Alfa Network AIP-W505 User Manual

Ieee 802.11n 150 mbps wireles router
Table of Contents

Advertisement

U
G
SER
UIDE
11n R
OUTER
AIP-W505

Advertisement

Table of Contents
loading

Summary of Contents for Alfa Network AIP-W505

  • Page 1 UIDE 11n R OUTER AIP-W505...
  • Page 2 UIDE AIP-W505 IEEE 802.11n 150 Mbps Wireless Router with 4 RJ-45 LAN Ports, and 1 RJ-45 WAN Port AIP-W505 E052010-CS-R01 149100000067W...
  • Page 3: Compliances

    OMPLIANCES EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
  • Page 4 OMPLIANCES EC C ONFORMANCE ECLARATION Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC). This equipment meets the following conformance standards: EN 60950-1: 2006 (IEC 60950-1) — Product Safety ◆...
  • Page 5 OMPLIANCES ECLARATION OF ONFORMITY IN ANGUAGES OF THE UROPEAN OMMUNITY Czech Manufacturer tímto prohlašuje, že tento Radio LAN device je ve shodě se základními Česky požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/ES. Estonian Käesolevaga kinnitab Manufacturer seadme Radio LAN device vastavust direktiivi 1999/ Eesti 5/EÜ...
  • Page 6: About This Guide

    BOUT UIDE This guide gives specific information on how to install the 11n Router and URPOSE its physical and performance related characteristics. It also gives information on how to operate and use the management functions of the 11n Router. This guide is for users with a basic working knowledge of computers. You UDIENCE should be familiar with Windows operating system concepts.
  • Page 7: Table Of Contents

    ONTENTS OMPLIANCES BOUT UIDE ONTENTS IGURES ABLES ECTION ETTING TARTED NTRODUCTION Key Hardware Features Description of Capabilities Applications Package Contents Hardware Description LED Indicators Ethernet WAN Port Ethernet LAN Ports Power Connector Reset Button WPS Button ETWORK LANNING Internet Gateway Router LAN Access Point Wireless Bridge Wireless Client...
  • Page 8 ONTENTS Mounting on a Wall Mounting on a Horizontal Surface Router Mode Connections Bridge Mode Connections NITIAL ONFIGURATION ISP Settings Connecting to the Login Page Home Page and Main Menu Common Web Page Buttons Setup Wizard Step 1 - Language Selection Step 2 - Time Settings Step 3 - WAN Settings - DHCP Step 3 - WAN Settings - Static IP...
  • Page 9 ONTENTS Advanced Routing Settings Routing Table Dynamic Route IRELESS ONFIGURATION Basic Settings HT Physical Mode Settings Advanced Settings Advanced Wireless Wi-Fi Multimedia Multicast-to-Unicast Converter WLAN Security Wired Equivalent Privacy (WEP) WPA Pre-Shared Key WPA Enterprise Mode IEEE 802.1X and RADIUS Access Policy Wireless Distribution System (WDS) Wi-Fi Protected Setup (WPS)
  • Page 10 ONTENTS Content Filtering 10 A DMINISTRATION ETTINGS System Management Time Zone Settings DDNS Settings Firmware Upgrade Configuration Settings System Status Statistics System Log ECTION PPENDICES ROUBLESHOOTING Diagnosing LED Indicators If You Cannot Connect to the Internet Before Contacting Technical Support ARDWARE PECIFICATIONS ABLES AND...
  • Page 11: Figures

    IGURES Figure 1: Top Panel Figure 2: Rear Panel Figure 3: LEDs Figure 4: Operating as an Internet Gateway Router Figure 5: Operating as an Access Point Figure 6: Operating as a Wireless Bridge Figure 7: Operating as a Wireless Repeater Figure 8: Operating as a Wireless Client Figure 9: Wall Mounting Figure 10: Router Mode Connection...
  • Page 12 IGURES Figure 32: Advanced Routing (Router Mode) Figure 33: Basic Settings Figure 34: HT Physical Mode Settings Figure 35: Advanced Wireless Settings Figure 36: Wi-Fi Multimedia Settings Figure 37: WMM Configuration Figure 38: Multicast-to-Unicast Converter Figure 39: Security Mode Options Figure 40: Security Mode - WEP Figure 41: Security Mode - WPA-PSK Figure 42: Security Mode - WPA...
  • Page 13 IGURES Figure 68: Configuration Settings Figure 69: System Status (Router Mode) Figure 70: Statistics Figure 71: System Log Figure 72: RJ-45 Connector Figure 73: Straight-through Wiring Figure 74: Crossover Wiring – 13 –...
  • Page 14: Tables

    ABLES Table 1: Key Hardware Features Table 2: LED Behavior Table 3: WMM Access Categories Table 4: LED Indicators Table 5: 10/100BASE-TX MDI and MDI-X Port Pinouts – 14 –...
  • Page 15: Sectioni

    ECTION ETTING TARTED This section provides an overview of the 11n Router, and describes how to install and mount the unit. It also describes the basic settings required to access the management interface and run the setup Wizard. This section includes these chapters: “Introduction”...
  • Page 16: Introduction

    NTRODUCTION The 11n Router (AIP-W505) supports routing from an Internet Service Provider (ISP) connection (DSL or cable modem) to a local network. It is simple to configure and can be up and running in minutes. ARDWARE EATURES The following table describes the main hardware features of the 11n Router.
  • Page 17: Applications

    | Introduction HAPTER Description of Capabilities Easy setup through a Web browser on any operating system that ◆ supports TCP/IP. Compatible with all popular Internet applications. ◆ In addition, the 11n Router offers full network management capabilities through an easy-to-configure web interface. Many advanced networking features are provided by the 11n Router: PPLICATIONS Wired LAN —...
  • Page 18: Package Contents

