Home

NWAR3650 User Manual - addon

1. Add Enable Remove Click Add and the following page appears 58 Add Network Traffic Class Rule The screen creates a traffic class rule to classify the upstream traffic assign queue which defines the precedence and the interface and optionally overwrite the IP header D SCP byte amp rule consists of a class name and at least one condition below All of the specified conditions in this classification rule must be satisfied for the rule to take effect Click Save Apply to save and activate the rule Traffic Class Name Rule Order Last Rule Status Disable Specify Classification Criteria 4 blank criterion indicates it is not used for classification Class Interface Ether Type Source MAC Address E Source MAC Mask hs Destination MAC Address E Destination MAC Mask 1 Specify Classification Results Must select a classification queue 4 blank mark or tag value means no change Assign Classification Queue 4 ig Mark Differentiated Service Code Point DSCP O rl Mark 802 1p priority O rl Tag VLAN ID 1 Save Apply e Specify Classification Criteria A blank criterion indicates it is not used for classification Class Interface If selected Local this following page appears Class Interface local A Ether Type Differentiated Service Code Point DSCP Check Protocol And there are just two ether types IP and I
2. Add Remove Click Add and the page for defining the IP filtering rule appears In this page you can create a filter rule to identify outgoing IP traffic by specifying a new filter name and at least one condition All specified conditions in the filtering rule must be complied with the rule to take effect Click Save Apply to save and activate the filter Add IP Filter Outgoing The screen allows you to create a filter rule to identify outgoing IP traffic by specifying a new filter name and at east one condition below All of the specified conditions in this filter rule must be satisfied for the rule to take effect Click Save Apply to save and activate the filter Filter Name Protocol z Source IP address Range d Source Subnet Mask Source Port port or port port DOO o yi Destination IP address Range Destination Subnet Mask Destination Port port or port port Save Apply e Source IP address Enter an IP address After you set the IP address outgoing packets protocol selected packets are blocked e Source port UDP TCP source port or a range of ports e Destination port UDP TCP destination port or a range of ports Configuration Step 1 By default all outgoing IP traffic from LAN is allowed Step 2 The following page shows the detailed configuration 48 Add IP Filter Outgoing The screen allows you to create a filter rule to identify outgoing IP traffic by sp
3. PPP Password The correct password that your ISP provides to you Authentication Method The value can be AUTO PAP CHAP or MSCHAP Usually you can select AUTO Enable NAT If you enable NAT the Enable Fullcone NAT check box appears T Enable Fullcone NAT Enable Fullcone NAT A full cone NAT is one where all requests from the same internal IP address and port are mapped to the same external IP address and port Furthermore any external host can send a packet to the internal host by sending a packet to the mapped external address Dial on demand with idle timeout timer If this function is enabled you need to enter the idle timeout time Within the preset minutes if the modem does not detect the flow of the user continuously the modem automatically stops the PPPOE connection Once it detects the flow like access to a webpage the modem restarts the PPPoE dialup If this function is disabled 18 the modem performs PPPoE dial up all the time The PPPoE connnection does not stop unless the modem is powered off and DSLAM or uplink equipment is abnormal Mw Dial on demand with idle timeout timer Inactivity Timeout minutes 1 4320 PPP IP extension After PPP IP extension is enabled the following page appears The NAT and Firewall becom invalid and the Bridge PPPoE Frames Between WAN and Local Ports check box disappears And the WAN IP address obtained by the modem through built in dial up can be directly assigned
4. WPA Pre Shared Key Click here to display WPA Group Rekey Interval 0 WPA Encryption TKIP kai WEP Encryption Disabled Save Apply Figure 11 Wireless security WPA PSK authentication e WPA2 PSK Authentication 88 Click Save Apply to save the wireless security options and make the changes take effect Manual Setup AP You can set the network authentication method selecting data encryption Click Save Apply when done Select SSID ADD NWAR3650 Y Network Authentication wRa2 PSK NPA Pre Shared Key Click here to display NPA Group Rekey Interval APA Encryption AES Y Disabled Save Apply Figure 12 Wireless security WPA2 PSK authentication e Mixed WPA2 WPA PSK Authentication This authentication mode means AP auto adjust to use WPA2 PSK or WPA PSK according to wireless clients Click Save Apply to save the wireless security options and make the changes take WEP Encryption effect Manual Setup AP You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Click Save Apply when done Select SSID ADD NWAR3650 v Network Authentication Mixed WPA2ANVPA WPA Pre Shared Key Click here to display NPA Group Rekey Interval lo NPA Encryption TKIP AES MEP Encryption Disabled Save Apply Figure 13 Wireles
5. Subnet Mask Gateway Interface Remove 10 11 102 4 255 255 0 0 pppo 1 Note A maximum 32 entries can be configured 61 Remove Static Route Select Remove checkbox and click Remove to apply the settings 3 3 7 DNS 3 3 7 1 DNS Server Choose Advanced Setup gt DNS gt DNS Server and the following page appears DNS Server Configuration Device Info for single PVC with IPoA static MER protocol Advanced Setup WAN Service LAN NAT Security Quality of Service Routing Obtain DNS info from a WAN interface WAN Interface selected No CONFIGURED INTERFACE C Use the following Static DNS IP address r Secondary DNS server Primary DNS se D NS Server Dynamic DNS DSL Upnp Dns Proxy Interface Grouping LAN Ports IPSec Certificate FTP configure Wireless Diagnostics Management Save Apply 3 3 7 2 Dynamic Domain Name Service DDNS Choose Advanced Setup gt DNS gt Dynamic DNS and the following page appears Dynamic DNS The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any of the many domains allowing your DSL router to be more easily accessed from various locations on the Internet Choose Add or Remove to configure Dynamic DNS Hostname Username Service Interface Remove Add Remove Click Add to configure the information of a new host 62 Select the service provider for the DDNS s
6. 945 Wireless Bridge nck uen aito dux ele dedeuk a e cux ra Cea todas 91 3 4 Wireless Advanced esseessssesseeeeen enne 92 3 4 7 Wireless Authenticated Stations sseeuessssuss 95 PAGING Co eserinin ra vas secsrodmandccatseeorescudeenndanchnesadee 95 Management aco bid nct dvd ea Duvbo Aaaa ub Dun 96 Db T SS CMING ea sradenoasenncsan heut edeiun dade diee sua nude dE dn pa cene PR hs 96 9 02 OVEM LOG enue pci odd ado ous ds codo a uat ew RR HER od ou 97 3 6 3 TR 069 Client Management sseeseseseeeeeee 101 9 04 Internet TMG iiu uo e Riva dodo tenuta Qn fec ada 102 940 9 ACCESS COMO aia i tar ver aiino creme nde vas an qu obtutu sparsis 103 2 06 Update SOWIE cid erras dx E HE Ex PAGE HEU Ea OUT Add UTR 104 SNCV MEME L icos Em 105 Tm m 106 1 Introduction The NWAR3650 is a highly ADSL2 Integrated Access Device The NWAR3650 can support ADSL link with downstream up to 24 Mbps and upstream up to 1 Mbps It is designed to provide a simple and cost effective ADSL Internet connection for a private Ethernet And the wireless access supports IEEE 802 11b IEEE 802 119 and IEEE 802 11n The Router combines high speed ADSL Internet connection IP routing for the LAN and wireless connectivity in one package It is usually preferred to provide high access performance applications for the individual users the SOHOs and the small enterprises Network
7. Connect the LAN port of the DSL Router to the network card of the PC via an Ethernet cable Plug one end of the power adapter to the wall outlet and connect the other end to the Power port of the DSL Router a d JC EN Line WLAN WPS LAN1 LAN2 LAN3 LAN4 Power T u ra I g A A Splitter REI DSL Service Socket MODEM LINE N LLLI PHONE Power Adapter Phone Power Socket Figure 1 Without connecting telephone sets before the splitter T TEES F oe ol LIC F1 Line LAN1 LAN2 LAN3 LAN4 Power i A DSL Service Socket XA I Power Mie Fier Adapter t F gt Ea Figure 2 Connecting a telephone set before the E 3 Introduction to Web Configuration Note The Web interface of software is for reference only This chapter describes how to use Web based management of the DSL router which allows you to configure and control all of DSL router features and system parameters in a user friendly GUI Device Info Board ID Device Info Advanced Setup Software Version 091231 1625 4 02L 03 wp1 A2pBO25k d21j2 Wireless z E Bootloader CFE Version 1 0 37 102 6 Diagnostics Management Wireless Driver Version 5 10 85 0 cpe4 402 0 This information reflects the current status of your DSL connection Line Rate Upstream Kbps 945 Line Rate Downstream Kbps 20985 LAN
8. Enabled NAT Disabled Full Cone NAT Disabled Firewall Disabled IGMP Multicast Disabled Quality Of Service Enabled Click Save Apply to have this interface to be effective Click Back to make any modifications Back Save Apply 33 In this page it shows all the configurations Click Save Apply to all the configurations Click Back to make any modifications 3 3 1 5 IPoA Configuration Click Add and the following page appears In this page you can modify VPI VCI QoS and select the Internet connection type encapsulation mode and service category ATM PVC Configuration This screen allows you to configure an ATM PVC identifier VPI and VCI select DSL latency select a service categoryS VPI 0 255 lo VCI 32 65535 a5 Enable Multiple Protocols Over A Single PvC only support PPPOE MER Bridging Select the type of network protocol for IP over Ethernet as WAN interface PPP over Ethernet PPPoE MAC Encapsulation Routing MER Bridging M PPP over 4TM PPPoA Ag IP over ATM IPod Encapsulation Mode LLC SNAP ROUTING Service Category UBR Without PCR Enable Quality Of Service Enabling packet level QoS for a PVC improves performance for selected classes of applications QoS cannot be set for CBR and Realtime VBR QoS consumes system resources therefore the number of PVCs will be reduced use Advanced Setup Quality of Service to assign priorities for the applications D E
9. Select the wireless LAN of SSID to configure security features e No Encryption Please refer to below for details of configuration e Network Authentication Select the authentication mode for the selected wireless LAN of SSID to be open e WEP Encryption Disable WEP Encryption Manual Setup AP You can set the network authentication method selecting data encryption Select SSID ADD NWAR3650 Network Authentication Shared WEP Encryption Enabled Encryption Strength 64 bit Current Network Key 1 Network Key 1 Network Key 2 Network Key 3 Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Save Apply Click Save Apply to save the wireless security options and make the change take effect 83 e 64 bit WEP Network Authentication Select the authentication mode for the selected wireless LAN of SSID to be open or shared WEP Encryption Enable WEP Encryption Encryption Strength click the desired Data Security level to be 64 bit Current Network Key Select one of network key that you set on the Key boxes as default one Network Key 1 to 4 Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys to fill out WEP keys box The system allows you to type in 4 kinds of the WEP key Click Save Apply to save the wireless security options an
10. System Log Date Time Facility Severity Message Refresh close Click Refresh to refresh the system event logs or click Close to exit from this interface 3 6 3 TR 069 Client Management 3 6 3 1 Tr 069 Client configuration Choose Management TR 069Client to show the TR 069 Client configuration page TR 069 client Configuration mel I aaa a n WAN Management Protocol TR 069 allows a Auto Configuration Server ACS to perform auto configuration provision collection Device Info and diagnostics to this device said ag Eley Select the desired values and click Save Apply to configure the TR 069 client options Wireless Diagnostics Inform amp Disable C Enable Management Settings Inform Interval soo System Log ACS URL m ACS User Name a dmin ACS Password ees ee Access Control WAN Interface used by TR 069 client Any WAN Display SOAP messages on serial console Disable C Enable Update Software Reboot M Connection Request Authentication Connection Request User Name fad min Connection Request Password eeece Save Apply Figure 17 Tr 069 client configuration e Inform If the Enable option is selected the CPE accepts the commands from ACS the CPE does not accept the commands from ACS when the 101 Disable option is selected e Inform Interval How many seconds does the CPE inform the ACS to connect e ACS URL Enter the ACS URL e ACS User Name The ACS user nam
11. 65535 S00 Back Next In this page you can modify the Network Address Translation Settings If you enable NAT the Enable Fullcone NAT check box appears Enable Fullcone NAT Enable Fullcone NAT A full cone NAT is one where all requests from the same internal IP address and port are mapped to the same external IP address and port Furthermore any external host can send a packet to the internal host by sending a packet to the mapped external address Click Next and the following page appears Routing Default Gateway Select a preferred wan interface as the system default gateway ted WAN Interface pppoa 0 0 38 pppoat Seler D Back Next 36 In this page select a preferred wan interface as the system default gateway Click Next and the following page appears DNS Server Configuration Get DNS server information from the se ected WAN interface Obtain DNS info from a WAN interface WAN Interface selected ipoa 0 0 35 ipoaQ C Use the following Static DNS IP address Primary DNS serv m D D Secondary DNS sery Back Next In this page you can get DNS server information from the selected WAN interface or enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS server IP addresses Click Next and the following page appears 37 WAN Setup Summary Make sure that the settings below match the setting
12. IPv4 Address 192 168 1 1 Default Gateway pppoad Primary DNS Server Secondary DNS Server 3 1 Logging In to the Modem The following description is a detail How To user guide and is prepared for first time users 3 1 1 First Time Login When you log in to the DSL Router for the first time the login wizard appears Step 1 Open a Web browser on your computer Step 2 Enter http 192 168 1 1 default IP address of the DSL router in the address bar The login page appears T Step 3 Enter a user name and the password The default username and password are admin and admin You need not enter the username and password again if you select the option Remember my password It is recommended to change these default values after logging in to the DSL router for the first time Step 4 Click OK to log in or click Cancel to exit the login page Connect to 192 168 1 1 ca x DSL Router User name 2 admin Password 3 2 DSL Router Device Information Choose Device Info the following page appears Summary WAN Statistics Route ARP DHCP 3 2 1 Summary of Device Information Choose Device Info gt Summary the following page appears Device Info Board ID 96358VW2 Software Version 091231 1625 4 02L 03 wp1 A2pBO25k d21j2 Bootloader CFE Version 1 0 37 102 6 Device Info Statistics z Route Wireless Driver Version 5 10 85 0 cpe4 402 0 ARP 2 This information reflects t
