Configuring Windows 95 or later for IP Networking ..............3-2 Configuring the Macintosh for IP Networking ................3-4 Your Internet Account .........................3-6 Ready For WER-401 Wireless SOHO Firewall gateway Configuration ........3-8 Web Configurator And Browsers ....................4-1 Introducing The Embedded Web Configurator................4-2 Wizard ............................4-4 Internet Setup..........................5-1...
Page 3
Status............................5-13 Dynamic DNS ..........................6-1 Port Forwarding ...........................6-3 Static Route..........................6-7 Dynamic Route ..........................6-11 Upgrade and Backup........................6-13 Remote Management .........................6-17 Diagnostic ..........................6-21 Security Management ........................7-1 Web Patrol ...........................7-3 Services ............................7-6 Log ...............................7-8 Problem Scenarios........................8-1 FAQ .............................8-3 Table Of Contents...
WER-401 Wireless SOHO Firewall Gateway List of Figures Figure 1-1 Wireless SOHO Firewall gateway Application................1-7 Figure 3-1 Configuring Windows for IP Networking..................3-2 Figure 3-2 Macintosh TCP/IP........................3-5 Figure 3-3 Verifying Macintosh TCP/IP .....................3-5 Figure 4-1 Login Window ...........................4-2 Figure 4-2 Embedded Web Configurator Home – SiteMap ................4-3 Figure 4-3 Embedded Web Configurator Home –...
(such as a cable modem or DSL modem) that is normally intended for use by a single computer. The WER-401 wireless SOHO Firewall gateway provides you with multiple Web Patrol options, plus browsing activity reporting and instant alerts - both via e-mail. Parents and network administrators can establish restricted access policies based on time-of-day, Website addresses and address keywords, and share high-speed cable/DSL Internet access for up to 253 personal computers.
Page 8
WER-401 Wireless SOHO Firewall Gateway • MAC address filter for wireless LAN access control Embedded FTP Server for firmware upgrade Embedded FTP Server configuration backup and restore Scripting and spoofing for major cable providers Restore Factory Defaults Button to reset to factory default IP address, password, and other...
IEEE 802.11b products. The two kinds of ports of the WER-401 on the LAN side (Ethernet LAN and Wireless LAN ports) can transparently communicate with each other since there is bridging function between the two kinds of ports.
Page 10
WER-401 Wireless SOHO Firewall Gateway 1.3.4 Security The WER-401 wireless SOHO Firewall gateway is equipped with several features designed to maintain security, as described in this section. Password Security PAP and CHAP support (RFC 1334 plus major vendor variations) if required in login script.
Page 11
The WER-401 allows the user to specify the day and time to blocking. Trusted Host The WER-401 allows the user to specify one Trusted host from blocking by the fixed IP address. Periodical Reports And Logs • The URL of websites visited will be recorded sequentially. The log will always keep the latest 128 websites entries.
When DHCP is enabled and no DNS addresses are specified, the wireless SOHO Firewall gateway provides its own address as a DNS server to the attached computers. The wireless SOHO Firewall gateway obtains actual DNS addresses from the ISP during connection setup and forwards DNS requests from the LAN.
LAN to access the Internet or a remote office through an external single-host device such as a cable modem or xDSL modem. By integrating NAT, and wireless LAN access, WER-401 provides not only the ease of installation and Internet access, but also the most completed security solution to protect your intranet and efficient network management for data traffic.
One straight-through category 5 Ethernet cable If any of the parts are incorrect, missing, or damaged, contact your dealer. Keep the color box, including the original packing materials, in case you need to return the wireless SOHO Firewall gateway for repair. System Requirements The WER-401 wireless SOHO Firewall gateway is intended for use in a network of personal computers that are interconnected by 802.11b-compliant wireless adapters or twisted-pair Ethernet cables.
WER-401 Wireless SOHO Firewall Gateway WER-401 Wireless SOHO Firewall gateway Front Panel The WER-401 wireless SOHO Firewall gateway front panel LEDs provide an easy way to monitor its status and activity. Table 2-1 Front Panel LEDs LED LABEL Power Test...