    PPTP and the Layer 2 Forwarding (L2F) protocol. Like PPTP, L2TP requires that the ISP’s routers support the protocol. ACKAGE ONTENTS The 11n Router package includes: 11n Router (AIP-W505) ◆ ◆ RJ-45 Category 5 network cable AC power adapter ◆...
  • Page 19: Figure 1: Top Panel

    | Introduction HAPTER Hardware Description Figure 1: Top Panel LED Indicators – 19 –...
  • Page 20: Led Indicators

    | Introduction HAPTER Hardware Description Figure 2: Rear Panel WPS Button Reset Button DC Power RJ-45 WAN Port Socket RJ-45 LAN Ports The 11n Router includes eight status LED indicators, as described in the LED I NDICATORS following figure and table. Figure 3: LEDs Power LAN 1~4...
  • Page 21: Ethernet Wan Port

    | Introduction HAPTER Hardware Description Table 2: LED Behavior Status Description Power On Blue The unit is receiving power and is operating normally. There is no power currently being supplied to the unit. WLAN On/Blinking Blue The 802.11n radio is enabled and transmitting or receiving data through wireless links.
  • Page 22: Reset Button

    | Introduction HAPTER Hardware Description This button is used to restore the factory default configuration. If you hold ESET UTTON down the button for 5 seconds or more, any configuration changes you may have made are removed, and the factory default configuration is restored to the 11n Router.
  • Page 23: Network Planning

    ETWORK LANNING The 11n Router is designed to be very flexible in its deployment options. It can be used as an Internet gateway for a small network, or as an access point to extend an existing wired network to support wireless users. It also supports use as a wireless bridge to connect up to four wired LANs, or as a wireless client to connect to another wireless network.
  • Page 24: Lan Access Point

    | Network Planning HAPTER LAN Access Point The private local network, connected to the LAN port or wireless interface, provides a Dynamic Host Configuration Protocol (DHCP) server for allocating IP addresses to local PCs and wireless clients, and Network Address Translation (NAT) for mapping the multiple “internal” IP addresses to one “external”...
  • Page 25: Wireless Bridge

    | Network Planning HAPTER Wireless Bridge IRELESS RIDGE The IEEE 802.11 standard defines a Wireless Distribution System (WDS) for bridge connections between access points. The 11n Router can use WDS to forward traffic on links between units. Up to four WDS links can be specified for the 11n Router. The WDS feature enables two basic functions to be configured in the wireless network.
  • Page 26: Wireless Client

    | Network Planning HAPTER Wireless Client IRELESS LIENT The 11n Router can operate as a wireless client on one SSID interface, which enables a connection to another Wi-Fi network, such as a Wireless Internet Service Provider (WISP). When the wireless client (or WISP mode) option is enabled, the client SSID interface functions as an external gateway WAN port, and the other SSID interface and LAN ports all function as the local network within the same IP subnet.
  • Page 27: Installing The 11N Router

    11n R NSTALLING THE OUTER The 11n Router has two basic operating modes that can be set through the web-based management interface. For information on setting the mode suitable for your network environment. See “Operation Mode Configuration” on page Router Mode — A gateway mode that connects a wired LAN and ◆...
  • Page 28: Mounting The Device

    | Installing the 11n Router HAPTER Mounting the Device OUNTING THE EVICE The 11n Router can be mounted on any horizontal surface, or on a wall. The following sections describe the mounting options. The 11n Router should be mounted only to a wall or wood surface that is at OUNTING ON A least 1/2-inch plywood or its equivalent.
  • Page 29: Mounting On A Horizontal Surface

    | Installing the 11n Router HAPTER Router Mode Connections To keep the 11n Router from sliding on the surface, the 11n Router has OUNTING ON A four rubber feet on the bottom of the unit. ORIZONTAL URFACE It is recommended to select an uncluttered area on a sturdy surface, such as a desktop or table.
  • Page 30: Bridge Mode Connections

    | Installing the 11n Router HAPTER Bridge Mode Connections Set up wireless devices by pressing the WPS button on the 11n Router or by using the web interface. See “Initial Configuration” on page 32 more information on accessing the web interface. RIDGE ONNECTIONS In Bridge Mode, the 11n Router operates as a wireless access point,...
  • Page 31 | Installing the 11n Router HAPTER Bridge Mode Connections Connect an Ethernet cable from the 11n Router’s LAN ports to your PCs. Alternatively, you can connect to a workgroup switch to support more wired users. The 11n Router can support up to 253 wired and wireless users Set up wireless devices by pressing the WPS button on the 11n Router or by using the web interface.
  • Page 32: Initial Configuration

