User Guide 13.1.2 Disabling Single Static IP – Single IP Address PassThrough To disable Single Static IP, select Single Static IP from the Configuration menu. Click on disable. If you clicked disable in the preceding screen, the following pop-up screen will be displayed. Click on OK. If you clicked OK in the Disable IP Passthrough? screen, the following pop-up screen will be displayed. This screen will allow the modem to be reset and the new configuration will take effect. Click on OK. 030-300432 Rev.
User Guide If you clicked OK in the preceding screen, the following screen will be displayed. The Router will be reset and the new configuration will take effect. After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (Click on the connect button to establish a PPP session). Next, Select Single Static IP from the Configuration menu to confirm that Single Static IP is disabled, as shown in the following screen.
User Guide 13.2 Service Configuration The following settings will be displayed if you select Services from the Configuration menu. Westell has developed an extensive list of NAT services and you may select any service from this list. By selecting your specific NAT service and setting up a NAT profile, you will ensure that the appropriate ports on the Router are open and that the required application traffic can pass through your LAN. For a list of supported services, go to section 17 (NAT Services).
User Guide 13.2.1 Configuring UPNP on your Router Note: To use the UPNP functionality in the Router, your Windows XP operating system must also support UPNP. Please contact your computer manufacturer to verify that UPNP is enabled in your Windows XP operating system. To enable UPNP on the Router perform the following steps: 1) 2) 3) 4) Select Services from the Configuration menu. Click the UPNP Enable box in the Service Configuration screen. A check mark will appear in the box.
User Guide If you clicked OK in the preceding screen, the following screen will be displayed. Click on OK to reset the Router. If you clicked OK in the preceding screen, the following screen will be displayed. The Router will be reset automatically, and the new configuration will take effect. After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (Click the connect button to establish a PPP session). 030-300432 Rev.
User Guide 13.2.2 Creating a New NAT Service Profile NAT Profiles allow you to create specific service settings. The NAT profile may then be associated with a connection profile, allowing you to customize profiles for specific users. For example, if you want to attach specific NAT services to a profile, or if you want to set up a different connection setting for a profile, you can create new NAT profiles and customize them to your preference.
User Guide If you clicked OK, the following screen will be displayed. Select “A New Service Profile #1” from the Current Profile drop-down arrow. If you selected “A New Service Profile #1” from the Current Profile drop-down arrow, the following screen will be displayed. This screen shows that you have chosen to create a new NAT service profile. You may create up to four NAT service profiles and attach an unlimited number of services to each profile. 030-300432 Rev.
User Guide 13.2.3 Editing a NAT Service Profile After you have created a NAT service profile, you may edit the profile’s name. If you select edit from the Service Configuration screen, the following screen will be displayed. By selecting the edit button, you can make changes to your profile name, and then add NAT services to or delete them from your profile. Type your new NAT service profile name in the field labeled Profile Name.
User Guide If you clicked save in the Edit Service Profile screen, the following pop-up screen will be displayed. Click OK to save your new profile settings. If you click on Cancel, your new profile settings will not be saved. The following screen displays the current profile. If desired, you may create a new profile and delete or edit an existing profile. 030-300432 Rev.
User Guide 13.2.4 Adding NAT Services to a Profile This section explains how to add NAT services to your NAT service profile. Remember, you may attach an unlimited number of NAT services to any profile. NOTE: Westell has developed an extensive list of NAT services and you may select any service from this list.
User Guide For example, the screen below displays America Online as the NAT service selected. After you have selected a service, click enable. If you click enable, the following pop-up screen will be displayed. If you click OK, you will allow incoming connections to be forwarded to a designated local PC. If you click Cancel, you will allow only outgoing connections from any local PC. Click OK or click Cancel.
User Guide If you clicked OK in the preceding pop-up screen, the Host Device screen will be displayed. The Host Device screen will allow you to select which device will host the NAT service you selected on your local area network. You must either select the device from the Host Device drop-down arrow or type an IP address in the field labeled IP Address. If you click on Cancel, the connection will be dynamically assigned. Click on done.
User Guide If you select the details button in the Service Configuration screen, the following screen will display the details of the selected NAT service. If you click on the delete button in the Service Configuration screen, you will remove that NAT service from your NAT service profile. Click close to continue. NOTE: If you would like to set up additional Advanced Service Configuration options, refer to section 14 (Setting Up Advanced Service Configuration). 030-300432 Rev.
User Guide 13.3 Firewall Configuration The following settings will be displayed if you select Firewall from the Configuration menu. NOTE: Westell recommends that you do not change the settings in the User Defined Firewall Rules screen. If you need to reset the Router to factory default settings, push the reset button on the rear of the Router. High Medium Low None Custom Enable Remote IP Address Security Level High security level only allows basic Internet functionality.