13. Software File Narne Browse Update Software Note Do not turn off your modem during firmware updates When the update is finished the modem reboots automatically Do not turn off your modem either 104 before the reboot is over You must guarantee the update software is right and accurate It is strictly forbidden to use other software for updates After update software it is suggested to restore the modem to the factory defaults and configure it again 3 6 7 Reboot Choose Reboot and the following page appears Click Reboot to reboot the router gt Click the button below to reboot the router Reboot Device Info Advanced Setup Wireless Diagnostics Management Settings System Log TR 069 Client Internet Time Access Control Update Software n rtr 105 4 Q amp A 1 Q Why all LED indicators are off A Check the connection between the power adaptor and the power socket Check the power switch is on or not 2 Q Why LAN LED is not lighting A Check the connection between the ADSL modem and your computer hub or switch Check the running status of your PC hub or switch and ensure that they are working normally 3 Q Why ADSL LED is not lighting A Check the connection between the Line port of the router and the wall jack 4 Q Why cannot visit Internet with ADSL LED is on A Ensure that the following information is correctly entered e VPI VCI e Username password 5 Q Why
14. and Router management is done through the Web based management interface that can be accessed through the local Ethernet using any web browser You may also enable remote management to enable configuration of the Router via the WAN interface Application Home gateway SOHOs Small enterprises Higher data rate broadband sharing Shared broadband internet access Audio and video streaming and transfer PC file and application sharing Wireless access N Environment Requirements Operating temperature 0 C 40 C 32 F to 104 F Storage temperature 109C 55 C 14 F to 131 F Operating humidity 10 95 non condensing Storage humidity 5 95 non condensing Power adapter input 100V 240V AC 50 60Hz Power adapter output 12V DC 1A 1 3 System Requirements Recommended system requirements are as follows 1 4 Pentium 233 MHZ or above Memory 64 Mbps or above 10M Base T Ethernet or above Windows 9x Windows 2000 Windows XP Windows ME Windows NT Ethernet network interface card Safety Cautions Follow the announcements below to protect the device from risks and damage caused by fire and electric power 1 5 1 5 1 Use volume labels to mark the type of power Use the power adapter that is packed within the device package Pay attention to the power load of the outlet or prolonged lines An overburden power outlet or damaged lines and plugs may cause electric shock or fire accident Check the power cords regular
15. clients to a WAN Interface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHEP option 60 will be denied an IP address from the local DHCP server 3 5elect interfaces from the available interface list and add it to the grouped interface list using the arrow buttons to create the required mapping of the ports Note that these clients may obtain public IP addresses 4 Click Save Apply button to make the changes effective immediately IMPORTANT If a vendor ID is configured for a specific client device please REBOOT the client device attached to the modem to allow it to obtain an appropriate IP address Group Name Group WAN Interface used in the grouping Grouped LAN Interfaces Available LAN Interfaces ENET2 Automatically Add Clients With the following DHCP Vendor IDs Save Apply 69 Enter the Group name and select interfaces from the available interface list and add it to the grouped interface list using the arrow buttons to create the required mapping of the ports The group name must be unique Note These clients may obtain public IP addresses Click Save Apply to apply the configuration immediately The selected interfaces are removed from their existing groups and added to the new group 3 3 12 LAN Ports Choose Advanced Setup gt LAN Ports and the following page appears In this page you can enable disable the
16. for the DSL Router In this page you can modify the IP address of the device The preset IP address is 192 168 1 1 This is the private IP address of the DSL Router under which the device can be reached in the local network It can be freely assigned from the block of available addresses The IP address under which the Router can be reached from outside is assigned by the ISP IP Address 192 168 1 1 Subnet Mask 255 255 255 0 3 3 3 2 2 Enabling IGMP Snooping Internet Group Management Protocol IGMP is an Internet protocol that enables an Internet computer to inform neighboring routers that it is a member of a multicast group Standard Made C Blocking Mode Note If IGMP snooping function is enabled the DSL Router capability improves 3 3 2 3 Configuring the DHCP Server The DSL Router has a DHCP server for which the factory setting is active Consequently the IP addresses of the PCs are automatically assigned by the DSL Router Q Disable DHCP Server 9 Enable DHCP Server Start IP Address 192 168 1 2 End IP Address 132 158 1 254 3 3 2 4 Configuring DHCP Static IP Lease View the following part for static IP Lease List Static IP Lease List A maximum 32 entries can be configured IMAC Address IP Address Remove Add Entries Note A maximum 32 entries can be configured Click Add Entries and the following page appears 40 DHCP Static IP Lease Enter the Mac address and Static IP address then click A
17. from the selected WAN interface OR enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS server IP addresses Obtain DNS info from a WAN interface WAN Interface selected pppoe 0 0 35 C Use the following Static DNS IP address Primary DNS server Secondary DNS server Back Next 20 In this page you can get DNS server information from the selected WAN interface or enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS server IP addresses Click Next and the following page appears WAN Setup Summary Make sure that the settings below match the settings provided by your ISP PORT VPI VCI n 0 35 Connection Type PPPoE Service Name pppoe 0 0 35 Service Category uBR IP Address Automatically Assigned Service State Enabled NAT Disabled Fum Cone NAT Disabled Firewall Disabled IGMP Multicast Disabled Quality Of Service Disabled Click Save Aopoly to have this interface to be effective Click Back to make any modifications Back Save Apply In this page it shows all the configurations Click Save Apply to all the configurations Click Back to make any modifications 3 3 1 2 MER IPoE Configuration Click Add and the following page appears In this page you can modify VPI VCI QoS and select the Internet conn
18. interface You can select Wireless Bridge also known as Wireless Distribution System to disable access point functionality Selecting Access Point enables Device Info Advanced Setup Wireless Basic available and wireless stations will be able to Security RSE 2 vis jin pi disables iia br ses belge Any wireless bridge will be granted access Selecting Enabled or Enabdledi Scan i MIT ho sets p Bre r Co Only es ies cR in ui E Wireless Bridge Remote Bridges will be granted access E Advanced Click Refresh to update the remote bridges Wait for few seconds to update Station Info Click Save Apply to configure the wireless bridge options Diagnostics Management AP Mode Access Point Bridge Restrict Enabled z Remote Bridges MAC Address i Refresh Save Apply 3 4 6 Wireless Advanced Choose Wireless gt Advanced the following page appears This page allows you to configure advanced features of the wireless LAN interface You can select a particular channel on which to operate force the transmission rate to a particular speed set the fragmentation threshold set the RTS threshold set the wakeup interval for clients in power save mode set the beacon interval for the access point set XPress mode and set whether short or long preambles are used 92 Device Info Advanced Setup Wireless Advanced E This page allows you to configure advanced features of the wireless LAN interface You can sel
19. is only effective on ATM PVCs configured in Bridge mode FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table MAC Filtering Policy For Each Interface WARNING Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED AUTOMATICALLY You will need to create new rules for the new policy Interface Policy Change atmi BLOCKED o Click Add to add MAC filter rules See the following figure Add MAC Filter Create a filter to identify the MAC layer frames by specifying at least one condition below If multiple conditions are specified all of them take effect Click Apply to save and activate the filter Protocol Type be Destination MAC Address Source MAC Address Frame Direction LAN 2WAN w WAN Interfaces Configured in Bridge mode only br 0 0 32 atm1 Save Apply Frame Direction Direction of transmission frame 53 MAC Filtering Global Policy FORWARDED This section describes how to prevent the PC whose MAC address is 00 13 20 9E 0F 10 from transmitting PPPoE frames to Internet Click Add and configure in the following page Add MAC Filter Create a filter to identify the MAC layer frames by specifying
20. or province where your organization s head office is located Please enter the full name of the state or province Country Region Name This is the two letter ISO abbreviation for your country for example GB for the United Kingdom To create a new certificate do as follows Step 1 Click Create Certificate Request and enter necessary information 15 Create new certificate request To generate a certificate signing request you need to include Common Name Organization Name State Province Name and the 2 letter Country Code for the certificate Certificate Name mycertificate Common Name ADDON com Organization Name ADDON State Province Name tmd Country Region Name US United States Step 2 Wait several seconds and the generated certificate request appears Apply Certificate signing request Certificate signing request successfully created Note a request is not yet functional have it signed by a Certificate Authority and load the signed certificate to this device Name Type mycertificate request Subject CN ADDON com O zADDON ST tmd C US Signing Request MIIBfjCBS6AIBADA MRIwEAYDVQODEwlBRERPTi5jb20xDjAMBgNVBAOTBUFERESO MOwwCgYDVOOIEwNObWOxCzAJBgNVBAYTAlVTMIGf MAOGCSqGSIb3DOEBAQUAA4SGN ADCBiQKBgQDT6 vrURocUQoafWUBbUf4axhWMMgO01 8Y9N Pwz860XPb9ACUrXaoKW NvdM SAtTTcEnFXt Pj58zYM38IqcjrF2MyxIWEliaAkQSm8mc8 JrLiz6NiHVQGS jzDYZzg5bjMau4a49sZN8wYEBQwUsSTBmy X4 c 3WY hGBfW
21. support and user The user name admin has unrestricted access to change and view configuration of your DSL Router The user name support is used to allow an ISP technician to access your DSL Router for maintenance and to run diagnostics The user name user can access the DSL Router view configuration settings and statistics as well as update the router s software Use the fields below to enter up to 16 characters and click Apply to change or create passwords Note Password cannot contain a space Username Old Password New Password Confirm Password Save Apply 3 6 6 Update Software Click Management gt Update Software and the following page appears In this interface you can update the modem firmware Click Browse to find the right version file and click Update Software to update Tools Update Software Step 1 Obtain an updated software image file from your ISP Device Info Advanced Setup Step 2 Enter the path to the image file location in the box below or click the Browse button to locate the image file Wireless g S Click the Update Software button once to upload the new image file Diagnostics Step 3 Click the Update Software button once to upload the new image file METET EIEI NOTE The update process takes about 2 minutes to complete and your DSL Router will reboot Settings System Log TR 069 Client Internet Time Access Control Update Software Reboot
22. the public ports that are to be opened for the application to this trigger port You can select known Internet services or manually assign ports or port blocks Adding Port Triggering Choose Advanced Settings gt NAT gt Port Triggering and the following page appears NAT Port Triggering Setup tn P 7 Some applications require that specific ports in the Router s firewall be opened for access by the remote parties Port Trigger dynamically opens up the Open Ports in the firewall when an application on the LAN initiates a TCP UDP connection to a remote party using the Triggering Ports The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the Open Ports A maximum 32 entries can be configured Device Info Advanced Setup WAN Service LAN NAT Trigger Open 2 Application Name Port Range Port Range WAN Interface Remove DM Host Protocol Protocol Port Triggering edt Ek Soest c Virtual Servers Security Beal Renae Quality of Service Ada E Routing Step 1 To set up port triggering for a service click Add 43 NAT Port Triggering Some applications such as games video conferencing remote access applications and others require that specific ports in the Router s firewall be opened for access by the applications You can configure the port settings from this screen by selecting an existing application or crea
23. w Authentication Methad Pre Shared Key w Pre Shared Key Perfect Forward Secrecy Disable Advanced IKE Settings Show Advanced Settings This is a dynamic page The displays are different some options are shown and a IL ot hidden when different types or connections are chosen You can select automatic key exchange or manual key exchange pre shared key authentication or certificate authentication etc When automatic key exchange method is used click Show Advanced Settings and more options appear 73 Advanced IKE Settings Phase 1 Mode Encryption Algorithm Integrity Algoritim Select Diffie Hellman Group for Key Exchange Key Life Time Phase 2 Encryption Algorithm Integrity Algoritim Select Diffie Hellman Group for Key Exchange Key Life Time 3 3 14 Certificate Hide Advanced Settings 3DES v Seconds 3DES w ps 1024bit Seconds ae um lx Save Apply Choose Advanced Setup gt Certificate and two items appear Local and Trusted CA For either type of certificate the page shows a list of certificates stored in the modem Local Certificates Device Info Add View or Remove certificates from this page Advanced Setup Local certificates are used by peers to verify your identity WAN Service Maximum 4certificates can be stored LAN NAT Security Quality of Service Name In Use Subject Type Action Routing Create Certificate Request Import Certificate D
24. 6631097 Data Cells 164807 Total SES 20 Total UAS e Traffic Type ATM or PTM e Status Up NoSigal Establishinglink e Link Power State LO L1 L2 12 e Line Coding Trallis on etc e Rate Kbps Upstream Line Rate Downstream Line Rate Click Reset Statistics at the bottom to restore the values to zero and recount them Click xDSL BER Test to test xDSL Bit Error Rate 3 2 8 Route Table Information Choose Device Info Route and the following page appears Device Info Route a Flags U up reject G gateway H host R reinstate Device Info D dynamic redirect M modified redirect Summary WAN Statistics Destination Gateway Subnet Mask Hag Metric Service Interface 192 168 1 0 0 0 0 0 299 299 299 0 Uu 0 br DHCP Advanced Setup Wireless Diagnostics Management 3 2 9 ARP Table Information Choose Device Info ARP and the following page appears You can query the MAC and IP address information of the equipment attached to the modem Device Info ARP Ip address Flags Hw Address Device 192 168 1 25 Complete 00 1D 0F 19 91 C1 bro Device Info Summary WAN Statistics 3 2 10 DHCP IP Lease Information Choose Device Info gt DHCP and the following page appears You can query the IP address assignment for MAC address at the LAN side of the DSL router and obtain the IP Address from the DHCP server through Ethernet and wi
25. Enter Service Description pppoa O0 0 35 Back Next Click Next and the following page appears In this page you can modify the PPP user name PPP password and authentication method PPP Username and Password PPP usually requires that vou have a user name and password to establish your connection In the boxes below enter the user name and password that your ISP has provided to you PPP Username PPP Password Authentication Method AUTO Y Enable NAT Enable Firewall Dial on demand with idle timeout timer PPP IP extension Use Static IPv4 Address Oooda dad Enable PPP Debug Mode IGMP Multicast Enable IGMP Multicast Back Next e PPP Username The correct user name that your ISP provides to you PPP Password The correct password that your ISP provides to you e Authentication Method The value can be AUTO PAP CHAP or MSCHAP Usually you can select AUTO e Enable NAT If you enable NAT the Enable Fullcone NAT check box appears 30 Enable Fullcone NAT Enable Fullcone NAT A full cone NAT is one where all requests from the same internal IP address and port are mapped to the same external IP address and port Furthermore any external host can send a packet to the internal host by sending a packet to the mapped external address Dial on demand with idle timeout timer If this function is enabled you need to enter the idle timeout time Within the preset minutes if the modem do