    NITIAL ONFIGURATION The 11n Router offers a user-friendly web-based management interface for the configuration of all the unit’s features. Any PC directly attached to the unit can access the management interface using a web browser, such as Internet Explorer (version 6.0 or above). ISP S ETTINGS If you are not sure of your connection method, please contact your...
  • Page 33: Home Page And Main Menu

    | Initial Configuration HAPTER Home Page and Main Menu Figure 12: Login Page AGE AND After logging in to the web interface, the Home page displays. The Home page shows the main menu and the method to access the Setup Wizard. Figure 13: Home Page –...
  • Page 34: Common Web Page Buttons

    | Initial Configuration HAPTER Common Web Page Buttons OMMON UTTONS The list below describes the common buttons found on most web management pages: Apply – Applies the new parameters and saves them to memory. Also ◆ displays a screen to inform you when it has taken affect. Clicking “Apply”...
  • Page 35: Step 2 - Time Settings

    | Initial Configuration HAPTER Setup Wizard The Step 2 page of the Wizard configures time zone and SNTP settings. 2 - T ETTINGS Select a time zone according to where the device is operated. Click Next after completing the setup. Figure 15: Wizard Step 2 - Time and SNTP Settings The following items are displayed on this page: Current Time —...
  • Page 36: Step 3 - Wan Settings - Dhcp

    | Initial Configuration HAPTER Setup Wizard The Step 3 page of the Wizard specifies the Internet connection 3 - WAN parameters for the 11n Router’s WAN port. Click Next after completing the - DHCP ETTINGS setup. By default, the access point WAN port is configured with DHCP enabled. The options are Static IP, DHCP (cable modem), PPPoE (DSL modem), PPTP, and L2TP.
  • Page 37: Step 3 - Wan Settings - Static Ip

    | Initial Configuration HAPTER Setup Wizard If you are unsure of the PC MAC address originally registered by your ISP, call your ISP and request to register a new MAC address for your account. Register the default MAC address of the 11n Router. Configures a static IP for the WAN port.
  • Page 38: Step 3 - Wan Settings - Pppoe

    | Initial Configuration HAPTER Setup Wizard MAC Clone — Some ISPs limit Internet connections to a specified MAC ◆ address. This setting allows you to manually change the MAC address of the 11n Router's WAN interface to match the PC's MAC address provided to your ISP for registration.
  • Page 39: Step 3 - Wan Settings - Pptp

    | Initial Configuration HAPTER Setup Wizard 11n Router, then click the “Clone your PC’s MAC Address” (Default: Disable) Enables the Point-to-Point Tunneling Protocol (PPTP) for implementing 3 - WAN virtual private networks. The service is provided in many European - PPTP ETTINGS countries.
  • Page 40 | Initial Configuration HAPTER Setup Wizard Subnet Mask — Sets the static IP subnet mask. (Default: ◆ 255.255.255.0, available when PPTP Network Mode is set to static IP.) Default Gateway — The IP address of a router that is used when the ◆...
  • Page 41: Step 3 - Wan Settings - L2Tp

    | Initial Configuration HAPTER Setup Wizard Enables the Layer 2 Tunneling Protocol (L2TP) for implementing virtual 3 - WAN private networks. The service is provided in many European countries. - L2TP ETTINGS Figure 20: Wizard Step 3 - WAN Settings - L2TP The following items are displayed on this page: Server IP —...
  • Page 42: Step 4 - Wireless Security

    | Initial Configuration HAPTER Setup Wizard Default Gateway — The IP address of a router that is used when the ◆ requested destination IP address is not on the local subnet. Operation Mode — Enables and configures the keep alive time. ◆...
  • Page 43: Completion

    | Initial Configuration HAPTER Setup Wizard information, see “WLAN Security” on page 73. (Options: Disabled, Open, Shared, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-PSK_WPA2-PSK, WPA, WPA2, WPA1_WPA2, 802.1X; Default: Disabled) To keep your wireless network protected and secure, you should implement the highest security possible. For small networks, it is recommended to select WPA2-PSK using AES encryption as the most secure option.
  • Page 44: Ection

    ECTION ONFIGURATION This section provides details on configuring the 11n Router using the web browser interface. This section includes these chapters: “Operation Mode” on page 45 ◆ “Internet Settings” on page 49 ◆ “Wireless Configuration” on page 63 ◆ “Firewall Configuration” on page 98 ◆...
  • Page 45: Operation Mode

    PERATION The 11n Router offers a user-friendly web-based management interface for the configuration of all the unit’s features. Any PC directly attached to the unit can access the management interface using a web browser, such as Internet Explorer (version 6.0 or above). The following sections are contained in this chapter: “Logging In”...
  • Page 46: Logging In

    | Operation Mode HAPTER Logging In OGGING It is recommended to make initial configuration changes by connecting a PC directly to one of the 11n Router’s LAN ports. The 11n Router has a default IP address of 192.168.2.1 and a subnet mask of 255.255.255.0. If your PC is set to “Obtain an IP address automatically”...
  • Page 47: Figure 23: Home Page

    | Operation Mode HAPTER Logging In The home page displays the main menu items at the top of the screen and the Setup Wizard. See “Setup Wizard” on page 34. Figure 23: Home Page The displayed pages and settings may differ depending on whether the unit is in Router or Bridge Mode.
  • Page 48: Operation Mode Configuration

    | Operation Mode HAPTER Operation Mode Configuration PERATION ONFIGURATION The Operation Mode Configuration page allows you to set up the mode suitable for your network environment. Figure 24: Operation Mode The following items are displayed on this page: Bridge Mode — An access point mode that extends a wired LAN to ◆...
  • Page 49: Internet Settings