Connect the power adapter. 2.5.1 Preparing your Wireless Devices Unclip the antenna from its holding clip on the rear panel of your wireless SOHO Firewall gateway, and rotate it to a vertical position. Detailed instructions on configuring your wireless devices for TCP/IP networking are provided in the next chapter.
Page 17
For any connection that will operate at 100 Mbps, you must use a Category 5 (Cat 5) rated cable, such as the Ethernet cable included with the wireless SOHO Firewall gateway. Connect up to four computers directly to any of the four LAN ports of the wireless SOHO Firewall gateway using standard Ethernet cables.
1. Use the Restore Factory Default Configurations function of the Web Configurator. 2. Use the Restore Factory Defaults button on the rear panel of the wireless SOHO Firewall gateway. Use this method for cases when the Web Configurator password or IP address is not known.
(see later). In your IP network, all computers and the wireless SOHO Firewall gateway must be assigned IP addresses. Each computer must also have certain other IP configuration information such as a subnet mask (netmask), a domain name server (DNS) address, and a default gateway address.
WER-401 Wireless SOHO Firewall Gateway Computer IP addresses - 192.168.1.2 through 192.168.1.32 Subnet mask - 255.255.255.0 Gateway address - 192.168.1.1 These addresses are part of the IETF-designated private address range for use in private networks. Configuring Windows 95 or later for IP Networking As part of the computer preparation process, you need to manually install and configure TCP/IP on each networked computer.
Page 21
After the TCP/IP protocol components are installed, each computer must be assigned specific information about itself and resources that are available on its network. The simplest way to configure this information is to allow the computer to obtain the information from the internal DHCP server of the WER-401 wireless SOHO Firewall gateway.
WER-401 Wireless SOHO Firewall Gateway 3. Connect your Ethernet-interfaced computers to the wireless SOHO Firewall gateway. 4. Restart the WER-401 wireless SOHO Firewall gateway and allow it to boot. 5. Restart each computer. If an ISP technician configured your computer during the installation of a...
The panel is updated to show your settings, which should match the values below if you are using the default TCP/IP settings: The IP Address is between 192.168.1.2 and 192.168.1.32 The Subnet mask is 255.255.255.0 The Wireless SOHO Firewall gateway address is 192.168.1.1 Preparing Your Network...
When the wireless SOHO Firewall gateway’s WAN port is connected to the broadband modem, the wireless SOHO Firewall gateway appears to be a single computer to the ISP. The wireless SOHO Firewall gateway then allows the computers on the local network to masquerade as the single computer to access the Internet through the broadband modem.
Page 25
ISP does not dynamically supply the account information. To get the information you need to configure the wireless SOHO Firewall gateway for Internet access: 1. On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel.
ISP does not dynamically supply the account information. To get the information you need to configure the wireless SOHO Firewall gateway for Internet access: 1. From the Apple menu, select Control Panels, then TCP/IP.
This chapter introduces the embedded Web configurator and shows you how to log in and perform basic configuration of your WER-401 wireless SOHO Firewall gateway. The Web configurator was designed with ease-of-use paramount yet still allow fine-tuning of the powerful advanced features of the WER-401 wireless SOHO Firewall gateway.
6. Type ‘admin’ (not case sensitive) in the User Name box, ‘1234 in the Password box, and then ’ click OK. If your wireless SOHO Firewall gateway password was previously changed, enter the current password. Introducing The Embedded Web Configurator After a successful login you will see the following screen.
WER-401 Wireless SOHO Firewall Gateway Figure 4-2 Embedded Web Configurator Home – SiteMap The recommended screen resolution is 800 by 600 pixels using small fonts; however you may have to scroll in some pages where the convenience of having all information displayed in one page outweighs the inconvenience of scrolling.
WER-401 Wireless SOHO Firewall Gateway 4.3.1 DSL User Follows the Step 1 to Step 3 sequentially, and you can setup the DSL service connection. Figure 4-4 Wizard for DSL user setup Introducing The Web Configurator...