26. Info Advanced Setup Wireless Enable Wireless Security d MAC Filter Hide Access Point Wireless Bridge Advanced Clients Isolation Station Info Disable WMM Advertise Diagnostics Management Enable Wireless Multicast Forwarding MF SSID ADD NWAR3650 BSSID 62 30 4f 01 00 02 Country UNITED KINGDC Max Clients jis Wireless Guest Virtual Access Points Disable Enabled SSID Hidden Slate y IEnable Max ccr Clients WMF Clients Advertise gD ADDON2 0 n ri O fis N A O O E O 16 N A E O si O 16 N A Save Apply e Enable Wireless If you want to make wireless be available you have to check this box first Otherwise the Hide Access Point SSID Country Enable Wireless Guest Network and Guest SSID boxes are not displayed e Hide Access Point Check this box if you want to hide any access point for your router so a station cannot obtain the SSID through passive scanning e Clients Isolation When many clients connect to the same access point they can access each other If you want to disable the access between clients which connect the same access point you can check this box e Disable WMM Advertise WMM is short for wi fi multimedia which can provide high performance multimedia voice and video data transfers e Enable Wireless Multicast Forwarding WMF The Wireless Multicast forwards to Wireless unicast e SSID For added security you should
27. M 189 M 190 M 191 M 192 M 193 M 194 M 195 M 196 M 197 M 198 M 199 M 200 M 201 M 202 M 203 M 204 M 205 M 206 M 207 M 208 M 209 M 210 M 211 M 212 M 213 M 214 M 215 M 216 M 217 M 218 M 219 M 220 M221 M 222 M 223 M 224 M 225 M 226 M 227 M 228 M 228 M 230 M 231 M 232 M 233 M 234 M 235 M 236 M 237 M 238 M 239 Iv 240 Iv 241 v F 242 M 243 M 244 M 245 M 246 M 247 M 248 M 249 M 250 M 251 M 252 M 253 M 254 M 255 Check All Clear All Apply Close Select the appropriate upstream and downstream tones for your ADSL connection Click Apply to let your settings take effect 3 3 9 UPNP 3 3 9 1 Enabling UPNP Choose Advanced Setup gt UPNP and the following page appears In this page you can enable or disable UPNP protocol 5 Device Info Upnp Configuration M Enable Upnp protocol Advanced Setup WAN Service LAN NAT Security Quality of Service Save Apply Routing DNS 65 The operating system of the PC should be Windows ME or Windows XP Check whether the UPnP function is installed in the PC You may need to retrospectively install the UPnP components even on systems with Windows XP or Windows ME Please refer to the User Guide of your PC 3 3 10 DNS Proxy Choose Advanced Setup gt Dns Proxy and the following page appears Dns Proxy Configuration v Enable Dns proxy Host name af the modem ADDON Domain name of the LAM network Home Save Apply Device Info Advanced Setup WAN Service LAN NAT Secur
28. MBih sgPOIDAQABOAA w DOYJKoZIhvcNAQEEBOADgYEAESu4axW50x13YcPMqFzJd6uxLdAfGtVjJmDELZzW6e OPcdawqbG2 D2 9khaFcHHE yng2 XBZnwOW Uvud eomcAX44yCYTH1PFDh4ZWXZzIiM5 EpkGNt yLOh12kHYO ShBhfqvDF8nkbe 600P zNZN6P54f Nyv5oUiMKignd ihqQBlu The certificate request needs to be submitted to a certificate authority which would sign the request Then the signed certificate needs to be loaded into modem Click Load Signed Certificate in the previous page or in the first page and the load certificate page appears Paste the signed certificate click Apply and a new Back Load Signed Certificate certificate is created 76 Load certificatee Enter certificate name paste certificate content and private key Certificate Name mycertificate xCertificate Apply 3 3 14 2 Importing an Existing Local Certificate To import existing certificate click Import Certificate and paste both certificate and corresponding private key TT Import certificate Enter certificate name paste certificate content and private key Certificate Name Certificate I I I I w tz Q H z nd mM be d d H c be j tj 7 tj I I I I I d r 1 ave D Pa tn 3 3 14 3 Trusted CA Certificates Choose Certificate gt Trusted CA and the following page appears Trusted CA Certificate Authority Certificates Add View or Remove certificates from this page CA certificates are used by vou to ve
29. NS DSL Upnp Dns Proxy Interface Grouping LAN Ports re XXM Trusted CA 74 In the menu Local means local certificates Trusted CA means trusted Certificate Authority certificates Local certificates preserve the identity of the modem CA certificates are used by the modem to very certificates from other hosts Local certificates can be created by two ways 3 3 14 1 Create a new certificate request have it signed by a certificate authority and load the signed certificate Import an existing signed certificate directly Create New Local Certificate Certificate name Creates an SSL certificate in the specified certificate repository administrator s or domain s repository by using a private key file and a corresponding certificate file Common Name The common name is the fully qualified domain name or FQDN used for DNS lookups of your server for example www mydomain com Browsers use this information to identify your Web site Some browsers will refuse to establish a secure connection with your site if the server name does not match the common name in the certificate Please do not include the protocol specifier http or any port numbers or pathnames in the common name Do not use wildcard characters such as or and do not use an IP address Organization Name The name of the organization to which the entity belongs such as the name of a company State Province Name This is the name of the state
30. NWAR3650 User Manual aliases 6 fe To a ERE EE ETT 1 1 1 ADDIICAHOR redet ee ere Ne ee eR E ere 1 1 2 Environment Requirements cccccsceccsseecceeeesseseeceeesseeessueeessaeeeses 1 1 3 System Requirements 25 veo deve tese vede p Flog rub Ed Ep OUR 2 1 4 SAS ly er Di e PT 2 1559 LED Stat s Descrplloris eo eeaeee ove Pei Io EEEE Pp SEDE OPE ees 2 EG MEE cond u E aces oa eaecteamn ikea nee 2 132 Rearpahlelz e ot Ete ease pae Pot bet tu eee ees 4 Hardware Installation sierra chee rae nep Pi Ooh est deca bebo aoa n estote bon dotes QUE 4 2 1 Choosing the Best Location for Wireless Operation 4 2 2 Connecting the ADSL Router eese enne nnns 5 Introduction to Web Configuration ccccccecccccseeeeeeeeeeeeeeeeeeeeeseeeeeeeeeeeeeeesaaees 7 3 1 IWofefelinoBisgcedisi Mueren TR 7 Set Frs TMe Eolo uto orte orte AE Qr RC pet EP ape R p CH EE 7 3 2 DSL Router Device Information cccccccccseeeeeeeeeseeeeeseeeeeseeeeeaeeeees 8 3 2 1 Summary of Device Information seeeeeeesesessss 9 3 2 2 WAN Interface Information cccccccccseseeceeseeceeeesseeeesseeeeees 9 DS b e nu ne ee eR RE eR eee 10 324 SLATS UCS of LAN e 10 O20 SIalSUCS O VAI codi esse tante ets eee ees 10 BZ O gt SlASUCS Ol diets 11 oO Sasis Ol XS es aes eee eo aces eee 11 3 2 8 Route Table Information ccccccccccse
31. Out In Out In Packet In Cell OAM OAM ASM ASM Number Octets Octets Packets Packets Errors Errors Cells Cells Cells Cells 2 o 6404 o 0 2 o o o o Reset Statistics E Device Info Summary WAN Statistics LAN WAN Service xDSL Route ARP DHCP 3 2 7 Statistics of xDSL Choose Device Info gt Statistics gt xDSL and the following page appears If the DSL line is activated the following window appears 11 Device Info Summary WAN Statistics LAN WAN Service xTM Route ARP DHCP Advanced Setup Wireless Diagnostics Management Statistics xDSL ADSL_2plus Traffic Type Link Power State SNR Margin 0 1 dB 133 Output Power 0 1 dBm 132 91 Attainable Rate Kbps 28016 945 Rate Kbps 20985 MSGc of bytes in overhead channel message B of bytes in Mux Data Frame M of Mux Data Frames in FEC Data Frame i T Mux Data Frames over sync bytes lo o R of check bytes in FEC Data Frame 14 e o S ratio of FEC over PMD Data Frame length 0 746 7 5000 oo foo E 1 L of bits in PMD Data Frame 6756 256 Delay msec er per oo e ee M ES mes mm e Beemmemus a C RS Words 215710928 2144272 D D RS Correctable Errors 8265 o o mswcowtaetmas e o n mue T s p s omes a Total Cells 198670802 74
32. Pv6 to be selected Differentiated Service Code Point DSCP Check Select a mark 59 service to match the original packet IP header if all rules defined within the classification class are matched CS Mark IP Precedence AF Assured Forwarding EF Expedited Forwarding e Specify Classification Results Must select a classification queue A blank mark or tag value means no change Mark Differentiated Service Code Point DSCP Select a mark service that modifies the original packet IP header if all rules defined within the classification class are matched CS Mark IP Precedence AF Assured Forwarding EF Expedited Forwarding Mark 802 1p priority Select an 802 1p priority number that serves as the 802 1p value The 802 1p header includes a 3 bit prioritization field which allows packets to be grouped into eight levels of priority 0 7 where level 7 is the highest one 3 3 6 Routing 3 3 6 1 Routing Default Gateway Choose Advanced Setup gt Routing gt Default Gateway and the following page appears In this page you can modify the default gateway settings If selected an interface by the Selected WAN Interface box this router accepts the received default gateway assignment from this WAN interface Click Save Apply to save the configuration Routing Default Gateway Select a preferred wan interface as the system default gateway Selected WAN Interface pppoa_O D 38 ppr Device Info Advanced Set
33. Queue Config and Qos Classification 3 3 5 1 Enabling QoS In this page you can perform QoS queue management configuration Choose Advanced Setup gt Quality of Service and the following page appears 55 QoS Queue Management Configuration If Enable QoS checkbox is selected choose a default DSCP mark Device Info to automatically mark incoming traffic without reference to a particular ssifier Click Save Apply button to save it Advanced Setup classifier Click Save Apply button to save i WAN Service LAN NAT Note If Enable Qos checkbox is not selected all QoS will be Security disabled for all interfaces Queue Config do not match any classification rules QoS Classification Routing T Enable QoS DNS DSL Upnp Dns Proxy Interface Grouping LAN Ports Save Apply Select Enable QoS to enable QoS and configure the default DSCP mark Qos Queue Management Configuration If Enable QoS checkbox is selected choose a default DSCP mark to automatically mark incoming traffic without reference to a particular Classifier Click Save Apply button to save it Note If Enable Qos checkbox is not selected all Qos will be disabled for all interfaces Note The default DSCP mark is used to mark all egress packets that do not match any classification rules Select Default DSCP Mark No Changet 1 Save Apply Note If Enable Qos checkbox is not selected all QoS is disabled for all interfaces Th
34. SNAP BRIDGING according to the uplink equipment Click Next and the following page appears In this page you can modify the service description and enable the 802 1Q VLAN 22 WAN Service Configuration Enter Service Description jipoe_O_0_35 I Enable 802 10 VLAN Enable the 802 1Q VLAN and the following page appears HV Enable 802 10 VLAN n 1 Enter 802 1P Priority 0 7 m Enter 802 10 VLAN ID 0 4094 HR Note The 802 1q VLAN tagging is only available for PPPoE MER and Bridge Click Next and the following page appears 23 WAN IP Settings Enter information provided to you by your ISP to configure the WAN IP settings Notice If Obtain an IP address automatically is chosen DHCP will be enabled for PVC in MER mode If Use the following Static IP address is chosen enter the WAN IP address subnet mask and interface gateway Obtain an IP address automatically Option 60 Vendor ID NEN Option 61 IAID 8 hexadecimal digits Option 61 DUID Do hexadecimal digit Option 125 Disable C Enable C Use the following Static IP address WAN IP Address EEE WAN Subnet Mask WAN gateway IP Address Primary DNS server Secondary DNS server e In this page you can modify the IP Settings Enter information provided by your ISP to configure the WAN IP settings Note If select Obtain an IP address automatically is chosen DHCP will be enabled for PVC in MER mode If Use th
35. Virtual LAN Ports function LAN Ports Configuration E i Device Info Use this page to enable disable the Virtual LAN Ports feature Advanced Setup WAN Service LAN Mm EETA NAT Security Save Anply Quality of Service Routing LAN Port DNS ENET I 4 ei EMET 1 4 Upnp wlang Dns Proxy wlD Guesti Interface Grouping lo Guest LAN Ports IPSec wa Guest3 Select the checkbox and the following page appears 70 LAN Ports Configuration Use this page to enable disable the virtual LAN Ports feature Iv ert 1 4 Save Apply LAN Port EMET1 EMET2 EMET3 EMET4 wlang wl Guesti wl Guestz wi Guest3 Click Apply Save to save the configuration 3 3 13 IPsec 3 3 13 1 How to Use and Configure the IPSec To use IPSec user interface choose Advanced Setup gt IPSec The following page appears 71 IPSec Tunnel Mode Connections gt Device Info Add or remove IPSec tunnel connections from this page Advanced Setup WAN Service LAN NAT Security Quality of Service Remote Addresses Local Addresses Remote Connection Name Remove Gateway Add New Connection Routing DNS DSL Upnp Dns Proxy Interface Grouping LAN Ports The table shows current connections In this page you can do the following operation e Click Remove to remove a connection e Click Add New Connection to add a new connection IPSec Setting Parameters
36. at least one condition below If multiple conditions are specified all of them take effect Click Apply to save and activate the filter Protocol Type PPPoE v Destination MAC Address Source MAC Address 00 13 20 9E 0F 10 Frame Direction LANz 2WAN Y WAN Interfaces Configured in Bridge mode only br 0 D 32 atm1 Click Save Apply and the following page appears MAC Filtering Setup MAC Filtering is only effective on ATM PV Cs configured in Bridge mode FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table MAC Filtering Policy For Each Interface WARNING Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED AUTOMATICALLY You will need to create new rules for the new policy Interface Policy Change atmi FORWARD J Change Policy Choose Add or Remove to configure MAC filtering rules Interface Protocol Destination MAC Source MAC Frame Direction Remove atmi PPPoE 00 13 20 9E 0F 10 BOTH Fj MAC Filtering Global Policy BLOCKED This section describes how to permit the PC who has the 00 13 20 9E 0F 10 MAC address transmit PPPoE frame to Internet Click Add to configure in
37. atic below 2 If you like to automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHCP option 60 will be denied an IP address from the local DHCP server 3 Select interfaces from the available interface list and add it to the grouped interface list using the arrow buttons to create the required mapping of the ports Note that these clients may obtain public IP addresses 4 Click Save Apply button to make the changes effective immediately IMPORTANT If a vendor ID is configured for a specific client device please REBOOT the client device attached to the modem to allow it to obtain an appropriate IP address Group Name WAN Interface used in the grouping Grouped LAN Interfaces Available LAN Interfaces Automatically Add Clients With the following DHCP Vendor IDs Save Apply Automatically Add Clients With the following DHCP Vendor IDs If a vendor ID is configured for a specific client device reboot the client device attached to the 68 modem to allow it to obtain an appropriate IP address For example the windows 2000 XP default DHCP client s vender ID is MSFT 5 0 Interface grouping Configuration To create a new interface group 1 Enter the Group name and the group name must be unique and select either 2 dynamic or 3 static below 2 If vou like to automatically add LAN