    NTERNET ETTINGS The Internet Settings pages allow you to manage basic system configuration settings. It includes the following sections: ◆ “WAN Setting” on page 49 “DHCP” on page 50 ■ “Static IP” on page 51 ■ “PPPoE” on page 52 ■...
  • Page 50: Dhcp

    | Internet Settings HAPTER WAN Setting Enables Dynamic Host Configuration Protocol (DHCP) for the WAN port. DHCP This setting allows the 11n Router to automatically obtain an IP address from a DHCP server normally operated by the Internet Service Provider (ISP).
  • Page 51: Static Ip

    | Internet Settings HAPTER WAN Setting Configures a static IP for the WAN port. TATIC Figure 26: Static IP Configuration The following items are displayed on this page: IP Address — The IP address of the 11n Router. Valid IP addresses ◆...
  • Page 52: Pppoe

    | Internet Settings HAPTER WAN Setting 11n Router, then click the “Clone your PC’s MAC Address” (Default: Disable) Enables the 11n Router IP address to be assigned automatically from an Internet service provider (ISP) through a DSL modem using Point-to-Point Protocol over Ethernet (PPPoE).
  • Page 53: Pptp

    | Internet Settings HAPTER WAN Setting MAC Clone — Some ISPs limit Internet connections to a specified MAC ◆ address of one PC. This setting allows you to manually change the MAC address of the 11n Router's WAN interface to match the PC's MAC address provided to your ISP for registration.
  • Page 54 | Internet Settings HAPTER WAN Setting Password — Sets a PPTP password for the WAN port. (Default: ◆ pptp_password; Range: 1~32 characters) Verify Password — Prompts you to re-enter your chosen password. ◆ Address Mode — Sets a PPTP network mode. (Default: Static) ◆...
  • Page 55: L2Tp

    | Internet Settings HAPTER WAN Setting Enables the Layer 2 Tunneling Protocol (L2TP) for implementing virtual L2TP private networks. The service is provided in many European countries. Figure 29: L2TP Configuration The following items are displayed on this page: Server IP — Sets the L2TP server IP Address. (Default: l2tp_server) ◆...
  • Page 56 | Internet Settings HAPTER WAN Setting Default Gateway — The IP address of the gateway router for the 11n ◆ Router, which is used if the requested destination address is not on the local subnet. Operation Mode — Selects the operation mode as Keep Alive, or ◆...
  • Page 57: Lan Setting

    | Internet Settings HAPTER LAN Setting LAN S ETTING The 11n Router must have a valid IP address for management using a web browser and to support other features. The unit has a default IP address of 192.168.2.1. You can use this IP address or assign another address that is compatible with your existing local network.
  • Page 58 | Internet Settings HAPTER LAN Setting MAC Address — The shared physical layer address for the 11n ◆ Router’s LAN ports. DHCP Server — Enable this feature to assign IP settings to wired and ◆ wireless clients connected to the 11n Router. The IP address, subnet mask, default gateway, and Domain Name Server (DNS) address are dynamically assigned to clients.
  • Page 59: Dhcp Clients

    | Internet Settings HAPTER DHCP Clients DNS Proxy — Enables DNS proxy on the LAN port. DNS Proxy receives ◆ DNS queries from the local network and forwards them to an Internet DNS server. (Default: Enable) DHCP C LIENTS The DHCP Clients page displays information on connected client stations that have been assigned IP addresses from the DHCP address pool.
  • Page 60: Advanced Routing

    | Internet Settings HAPTER Advanced Routing DVANCED OUTING Routing setup allows a manual method to set up routing between networks. The network administrator configures static routes by entering routes directly into the routing table. Static routing has the advantage of being predictable and easy to configure.
  • Page 61: Routing Table

    | Internet Settings HAPTER Advanced Routing The following items are displayed on this page: Destination — A destination network or specific host to which packets ◆ can be routed. Type — Defines the type of destination. (Options: Host/Net, Default: ◆ Host) Gateway —...
  • Page 62: Dynamic Route

    | Internet Settings HAPTER Advanced Routing Ref — Number of references to this route. ◆ Use — Count of lookups for the route. ◆ Interface — Interface to which packets for this route will be sent. ◆ Comment — Displays a useful comment to identify the routing rules. ◆...
  • Page 63: Wireless Configuration

    IRELESS ONFIGURATION The wireless settings section displays configuration settings for the access point functionality of the 11n Router. It includes the following sections: ◆ “Basic Settings” on page 63 “Advanced Settings” on page 67 ◆ “WLAN Security” on page 73 ◆...
  • Page 64: Figure 33: Basic Settings

    | Wireless Configuration HAPTER Basic Settings The Basic Settings page allows you to configure the wireless network name (Service Set Identifier or SSID) and set the wireless security method. Click on “Wireless Settings,” followed by “Basic.” Figure 33: Basic Settings The following items are displayed on this page: Wireless On/Off —...
  • Page 65 | Wireless Configuration HAPTER Basic Settings 11g/n mixed: Both 802.11g and 802.11n clients can communicate ■ with the 11n Router (up to 150 Mbps), but data transmission rates may be slowed to compensate for 802.11g clients. 11b/g/n Mixed: All 802.11b/g/n clients can communicate with the ■...
  • Page 66: Ht Physical Mode Settings

    | Wireless Configuration HAPTER Basic Settings The HT Physical Mode section on the Wireless Settings Advanced page HT P HYSICAL includes additional parameters for 802.11n operation. ETTINGS Figure 34: HT Physical Mode Settings The following items are displayed in this section on this page: HT Channel Bandwidth —...
  • Page 67: Advanced Settings

    | Wireless Configuration HAPTER Advanced Settings Aggregate MSDU (A-MSDU) — This option enables Mac Service Data ◆ Unit (MSDU) aggregation. (Default: Disable) Auto Block ACK — Select to block ACK (Acknowledge Number) or not ◆ during data transferring. Decline BA Request — Select to reject peer BA-Request or not. ◆...
  • Page 68 | Wireless Configuration HAPTER Advanced Settings Auto — The unit enables its protection mechanism for 802.11b ■ clients when they are detected in the network. When 802.11b clients are not detected, the protection mechanism is disabled. On — Forces the unit to always use protection for 802.11b clients, ■...
  • Page 69: Wi-Fi Multimedia

