Page 1
ALLNET / ALL0276VPN Wireless 802.11g VPN Router User Manual Package Contents Wireless 802.11g VPN Router User Guide CD-ROM Ethernet Network Cable Power Supply Quick Installation User manual...
Page 2
802.1x authentication and authorization. The ALLNET can serve as a DHCP Server, has NAT technology with a powerful SPI firewall to protect against Internet intruders, supports VPN pass-through, and can be configured to filter internal users' access to the Internet.
Page 3
LAN port. If the LED is flickering, it is an indication any network activity. Connecting ALLNET Wireless 802.11g VPN Router Overview he Router's setup consists of more than simply plugging hardware together. You will have to...
Page 4
Wired Connection to a PC 1. Before you begin, make sure that all of your network’s hardware is powered off, including the Router, PCs, and cable or DSL modem. 2. Connect one end of an Ethernet network cable to one of the LAN ports (labeled 1-4) on the back of the Router (see Figure Wired-1), and the other end to an Ethernet port on a PC.
Page 5
The Power LED on the front panel will light up green as soon as the power adapter is connected properly. The Power LED will flash for a few seconds, then it will light up steady when the self-test is complete. If the LED flashes for one minute or longer, see “Troubleshooting.”...
Configuring the PCs Overview The instructions in this chapter will help you configure each of your computers to be able to communicate with the Router. To do this you need to configure your PC's network settings to obtain an IP (or TCP/IP) address automatically so, your PC can function as a DHCP client.
Page 7
3. Click the IP Address tab. Select Obtain an IP address automatically. (See Figure 6.) Figure 6 4. Now click the Gateway tab, and verify that the Installed Gateway field is blank. Click the OK button. 5. Click the OK button again. Windows may ask you for the original Windows installation disk or additional files.
Page 8
Configuring Windows 2000 PCs 1. Click the Start button. Select Settings and click the Control Panel icon. Double-click the Network and Dialup Connections icon. 2. Select the Local Area Connection icon for the applicable Ethernet adapter (usually it is the first Local Area Connection listed).
4. Select Obtain an IP address automatically. Once the new window appears, click the OK button. Click the OK button again to complete the PC configuration. (See Figure 9.) Figure 9 5. Restart your computer. Go to “Using the Router’s Web-Based Utility.” Configuring Windows XP PCs The following instructions assume you are running Windows XP with the default interface.
Page 10
Figure 10 2. Make sure the box next to Internet Protocol (TCP/IP) is checked. Highlight Internet Protocol (TCP/IP), and click the Properties button. (See Figure 11.) Figure 11...
3. Select Obtain an IP address automatically. (See Figure 12.) Once the new window appears, click the OK button. Click the OK button again to complete the PC configuration. Figure 12 Go to “Using the Router’s Web-Based Utility.” Configuring the Router Use the Router's web-based utility to configure the Router.
Setup Basic Setup. Enter the Internet connection and network settings on this screen. DDNS. To enable the Router's Dynamic Domain Name System (DDNS) feature, complete the fields on this screen. MAC Address Clone. If you need to clone a MAC address onto the Router, use this screen. Advanced Routing.
Page 13
Applications Port Range Forwarding. To set up public services or other specialized Internet applications on your network, click this tab. Port Triggering. To set up triggered ranges and forwarded ranges for Internet applications, Click this tab. Upon Forwarding. Use this screen to alter Upon forwarding settings. DMZ.
The Setup Tab The Basic Setup Tab The first screen that appears is the Basic Setup tab. (See Figure Setup Tab DHCP/Internet connection Type.) This tab allows you to change the Router's general settings. Change these settings as described here and click the Save Settings button to save your changes or Cancel Changes to cancel your changes.
Page 15
• Default Gateway. Your ISP will provide you with the Default Gateway Address, which is the ISP server's IP address. • Primary DNS. (Required) and Secondary DNS (Optional). Your ISP will provide you with at least one DNS (Domain Name System) Server IP Address. Figure Static Internet connection Type When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes.
Page 16
Figure PPPoE connection Type When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. PPTP (See Figure PPTP Connection Type.) Point to Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe only. •...
Page 17
Figure PPTP Connection Type When finished making your changes on this tab, click the Save Settings button to save these changes, or click the Cancel Changes button to undo your changes. Optional Settings (Required by some ISPs) Host Name and Domain Name. These fields allow you to supply a host and domain name for the Router.
Page 18
Start IP Address. Enter a value for the DHCP server to start with when issuing IP addresses. This value must be 192.168.1. 2 or greater, because the default IP address for the Router is 192.168.1.1. Number of Address. Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to.