38. cannot open the Modem Web configuration page A Follow below steps to check the communication between the computer and modem e Choose Start gt Run from the desktop and ping 192 168 1 1 the IP address of the modem e Ifthe modem cannot be reached please check following configuration Type of the network cable Connection between the modem and computer TCP IP configuration of you computer 6 Q How to load the default setting after incorrect configuration A e To restore the factory default keep the device powered on and push a needle into the hole Press down the button about one second and then release 106 The default IP address and subnet mask of the modem are 192 168 1 1 and 255 255 255 0 respectively e User password of super user admin admin 107
39. ceceeeeeeeeeeeseeeeesaeeeeaeeees 13 3 2 9 ARP Table Information occi cree etnies 13 3 2 10 DHCP IP Lease Information seeesssssss 13 3 3 Advanced SEUD cok edet cue beet ido e asda ee ete o co OR odo 14 9 941 MAN Configuration cerae n vi oap rea gebe ai 15 Suez JEANGCODIGUFSUODL 2 nir du Fe EFE be e Cope vu Ree bai PV M Eos 38 aar ONA Te P T E 41 ORO MEME et qiu cuss co cescreoovueteumn termed E E E E a 47 Siocon MOUAlLY Moro e EE D 55 390 leise tem 60 dom DNS otii Sce a ee ee eee eee Cei EDS E Cod 62 Dror IBSLC uidit dote Db EE bu Mat 63 Contents 3 4 3 5 3 6 ON MEME NIIS e a cl Bea cnentuady Ta 65 3 3 10 IS PTO Wirt oe tennecautherncutnadencndaametecira devorben E san eau tre dee 66 9 9 11 Interface GrOUDING pecus exi rod ELE puce ia co 1 d Deo Lo Rod ween 66 3 3 12 EAN POSS iecur si teshsneestant sadi nadEEscaetusctuhieese cis dacdc tede attese ecu 70 3 30 13 PSCC rent e M at E 71 3 3 14 CCOFUTIC ANG ted se scan aucun end odee ep sta nidemende nd soak steer URDU san Aint nx 74 3 3 15 FTP COnNGUratlo nm orenen ipa A AA 79 Wireless i cactus unes loops aE AARTEEN An Teea OaE dens red nece 80 3 4 1 Wireless LAN Basics iuo He dl desde Dd eus eicut 80 3 4 2 Wireless BaSIG eee irent enne dn Hip xeu exa Uta du vd eda udin 80 3 4 3 Wireless Security iioii ado eod RREYE F3 pedo e DOG PXR MR DLE oA Rad 82 3 4 4 Wireless MAC Filter eeeeseeeseeeeeeennnn 90
40. change the default SSID to a unique name Country The name of the country with which your gateway is configured This parameter further specifies your wireless connection For example The channel will adjust according to nations to adapt to each nation s frequency provision e Max Clients Specifies maximum wireless client stations to be enble to link with AP Once the clients exceed the max vlaue all other clients are refused 81 The value of maximum clients is 16 e Wireless Guest Virtual Access Points If you want to make Guest Virtual network function be available you have to check those boxes in the table below In the current software version three virtual access points can be configured After setting click Save Apply to save the basic wireless options and make the change take effect 3 4 05 Wireless Security This page allows you can configure security features of the wireless LAN interface You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Another way you can setup configuration through WiFi Protected Setup WPS WSC Setup E Device Info Advanced Setup Wireless Basic MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Wireless Security This page allows you to configure security features of the wireless LAN interface You
41. ctions either with the same or with different VPN servers When the PPTP ALG is disabled the router allows VPN operation in a restricted way LAN computers are typically able to establish VPN tunnels to different VPN Internet servers but not to the same server IPSEC Enable Allows multiple VPN clients to connect to their corporate networks using IPSec SIP Enable Allows devices and applications to use VoIP Voice over IP to communicate through NAT 3 3 3 2 DMZ Host Adding a DMZ Host 42 Step 1 To setup a PC as a DMZ host choose Advanced Setup gt NAT gt DMZ Host NAT DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in Device Info the Virtual Servers table to the DMZ host computer Advanced Setup Enter the computer s IP address and click Apply to activate the DMZ host WAN Service LAN Clear the IP address field and click Apply to deactivate the DMZ host NAT DMZ Host IP Address ALG Save Apply Virtual Servers Step 2 Enter the local IP address of the PC that is to be enabled as an exposed host Step 3 Click Save Apply to apply the configurations Remove DMZ host Clear the DMZ Host Address Click Save Apply to apply the setting 3 3 3 3 Port Triggering If you configure port triggering for a certain application you need to determine a so called trigger port and the protocol TCP or UDP that this port uses You then assign
42. d make the changes take effect Manual Setup AP You can set the network authentication method selecting data encryption Select SSID ADD NWAR3650 Y Network Authentication Shared WEP Encryption Enabled Encryption Strength 64 bit bd Current Network Key 1 m Network Key 1 Network Key 2 C Network Key 3 Network Key 4 1 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Save App ly Figure 5 Wireless security 64 bit WEP e 128 bit WEP Encryption Strength click the desired Data Security level to be 128 bit Network Key 1 to 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys to fill out WEP keys box The system allows you to type in 4 kinds of the WEP key Click Save Apply to save the wireless security options and make the changes take effect 84 Manual Setup AP You can set the network authentication method selecting data encryption necify whether a network key is required to authenticate to this wireless network and specify the encryption strength Click Save Apply when done Network Authentication WEP Encryption Encryption Strength Current Network Key Network Key 1 Network Key 2 Network Key 3 Network Key 4 ADD NWAR3650 Y Shared Enabled 128 bit Enter 13 ASCII characte
43. e Remote IPSec Gateway Address IP gateway of the remote modem which you want to connection at the WAN side e Tunnel access from local IP addresses If you select Single Address it allows only one PC from local to connect remote hosts with IPSEC mode You must enter the IP address of the PC in fourth item If you select subnet it allows more than one PC from local to connect remote hosts with IPSEC mode Note These PCs must in the same subnet so you must enter the subnet address in fourth item Enter the subnet mask in the IP Subnet mask that hides when you select Single Address e IP Address for VPN If you select Single Address it is the IP address of the PC If you choose Subnet it is the subnet address e Tunnel access from remote IP addresses same with the third item but it means remote modem e Key Exchange Method You can select the encryption mode to Auto IKE or Manual Auto IKE sets the encryption automatically and Manual indicates to set the encryption manually 12 Example of Configuring IPSec The following page is used to edit configurations when adding or editing an IPSec connection IPSec Settings IPSec Connection Name Remote IPSec Gateway Address IP or Domain 192 168 11 Name Tunnel access from local IP addresses IF Address for YPN 192 168 1 2 IP Subnetmask 255 255 255 Tunnel access from remote IP addresses IP Address for YPN 192 188 1 5 IP Subnetmask 255 255 255 0 key Exchange Method Autol KE
44. e default DSCP mark is used to mark all egress packets that do not match any Classification rules 56 Click Save Apply to active QoS 3 3 5 2 QOS Queue Config Choose Advanced Setup gt Quality of Service gt Queue Config and the following page appears In this page you can configure QoS Queue A maximum of 24 entries can be configured Qos Queue Configuration can allocate three queues Each of the queues can be configured for a precedence value Lower integer values for precedence imply higher priority for this queue relative to others The queue entry configured is used by the classifier to place ingress packets appropriately QoS Queue Setup A maximum 16 entries can be configured E If you disable WMM function in Wireless Page queues related to wireless will not take effects Device Info Advanced Setup WAN Service LAN NAT Security Add Enable Remove Quality of Service The QoS function has been disabled Queues would not take effects Name Key Interface Precedence DSL Latency Enable Remove QoS Classification Note Lower integer values for precedence imply higher priority for this queue relative to others For example add a QoS queue entry and allocate it to a specific network interface pppoe O O 35 Set integer values for queue precedence to 2 Click Add and the following page appears 57 o5 Queue Configuration The screen allows you to configure a QoS queue entry and assign i
45. e following Static IP address is chosen enter the WAN IP address subnet mask and interface gateway Click Next and the following page appears 24 Network Address Translation Settings Network Address Translation NAT allows you to share one Wide Area Network WAN IP address for multiple computers on your Local Area Network LAN Enable NAT Enable Firewall IGMP Multicast Enable IGMP Multicast MTU 1 65535 1500 Back Next In this page you can modify the Network Address Translation Settings If you enable NAT the Enable Fullcone NAT check box appears O Enable Fullcone NAT Enable Fullcone NAT A full cone NAT is one where all requests from the same internal IP address and port are mapped to the same external IP address and port Furthermore any external host can send a packet to the internal host by sending a packet to the mapped external address Click Next and the following page appears Routing Default Gateway iN D ect a preferred wan interface as th e system default gateway Selected WAN Interface pppoa 0 D 38 pppoaD Back Next In this page select a preferred wan interface as the system default gateway 25 Click Next and the following page appears DNS Server Configuration Get DNS server information from the selected WAN interface OR enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS ser
46. e is that the TR 069 Service provide to you e ACS Password The ACS password is that the TR 069 Service provide to you e Display SOAP messages on serial console When select Enable option the SOAP information displays on the serial console when select Disable it does not e Connection Request Authentication If this checkbox is selected you need to enter the Connection Request User Name and the Connection Request Password Or you needn t to enter e Connection Request User Name the connection user name that the TR 069 Service provides to you e Connection Request Password the Connection Request Password that the TR 069 Service provides to you Click Save Apply to save the he configuration 3 6 4 Internet Time Click Management gt Internet Time and the following page appears In this page the modem can synchronize with Internet time servers Time settings hp This page allows you to the modem s time configuration Device Info Advanced Setup Automatically synchronize with Internet time servers Wireless Diagnostics Management Settings System Log TR 069 Client Access Control Update Software Reboot Save Apply 102 After enable Automatically synchronize with Internet time servers the interface show below Enter proper configurations and click Save Apply Time settings This page allows you to the modem s time configuration M Automatically synchronize with Internet time servers First NTP time serve
47. e the right to begin transmission The RTS Threshold value should remain at its default value of 2347 DTIM Interval Delivery Traffic Indication Message Enter a value between 1 and 255 for the Delivery Traffic Indication Message DTIM A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages Beacon Interval A beacon is a packet of information that is sent from a connected device to all other devices where it announces its availability and readiness A beacon interval is a period of time sent with the beacon before sending the beacon again The beacon interval may be adjusted in milliseconds ms Default 100 is recommended XPress Technology Select Enable or Disable This is a special accelerating technology for IEEE802 11g The defaule is Disabled Transmit Power Adjust the transmission range here This tool can be helpful for security purposes if you wish to limit the transmission range 94 e WMM Wi Fi Multimedia Select whether WMM is enable or disabled Before you disable WMM you should understand that all QoS queues or traffic classes relate to wireless do not take effects e WMM No Acknowledgement Select whether ACK in WMM packet By default the Ack Policy for each access category is set to Disable meaning that an acknowledge packet is returned for every packet received This provides a more reliable transmission but increases traffic load which decrea
48. ecifies the timer of auto channelling 802 11n EWC Select disable 802 11n or Auto Bandwidth Select the bandwidth for the network Control Sideband If you select 20MHz in Both Bands or 20MHz in 2 4G Band and 40MHz in 5G Band the service of control sideband does not work When you select 40MHz in Both Bands as the bandwidth the following page appears Then you can select Lower or Upper as the value of sideband As the control sideband when you select Lower the channel is 1 7 When you select Upper the channel is 5 11 Channel 1 PF current Auto Channel Timer min fo 802 11n EWC Auto gt Bandwidth 40MHz in Both Bans rl urrent 20MHz Control Sideband lowe H Current None 802 11n Rate LOWET 802 11n Protection 802 11n Rate 54g Rate Select the transmission rate for the network The rate of data transmission should be set depending on the speed of your 93 wireless network You can select from a range of transmission speeds or you can select Auto to have the Router automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback will negotiate the best possible connection speed between the Router and a wireless client The default value is Auto 802 11n Protection The 802 11n standards provide a protection method so 802 11b g and 802 11n devices can co exist in the same network without speaking at the same time Support 802 11n Client Only Only stations that are o
49. ecifying a new filter name and at least one condition below All of the specified conditions in this filter rule must be satisfied for the rule to take effect Click Save Apply to save and activate the filter Filter Name Fitters Protocol TCP UDP Source IP address Range 192 168 1 10 Source Subnet Mask 552552550 Source Port port or port port i Destination IP address Range an nmm Destination Subnet Mask I B 1 Destination Port port or portport Save Apply Step 3 Click Save Apply and the following page appears Outgoing IP Filtering Setup By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Choose Add or Remove to configure outgoing IP filters Filter Protocol Source Address Source Dest Address Dest Remoun Name Range Mask Port Range Mask Port 192 168 1 10 Filter 1 TCP UDP 255 255 255 0 Add Remove 3 3 4 2 Incoming IP Filtering Setup The incoming IP filter is used to block and permit IP packet transmisstion from internet Choose Security gt IP Filtering gt Incoming and the following page appears Incoming IP Filtering Setup When the firewall is enabled on a WAN or LAN interface all incoming IP traffic is BLOCKED However some IP traffic can be ACCEPTED by setting up filters Choose Add or Remove to configure incoming IP filters Filter interfaces Protocol Source Address Sou
50. ect a particular channel on which to operate force the transmission rate to a particular speed set the fragmentation threshold set the RTS threshold set the wakeup interval for clients in power save mode set the beacon interval for the access point set XPress mode and set whether short or long preambles are used Wireless Click Save Apply to configure the advanced wireless options Basic Security Band 2 4GHz MAC Filter Channel B o Harm 6 Wireless Bridge E Auto Channel Timer min fo Station Info 802 11n WC ato 0 1 s Diagnostics Bandwidth 40MHz in Both Bands current 40MHz Management Control Sideband uper x Current Upper 802 11n Rate Auto j 802 11n Protection auto er Support 802 11n Client Only for rz 54g Rate Y Multicast Rate Auto j Basic Rate Defaut Fragmentation Threshold 2346 RTS Threshold DTIM Interval Beacon Interval Global Max Clients fis XPress Technology Disabled gt Transmit Power 10096 gt WMM Wi Fi Multimedia Disabled WMM No Acknowledgement Disabled WMM APSD Disabled nd Save Apply e Band Select using wireless frequency band range The radio frequency remains at 2 4 GHz Channel Fill in the appropriate channel to correspond with your network settings All devices in your wireless network must use the same channel in order to work correctly This router supports auto channeling functionality Auto Channel Timer min Sp