    | Wireless Configuration HAPTER Advanced Settings threshold, the RTS/CTS (Request to Send / Clear to Send) mechanism will be enabled. The access points contending for the medium may not be aware of each other. The RTS/CTS mechanism can solve this “Hidden Node Problem.” (Range: 1-2347 bytes: Default: 2347 bytes) Short Preamble —...
  • Page 70: Figure 36: Wi-Fi Multimedia Settings

    | Wireless Configuration HAPTER Advanced Settings Table 3: WMM Access Categories Access Description 802.1D Category Designation Tags AC_VO (AC3) Voice Highest priority, minimum delay. Time-sensitive 7, 6 data such as VoIP (Voice over IP) calls. AC_VI (AC2) Video High priority, minimum delay. Time-sensitive 5, 4 data such as streaming video.
  • Page 71: Figure 37: Wmm Configuration

    | Wireless Configuration HAPTER Advanced Settings Figure 37: WMM Configuration The following items are displayed in the WMM Configuration window: AIFSN (Arbitration Inter-Frame Space) — The minimum amount of ◆ wait time before the next data transmission attempt. Specify the AIFS value in the range 0-15 microseconds.
  • Page 72: Multicast-To-Unicast Converter

    | Wireless Configuration HAPTER Advanced Settings ACM — The admission control mode for the access category. When ◆ enabled, clients are blocked from using the access category. (Default: Disabled) AckPolicy — By default, all wireless data transmissions require the ◆ sender to wait for an acknowledgement from the receiver.
  • Page 73: Wlan Security

    | Wireless Configuration HAPTER WLAN Security WLAN S ECURITY The 11n Router’s wireless interface is configured by default as an “open system,” which broadcasts a beacon signal including the configured SSID. Wireless clients with a configured SSID of “ANY” can read the SSID from the beacon, and automatically set their SSID to allow immediate connection to the wireless network.
  • Page 74: Wired Equivalent Privacy (Wep)

    | Wireless Configuration HAPTER WLAN Security The supported security mechanisms and their configuration parameters are described in the following sections: OPEN, SHARED, WEP-AUTO — See “Wired Equivalent Privacy (WEP)” ◆ on page 74 WPA-PSK, WPA2-PSK, WPA-PSK_WPA2-PSK — See “WPA Pre- ◆...
  • Page 75: Wpa Pre-Shared Key

    | Wireless Configuration HAPTER WLAN Security WEP-AUTO — Allows wireless clients to connect to the network using ◆ Open-WEP (uses WEP for encryption only) or Shared-WEP (uses WEP for authentication and encryption). Encrypt Type — Selects WEP for data encryption (OPEN mode only). ◆...
  • Page 76: Wpa Enterprise Mode

    | Wireless Configuration HAPTER WLAN Security WPA2-PSK — Clients using WPA2 with a Pre-shared Key are accepted ◆ for authentication. The default data encryption type for WPA is AES. WPA-PSK_WPA2-PSK — Clients using WPA or WPA2 with a Pre- ◆ shared Key are accepted for authentication.
  • Page 77: Figure 42: Security Mode - Wpa

    | Wireless Configuration HAPTER WLAN Security Figure 42: Security Mode - WPA The following items are displayed in this section on this page: Security Mode — Configures the WPA and WPA2 security modes used by clients. When using WPA or WPA2, be sure there is a RADIUS server in the connected wired network, and that the RADIUS settings are configured.
  • Page 78: Ieee 802.1X And Radius

    | Wireless Configuration HAPTER WLAN Security message integrity. The AES Counter-Mode/CBCMAC Protocol (AES- CCMP) provides extremely robust data confidentiality using a 128- bit key. Use of AES-CCMP encryption is specified as a standard requirement for WPA2. Before implementing WPA2 in the network, be sure client devices are upgraded to WPA2-compliant hardware.
  • Page 79: Figure 43: Security Mode - 802.1X

    | Wireless Configuration HAPTER WLAN Security Figure 43: Security Mode - 802.1X The following items are displayed in this section on this page: Security Mode — Configures the 802.1X security mode used by clients. When using 802.1X, either with WPA/WPA2 or on its own, be sure there is a configured RADIUS server in the connected wired network.
  • Page 80: Access Policy

    | Wireless Configuration HAPTER Wireless Distribution System (WDS) The 11n Router provides a MAC address filtering facility. The access policy CCESS OLICY can be set to allow or reject specific station MAC addresses. This feature can be used to connect known wireless devices that may not be able to support the configured security mode.
  • Page 81: Figure 45: Manual Wds Mac Address Configuration

    | Wireless Configuration HAPTER Wireless Distribution System (WDS) Figure 45: Manual WDS MAC Address Configuration Internet Service Provider Cable/DSL Modem MAC: 00-22-2D-62-EA-44 WDS MAC List: MAC: 00-22-2D-62-EA-11 00-22-2D-62-EA-11 WDS MAC List: 00-22-2D-62-EA-22 00-22-2D-62-EA-33 00-22-2D-62-EA-44 MAC: 00-22-2D-62-EA-22 WDS MAC List: MAC: 00-22-2D-62-EA-33 00-22-2D-62-EA-11 WDS MAC List: 00-22-2D-62-EA-11...
  • Page 82: Figure 47: Wds Configuration