WER-401 Wireless SOHO Firewall Gateway 4.3.2 Cable User Follows the Step 1 to Step 4 sequentially, and you can setup the Cable service connection. Figure 4-5 Wizard for Cable user setup Introducing The Web Configurator...
WER-401 Wireless SOHO Firewall Gateway Chapter 5 The Basic Setup Screens This chapter discusses how to set up your WAN (Internet), LAN (Local), wireless LAN, system information such as name, password and time/date and display system information and statistics. Internet Setup Click the Internet Setup tab to display the next screen.
WER-401 Wireless SOHO Firewall Gateway Figure 5-1 Internet Setup The Basic Setup Screens...
Page 35
Select this option if the assigns a dynamic IP address to the WER-401. Automatically Specify an IP Address Select this option if the assigns a static IP address to the WER-401 and fill in the next four fields. IP Address Enter the IP address of this device in dotted decimal notation.
Page 36
PPPoE service name provided to you in the this field. Login Server IP (RR Login The WER-401 will find the RoadRunner Server IP if this field is left blank. If it Only) does not, then you must enter the authentication server IP address.
WER-401 Wireless SOHO Firewall Gateway System Click the System tab to display the next screen. Use this screen to configure system name, password and time/date. You may have to scroll down to see the whole screen. The table following the screen describes the fields displayed in the screen.
If using daylight savings time, enter the month and day that it ends on Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen.
Page 39
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the wireless SOHO Firewall gateway as a DHCP server or disable it. Select this field to disable DHCP service. Make sure you have another DHCP server on your LAN, or else the workstation must be manually configured.
DHCP server so it will provide the TCP/IP configuration for the clients. IP Pool Starting Address The wireless SOHO Firewall gateway is pre-configured with a pool of 32 IP addresses. It allocates 31 IP addresses (excluding the device itself) in the lower range for other server machines, e.g., server for mail, FTP, telnet, web, etc.,...
DHCP server. For each computer client, the table shows the IP address, NetBIOS Host Name, and Ethernet MAC address. If the wireless SOHO Firewall gateway is rebooted, the table data is lost until each PC renews its DHCP lease.
WEP-Based Security (Wired Equivalent Privacy) To prevent unauthorized wireless stations from accessing data transmitted over the network, the wireless SOHO Firewall gateway offers a data encryption, known as WEP to help encrypt wireless data transmitted via wireless medium. Select this option to allow data encryption. You may then choose 64-bit WEP or 128-bit WEP.
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. Status Click the Status tab to display the next screen.
The next five fields display general information about the wireless SOHO Firewall gateway system. System Name This is the wireless SOHO Firewall gateway’s system name + domain name assigned in the System screen. For example, System Name= xxx; Domain Name= baboo.mickey.com;...
Page 46
The Internet port IP mask. DHCP The Internet port DHCP role (client or none). If set to None, the wireless SOHO Firewall gateway is configured to use a fixed IP address on the WAN or to use PPPoE. If set to Client, the wireless SOHO Firewall gateway is configured to obtain an IP address dynamically from the ISP.
WER-401 Wireless SOHO Firewall Gateway Figure 5-7 Statistics Screen Table 5-7 Statistics Screen FIELD DESCRIPTION WAN/LAN The following statistics are displayed for both LAN and WAN respectively. Port The statistics for the WAN (Internet), LAN (local) Ethernet, and WLAN (wireless) ports.
IP from their ISP or DHCP server that would still like to have a DNS name. The wireless SOHO Firewall gateway, at the time of writing, supports the www.dyndns.org client. You can apply to this client for Dynamic DNS service.
Service Service Provider This is the name of your Dynamic DNS client. This field is read-only. Registered Host Enter the domain name assigned to your wireless SOHO Firewall gateway by your Name Dynamic DNS provider. Enable Wildcard Your wireless SOHO Firewall gateway supports DYNDNS Wildcard. Select this...
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. Port Forwarding Click the Port Forwarding tab to display the next screen.