51. ection type encapsulation mode and service category 21 ATM PVC Configuration This screen allows you to configure an ATM PVC identifier VPI and VCD select DSL latency select a service categoryS YPI 0 255 lo VCI 32 65535 s Enable Multiple Protocols Over A Single PvC only support PPPOE MER Bridging Select the type of network protocol for IP over Ethernet as WAN interface PPP over Ethernet PPPoE LI MAC Encapsulation Routing MER C Bridging C PPP over ATM PPPOA C IP over ATM IPoA Encapsulation Mode LLC SNAP BRIDGINt Service Category UBR Without PCR Enable Quality Of Service Enabling packet level QoS for a PVC improves performance for selected classes of applications QoS cannot be set for CBR and Realtime VBR QoS consumes system resources therefore the number of PVCs will be reduced use Advanced Setup Quality of Service to assign priorities for the applications M Enable Quality Of Service e VPI Virtual path between two points in an ATM network Its valid value range is from O to 255 e VCI Virtual channel between two points in an ATM network Its valid value range is from 32 to 65535 1 to 31 are reserved for known protocols e Service Category UBR Without PCR UBR With PCR CBR Non Realtime VBR Realtime VBR e Enable Quality Of Service Enable or disable QoS Change the connection type of PVC 0 35 to MAC Encapsulation Routing MER and set the Encapsulation Mode to LLC
52. ervice provide the hostname and the interface to use when sending the DDNS updates Also enter the service provider Add Dynamic DNS This page allows you to add a Dynamic DNS address from DynDNS org or TZO D DNS provider DynDNS org v Interface pppoe D 0 32 pppl DynDNs Settings Annoly Save D DNS provider Website of the dynamic DNS provider DynDNS org A free DNS service for hosts with dynamic IP addresses TZO A service provider providing dynamic and static DNS services for a fee Hostname It is the domain name and it can be modified Interface The interface that the packets pass through on the modem Username This is the User name needed access the DDNS management interface Password This is the Password you will be prompted to enter when you access the DDNS management interface specific registration information and click Save Apply to use the feature 3 3 8 DSL Choose Advanced Setup gt DSL and the following page appears In this page you can view the DSL settings Usually you can keep this factory default setting The modem negotiates the modulation mode with the DSLAM 63 DSL Settings Select the modulation below Device Info Advanced Setup Iv G Dmt Enabled MAN Service 7 G lite Enabled LAN NAT M T1 413 Enabled Security Iv ADSL2 Enabled uality of Service i Iv AnnexL Enabled Routing DNS M ADSL2 Enabled cc ee Lj AnnexM Enabled Upnp Dns Proxy Select the phone l
53. es not detect the flow of the user continuously the modem automatically stops the PPPOE connection Once it detects the flow like access to a webpage the modem restarts the PPPoE dialup If this function is disabled the modem performs PPPoE dial up all the time The PPPoE connnection does not stop unless the modem is powered off and DSLAM or uplink equipment is abnormal Inactivity Timeout minutes 1 4320 PPP IP extension After PPP IP extension is enabled the following page appears The NAT and Firewall becom invalid And the WAN IP address obtained by the modem through built in dial up can be directly assigned to the PC being attached with the modem at this time the modem has only one PC From the view of the PC user this is even with that the PC dials up to obtain an IP addres But actually the dial up is done by the modem If this function is disabled the modem itself obtains the WAN IP address automatically Enable NAT Enable Firewall Dial on demand with idle timeout timer Mi PPF IP extension O Use Static IPv4 Address Enable PPP Debug Mode Use Static IPv4 Address If this function is disabled the modem obtains an 31 IP address assigned by an uplink equipment such as BAS through PPPoE dial up If this function is enabled the modem uses this IP address as the WAN IP address IFv4 Address 0 0 0 0 e Enable PPP Debug Mode Enable or disable this mode of debug This service is designed for the profe
54. gistrar when used in a special case where the PIN is all zeros In order to use wps authentication you must ensure netcard support the function if it support you need not do any configuration Only need to do is to press the wps button to enable the wps function 3 4 4 Wireless MAC Filter The web page allows you to create a list of MAC addresses that are banned or allowed association with the wireless access point MAC Restrict Mode The function can be turn on off Check on Disabled to disable this function Vice versa to enable the function After enabling the function you can filter wireless users according to their MAC address either allowing or denying access Check on Allow to make any wireless MAC 90 address in the Wireless Access Control List can be linked to And Check on Deny to banned any wireless MAC address in the Wireless Access Control List to be linked to Wireless MAC Filter Device Info Advanced Setup Select SSID 4D D NWvAR S650 Wireless Basic MAC Restrict Mode Disabled Allow Deny Security ca MAC Filter Wireless Bridge mac Address Remove Advanced Station Info Diagnostics Add Remove e Add a MAC Access Control To add a new MAC address to your wireless MAC address filters click on the Add button to show next page Type in the MAC Address in the entry field provided Click the Save Apply button to add the MAC address to the list The MAC address will appear listed in
55. he current status of your DSL connection DHCP i icum setup Line Rate Upstream Kbps 945 Wireless z Line Rate Downstream Kbps 20985 Diagnostics Default Gateway pppoad Primary DNS Server Secondary DNS Server e LAN IPv4 Address The management IPv4 address e Default Gateway In the bridging mode there is no gateway In other modes it is the address of the uplink equipment for example PPPoE PPPoA e DNS Server address In the PPPoE PPPoA mode it is obtained from the uplink equipment In the bridging mode there is no DNS Server address and you can manually enter the information 3 2 2 WAN Interface Information Choose Device Info WAN and the following page appears WAN Info Interface Description Type vianMuxid Igmp NAT Firewall Status 1Pv4 Address Device Info Summary Disabled Enabled Enabled Connecting Disabled pppoa pppoa_0_0_38 PPPoA Statistics Route ARP DHCP Advanced Setup Wireless Diagnostics Management e Description Descripte this interface with protocol and PVC 9 e Type The connection type of WAN such as PPPoE PPPoA 3 2 3 Statistics This page contains the following four parts e Statistics of LAN e Statistics of WAN Service e Statistics of xTM e Statistics of xDSL 3 2 4 Statistics of LAN Choose Device Info gt Statistics gt LAN and t
56. he following page appears In this page you can modify VPI VCI QoS and select the Internet connection type encapsulation mode and service category 15 ATM PVC Configuration This screen allows you to configure an ATM PVC identifier VPI and VCI select DSL latency select a service categoryS Enable Multiple Protocols Over Single PvC only support PPPOE MER Bridging Select the type of network protocol for IP over Ethernet as WAN interface PPP over Ethernet PPPoE C MAC Encapsulation Routing MER C Bridging PPP over ATM PPPoA C IP over ATM IPoA Encapsulation Mode LLC SNAP BRIDGIN Service Category UBR Without PCR Enable Quality Of Service Enabling packet level QoS for a PVC improves performance for selected classes of applications QoS cannot be set for CBR and Realtime VBR QoS consumes system resources therefore the number of PVCs will be reduced use Advanced Setup Quality of Service to assign priorities for the applications Enable Quality Of Service e VPI Virtual path between two points in an ATM network Its valid value range is from O to 255 e VCI Virtual channel between two points in an ATM network Its valid value range is from 32 to 65535 1 to 31 are reserved for known protocols e Service Category UBR Without PCR UBR With PCR CBR Non Realtime VBR Realtime VBR e Enable Quality Of Service Enable or disable QoS In this example PVC 0 35 is to be modified and the default
57. he following page appears You can query information of packets recevied at the Ethernet USB and wireless interfaces Click Reset Statistics to restore the values to zero and recount them The LAN side interface includes Ethernet USB and wireless device Statistics LAN ae Interface Received Transmitted Device Info Bytes Pkts Errs Drops Bytes Pkts Errs Drops SENTIT Y eth 313957 2700 10 1939910 3039 lo 0 WAN ee wid 0 0 0 0 1836 18 lo 0 Statistics p i AN 700mm wi0 1 0 0 0 0 1936 18 l NE ccce zs i a E ix o i xTM wl0 3 0 0 0 0 1836 18 lo 0 xDSL Route ARP Reset Statistics DHCP 3 2 5 Statistics of WAN Choose Device Info gt Statistics gt WAN Service and the following page appears You can query information of packets recevied by the WAN interfaces Click Reset Statistics to restore the values to zero and recount them 10 Statistics WAN Interface Description Received Transmitted Device Info BytesPktskErrsDropsBytesPktsErrs Drops Summary pppoad ppoa 0_0_38 o jo o o o fofofo WAN Statistics LAN Reset Statistics Figure 3 Statistics of WAN 3 2 6 Statistics of xTM Choose Device Info Statistics xTM and the following page appears You can query information of packets recevied by the ATM interfaces Click Reset Statistics to restore the values to zero and recount them Statistics xTM In Out In Out Port In
58. hernet signal is detected LAN4 3 2 1 Green The user data is passing through Ethernet port Ethernet interface is ready to work No radio signal is detected WLAN Green The user data is passing through WLAN interface is ready to work service setup successfully WPS Green the WPS service sets up successfully No USB signal is detected USB Green The user data is passing through USB port The USB interface is ready to work 1 5 2 Rear panel Reset Line WLAN WPS LAN1 LAN2 LAN3 LAN4 USB Power TM RJ 11 port Connect the Modem to ADSL connector or splitter by telephone line WLAN Enable or disable the WLAN Press the button to enable WLAN To restore the factory default keep the device powered on and Reset push a long needle into the hole Press down the button for 1 second and then release W Enable or disable the WPS Press the button to enable WPS RJ 45 port Conncet the Modem to a PC or other network device LAN1 2 3 4 by network cable USB USB host port connect to another USB device to supply some value added application Bower Power supplied port plug in for power adapter that the power input is 12V DC 1A 2 Hardware installation 2 1 Choosing the Best Location for Wireless Operation e Keep the numbers of walls and ceilings to the minimum The signal emitted from wireless LAN devices can penetrate through ceilings and walls However each wall or ceiling can reduce the range of wireless LAN device
59. ine pair below Interface Grouping LAN Ports Inner pair IPSec C Outer pair Certificate FTP configure Capability Wireless Iv Bitswap Enable Diagnostics Management SRA Enable Save Apply Advanced Settings Click Advanced Settings to select a DSL test mode DSL Advanced Settings Select the test mode below Normal Reverb Medley No retrain L3 Apply Tone Selection Click Tone Selection to modify the upstream and downstream tones 64 ADSL Tone Settings Upstream Tones Mo Mi M2 M3 M4 Ms Me M Ms wo Mio Mii Mi2 Mis Mid Mis Mis Mi Mis Mis M20 M21 M22 M233 M24 M25 M26 M27 M28 M293 M30 M31 Downstream Tones 32 M33 M34 M35 M3s M37 M38 M39 M40 M41 M42 M43 M44 M45 M46 WM 47 Iv48 M49 M50 M51 M52 M53 M54 Mss M56 M57 Mss Msg Meo Mei Mez Mes Med Mes Mes Mer Mes Mes M70 M71 M72 M73 M74 M75 M76 M77 M78 M79 Meso Msi lva2 Mass Ms4 Mas Mae Iva Maes Meo Moo Moi Moz Moa M94 Mos Mos M9 M98 Moo Iv i00 M 101 M 102 M 103 M 104 M 105 M 106 M 107 M 108 M 108 M 110 M 111 M 112M 113 M 114 M 115 M 116 M 117 M 118 M 119 M 120 M 121 M 122 M 123 M 124 M 125 M 126 M 127 M 128 M 129 M 130 M 131 M 132 M 133 M 134 M 135 M 136 M 137 M 138 M 139 M 140 M 141 M 142 M 143 M 144 M 145 M 146 M 147 M 148 M 149 M 150 M 151 M 152 M 153 M 154 M 155 M 156 M 157 M 158 159 M 160 M 161 M 162 M 163 M 164 M 165 M 166 M 167 M 168 M 169 M 170 M 171 M 172 M 173 M 174 M 175 M 176 M 177 M 178 M 179 M 180 M 181 M 182 M 183 M 184 M 185 M 186 M 187 M 188
60. ity Quality of Service Routing DNS ETE O r ERE DCBCEROGEGECEEORCDCEEPEGORE EE OCRS Enter Host name of the modem and domain name of the LAN network click Apply Save to save the configuration 3 3 11 Interface Grouping Choose Advanced Setup gt Interface Grouping and the following page appears Note If you want to do Ethernet interface grouping you need to enable the LAN ports first 66 Device Info Advanced Setup WAN Service LAN NAT Security Quality of Service Routing DNS DSL Upnp Dns Proxy Interface Grouping LAN Ports IPSec Certificate Interface Grouping A maximum16 entries can be configured Interface Grouping supports multiple ports to PVC and bridging groups Each group will perform as an independent network To support this feature you must create mapping groups with appropriate LAN and WAN interfaces using the Add button The Remove button will remove the grouping and add the ungrouped interfaces to the Default group Only the default group has IP interface Group Name Remove Name Remove WAN WAN Interface LAN LAN Interfaces DHCP Vendor IDs DHCP Vendor IDs wlan emn 1 Default ENET2 ENET3 ees ENET4 Add Remove Click Add and the following page appears 67 Interface grouping Configuration To create a new interface group 1 Enter the Group name and the group name must be unique and select either 2 dynamic or 3 st
61. ly If you find any damage replace it at once Proper space left for heat radiation is necessary to avoid any damage caused by overheating to the device The holes are designed for heat radiation to ensure that the device works normally Do not cover these heat radiant holes Do not put this device close to a place where a heat source exits or high temperature occurs Avoid the device from direct sunshine Do not put this device close to a place where is over damp or watery Do not spill any fluid on this device Do not connect this device to any PC or electronic product unless our customer engineer or your broadband provider instructs you to do this because any wrong connection may cause any power or fire risk Do not place this device on an unstable surface or support LED Status Description Front Panel Power ADSL Internet LAN4 LAN3 LAN2 LAN1 WLAN WPS USB Indicator Color Status Description The power is off Green on The power is on and the device operates Power normally The power is self testing On Upgrading software No signal is detected Quick Blinks The DSL line is training Green The telephone cable is not connected to the Slow Blinks devi evice The DSL line connection is established No internet connection sen The Internet data is passing through The device has established the connection Internet l in route mode Sn Device attempts to become Internet connected but fails No Et
62. matically between the server and the client WPA Encryption Select TKIP AES or TKIP AES The TKIP is default The TKIP AES encryption mode means AP auto adjust to use TKIP or AES according to wireless clients Click Save Apply to save the wireless security options and make the changes take effect 86 Manual Setup AP You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Click Save Apply when done Select SSID ADD NWAR3650 Network Authentication WPA z WPA Group Rekey Interval lo RADIUS Server IP Address 0 0 0 0 RADIUS Port RADIUS Key WPA Encryption Disabled Save Apply Figure 8 Wireless security WPA authentication e WPA2 Authentication WPA2 Preauthentication Selec Enable or Disenable Network Re auth Interval Specifies the timer of re authentication between the server and the client Click Save Apply to save the wireless security options and make the changes take WEP Encryption effect Manual Setup AP You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Click Save Apply when done Select SSID ADD NWAR3650 Network Authentication WPA2 v WPA2 Preauthentication Disabled Ne