User Guide The information displayed in the following screen depends upon the Firewall security setting you have selected. If you selected “None” in the preceding Firewall Security Level screen, no values will be displayed in the following User Defined Firewall Rules screen. Note: The information displayed in this screen depends on the level of security you have selected. If you clicked Apply in the User Define Firewall Rules screen, the following pop-up screen will be displayed.
User Guide Note: The information displayed in this screen depends on the level of security you have selected. If you clicked save in the User Define Firewall Rules screen, the following pop-up screen will be displayed. Click OK when asked Do you wish to save these Rules to Flash and switch you Security Level to “User”? This will save your new firewall settings. If you click Cancel, your new firewall settings will not be saved. 030-300432 Rev.
User Guide If you select Help in the screen labeled User Defined Firewall Rules, the following screen will be displayed. This screen gives a detailed explanation of the Firewall Rules. 030-300432 Rev.
User Guide 13.4 Wireless Configuration (Models 328W10, 328W11) 13.4.1 Wireless Basic The following fields will be displayed if you select Wireless > Basic from the Configuration menu. If you change any settings in this screen, you must click save to save the settings. IMPORTANT: If you are connecting to the Router via a wireless network adapter, the service set ID (SSID) must be the same for both the Westell Router and your PC’s wireless network adapter.
User Guide Wireless Operation Network Name (SSID) Channel Mode Frameburst Mode Hide SSID Wireless Configuration Factory Default = Enabled. When disabled, no stations will be able to connect to the Router. This string, (32 characters or less) is the name associated with the AP. To connect to the AP, the SSID on a Station card must match the SSID on the AP card or be set to “ANY.” Factory Default = 6 The AP transmits and receives data on this channel.
User Guide 13.4.2 Wireless Security The following screen will be displayed if you select Wireless > Security from the Configuration menu. Select the desired security option from the Wireless Security drop-down menu. IMPORTANT: Client PCs can use any Wireless Fidelity (Wi-Fi) 802.11b/g/g+ certified card to communicate with the Router. The Wireless card and Router must use the same security code type.
User Guide 13.4.2.1 Enabling WEP Security If you select WEP from the Wireless Security drop-down menu, the following screen will be displayed. After you have entered the appropriate values in the fields provided, click save to save the settings. Wireless Security Authentication Type Key Select 030-300432 Rev. A Wireless Security Factory Default = Disabled.
User Guide 13.4.2.2 Enabling WPA-PSK Security If you select WPA-PSK from the Wireless Security drop-down menu, the following screen will be displayed. After you have entered the appropriate values in the fields provided, click save to save the settings. Wireless Security WPA Shared Key WPA Group Rekey Interval Data Encryption 030-300432 Rev. A Wireless Security Factory Default = Disabled. Possible Response: Disabled: Wireless security will be disabled on the Router.
User Guide 13.4.3 Wireless MAC Filter Table The following screen will be displayed if you select Wireless > MAC Filter from the Configuration menu. To enable MAC Address filtering, click the box adjacent to Enable MAC Address Filtering. A check mark will appear in the box. Next, click save to save the setting. To add or edit a MAC Address setting, click the add button. If you clicked save in the Wireless Filter Table screen, following pop-up screen will be displayed. Click OK to continue.
User Guide 13.4.4 Wireless Advanced Configuration The following screen will be displayed if you select Wireless > Advanced from the Configuration menu. If you change the settings in this screen, you must click save to save the settings. Beacon Period RTS Threshold Fragmented Threshold DTIM Interval Supported Rates 802.11b Rates (Mbps) 802.11g Rates (Mbps) Wireless Advanced Configuration The time interval between beacon frame transmissions. Beacons contain rate and capability information.
User Guide 13.5 Advanced LAN This section explains the configurable features of the Router that are available if you select Advanced LAN from the Configuration menu. NOTE: If the Router is configured for ETHERNET PORT 1, VLAN will not be displayed. You must configure the Router for DSLATM PORT to access VLAN in the Advanced LAN drop-down menu. Refer to section 13.6.3.1 for details on enabling and disabling DSLATM PORT and ETHERNET PORT 1. 13.5.
User Guide Domain Name NOTE: Some ISP’s may require the name for identification purposes. Host Name User Assigned DNS This field allows you to enter a Domain Name for the Router. To add a Domain Name, in the field under User Assigned DNS, type in your new domain name and click Set. Static Host Assignment This field allows you to enter a HOST name for the Router. To add a new Host name, in the field under Static Host Assignment, type in the Host Name and the IP address and click Set.