    | Wireless Configuration HAPTER Wireless Distribution System (WDS) Be sure that only one unit has an Internet access on its WAN port. ◆ Be sure the DHCP server is enabled only on one unit. When one unit is ◆ providing Internet access, enable the DHCP server on that unit. When using WDS Lazy mode in the network, at least one unit must be set to Bridge or Repeater mode.
  • Page 83: Wi-Fi Protected Setup (Wps)

    | Wireless Configuration HAPTER Wi-Fi Protected Setup (WPS) configure a WDS MAC list entry. This feature allows the 11n Router to associate with other 11n Routers in the network and use their WDS MAC list. Lazy mode requires one other 11n Router within the wireless network that is configured in Bridge or Repeater mode, and has a configured MAC address list.
  • Page 84: Figure 48: Enabling Wps

    | Wireless Configuration HAPTER Wi-Fi Protected Setup (WPS) Figure 48: Enabling WPS The following items are displayed on this page: WPS — Enables WPS, locks security settings, and refreshes WPS ◆ configuration information. (Default: Disabled) Figure 49: WPS Configuration The following items are displayed on this page: WPS Summary —...
  • Page 85 | Wireless Configuration HAPTER Wi-Fi Protected Setup (WPS) WPS Configured — States if WPS for wireless clients has been ◆ configured for this device. WPS SSID — The service set identifier for the unit. ◆ WPS Auth Mode — The method of authentication used. ◆...
  • Page 86: Station List

    | Wireless Configuration HAPTER Station List TATION Displays the station information which associated to this 11n Router. Figure 50: Station List – 86 –...
  • Page 87: Wisp Mode Wireless Configuration

    WISP M IRELESS ONFIGURATION This chapter describes configuration settings for the 11n Router to function as a wireless client for connecting to another wireless network, such as a Wireless Internet Service Provider (WISP). It includes the following sections: “Profile” on page 87 ◆...
  • Page 88: Profile Configuration

    | WISP Mode Wireless Configuration HAPTER Profile The profile settings page allows you to configure and save wireless settings ROFILE for a specific wireless network connection. ONFIGURATION Figure 52: Profile—System Configuration (Infrastructure) Figure 53: Profile—System Configuration (Ad Hoc) The following items are displayed on this page: Profile Name —...
  • Page 89 | WISP Mode Wireless Configuration HAPTER Profile 802.11 Ad hoc: A group of wireless devices connected as an ■ independent wireless LAN. Select “Ad hoc” to associate to a peer computer. Power Saving Mode — Only available when “Infrastructure” is ◆...
  • Page 90: Security Policy

    | WISP Mode Wireless Configuration HAPTER Profile Configures authentication and encryption to match the security of the ECURITY OLICY wireless network. For an infrastructure network, four security modes are supported, including Open, Shared, WPA-Personal, and WPA2-Personal. For an ad hoc network, Open, Shared, and WPA-NONE (same as WPA- Personal) modes are supported.
  • Page 91: Wep Shared-Key Security

    | WISP Mode Wireless Configuration HAPTER Profile WEP S Wired Equivalent Privacy (WEP) provides a basic level of security, HARED preventing unauthorized access to the network and encrypting data ECURITY transmitted between wireless clients. WEP uses static shared keys (fixed- length hexadecimal or alphanumeric strings) that are manually distributed to all clients that want to use the network.
  • Page 92: Wpa/Wpa2-Personal Security

    | WISP Mode Wireless Configuration HAPTER Profile WPA/WPA2- For small home or office networks, WPA and WPA2 provide a simple “personal” operating mode that uses a pre-shared key for network access. ERSONAL ECURITY This mode uses a common password phrase for user authentication that is manually entered on an AP and all wireless clients.
  • Page 93: Link Status

    | WISP Mode Wireless Configuration HAPTER Link Status TATUS The Link Status page displays the current status of the connection to the wireless network. The following items are displayed on this page: Status — The service set identifier of the wireless network and the ◆...
  • Page 94 | WISP Mode Wireless Configuration HAPTER Link Status BW (Channel Bandwidth) — The 11n Router provides a channel ◆ bandwidth of 40 MHz by default giving an 802.11g connection speed of 108 Mbps (sometimes referred to as Turbo Mode) and a 802.11n connection speed of up to 150 Mbps.
  • Page 95: Site Survey

    | WISP Mode Wireless Configuration HAPTER Site Survey URVEY Site survey page displays information of detected wireless networks. You can select one of these networks to connect to, or add it as a profile. Figure 57: Station Site Survey The following items are displayed on this page: SSID —...
  • Page 96: Statistics

    | WISP Mode Wireless Configuration HAPTER Statistics Connect — Click to attempt a connection to the selected wireless ◆ network. Rescan — Click to scan all radio channels for nearby wireless ◆ networks. Add Profile — Click to add the selected network as a profile. This ◆...
  • Page 97 | WISP Mode Wireless Configuration HAPTER Statistics Frames Transmitted Successfully After Retry(s) — The number of ◆ data frames transmitted from the client and successfully received by the AP or network peer after being retransmited. Frames Fail To Receive ACK After All Retries — The number of ◆...
  • Page 98: Firewall Configuration