63. may setup configuration manually OR through WiFi Protcted Setup WPS WSC Setup Enable WSC Disabled Manual Setup AP You can set the network authentication method selecting data encryption A ther a network key is required to authenticate to this wireless network and specify the encryption strength Select SSID ADD NWAR3B50 E Open Disabled Save Apply Network Authentication WEP Encryption Enable WSC If enable Manual Setup AP you can not enable WSC Set WSC AP Mode If selected Unconfigured you need to add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Set WSC AP Mode C Push Buttan PIN Add Enralee fo Help Unconfigured 82 and setup AP Configure all security settings with an external registar Setup AP Configure all security settings with an external registar C Push Button PIN Config AP Device PIN 20254749 Help Device PIN Device Pin is generated by AP WSC Add External Registrar If set WSC AP Mode to Configured this part will show and you can add external registrar Manual Setup AP This device is equipped with 802 1X and WPA WPA2 Wi Fi Protected Access the latest security standard It also supports the legacy security standard WEP Wired Equivalent Privacy Following is a description of the different options e Select SSID
64. nable Quality Of Service e VPI Virtual path between two points in an ATM network Its valid value range is from O to 255 e VCI Virtual channel between two points in an ATM network Its valid value range is from 32 to 65535 1 to 31 are reserved for known protocols e Service Category UBR Without PCR UBR With PCR CBR Non Realtime VBR Realtime VBR e Enable Quality Of Service Enable or disable QoS Change the connection type of PVC 0 35 to IP over ATM IPoA and set the Encapsulation Mode to LLC SNAP ROUTING according to the uplink equipment 34 Click Next and the following page appears In this page you can modify the service description WAN Service Configuration ac Enter Service Description jipoa_O_0_35 Click Next and the following page appears In this page enter information provided to you by your ISP to configure the WAN IP settings WAN IP Settings Enter information provided to you by your ISP to configure the WAN IP settings WAN IP Address pisc qs WAN Subnet Mask 552552550 WAN gateway IP Address Pias Primary DNS server EXEC EN Secondary DNS server 5151551 O Click Next and the following page appears 35 Network Address Translation Settings Network Address Translation NAT allows you to share one Wide Area Network WAN IP address for multiple computers on your Local Area Network LAN Enable NAT Enable Firewall IGMP Multicast Enable IGMP Multicast MTU 1
65. nced Setup Wireless Diagnostics Management Settings E drr E Update 3 6 1 2 Settings Update Click Management gt Settings gt Update and the following page appears Click Browse and select the correct update configure settings file Then click Update Settings to update the modem settings 96 Tools Update Settings Update DSL router settings You may update your router settings using your saved files Settings File Name r1 Browse Update Settings 3 6 1 3 Settings Restore Default Click Management gt Settings gt Restore Default to restore DSL router to the factory default configuration Tools Restore Default Settings Restore DSL router settings to the factory defaults Restore Default Settings 3 6 2 System Log Click Management gt System Log and the following page appears The system log dialog allows you to view the system log and configure the system log options System Log The System Log dialog allows you to view the System Log and configure the System Log options Click View System Log to view the System Log Click Configure System Log to configure the System Log options View System Log Configure System Log Click Configure System Log to show the following interface You can enable or disable the system log and then select the log level display level and mode and click Apply to end your configurations 97 System Log Configuration If the log mode is enabled
66. ne C Custom Service Server IP Address 192 168 1 External Port External Port Protncal Internal Port Internal Port Remato Host Start End Start End Save Apply Step 2 Select the use Interface like that ipoa O O 35 ipoa0 and select a service or enter a custom server Step 3 Set Server IP Address Step 4 Enter the Server IP address of the computer that provides the service the server in the Local Host field Note that unless an additional external IP address is added only one LAN computer can be assigned to provide a specific service or application Step 5 Set External Port Start and External Port End Step 6 Select Protocol Step 7 Set Internal Port Start and Internal Port End Step 8 Enter Remote IP 46 Step 9 Click Apply Save to apply the settings If the application you require is not in the list manually enter the information Select the protocol for the service you are providing from the Protocol drop down list Under Public Port enter the port number of the service you are providing In the Local Port field enter the internal port number to which service requests are to be forwarded In the Local IP Address field enter the IP address of the PC that provides the service Deleting Virtual Servers Select the Remove check box Click Remove to remove the settings 3 3 4 Security Choose Security gt IP Filtering and the following interface appears By default the firewall is enabled The firewall is used
67. nfigured in 802 11n mode can associate Multicast Rate Select the multicast transmission rate for the network The rate of data transmission should be set depending on the speed of your wireless network You can select from a range of transmission speeds or you can select Auto to have the Router automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback will negotiate the best possible connection speed between the Router and a wireless client The default value is Auto Basic Rate Select the basic transmission rate ability for the AP Fragmentation Threshold Packets that are larger than this threshold are fragmented into multiple packets Try to increase the fragmentation threshold if you encounter high packet error rates Do not set the threshold too low since this can result in reduced networking performance RTS Threshold This value should remain at its default setting of 2347 Should you encounter inconsistent data flow only minor reductions are recommended Should you encounter inconsistent data flow only minor reduction of the default value 2347 is recommended If a network packet is smaller than the preset RTS threshold size the RTS CTS mechanism will not be enabled The Router sends Request to Send RTS frames to a particular receiving station and negotiates the sending of a data frame After receiving an RTS the wireless station responds with a Clear to Send CTS frame to acknowledg
68. only support PPPOE MER Bridging Select the type of network protocol for IP over Ethernet as WAN interface C PPP over Ethernet PPPoE C MAC Encapsulation R outing MER Bridging PPP over ATM PPPOA IP over ATM IPoA Encapsulation Mode VC MUX E Service Category UBR Without PCR Enable Quality Of Service Enabling packet level QoS for a PVC improves performance for selected classes of applications QoS cannot be set for CBR and Realtime VBR QoS consumes system resources therefore the number of PvCs will be reduced use Advanced Setup Quality of Service to assign priorities for the applications M Enable Quality Of Service e VPI Virtual path between two points in an ATM network Its valid value range is from O to 255 e VCI Virtual channel between two points in an ATM network Its valid value range is from 32 to 65535 1 to 31 are reserved for known protocols e Service Category UBR Without PCR UBR With PCR CBR Non Realtime VBR Realtime VBR e Enable Quality Of Service Enable or disable QoS In this example PVC 0 35 is to be modified and the default values of service category remain In actual applications you can modify them as required 29 Change the connection type of PVC 0 35 to PPPoA and set the Encapsulation Mode to VC MUX according to the uplink equipment Click Next and the following page appears In this page you can modify the service description WAN Service Configuration
69. ort or a range of ports e Destination IP address Destination IP default null e Destination port UDP TCP destination port or a range of ports e WAN interfaces You can select WAN interfaces and PVC Configuration Step 1 By default all incoming IP traffic from Internet is blocked Step 2 The detailed configuration steps are as follows 50 Add IP Filter Incoming The screen allows you to create a filter rule to identify incoming IP traffic by specifying a new filter name and at least one condition below All of the specified conditions in this filter rule must be satisfied for the rule to take effect Click Save Apply to save and activate the filter Filter Name lincomingt Protocol TCPUDP Source IP address Range f201 201 201 21 si Irt Source Subnet Mask 55000 Source Port port or port port Sn Destination IP address Range BEEN a Destination Subnet Mask zzz Destination Port port or port port WAN Interfaces Configured in Routing mode and with firewall enabled and LAN Interfaces Select one or more WAN LAN interfaces displayed below to apply this rule Select All Iv pppoa_0_0_38 pppoa0 Iv br br Save Apply Step 3 Click Save Apply and the following page appears Incoming IP Filtering Setup When the firewall is enabled on a WAN or LAN interface all incoming IP traffic is BLOCKED However some IP traffic can be ACCEPTED by setting up filters Choose Add or Remove to configu
70. our DSL connection The individual tests are listed below If a test displays a fail status click Rerun Diagnostic Tests at the bottom of this page to make sure the fail status Help and follow the troubleshooting procedures Device Info Advanced Setup Wireless E pent Test the connection to your local network we ids A MZ ND Test your ENET1 Connection PASS Hel Management y s consistent If the test continues to fail click Test your ENET2 Connection FAIL Help Test your ENET3 Connection FAIL Help Test your ENET4 Connection FAIL Help Test your Wireless Connection PASS Help Test the connection to your DSL service provider Test xDSL Synchronization PASS Help Test ATM OAM F5 segment ping FAIL Help Test ATM OAM F5 end to end ping FAIL Help Test the connection to your Internet service provider Test PPP server session PASS Help Test authentication with ISP FAIL Help Test the assigned IP address FAIL Help Ping default gateway FAIL Help Ping primary Domain Name Server FAIL Help Test With OAM F5 Test With OAM F4 3 6 Management 3 6 1 Settings 3 6 1 1 Settings Backup Click Management gt Settings gt Backup to back up the DSL router configuration Settings Backup E Backup DSL router configurations You may save your router configurations to a file on your PC Backup Settings Device Info Adva
71. pply Save MAC Address ppc 0c 0c cx Apply Save 3 3 2 5 Configuring the Second IP Address and Subnet Mask for LAN Interface View the following part for second IP address and subnet mask for LAN interface v Configure the second IP Address and Subnet Mask for LAN interface 3 3 3 NAT Note The NAT information is not displayed in the bridge mode 3 3 3 1 ALG Click Advanced Setup gt NAT gt ALG and the following page appears This part contains NAT Application Layer Gateway ALG 41 Device Info Advanced Setup WAN Service LAN DZ Host Port Triggering Virtual Servers Security Quality of Service Routing DNS DSL ALG Select the ALG below H 323 Enable IRC Enable RTSP Enable PPTP Enable IPSEC Enable SIF Enable L2TP Enable Save Apoly H 323 Enable The H 323 ALG is a flexible application layer gateway that allows H 323 devices such as H 323 phones and applications to make and receive calls between each other when connected to private networks secured by clavister security gateways IRC Enable The IRC ALG is a flexible application layer gateway that allows Internet Relay Chat IRC RTSP Enable Allows applications that use Real Time Streaming Protocol RTSP to receive streaming media from the internet PPTP Enable Allows multiple machines on the LAN to connect to their corporate networks using PPTP protocol When the PPTP ALG is enabled LAN computers can establish PPTP VPN conne
72. r time nist gov Second NTP time server ntpt tummy com Third NTP time server None Fourth NTP time server None Fifth NTP time server None Time zone offset GMT 08 00 Pacific Time Tijuana el Save Apply 3 6 5 Access Control 3 6 5 1 Access Control Services Choose Management gt Access Control gt Services to show the following interface In the interface you can enable or disable the HTTP TELNET SSH FTP TFTP and ICMP services The LAN side and WAN side can have different configurations Device Info Advanced Setup Access Control Services Services access control list SCL enable or disable the running services Services LAN WAN port Wireless HTTP Iv enable enable 80 Diagnostics Management TELNET M enable enable Settings m enable enable System Log enable enable a TFTP enable enable 69 ICMP a enable enable TR 069 Client Internet Time Access Control eme Services Passwords Update Software Save Apply Reboot 103 Note If the PVC connection is bridge mode you can not view the information of WAN side 3 6 5 2 Access Control Passwords Choose Management gt Access Control gt Passwords and the following page appears In the interface you can modify the accounts passwords Access Control Passwords Access to your DSL router is controlled through three user accounts admin
73. r Service Description for_0_0_35 l Enable 802 10 VLAN Enable the 802 1Q VLAN and the following page appears Enter 802 1P Priority 0 7 7 Fi Enter 802 10 VLAN ID 0 4094 1 Back Next Note The 802 1q VLAN tagging is only available for PPPoE MER and Bridge Click Next and the following page appears WAN Setup Summary Make sure that the settings below match the settings provided by your ISP PORT VPI VCI o 0 35 Connection Type Bridge Service Name br_0_0_35 Service Category UBR Ip Address Not Applicable ans State Enabled INAT Disabled AT Cone NAT Disabled Firewall Disabled IGMP Multicast Not Applicable Quality Of Service Enabled Click Save Apply to have this interface to be effective Click Back to make any modifications Back Save Apply 28 In this page it shows all the configurations Click Save Apply to all the configurations Click Back to make any modifications 3 3 1 4 PPPoA Configuration This section describes the procedure for adding PVC 0 35 PPPoA mode Click Add and the following page appears In this page you can modify VPI VCI QoS and select the Internet connection type encapsulation mode and service category ATM PVC Configuration This screen allows you to configure an ATM PC identifier VPI and VCI select DSL latency select a service categoryS PI 0 255 fo CI 32 65535 5s Enable Multiple Protocols Over A Single PVC
74. rce Dest Address Dest Ramae Name Range Mask Port Range Mask Port Add Remove Click Add and the page for defining the IP filtering rule appears 49 In this page you can create a filter rule to identify incoming IP traffic by specifying a new filter name and at least one condition All specified conditions in the filter rule must be complied with the rule to take effect Click Save Apply to save and activate the filter You must select at least one WAN interface to apply this rule Add IP Filter Incoming The screen allows you to create a filter rule to identify incoming IP traffic by specifying a new filter name and at east one condition below All of the specified conditions in this filter rule must be satisfied for the rule to take effect Click Save Apply to save and activate the filter Filter Name Protocol Source IP address Range 2 Source Subnet Mask Source Port port or port port ns Destination IP address Range Destination Subnet Mask estination Port port or port port WAN Interfaces Configured in Routing mode and with firewall enabled and LAN Interfaces Select one or more WAN LAN interfaces displayed below to apply this rule D M Select All v pppoa 00 38 p ppoa 0 Iw br bro Save Apply e Source IP address Enter an IP address After you set the IP address the incoming packets protocol selected packets are allowed e Source port UDP TCP source p