WER-401 Wireless SOHO Firewall Gateway (also called DMZ) to which all other incoming protocols are forwarded. To configure port forwarding to a local server: 1. Enter a port number in an unused Service Port Range. 2. To forward only one port, enter it again in the Service Port Range after the “~”.
WER-401 Wireless SOHO Firewall Gateway Local Game Host or Videoconference Example Some online games and videoconferencing applications are incompatible with NAT. The wireless SOHO Firewall gateway is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well.
WER-401 Wireless SOHO Firewall Gateway Table 6-3 Port Forwarding FIELD DESCRIPTION Disable DMZ Select this option to disable DMZ (De-Militarized Zone). Enable DMZ Select this option to enable DMZ (De-Militarized Zone). Server IP Address Enter the IP address of the server on your local network to which you want to forward incoming service requests.
Click the Static Route tab to display the next screen. Use this screen to configure static routes. Static routes tell the wireless SOHO Firewall gateway routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or you have multiple routers or multiple IP subnets located on your network.
WER-401 Wireless SOHO Firewall Gateway The table following the figure describes the fields contained within. Figure 6-3 Static Route Table 6-4 Static Route FIELD DESCRIPTION Static Routing Entry Select the static route entry you want to edit or create from the drop down list box.
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. 6.3.1 Static Route Example As an example of when a static route is needed, consider the following case: •...
WER-401 Wireless SOHO Firewall Gateway • The Destination IP Address and IP Subnet Mask fields specify that this static route applies to all 134.177.x.x addresses. • The Gateway IP Address field specifies that all traffic for these addresses should be forwarded to your home router at 192.168.1.100.
The Outgoing and Incoming fields control the sending and receiving of RIP packets. When both are enabled or Outgoing only is enabled, the wireless SOHO Firewall gateway will broadcast its routing table periodically. When both are enabled or Incoming only is enabled, it will incorporate the RIP information that it receives;...
Select this checkbox to enable RIP broadcasts. Routing Outgoing Select Enable if you want the wireless SOHO Firewall gateway to broadcast its routing table periodically; otherwise select Disable. Incoming Select Enable if you want the wireless SOHO Firewall gateway to incorporate the RIP information that it receives;...
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. Upgrade and Backup Click the Upgrade and Backup tab to display the next screen.
If the upgrade file is compressed (.ZIP file), you must first extract the binary (.BIN) file before sending it to the wireless SOHO Firewall gateway. The upgrade file can be sent to the wireless SOHO Firewall gateway using your browser.
1. Use the Restore Factory Default Configurations function of the Web Configurator. Click Apply in the following screen. 2. Use the Restore Factory Defaults button on the rear panel of the wireless SOHO Firewall gateway. Use this method for cases when the Web Configurator password or IP address is not known.
Click Backup Current Configurations in the Upgrade and Backup screen to save a copy of your current configuration file to your computer. Click Browse, then choose a location on your computer where you wish to save the wireless SOHO Firewall gateway’s current configuration, then click Backup. Figure 6-9 Backup Current Configurations 6.5.4 Restore Previously Saved Configurations...
FTP services. Users can customize the service port, access interface, and the trusted client IP address to enhance security and flexibility. This feature allows you to manage your wireless SOHO Firewall gateway from a remote location, via the Internet (WAN), via the LAN, both (LAN & WAN) or neither (Disable).
• Disable Trusted Client IP The wireless SOHO Firewall gateway allows you to specify one Trusted Host, which Address is a computer that will be exempt from blocking and logging. Since the Trusted Host will be identified by an IP address, you should configure that computer with a fixed IP address.
Page 67
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. 6-20...
WER-401 Wireless SOHO Firewall Gateway Diagnostic The diagnostic facility allows you to test the different aspects of your WER-401 to determine if it is working properly. Figure 6-12 Diagnostic The Advanced Setup Screens 6-21...
DESCRIPTION WAN DHCP DHCP functionality can be enabled on the LAN or WAN. The WER-401 can act either as a WAN DHCP client or “none”, i.e., you have a static IP. The WAN DHCP Release and Renewal conveniently allow you to release and/or renew the assigned WAN IP address, subnet mask and default Router in a fashion similar to “winipcfg”.