    IREWALL ONFIGURATION The 11n Router provides extensive firewall protection by restricting connection parameters to limit the risk of intrusion and defending against a wide array of common hacker attacks. Firewall Configuration contains the following sections: ◆ “MAC/IP/Port Filtering” on page 98 “Virtual Server Settings (Port Forwarding)”...
  • Page 99: Figure 59: Mac/Ip/Port Filtering

    | Firewall Configuration HAPTER MAC/IP/Port Filtering Figure 59: MAC/IP/Port Filtering The following items are displayed on this page: ◆ MAC/IP/Port Filtering — Enables or disables MAC/IP/Port Filtering. (Default: Disable) Default Policy — When MAC/IP/Port Filtering is enabled, the default ◆ policy will be enabled.
  • Page 100: Current Filter Rules

    | Firewall Configuration HAPTER MAC/IP/Port Filtering Destination IP Address — Specifies the destination IP address to ◆ block or allow traffic from. Source IP Address — Specifies the source IP address to block or allow ◆ traffic from. Protocol — Specifies the destination port type, TCP, UDP or ICMP. ◆...
  • Page 101: Virtual Server Settings (Port Forwarding)

    | Firewall Configuration HAPTER Virtual Server Settings (Port Forwarding) IRTUAL ERVER ETTINGS ORWARDING Virtual Server (sometimes referred to as Port Forwarding) is the act of forwarding a network port from one network node to another. This technique can allow an external user to reach a port on a private IP address (inside a LAN) from the outside through a NAT-enabled router.
  • Page 102: Current Virtual Servers In System

    | Firewall Configuration HAPTER The Current Port Forwarding Table displays the entries that are allowed to URRENT IRTUAL forward packets through the 11n Router’s firewall. ERVERS IN SYSTEM No. — The table entry number. ◆ IP Address — Displays an IP address on the local network to allow ◆...
  • Page 103: System Security

    | Firewall Configuration HAPTER System Security YSTEM ECURITY The 11n Router includes the facility to manage it from a remote location. The unit can also be sent a ping message from a remote location. Figure 62: System Security The following items are displayed on this page: ◆...
  • Page 104: Content Filtering

    | Firewall Configuration HAPTER Content Filtering ONTENT ILTERING The 11n Router provides a variety of options for blocking Internet access based on content, URL and host name. Figure 63: Content Filtering The following items are displayed on this page: Web URL Filter Settings — By filtering inbound Uniform Resource Locators (URLs) the risk of compromising the network can be reduced.
  • Page 105 | Firewall Configuration HAPTER Content Filtering Current Host Filters — Displays current Host filter. ◆ Add a Host Filter — Enters the keyword for a host filtering. ◆ – 105 –...
  • Page 106: Administration Settings

    DMINISTRATION ETTINGS The 11n Router’s Administration Settings menu provides the same configuration options in both Gateway and Bridge Mode. These settings allow you to configure a management access password, set the system time, upgrade the system software, display the system status and statistics.
  • Page 107: System Management

    | Administration Settings HAPTER System Management YSTEM ANAGEMENT The System Management commands allow you to change the language settings displayed in the interface, and change the user name and password. Figure 64: System Management The following items are displayed in the first two sections on this page: Language Settings —...
  • Page 108: Time Zone Settings

    | Administration Settings HAPTER Time Zone Settings ETTINGS The System Management page allows you to manually configure time settings or enable the use of a Simple Network Time Protocol (SNTP) or NTP server. Figure 65: Time Zone Settings The following items are displayed in this section on this page: Current Time —...
  • Page 109: Ddns Settings

    | Administration Settings HAPTER DDNS Settings DDNS S ETTINGS Dynamic DNS (DDNS) provides users on the Internet with a method to tie a specific domain name to the unit’s dynamically assigned IP address. DDNS allows your domain name to follow your IP address automatically by changing your DNS records when your IP address changes.
  • Page 110: Firmware Upgrade

    | Administration Settings HAPTER Firmware Upgrade IRMWARE PGRADE You can update the 11n Router firmware by using the Firmware Update facility. Figure 67: Firmware Upgrade The following items are displayed on this page: Firmware Upgrade — Allows you to upload new firmware manually by ◆...
  • Page 111: Configuration Settings

    | Administration Settings HAPTER Configuration Settings ONFIGURATION ETTINGS The Configuration Setting page allows you to save the 11n Router’s current configuration or restore a previously saved configuration back to the device. Figure 68: Configuration Settings The following items are displayed on this page: ◆...
  • Page 112: System Status

    | Administration Settings HAPTER System Status YSTEM TATUS The System Information page displays basic system information and the displayed settings are for status information only and are not configurable on this page. This information is split into the three sections that follow. Figure 69: System Status (Router Mode) The following items are displayed on this page: System Info —...
  • Page 113 | Administration Settings HAPTER System Status Default Gateway — The default gateway is the IP address of the ■ router for the 11n Router, which is used if the requested destination address is not on the local subnet. Primary DNS Server / Secondary DNS Server — The IP address ■...
  • Page 114: Statistics

    | Administration Settings HAPTER Statistics TATISTICS The 11n Router Traffic Statistics - Interfaces window displays received and transmitted packet statistics for all interfaces on the 11n Router. Figure 70: Statistics The following items are displayed on this page: ◆ Memory total — The total memory of this 11n Router. Memory left —...
  • Page 115: System Log

    | Administration Settings HAPTER System Log Tx bytes — Displays the total number of bytes transmitted by the ◆ specified interface. YSTEM The 11n Router supports a logging process that controls error messages saved to memory or sent to a Syslog server. The logged messages serve as a valuable tool for isolating 11n Router and network problems.
  • Page 116: Siii A

    ECTION PPENDICES This section provides additional information and includes these items: “Troubleshooting” on page 117 ◆ “Hardware Specifications” on page 119 ◆ “Cables and Pinouts” on page 121 ◆ ◆ “Glossary” on page 128 “Index” on page 132 ◆ – 116 –...
  • Page 117: A Troubleshooting