75. re incoming IP filters Filter E EEY E E Source Address Source Dest Address Dest hemovs Name Range Mask Port Range Mask Port brO 201 201 201 21 incoming Dono30 TCP UDP 255 0 0 0 O Add Remove 3 3 4 3 Parental Control Time Restriction Parental Control restricts a speciel LAN device with its MAC address by setting access time restriction Step1 Click Advanced Setup Security gt Parental Control gt Time Restriction and the following page appears 51 Access Time Restriction A maximum 16 entries can be configured Username MAC Mon Tue Wed Thu Fri Sat Sun Start Stop Remove Add Remove Step 2 Click Add and the following page appears Access Time Restriction This page adds time of day restriction to a special LAN device connected to the Router The Browser s MAC Address automatically displays the MAC address of the LAN device where the browser is running To restrict other LAN device click the C ther MAC Address button and enter the MAC address of the other LAN device To find out the MAC address of a Windows based PC go to command window and type ipconfig fall User Name fF 00 1D 0F 19 91 C1 ays of the week Click to select Start Blocking Time hh mm ll End Blocking Time hh mm Save Apply Step 3 In this page you can add time of day restriction to a special LAN device connected to the Router After enter user name select days of
76. reless in the DSL router 13 Device Info DHCP Leases Device Info Hostname MAC Address IP Address Expires In Summary WAN Statistics DHCP e Expires In Time that the device leases the IP Address for the MAC Address 3 3 Advanced Setup Choose Advanced Setup and the following page appears WAN Service LAN NAT Security Quality of Service Routing DNS DSL Upnp Dns Proxy Interface Grouping LAN Ports IPSec Certificate FTP configure e WAN Service wide area network service interface configuration e LAN local area network interface Advanced Setup is key to DSL Router configuration 14 3 3 1 WAN Configuration Choose Advanced Setup gt WAN Service and the following page appears Wide Area Network WAN Service Setup Choose Add or Remove to configure a WAN service over a selected interface Device Info Advanced Setup Interface Description Type Vlang021p vlanMuxid Connid Igmp NAT Firewall Remove Edit Eum Day os pppoad pppoa D D 38 PPPoA N N A N Disabled Enabled Enabled C Edit NAT Security Add Remove Quality of Service Adaf Remove Figure 4 WAN configuration Click Add to configure PPPoE MER Bridging PPPoA and IPoA WAN configuration Choose Remove check box click Remove to delete the WAN configuration 3 3 1 1 PPPoE Configuration This section describes the procedure for adding PVC 0 35 PPPoE mode Click Add and t
77. rify peers certificates Maximum 4certificates can be stored Name Subject Type Action Import Certificate Click Import Certificate and the following page appears CA certificate can only be imported 78 Import CA certificate Enter certificate name and paste certificate content Certificate Name Certificate 3 3 15 FTP Configuration Choose Advanced Setup gt FTP Configure the following page appears FTP server advanced a Device Info Advanced Setup WAN Service D Allow FTP Server Allow the internet access LAN NAT FTP Listening Port PB default value 21 Security Quality of Service FTP Account Management Routing aaa DNS DSL Iv Allow user Ppadmin View Download Upload Upnp Dns Proxy Password mmmT Interface Grouping Confirmed eee eee es LAN Ports LII Save Apply Certificate E FTP configure e Allow FTP Server If you allow users to access the FTP sever please select this checkbox 19 Allow the internet access If you allow the users of internet to access the FTP sever please select this checkbox Then configure the FTP listening port and maximum connections for the same IP e FTP Account Management If you allow the user of administrator to access the FTP sever please select this checkbox The user of administrator can view download and upload the FTP file Then configure the password 3 4 Wireless 3 4 1 Wireless LAN Ba
78. rs The port forwarding virtual server page is used to define applications that require special handling by DSL router NAT Virtual Servers Setup virtual Server allows you to direct inc coming traffic from WAN side identified by Protocol and External port to the Device Info Internal server with priv rate IP address on the LAN side The Internal port is required only if the external port Advanced Setup needs to be converted to a different po irt number used by the server on the LAN side 4 maximum 32 entries can be configured WAN Service 7 LAN NAT Server Remote Esterna External PODES siii Internal Server IP WAN ROS Name Host Port End i Port End Address Interface ALG Start Start DMZ Host Port Triggering 7 Virtual Servers Adding Virtual Servers Step1 Tosetup virtual servers for a service click Add 45 NAT Virtual Servers Select the service name and enter the server IP address and click Save Apply to forward IP packets for this service to the specified server NOTE The Internal Port End cannot be modified directly Normally it is set to the same value as External Port End However if you modify Internal Port Start then Internal Port End will be set to the same value as Internal Port Start Remaining number of entries that can be configured 32 Use Interface pppoa_0_0_38 pppoa0 Service Name Selecta Service Select O
79. rs or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Save Apply Figure 6 Wireless security 128 bit WEP e 802 1x Authentication Radius Server IP Adress Enter the IP Address of the authentication Server Radius Port Enter the port number of the authentication server The default port number is 1812 Radius Key Enter the same key as the Radius server s Click Save Apply to save the wireless security options and make the changes take effect 85 Manual Setup AP You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Select SSID ADD NWAR3650 Network Authentication 802 1X RADIUS Server IP Address 0 0 0 0 RADIUS Port RADIUS Key WEP Encryption Enabled Encryption Strength 128 bt v Current Network Key 2 Network Key 1 nant Network Key 2 FO Network Key 3 PO Network Key 4 DS Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Save Apply Figure 7 Wireless Security 802 1x Authentication e WPA Authentication WPA Group Rekey Interval Specifies the timer the WPA key must change If the value set 0 no need to change The change is done auto
80. rvice categoryS VPI 0 255 o VCI 32 65535 s D Enable Multiple Protocols Over Single PvC only support PPPOE MER Bridging Select the type of network protocol for IP over Ethernet as WAN interface PPP over Ethernet PPPoE MAC Encapsulation Routing MER Bridging PPP over ATM PPPoA C IP over ATM IPoA Encapsulation Mode LLC SNAP BRIDGINt Service Category UBR Without PCR Enable Quality Of Service Enabling packet level QoS for a PVC improves performance for selected classes of applications QoS cannot be set for CBR and Realtime VBR QoS consumes system resources therefore the number of PCs will be reduced use Advanced Setup Quality of Service to assign priorities for the applications v Enable Quality Of Service e VPI Virtual path between two points in an ATM network Its valid value range is from O to 255 e VCI Virtual channel between two points in an ATM network Its valid value range is from 32 to 65535 1 to 31 are reserved for known protocols e Service Category UBR Without PCR UBR With PCR CBR Non Realtime VBR Realtime VBR e Enable Quality Of Service Enable or disable QoS Change the connection type of PVC 0 35 to Bridging and set the Encapsulation Mode to LLC SNAP BRIDGING according to the uplink equipment 2 Click Next and the following page appears In this page you can modify the service description and enable the 802 1Q VLAN WAN Service Configuration Ente
81. s security mixed WPA2 WPA PSK authentication e Mixed WPA2 WPA Authentication This authentication mode means AP auto adjust to use WPA2 PSK or WPA PSK according to wireless clients Click Save Apply to save the wireless security options and make the changes take effect 89 Manual Setup AP You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Click Save Apply when done Select SSID ADD NWAR3650 x Network Authentication Mixed WPA2ANPA WPA2 Preauthentication Disabled Network Re auth Interval WPA Group Rekey Interval n RADIUS Server IP Address 0 0 0 0 RADIUS Port 1812 RADIUS Key WPA Encryption TKIP AES WEP Encryption Save Apply Figure 14 Wireless security mixed WPA2 WPA authentication e WPS Authentication There are 2 primary methods used in the Wi Fi Protected Setup PIN entry a mandatory method of setup for all WPS certified devices Push button configuration PBC an actual push button on the hardware or through a simulated push button in the software This is an optional method on wireless client If you are using the PIN method you will need a Registrar access point wireless router to initiate the registration between a new device and an active access point wireless router Note The PBC method may also need a Re
82. s from 1 30 meters Position your wireless devices so that the number of walls or ceilings obstructing the signal path is minimized e Consider the direct line between access points and workstations 4 2 2 A wall that is 0 5 meters thick at a 45 degree angle appears to be almost 1 meter thick At a 2 degree angle it appears over 14 meters thick Be careful to position access points and client adapters so the signal can travel straight through 90 angle a wall or ceiling for better reception Building materials make difference Buildings constructed using metal framing or doors can reduce effective range of the device If possible position wireless devices so that their signals can pass through drywall or open doorways Avoid positioning them in the way that their signal must pass through metallic materials Poured concrete walls are reinforced with steel while cinderblock walls generally have little or no structural steel Position the antenna for best reception Play around with the antenna position to see if signal strength improves Some adapters or access points allow you to judge the strength of the signal Keep your product away at least 1 2 meters from electrical devices Keep wireless devices away from electrical devices that generate RF noise such as microwave ovens monitors electric motors etc Connecting the ADSL Router See the following figure Connect the Line port of the DSL Router with a telephone cable
83. s provided by your ISP PORT YPI VCE 0 0 3 Connection Type IPo4 NAT Jis Full Cone NAT Jis Firewall Jis IGMP Multicast Jis Quality Of Service Dis Click Save Apply to have this interface to be effective Click Back to make any modifications Back Save Apply In this page it shows all the configurations Click Save Apply to all the configurations Click Back to make any modifications 3 3 2 LAN Configuration Choose Advanced Setup gt LAN and the following page appears In this page you can configure an IP address for the DSL Router and enable DHCP server 38 Local Area Network LAN Setup a E Configure the DSL Router IP Address and Subnet Mask for Device Info LAN interface GroupName Default Advanced Setup WAN Service IP Address 192 168 1 1 PRI L BN ad Subnet Mask 299 299 299 0 NAT Security Enable IGMP Snooping Quality of Service Routing DNS DSL IGMP Version Tv gt Upnp Dns Proxy C Disable DHCP Server Interface Grouping Enable DHCP Server LAN Ports Start IP Address 192 168 1 2 IPSec End IP Address 192 168 1 254 Certificate Leased Time hour b is configure Static IP Lease List amp maximum 32 entries can be configured sii sid MAC Address IP Address Remove Diagnostics Management Add Entries Configure the second IP Address and Subnet Mask for LAN interface Save Apply 3 3 2 1 Configuring the Private IP Address
84. ses performance To disable the acknowledgement can be useful for Voice for example where speed of transmission is important and packet loss is tolerable to a certain degree e WMM APSD APSD is short for automatic power save delivery Selecting enable will make it has very low power consumption WMM Power Save is an improvement to the 802 11e amendment adding advanced power management functionality to WMM Click Save Apply to configure the advanced wireless options and make the changes take effect 3 4 7 Wireless Authenticated Stations Choose Wireless gt Station Info the following page appears This page shows authenticated wireless stations and their status about Association and authentication Wireless Authenticated Stations hb Device Info This page shows authenticated wireless stations and their status Advanced Setup Wireless z Rast IMAC Associated Authorized SSID Interface asic Security MAC Filter Wireless Bridge Advanced Diagnostics Management 3 5 Diagnostics Click Diagnostics and the following page appears Your modem is capable of testing your DSL connection The individual tests are listed below If a test displays a fail status click Test at the bottom of this page to make sure the fail status is consistent If the test continues to fail click Help and follow the troubleshooting procedures 95 pppoa 0 Q 38 Diagnostics am Your modem is capable of testing y
85. sics 3 4 1 1 Basic terms e AP Short for Access Point a hardware device or a computer s software that acts as a communication hub for users of a wireless device to connect to a wired LAN APs are important for providing heightened wireless security and for extending the physical range of service a wireless user has access to STA Any device that contains an IEEE 802 11 conformant medium access control MAC and physical layer PHY interface to the wireless medium WM e SSID Wireless networks use an SSID Service Set Identifier to allow wireless devices to roam within the range of the network You may disable SSID broadcasting in the web manager s wireless menu 3 4 1 2 Wireless Standard Wireless Standard includes IEEE 802 11b IEEE 802 11g and IEEE 802 11n 3 4 1 3 Wireless Security Various security options are available on the DSL including open or WEP 802 1x WPA WPA PSK WPA2 and WPA2 PSK Otherwise you do not need to know the SSID and security keys or passphrases when connecting WPS enabled devices 3 4 2 Wireless Basic Choose Wireless gt Basic the following page appears 80 Wireless Basic e ows you to configure basic features of the wireless LAN interface You can enable or disable the wireless LAN etwork from active scans set the wireless network name also known as SSID and restrict the channel set based on country requirements Click Apply to configure the basic wireless options Device
86. ssional engineer e IGMP Multicast IGMP proxy For example if you want PPPoE mode to support IPTV enable it After proper configuration click Next and the following page appears In this page select a preferred WAN interface as the system default gateway Routing Default Gateway Select a preferred wan interface as the system default gateway Selected WANN Interface popoa D 0 38 pppoa Back Next Click Next and the following page appears 32 DNS Server Configuration Get DNS server information from the selected WAN interface OR enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS server IP addresses Obtain DNS info from a WAN interface WAN Interface selected pppoa 0 D 35 pppoat gt C Use the following Static DNS IP address Primary DNS server Secondary DNS server Back Next In this page you can get DNS server information from the selected WAN interface or enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS server IP addresses Click Next and the following page appears WAN Setup Summary Make sure that the settings below match the settings provided by your ISP PORT VPI VCI lo 0 35 Connection Type PPPoA Service Name pppoa_0_0_35 Service Category uer IP Address Automatically Assigned Service State
87. stem log options Log C Disable Enable Log Level Debugging Display Level Err o Mode Server IP Address Server UDP Port Informational Save Apply Debugging Figure 15 System log configuration 1 If you select Remote or Both all events will be transmitted to the specified UDP port of the specified log server 99 System Log Configuration If the log mode is enabled the system will begin to log all the selected events For the Log Level all events above or equal to the selected level w be logged For the Display Level all lagged events above or equal to the selected level will be displayed If the selected made is Remote or Bath events willbe sent to the specified IP address and UDP port of the remote syslog server If the selected made is Local or Both events will be recorded in the local memory Select the desired values and click Save Apply to configure the system loc options Log Disable Enable Log Level Debugging Display Level Error Mode Bath Server IF Address 0 0 0 0 Server LIDP Port 514 Save Apply Figure 16 System log configuration 2 100 After operations under Configure System Log click View System Log to query the system logs In this example the View System Log is the default Note The log and display of the system events are above the set level If you want to record all information you need to set the levels as Debugging