User Guide The following screen displays a Host Name and an IP Address in the fields. Now click on add. If you clicked add, the following screen will be displayed. The Host Name and IP Address have been added to the Static Host Assignment. 030-300432 Rev.
User Guide 13.5.2 DHCP Configuration (Private LAN) The following settings will be displayed if you select Advanced LAN > DHCP from the Configuration menu. DHCP Server DHCP Start Address DHCP End Address DHCP Lease Time This setting allows the Router to automatically assign IP addresses to local devices connected on the LAN. Westell advises setting this to enabled for the private LAN. Off = DHCP Server is disabled Private LAN = DHCP addresses will be saved into the Private LAN configuration.
User Guide 13.5.3 Disabling the DHCP Server If you click on the drop-down arrow at DHCP Server:, a list of options will be displayed. If you want to disable your DHCP server, select Off from the DHCP Server drop-down arrow. Click on save. 030-300432 Rev.
User Guide If you selected Off at DHCP Server:, the following screen will be displayed. Click on save to save the DHCP Server setting. If you clicked on save, in the preceding DHCP Configuration screen, the following pop-up screen will appear. Click OK. STOP: After you disable the DHCP server, you must reboot your PC 030-300432 Rev.
User Guide 13.5.4 Enabling the DHCP Server If you want to enable your DHCP Server settings, select Private LAN at the DHCP Server drop-down arrow. If you have recently disabled the DHCP Server for Private LAN, select Private LAN while in the following screen. 030-300432 Rev.
User Guide If you selected Private LAN, the following screen will be displayed automatically. Click on save to save your DHCP Server setting. If you click on reset, your DHCP Server will be reset to factory default. (Private LAN is the factory default for the DHCP Server.) If you clicked on save, the following pop-up screen will appear. Click on OK. STOP: After you enable the DHCP server, you must reboot your PC 030-300432 Rev.
User Guide 13.5.5 Private LAN Configuration – Configuring NAT The following settings will be displayed if you select Advanced LAN > Private LAN from the Configuration menu. (Private LAN is the default configuration for the Router.) NOTE: Private LAN allows you to set up a network behind the Router. If you change the settings in this screen, click save. If you click on reset, the changes will not take effect. If you made changes and clicked on save, the following pop-up screen will be displayed.
User Guide Private LAN DHCP Server Enable Private LAN Enable Modem IP Address Subnet Mask DHCP Start Address DHCP End Address DHCP Lease Time Default = CHECKED If this box is CHECKED, it enables DHCP addresses to be served from the Private LAN pool. Default = CHECKED If this box is CHECKED, it enables the addresses from the Private LAN to use the NAT interface.
User Guide The public devices are visible on the Internet unlike a local NAT’ed PC. The example below shows four NAT’ed PCs and one global PC. The arrows show the data path for each flow. 030-300432 Rev.
User Guide Public LAN DHCP Server Enable Public LAN Enable Public LAN IP Address Public LAN Subnet Mask Default = NOT CHECKED If this box is CHECKED, it enables DHCP addresses to be served from the Public LAN pool. Default = NOT CHECKED If this box is CHECKED, it enables the addresses from the Public LAN to bypass the NAT interface. Provides a Public IP Address if the service provider does not automatically provide one.
User Guide If you clicked the Public LAN Enable box, the following screen will be displayed, showing the Public LAN Enable box selected. Click on save. If you selected Public LAN Enable, or if you made other changes in the Public LAN Configuration screen and clicked save, the following pop-up screen will be displayed. Click OK to save the new settings. If you click on Cancel, your new settings will not take effect. NOTE: DHCP Lease Time is displayed in the following format: (dd:hh:mm:ss)*.
User Guide Warning Message Start Address is not part of the Subnet End Address is not part of the Subnet End Address is below the Start Address Lease time must be greater than 10 seconds Seconds must be between 0 and 59 Minutes must be between 0 and 59 Hours must be between 0 and 23 Check Public LAN DHCP Settings Check the value in the DHCP Start Address field Check the value in the DHCP End Address field Check the value in the DHCP End Address field Check the values in the DHCP Lease Time fields Check th
User Guide 13.5.7 VLAN The following settings will be displayed if you select Advanced LAN > VLAN from the Configuration menu. VLAN Enable LAN Port VLAN ID VLAN Priority Outgoing VLAN Tag Factory Default = DISABLED If this box is check, VLAN will be Enabled. This will allow VLAN tagging to occur according to the data port’s configuration. This allows you to select the LAN port that you wish to configure.