    ROUBLESHOOTING LED I IAGNOSING NDICATORS Table 4: LED Indicators Symptom Action Power/LAN LEDs are off ◆ The AC power adapter may be disconnected. Check connections between the 11n Router, the power adapter, and the wall outlet. WLAN LED is off ◆...
  • Page 118: Before Contacting Technical Support

    | Troubleshooting PPENDIX Before Contacting Technical Support EFORE ONTACTING ECHNICAL UPPORT Check the following items before you contact local Technical Support. If the 11n Router cannot be configured using a web browser: Be sure to have configured the 11n Router with a valid IP address, ■...
  • Page 119: B Hardware Pecifications

    ARDWARE PECIFICATIONS WAN: 1 10/100BASE-TX port, RJ-45 connector, auto MDI/X NTERFACES (100-ohm, UTP cable; Category 5 or better) LAN 1~4: 1 10/100BASE-TX port, RJ-45 connector, auto MDI/X (100-ohm, UTP cable; Category 5 or better) Input: 100~240 VAC, 50/60 Hz AC P OWER DAPTER Output: 5 V/ 1 A...
  • Page 120 | Hardware Specifications PPENDIX FCC IEEE C95.1 EN 50385 (2002) EN 60950-1 (2006) AFETY ETSI EN 300 019-2-1 Class 1.2 (Storage) NVIRONMENTAL ETSI EN 300 019-2-2 Class 2.3 (Packaged) ETSI EN 300 019-2-3 Class 3.2 (Operating) – 120 –...
  • Page 121: Ables And Pinouts

    ABLES AND INOUTS WISTED ABLE SSIGNMENTS For 10/100BASE-TX connections, a twisted-pair cable must have two pairs of wires. For 1000BASE-T connections the twisted-pair cable must have four pairs of wires. Each wire pair is identified by two different colors. For example, one wire might be green and the other, green with white stripes.
  • Page 122: 10/100Base-Tx Pin Assignments

    | Cables and Pinouts PPENDIX 10/100BASE-TX Pin Assignments 10/100BASE-TX P SSIGNMENTS Use unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections: 100-ohm Category 3 or better cable for 10 Mbps connections. Also be sure that the length of any twisted-pair connection does not exceed 100 meters (328 feet).
  • Page 123: Crossover Wiring

    | Cables and Pinouts PPENDIX Crossover Wiring Figure 73: Straight-through Wiring EIA/TIA 568B RJ-45 Wiring Standard 10/100BASE-TX Straight-through Cable White/Orange Stripe Orange White/Green Stripe End A End B Blue White/Blue Stripe Green White/Brown Stripe Brown ROSSOVER IRING If the twisted-pair cable is to join two ports and either both ports are labeled with an “X”...
  • Page 124: Information

    ICENSE NFORMATION This product includes copyrighted third-party software subject to the terms of the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other related free software licenses. The GPL code used in this product is distributed WITHOUT ANY WARRANTY and is subject to the copyrights of one or more authors.
  • Page 125: License Information

    | License Information PPENDIX The GNU General Public License GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program"...
  • Page 126 | License Information PPENDIX The GNU General Public License a). Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b).
  • Page 127 | License Information PPENDIX The GNU General Public License This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded.
  • Page 128: Glossary

    LOSSARY IEEE 802.3-2005 specification for 10 Mbps Ethernet over two pairs of 10BASE-T Category 3 or better UTP cable. IEEE 802.3-2005 specification for 100 Mbps Fast Ethernet over two pairs of 100BASE-TX Category 5 or better UTP cable. IEEE 802.3ab specification for 1000 Mbps Gigabit Ethernet over four pairs 1000BASE-T of Category 5 or better UTP cable.
  • Page 129 LOSSARY Dynamic Host Configuration Protocol: Provides a framework for passing DHCP configuration information to hosts on a TCP/IP network. DHCP is based on the Bootstrap Protocol (BOOTP), adding the capability of automatic allocation of reusable network addresses and additional configuration options.
  • Page 130 LOSSARY A security option which broadcasts a beacon signal including the access YSTEM point’s configured SSID. Wireless clients can read the SSID from the beacon, and automatically reset their SSID to allow immediate connection to the nearest access point. Orthogonal Frequency Division Multiplexing: OFDM allows multiple users to ODFM transmit in an allocated band by dividing the bandwidth into many narrow bandwidth carriers.
  • Page 131 LOSSARY WPA employs 802.1X as its basic framework for user authentication and ROTECTED dynamic key management to provide an enhanced security solution for CCESS 802.11 wireless networks. Wired Equivalent Privacy: WEP is based on the use of security keys and the popular RC4 encryption algorithm.
  • Page 132: Index

    NDEX UMERICS 10/100BASE-TX pin assignments data beacon rate 802.11n settings DC power socket 802.1X authentication default IP address default Key, WEP default settings, reset deployment options desktop mounting access categories, WMM destination, routing access point connections DHCP address pool access policy settings DHCP clients list address pool range, DHCP DHCP server settings...
  • Page 133 NDEX home page multiple SSID horizontal surface mounting HT channel bandwidth network applications network name, wireless IGMP proxy network statistics import configuration indicators, LED information, system Internet connection problems open system Internet gateway connections operation mode, setting IP address, default IP Address, LAN setting IP port filtering IPsec...
  • Page 134 NDEX router advertisements virtual server Router Mode VPN Passthrough routing metric RTS threshold wall mounting WAN ping filter screws for mounting WAN port security features WAN settings security, wireless WDS operation service provider settings WDS settings setup wizard steps web browser requirements shared secret, RADIUS web IP address slot time...
  • Page 135 AIP-W505 E052009-CS-R01 149100000067W...

Table of Contents