88. t to a specific network interface Each of the queues can be configured for a specific precedence The queue entry configured here will be used by the classifier to place ingress packets appropriately Note Lower integer values for precedence imply higher priority for this queue relative to others Click 5ave Apply to save and activate the queue Mame Enable Disable gt Interface H Precedence i H Save Apply Precedence Select an integer value for queue precedence After you select an integer value the queue entry appropriately places to ingress packets Lower integer values for precedence imply higher priority for this queue relative to others 3 3 5 3 QoS QoS Classification Choose Advanced Setup gt Quality of Service gt Qos Classification and the following page appears In this page you can configure network traffic classes QoS Classification Setup A maximum 32 entries can be configured Choose Add or Remove to configure network traffic classes If you disable WMM function in Wireless Page classification related to wireless will not take effects The QoS function has been disabled Classification rules would not take effects CLASSIFICATION CRITERIA CLASSIFICATION RESULTS Class Order Class Ether SrcMAC DstMAC SrcIP DstIP Proto Src Dst DSCP 802 1P Queue DSCP 802 1P VlanID Enable Remove Edit Name Intf Type Mask Mask Mask Mask Port Port Check Check Key Mark Mark Tag
89. the following page 54 Add MAC Filter Create a filter to identify the MAC layer frames by specifying at least one condition below If multiple conditions are specified all of them take effect Click Apply to save and activate the filter Protocol Type PPPoE v Destination MAC Address Source MAC Address 00 13 20 9E 0F 10 Frame Direction LAN lt gt VVAN v WAN Interfaces Configured in Bridge mode only br 0 0 32 atm1 Click Save Apply and the following page appears MAC Filtering Setup MAC Filtering is only effective on ATM PCs configured in Bridge mode FORWARDED means that all MAC layer frames w FORWARDED except those matching with any of the specified rules in the following table BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table MAC Filtering Policy For Each Interface WARNING Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED AUTOMATICALLY You will need to create new rules for the new policy Interface Policy Change atmi BLOCKED go Change Policy Choose Add or Remove to configure MAC filtering rules Interface Protocol Destination MAC Source MAC Frame Direction Remove atmi PPPoE 00 13 20 9E 0F 10 BOTH L1 3 3 5 Quality of Service Under Quality of Service there are three network share modes
90. the system will begin to log all the selected events For the Log Level all events above or equal to the selected level will be logged For the Display Level all loqged events above or equal to the selected level will be displayed If the selected mode is Remote or Both events willbe sent to the specified IP address and UDP port of the remote syslog server If the selected mode is Local or Both events will be recorded in the local memory Select the desired values and click Save Apply to configure the system log options Log C Disable Enable Log Level Debugging Display Level Error Mode Local Save Apply Both the log level and display level have eight choices The default log level is Debugging and the default display level is Error The mode options are Local Remote and Both The default is Local 98 System Log Configuration If the log mode is enabled the system will begin to log all the selected events For the Log Level all events above or equal to the selected level will be logged For the Display Level all lagged events above or equal ta the selected level will be displayed If the selected mode is Remote or Both events will be sent to the specified IP address and UDP port of the remote syslog server If the selected mode is Local or Bath events will be recorded in the local memory Select the desired values and click Save Apply to configure the sy
91. the table below Wireless MAC Filter Management Enter the MAC address and click Apply to add the MAC address to the wireless MAC address filters MAC Address Save Apply e Remove a MAC Access Control Select the Remove checkbox in the right column of the list for the MAC address to be removed and click Remove 3 4 5 Wireless Bridge This page allows you to configure wireless bridge features of the wireless LAN interface e AP Mode Select Access Point s functionality to be Access Point or pure Wireless Bridge e Bridge Restrict Wireless bridge restriction You can manually enter Remote Bridges MAC Address to the list You can also do it automatically in the following steps 91 Step 1 In the Bridge Restrict list click Enabled Scan Step 2 Click Refresh to update the remote bridges The DSL waits for a few seconds to update And then lists the results in the Accessible Access Points table Step 3 Check on the box in the left column of the list for selecting the Access Point to which you want to establish a WDS connection Step 4 Click Save Apply You must configure all Bridges Access Point with e The same encryption and authentication mode as Open Shared WEP WPA PSK or WPA2 PSK e The same fixed channel Click Save Apply to configure the wireless bridge options and make the changes take effect Wireless Bridge E This page allows you to configure wireless bridge features of the wireless LAN
92. ting your own Custom applicationjand click Save Apply to add it Remaining number of entries that can be configured 32 Use Interface pppoa_0_0_38 pppoa0 Application Name v Select an application Select One C Custom application Trigger Port Start Trigger Port End Trigger Protocol Open Port StartDpen Port EndOpen Protocol TCP E tcp Save Apply Step 2 Select the use Interface like that ipoa O 0 35 ipoaO0 and select the required application from the Select an application drop down list or manually enter the information in the Custom application field e Trigger Port Start and Trigger Port End Enter the port that is to be monitored for outgoing data traffic e Trigger Protocol Select the protocol that is to be monitored for outgoing data traffic e Open Protocol Select the protocol that is to be allowed for incoming data traffic e Open Port Start and Open Port End Enter the port that is to be opened for incoming traffic Note You can use a single port number several port numbers separated by commas port blocks consisting of two port numbers separated by a dash or any combination of these for example 80 90 140 160 Step 3 Click Save Apply to apply the settings Removing Port Triggering 44 Select the Remove check box Click Remove to remove the settings 3 3 3 4 NAT Virtual Server Setup Click Advanced Setup gt NAT gt Virtual Servers and the following page appea
93. to block document transmissions between the Internet and your PC It serves as a safety guard and permits only authorized documents to be sent to the LAN Note If the modem is configured to bridge mode only IP filtering is disabled and the IP filtering interface does not appear Outgoing IP Filtering Setup E 2 TE A By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Device Info Advanced Setup WAN Service Choose Add or Remove to configure outgoing IP filters Filter Source Address Source Dest Address Dest id Name abd Range Mask Port Range Mask Port Remove NAT IP Filtering Add pues Parental Control 3 3 4 1 Outgoing IP Filtering Setup When setup of outgoing IP filtering rules is enabled on the modem various security functions for the local network are enabled at the same time Choose Security gt IP Filtering gt Outgoing and the following page appears By default all outgoing IP traffic from LAN is allowed but some IP traffic can be blocked by setting up filters 47 Outgoing IP Filtering Setup By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Choose Add or Remove to configure outgoing IP filters Dest Address Range Mask Dest Port Source Port Source Address Range Mask Filter Remove Name Protocol
94. to the PC being attached with the modem at this time the modem has only one PC From the view of the PC user this is even with that the PC dials up to obtain an IP addres But actually the dial up is done by the modem If this function is disabled the modem itself obtains the WAN IP address automatically Enable NAT Enable Firewall Dial on demand with idle timeout timer vi PPP IP extension DEEST Use Static IPv4 Address 2 Enable PPP Debug Mode Use Static IPv4 Address If this function is disabled the modem obtains an IP address assigned by an uplink equipment such as BAS through PPPoE dial up If this function is enabled the modem uses this IP address as the WAN IP address IPv4 Address 0 0 0 0 Enable PPP Debug Mode Enable or disable this mode of debug This service is designed for the professional engineer Bridge PPPoE Frames Between WAN and Local Ports The PPPoE client can connect to router or PC IGMP Multicast IGMP proxy For example if you want PPPoE mode to support IPTV enable it 19 After proper configuration click Next and the following page appears In this page select a preferred WAN interface as the system default gateway Routing Default Gateway Select a preferred wan interface as the system default gateway Selected WAN Interface pppoa_O 0 38 pppoall Back Mext Click Next and the following page appears DNS Server Configuration Get DNS server information
95. twork Re auth Interval WPA Group Rekey Interval fo RADIUS Server IP Address 0 0 0 0 RADIUS Port RADIUS Key WPA Encryption WEP Encryption Disabled Save Apply Figure 9 Wireless security WPA2 authentication e Mixed WPA2 WPA Authentication This authentication mode means AP 87 auto adjust to use WPA2 or WPA according to wireless clients Click Save Apply to save the wireless security options and make the changes take effect Manual Setup AP You can set the network authentication method selecting data encryption Select SSID ADD NWAR3650 v Network Authentication Mixed WPAD2ANPA WPA2 Preauthentication Disabled Network Re auth Interval WPA Group Rekey Interval fo RADIUS Server IP Address 0 0 0 0 RADIUS Port RADIUS Key WPA Encryption TKIP AES WEP Encryption Save Apply Figure 10 Wireless security mixed WPA2 WPA authentication e WPA PSK Authentication WPA Pre Shared Key Enter the pre shared key for WPA Client stations must use the same key in order to connect with this device Click Save Apply to save the wireless security options and make the changes take effect Manual Setup AP You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Select SSID AD D NWAR3650 v Network Authentication WPA PSK I
96. up WAN Service LAN NAT Security Quality of Service Routing Static Route DNS Save Apply 3 3 6 2 Static Route Adding Static Route 60 Step 1 Choose Advanced Setup gt Routing gt Static Route and the following page appears Routing Static Route A maximum 32 entries can be configured Destination Subnet Mask Gateway Interface Remove Add Remove Step 2 Click Add and the following page appears Routing Static Route Add Enter the destination network address subnet mask gateway AND OR available WAN interface then click Save Apply to add the entry to the routing table Destination Network Address Subnet Mask O use Gateway IP Address Use Interface pppoe D 0 35 ppp0 Save Apply Enter destination network address and subnet mask Enable Use Gateway IP Address and enter IP address Select use interface See the following figure Routing Static Route Add Enter the destination network address subnet mask gateway AND OR available WAN interface then click Save Apply to add the entry to the routing table Destination Network Address 10 11 102 4 Subnet Mask Fj Use Gateway IP Address 192 168 1 2 Use Interface pppoe D 0 35 ppp0 Save Apply Step 3 Click Save Apply to apply the settings and the following page appears Routing Static Route A maximum 32 entries can be configured Destination
97. values of service category remain In actual applications you can modify them as required Change the connection type of PVC 0 35 to PPP over Ethernet PPPoE and set the Encapsulation Mode to LLC SNAP BRIDGING according to the uplink equipment Click Next and the following page appears In this page you can modify the service description and enable the 802 1Q VLAN 16 WAN Service Configuration Enter Service Description pppoe O0 0 35 Enable 802 10 VLAN Enable the 802 1Q VLAN and the following page appears Enable 802 10 VLAN 3 Enter 802 1P Priority 0 7 E Enter 802 1Q VLAN ID 0 4094 E Note The 802 1q VLAN tagging is only available for PPPoE MER and Bridge Click Next and the following page appears In this page you can modify the PPP user name PPP password and authentication method 17 PPP Username and Password PPP usually requires that you have a user name and password to establish your connection In the boxes below enter the user name and password that your ISP has provided to you PPP Username PPP Password n PPPoE Service Name za Authentication Method auro e Enable NAT Enable Firewall Dial on demand with idle timeout timer PPP IP extension Use Static IPv4 Address Enable PPP Debug Made Bridge PPPoE Frames Between WAN and Local Ports IGMP Multicast Enable IGMP Multicast PPP Username The correct user name that your ISP provides to you
98. ver IP addresses Obtain DNS info from a WAN interface WAN Interface selected ipoe 0 0 35 atmt C Use the following Static DNS IP address Primary DNS server Secondary DNS server Back Next In this page you can get DNS server information from the selected WAN interface or enter static DNS server IP addresses If only a single PVC with IPoA or static MER protocol is configured you must enter static DNS server IP addresses Click Next and the following page appears WAN Setup Summary Make sure that the settings below match the settings provided by your ISP PORT YPI VCE 0 0 35 Connection Type IPoE Service Name ipoe OQ O0 35 Service Category UBR IP Address Automatically Assigned Service State Enabled NAT Enabled Full Cone NAT Disabled Firewall Disabled IGMP Multicast Disabled Quality Of Service Enabled Click Save Apply to have this interface to be effective Click Back to make any modifications Back Save Apply 26 In this page it shows all the configurations Click Save Apply to all the configurations Click Back to make any modifications 3 3 1 3 Bridging Configuration Click Add and the following page appears In this page you can modify VPI VCI QoS and select the Internet connection type encapsulation mode and service category ATM PVC Configuration This screen allows you to configure an ATM PVC identifier VPI and VCD select DSL latency select a se
99. week and blocking time click Save Apply and the following page appears Access Time Restriction A maximum 16 entries can be configured Parent Add Remove 3 3 4 4 MAC Filtering Configuration Choose Security gt MAC Filtering and the following page appears Note MAC filtering is only effective on ATM PVCs configured in Bridge mode If the ATM PVCs are configured in other routing modes such as PPPoE mode the MAC Filtering Setup page does not appear 52 MAC Filtering Setup MAC Filtering is only effective on ATM P Cs configured in Bridge mode FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table MAC Filtering Policy For Each Interface WARNING Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED AUTOMATICALLY You will need to create new rules for the new policy Interface Policy Change E atmi FORWARD Change Policy Choose Add or Remove to configure MAC filtering rules Interface Protocol Destination MAC Source MAC Frame Direction Remove Add Remove Click Change Policy and the following page appears You can change the MAC Filtering Global Policy from FORWARDED to BLOCKED MAC Filtering Setup MAC Filtering

NWAR3650 User Manual - addon

Contents

Download Pdf Manuals

Related Search

Related Contents