User Guide To enable VLAN, click on the box adjacent to the VLAN Enable field. A check mark will appear in the box. Click save to save the settings. NOTE: For VLAN to function properly, the VLAN ID must be set to a value other than ‘1’ in VLAN Configuration screen and in the VC 1 Configuration screen when the you are using the Bridge (VLAN Bridge) protocol. See Advanced WAN section for configuring VC’s (refer to section 13.6.6).
User Guide 13.6 Advanced WAN This section explains the configurable features of the Router that are available if you select Advanced WAN from the Configuration menu. NOTE: If you are using Model 328W10 or 328W11, options in the Advanced WAN drop-down menu may or may not be displayed depending on the Router’s WAN Configuration (DSLATM PORT or ETHERNET PORT 1). However, all menu options are displayed if the Router is configured for DSLATM PORT 1.
User Guide 13.6.1 ATM Loopbacks The following settings will be displayed if you select Advanced WAN > ATM Loopbacks from the Configuration menu. NOTE: When the Enable ATM 0/21 box is checked, this feature is enabled. If the box does not display a check mark, this feature is disabled. If you change the setting in this screen, you must click save to save the setting. Westell does not recommend that you change this setting.
User Guide 13.6.2 VC Configuration (Models 7400, 7401) The following screen will be displayed if you select Advanced WAN > VC from the Configuration menu. If you change the Bridge Broadcast, Bridge Multicast, or Spanning Tree Protocol configurations in this screen, click on the save filter settings button to allow these changes to take effect. If you change any of the Status configurations, a pop-up screen will prompt you to reset the Router.
User Guide Bridge Broadcast Bridge Multicast Spanning Tree Protocol Factory Default = CHECKED When this setting is CHECKED, the Router will allow Broadcast IP packets to/from the WAN. When this setting is NOT CHECKED, the Router will block Broadcast IP packets to/from the WAN. This setting is only valid if one of the Virtual Channels is configured for Bridge mode. Factory Default = CHECKED When this setting is CHECKED, the Router will allow Multicast IP packets to/from the WAN.
User Guide 13.6.3 WAN Configuration (Models 328W10, 328W11) The following screen will be displayed if you select Advanced WAN > WAN from the Configuration menu. If you change the Bridge Broadcast, Bridge Multicast, or Spanning Tree Protocol configurations in this screen, click on the save filter settings button to allow these changes to take effect. If you change any of the Status configurations, a pop-up screen will prompt you to reset the Router.
User Guide Protocol NOTE: The configuration specified by your Service Provider will determine which Protocols are available to you. Bridge Broadcast Bridge Multicast Spanning Tree Protocol Displays the Protocol for each VC, which is specified by your Service Provider. Possible Response: PPPoA = Point to Point Protocol over ATM (Asynchronous Transfer Mode) PPPoE = Point to Point Protocol over Ethernet Bridge = Bridge Protocol Classical IPoA = Internet Protocol over ATM (Asynchronous Transfer Mode).
User Guide 13.6.3.1 Enabling DSLATM PORT – Disabling ETHERNET PORT 1 (Models 328W10 and 328W11 only) NOTE: When using the optional UPLINK/E1 port, Ethernet LAN connection is limited to E2, E3, and E4. The UPLINK feature is optional. If UPLINK is not enabled, the Router will use DSL and wireless only. To configure the Router so that it uses the DSL port, select DSLATM PORT from the WAN PORT drop-down arrow. By selecting DSLATM PORT, you will enable the Router’s DSL transceiver.
User Guide If you select DSLATM PORT from the WAN Port drop-down arrow, the following screen will be displayed. Click OK. If you click OK in the preceding pop-up screen, the following screen will be displayed. Click on OK. If you click on Cancel, the change will not take effect. If you clicked on OK in the preceding pop-up screen, the following pop-up screen will appear. The Router must be reset to allow the new configuration to take effect. Click on OK. 030-300432 Rev.
User Guide If you clicked on OK in the preceding screen, the following screen will be displayed. The Router will be reset and the new configuration will take effect. After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (Click on the connect button to establish a PPP session). 030-300432 Rev.
User Guide 13.6.3.2 Disabling DSLATM PORT – Enabling ETHERNET PORT 1 (Models 328W10 and 328W11 only) To configure the Router so that it uses the WAN Ethernet Port, select ETHERNET PORT 1 from the WAN PORT drop-down arrow. By selecting ETHERNET PORT 1, you will disable the Router’s DSL transceiver. This will disable the DSL Port and allow the WAN interface to use the WAN Ethernet Port. NOTE: If ETHERNET PORT 1 is configured, the Router’s menu options may or may not be displayed.
