE 802.3x Flow Control Wireless: - IEEE 802.11b IEEE 802.11g WAN Interface - WAN Type - LAN/WLAN Interface 1x Auto MDI/MDI-X RJ45 Ethernet Port for external Cable/ADSL modem Static IP Dynamic IP PPP over Ethernet (PPPoE) Point to Point Tunneling Protocol (PPTP) - L2TP Wired: - Integrated 4x Auto MDI/MDI-X 10/100Mbps Switch Wireless: - Operating channels, frequency of: 11 Channels 2.
WPA2-Personal WPA-Auto-Personal WSC External Antenna Type IP Addressing 2dBi antenna All Classful/Classless subnets Built-in DHCP Server Yes DHCP Reservation Yes NAT Firewall Yes Stateful Packet Inspection (SPI) Firewall Load-Balancing/ Fail-Over Redundancy Virtual Server Yes IP Packet Filtering Time-based, TCP Port, Source IP filtering URL Filtering Yes IP Routing Static Routing Entry VPN Client Pass-Through PPTP, IPSec Multicast Filtering Configuration Interface Yes Web-based Configurat
© Copyright 2007 Compex Systems Pte Ltd All Rights Reserved This document contains information, which is protected by copyright. Reproduction, adaptation or translation without prior permission is prohibited, except as allowed under the copyright laws. Trademark Information Compex® is a registered trademark of Compex, Inc. Microsoft Windows and the Windows logo are the trademarks of Microsoft Corp. NetWare is the registered trademark of Novell Inc.
FCC Compliance Statement: This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: This device may not cause harmful interference, and This device must accept any interference received, including interference that may cause undesired operation. Products that contain a radio transmitter are labelled with FCC ID and may also carry the FCC logo. Caution: Exposure to Radio Frequency Radiation.
Technical Support Information The warranty information and registration form are found in the Quick Install Guide. For technical support, you may contact Compex or its subsidiaries. For your convenience, you may also seek technical assistance from the local distributor, or from the authorized dealer/reseller that you have purchased this product from. For technical support by email, write to support@compex.com.sg.
warning Class B: FEDERAL COMMUNICATIONS COMMISSION INTERFERENCE STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