WER-401 Wireless SOHO Firewall Gateway Chapter 7 The Firewall Screens This chapter discusses how to configure e-mail settings for alert and log, privileged access, web patrol, schedule web access, block/schedule specific services and display logs of these events. Security Management Click the Security Management tab to display the next screen.
After the log is sent, the log is cleared from the wireless SOHO Firewall gateway’s memory. If the wireless SOHO Firewall gateway cannot e- mail the log file, the log buffer may fill up. In this case, the wireless SOHO Firewall gateway overwrites the log and discards its contents.
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. Web Patrol Click the Web Patrol tab to display the next screen.
Select what time of day in hour-min format URL keyword blocking should end. Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. The Firewall Screens...
WER-401 Wireless SOHO Firewall Gateway FIELD DESCRIPTION Cancel Click this button to cancel any configuration changes you made in this screen. Services Click the Services tab to display the next screen. Use this screen to block services and schedule when to block them.
Help Click this button for HTML help on this screen. Apply Click this button to save your changes back to the wireless SOHO Firewall gateway. Cancel Click this button to cancel any configuration changes you made in this screen. Click the Log tab to display the next screen. Use this screen to view logs of the screens you configured in the firewall.
WER-401 Wireless SOHO Firewall Gateway 7.4.1 Security/Services Event Log Select Security/Services Event Log in the Log screen to view this log. The log is a detailed record of attacks and services accessing on your network. Up to 128 entries are stored in the log. No log entries will be made for the Privileged Access computer.
WER-401 Wireless SOHO Firewall Gateway Table 7-4 Security/Services Event Log FIELD DESCRIPTION This is the log index number. 128 entries are available numbered from 0 to 127. The log will keep the record of the latest 128 entries. Time This is the date and time the log of this event occurred.
WER-401 Wireless SOHO Firewall Gateway Figure 7-5 Web Patrol Log Table 7-5 Web Patrol Log FIELD DESCRIPTION This is the log index number. 128 entries are available numbered from 0 to 127. The log will keep the record of the latest 128 entries.
Page 81
WER-401 Wireless SOHO Firewall Gateway FIELD DESCRIPTION Clear Click this button to clear the log data. Next Page Click this button to view the next page in the log. Help Click this button for HTML help on this screen. 7-12...
Troubleshooting The following section provides possible solutions to problems regarding the installation and operation of the wireless SOHO Firewall gateway. If your situation is described here, the problem should be solved by applying the corresponding solution. Also check the FAQs which follow for other environment related information about your wireless SOHO Firewall gateway.
Page 83
Ensure that your cable or DSL modem is DHCP-capable. • You may have to enter the router or host name in the Setup page of the wireless SOHO Firewall gateway’s web configurator. Go to the Basic -> Setup section of the web configurator for more information.
10Mb Ethernet on its WAN port. It does, of course, support 100Mbps over in the auto-sensing Fast Ethernet 10/100 switch on the LAN side of the wireless SOHO Firewall gateway. 8.2.5 What is Network Address Translation and what is it used for? Network Address Translation (NAT) translates multiple IP addresses on the private LAN to one public address that is sent out to the Internet.
Page 85
8.2.9 If all else fails in the installation, what can I do? Reset the wireless SOHO Firewall gateway by holding down the restore button for at least three seconds and reset your cable or DSL modem by powering the unit off and then on. Obtain and flash the latest firmware release.
Page 86
The wireless SOHO Firewall gateway mode allows for customization of your public IPs and Domain. 8.2.19 How many ports can be simultaneously forwarded? Theoretically, the wireless SOHO Firewall gateway can establish 520 sessions at the same time, but you can only forward 10 ranges of ports.
Page 87
8.2.20 Does the wireless SOHO Firewall gateway replace a modem? Is there a cable or DSL modem in the wireless SOHO Firewall gateway? No, this version of the wireless SOHO Firewall gateway must work in conjunction with a cable or DSL modem.
Need help?
Do you have a question about the WER-401 and is the answer not in the manual?
Questions and answers