Page 19
Figure DDNS.org TZO.com Tab Email Address, TZO Password Key, and Domain Name. Enter the Email Address, TZO Password Key, and Domain Name of the service you set up with TZO. Internet IP Address. The Router's current Internet IP Address is displayed here. Because it is dynamic, this will change.
Page 20
MAC Address Clone Tab (See Figure MAC Address Clone.) Figure MAC Address Clone The Router’s MAC address is a 12-digit code assigned to a unique piece of hardware for identification, like a social security number. MAC Clone • MAC Clone Service. To use MAC address cloning, select Enable. •...
Page 21
Advanced Routing Tab The Advanced Routing screen allows you to configure the dynamic routing and static routing settings. (See Figure Advanced Routing.) Figure-Advanced Routing Advanced Routing Operating Mode. Select Gateway or Router for the Operating Mode from the drop-down menu. Dynamic Routing.
For example, the Router's standard IP address is 192.168.1.1. Based on this address, the address of the routed network is 192.168.1, with the last digit determining the Router's place on the network. Therefore you would enter the IP address 192.168.1.0 if you wanted to route to the Router 's entire network, rather than just to the Router.
Page 23
It is case-sensitive and must not exceed 32 alphanumeric characters, which may be any keyboard character. For added security, ALLNET recommends that you change the default SSID (wireless-g) to a unique name of your choice.
Page 24
Figure- WPA Pre-Shared Key WPA RADIUS This option features WPA used in coordination with a RADIUS server. (This should only be used when a RADIUS server is connected to the Router.) Select the type of WPA algorithm you want to use.
Page 25
Next, select the level of WEP encryption, 64 bits 10 hex digits or 128 bits 26 hex digits, and Default Transmit Key (choose which Key to use). Last, either generate a WEP key using the Passphrase or enter the WEP key manually (See Figure-RADIUS). Figure-RADIUS (See Figure -WEP) Figure- WEP...
Page 26
If you are not using a Passphrase, then manually enter a set of values. (Do not leave a key field blank, and do not enter all zeroes. These are not valid key values.) If you are using 64-bit WEP encryption, then the key must be exactly 10 hexadecimal characters in length. If you are using 128-bit WEP encryption, then the key must be exactly 26 hexadecimal characters in length.
Advanced Wireless Settings (See Figure-Advanced Wireless Settings.) On this screen you can access the Advanced Wireless features, including Authentication Type, CTS Protection Mode, Basic Data Rates, Control Tx Rates, Beacon Interval, DTIM Interval, RTS Threshold, and Fragmentation Threshold. Authentication Type. The default is set to Auto, which allows either Open System or Shared Key authentication to be used.
Figure-Advanced Wireless Settings The Security Tab Firewall When you click the Security tab, you will see the Firewall screen (see Figure -Firewall). This screen contains Filters and Block WAN Requests. Filters block specific internal users from accessing the Internet and block anonymous Internet requests and/or multicasting. Firewall. To add Firewall Protection, click Enabled.
Page 29
Filter Java Applets. Java is a programming language for websites. If you deny Java Applets, you run the risk of not having access to Internet sites created using this programming language. To enable Java Applet filtering, click Enabled. Filter ActiveX. ActiveX is a programming language for websites. If you deny ActiveX, you run the risk of not having access to Internet sites created using this programming language.
Page 30
VPN PassThrough (See Figure-VPN PassTrough) • IPSec Passthrough. Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec Passthrough, click the Enabled button. To disable IPSec Passthrough, click the Disabled button. •...
Page 31
Local Secure Group and Remote Secure Group. The Local Secure Group is the computer(s) on your LAN that can access the tunnel. Enter the IP Address and Subnet Mask of the local VPN Router in the fields. Local Secure Group defines the endpoint on local site. It can be one IP Address, IP Range, Subnet, or None (Host).
Authentication. Authentication acts as another level of security. There are two types of authentication: MD5 and SHA (SHA is recommended because it is more secure). As with encryption, either of these may be selected, provided that the VPN device at the other end of the tunnel is using the same type of authentication.
Page 33
From the Advanced VPN Tunnel Setup screen, shown in Figure -Advanced VPN Setup, you can adjust the settings for specific VPN tunnels. Phase 1 Phase 1 is used to create a security association (SA), often called the IKE SA. After Phase 1 is completed, Phase 2 is used to create one or more IPSec SAs, which are then used to key IPSec sessions.
The Access Restrictions Tab Access Restriction The Access Restrictions tab, shown in Figure Access Restriction, allows you to block or allow specific kinds of Internet usage. You can set up Internet access policies for specific PCs and set up filters by using network port numbers. Figure- Access Restriction Internet Access Policy.
Page 35
Enter Policy Name. Policies are created from the fields presented here. To create an Internet Access policy: 1. Enter a Policy Name in the field provided. Select Internet Access as the Policy Type. Figure-Internet Access Policy Figure-List of PCs...
Page 36
2. Click the Edit List button. This will open the List of PCs screen, shown in Figure-List of PCs. From this screen, you can enter the IP address or MAC address of any PC to which this policy will apply. You can even enter ranges of PCs by IP address.
Page 37
The Applications Tab Port Range Forwarding The Port Forwarding screen sets up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. (Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming.
Page 38
Port Triggering Port Triggering is used for special Internet applications whose outgoing ports differ from the incoming ports. For this feature, the Router will watch outgoing data for specific port numbers. (See Figure –Port Triggering.) The Router will remember the IP address of the computer that sends a transmission requesting data, so that when the requested data returns through the Router, the data is pulled back to the proper computer by way of IP address and port mapping rules.
Page 39
UPnP Forwarding The UPnP screen provides options for customisation of port services for applications (See Figure UPnP Forwarding.) Application. You can specify up to ten applications in the available fields. Figure-UPnP Forwarding The preset applications are among the most widely used Internet applications. They include the following: FTP ( File Transfer Protocol).
Page 40
HTTP (Hyper Text Transfer Protocol). The communications protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client web browser. POP3 (Post Office Protocol 3). A standard mail server commonly used on the Internet. It provides a message store that holds incoming e-mail until users log on and download it.
Page 41
Hardware DMZ IP Address. Enter the IP Address in the fields. Hardware DMZ Netmask. Enter the Netmask in the fields. Destination IP Address. Enter the IP Address of the destination in the fields. Subnet Mask. Enter the Subnet Mask in the fields. Default Gateway.
The Administration Tab Management The Management screen, shown in Figure Management, allows you to change the Router’s access settings as well as configure the SNMP and UPnP (Universal Plug and Play) features. Figure-Management Router Password Local Router Access. To ensure the Router’s security, you will be asked for your password when you access the Router’s Web-based Utility.
Page 43
SNMP Simple Network Management Protocol (SNMP) is a popular network monitoring and management protocol. To enable SNMP, click Enabled. To disable SNMP, click Disabled. Identification. In the Contact field, enter contact information for the Router. In the Device Name field, enter the name of the Router.
Email Alert To enable E-Mail Alert, click Enabled. E-Mail Address for General Logs. Enter the E-Mail Address for General Logs in the field. E-Mail Address for Alert Logs. Enter the E-Mail Address for Alert Logs in the field. Return E-Mail address. Enter the address for the return E-Mail . E-Mail Server IP Address.
Page 45
Ping Test Ping Test Parameters Ping Target IP. Enter the IP Address that you want to ping in the field. No. of Pings. Enter the number of times that you want to ping. Ping Size. Enter the size of the ping packets. Ping Interval.
To upgrade the Router’s firmware: 1. Click the Browse button to find the firmware upgrade file that you downloaded from the ALLNET website and then extracted. 2. Double-click the firmware file you downloaded and extracted. Click the Upgradeutton, and follow the instructions there.
Config Management (See Figure Config Management) Figure Config Management To save the Router’s configuration file, click the Download Router Configuration File button, and follow the instructions shown. To load the Router’s system configuration, click the Browse button to find the configuration file that you want to load to the router.
Page 48
Status Router This screen displays information about your Router and its WAN (Internet) Connections. (See Figure Router) Information The information displayed is the Hardware Version, Software Version, MAC Address, Local MAC Address, and System Up Time. WAN Connections The WAN Connections displayed are the Network Access, WAN IP Address, Subnet Mask, Default Gateway, and DNS.
Local Network See Figure Local Network. The Local Network information that is displayed is the IP Address, Subnet Mask, DHCP Server, and DHCP Client Lease Info. To view the DHCP Clients Table, click the DHCP Clients button. The DHCP Active IP Table, Figure 6-39, displays the computer name, IP Address, MAC Address and the expiration time.
Page 50
Figure Wireless System Performance The System Performance information that is displayed is the Wireless, Internet, and/or LAN information for the IP Address, MAC Address, Connection Status, Packets Received, Packets Sent, Bytes Received, Bytes Sent, Error Packets Received, and Dropped Packets Received. (See Figure System Performance.) Click the Refresh button if you want to Refresh your screen Figure System Performance...
Questions.” Provided are possible solutions to problems that may occur during the installation and operation of the Router. Read the descriptions below to help you solve your problems. If you can’t find an answer here, check the ALLNET website at www.allnet.de Common Problems and Solutions 1.
Page 52
8. Click the OK button in the Internet Protocol (TCP /IP) Properties window, and click the OK button in the Local Area Connection Properties window. 9. Restart the computer if asked. For Windows XP: The following instructions assume you are running Windows XP with the default interface.
Page 53
2. I want to test my Internet connection. A. Check your TCP/IP settings. For Windows 98, Me, 2000, and XP: Refer to “Chapter 4: Configure the PCs” for details. Make sure Obtain IP address automatically is selected in the settings. For Windows NT 4.0: Click Start, Settings, and Control Panel.
Page 54
3. I am not getting an IP address on the Internet with my Internet connection. Refer to “Problem #2, I want to test my Internet connection” to verify that you have connectivity. 1. If you need to register the MAC address of your Et hernet adapter with your ISP, please see “Appendix D: Finding the MAC address and IP Address for Your Ethernet Adapter.”...
Page 55
IPSec server. Refer to “Problem #7, I need to set up online game hosting or use other Internet applications” for details. Check the ALLNET website for more information at www.allnet.de 6. I need to set up a server behind my Router and make it available to the public.
Page 56
7. I need to set up online game hosting or use other Internet applications. If you want to play online games or use Internet applications, most will work without doing any port forwarding or DMZ hosting. There may be cases when you want to host an online game or Internet application.
Page 57
12. I need to upgrade the firmware. In order to upgrade the firmware with the latest features, you need to go to the ALLNET website and download the latest firmware at www.allnet.de Follow these steps: 1.
Page 58
13. The firmware upgrade failed, and/or the Power LED is flashing. The upgrade could have failed for a number of reasons. Follow these steps to upgrade the firmware and/or make the Power LED stop flashing: If the firmware upgrade failed, use the TFTP program (it was downloaded along with the firmware).
Page 59
15. I can’t access my e-mail, web, or VPN, or I am getting corrupted data from the Internet. The Maximum Transmission Unit (MTU) setting may need to be adjusted. By default, the MTU is set at 1500. For most DSL users, it is strongly recommended to use MTU 1492. If you are having some difficulties, perform the following steps: 1.
• Does the Router support any operating system other than Windows 95, Windows 98SE, WindowsMillennium, Windows 2000, or Windows XP? Yes, but ALLNET does not, at this time, provide technical support for setup, configuration or troubleshooting of any non-Windows operating systems.
Page 61
P anel in your Ethernet adapter’s Advanced Properties tab.) Make sure that your proxy setting is disabled in the browser. Check our website at www.allnet.de for more information. • If all else fails in the installation, what can I do? Reset the Router by holding down the reset button until the Power LED fully turns on and off.
Page 62
• How will I be notified of new Router firmware upgrades? All ALLNET firmware upgrades are posted on the ALLNET website at www.allnet.de where they can be downloaded for free. To upgrade the Router’s firmware, use the System tab of the Router’s web-based utility. If the Router’s Internet connection is working well, there is no need to download a newer firmware version, unless that version contains new features that you would like to use.
Page 63
• How many ports can be simultaneously forwarded? Theoretically, the Router can establish 520 sessions at the same time, but you can only forward 10 ranges of ports. • What are the advanced features of the Router? The Router’s advanced features include Advanced Wireless settings, Filters, Port Forwarding, Routing, and DDNS.
Page 64
• What is ad-hoc mode? When a wireless network is set to ad-hoc mode, the wireless-equipped computers are configured to communicate directly with each other. The ad-hoc wireless network will not communicate with any wired network. • What is infrastructure mode? When a wireless network is set to infrastructure mode, the wireless network is configured to communicate with a wired network through a wireless access point.
Page 65
• What is Spread Spectrum? Spread Spectrum technology is a wideband radio frequency technique developed by the military for use in reliable, secure, mission-critical communications systems. It is designed to trade off bandwidth efficiency for reliability, integrity, and security. In other words, more bandwidth is consumed than in the case of narrowband transmission, but the trade-off produces a signal that is, in effect, louder and thus easier to detect, provided that the receiver knows the parameters of the spread-spectrum signal being broadcast.
Page 66
• What is a MAC Address? The Media Access Control (MAC) address is a unique number assigned by the manufacturer to any Ethernet networking device, such as a network adapter, that allows the network to identify it at the hardware level. For all practical purposes, this number is usually permanent. Unlike IP addresses, which can change every time a computer logs onto the network, the MAC address of a device stays the same, making it a valuable identifier for the network.
Page 67
Specifications Standards 11g VPN Router/ ALL0276VPN Ports One Internet, Ethernet (1-4), Power Buttons One Reset Button, One Power Switch Cabling Type UTP CAT 5 or better Data Rate Up to 54Mbps (802.11g) Transmit Power 18dBm LEDs Power, Internet, Ethernet (1, 2, 3, 4), WEP Key Bits 64, 128 Dimensions 7.32"...
Need help?
Do you have a question about the ALL0276 and is the answer not in the manual?
Questions and answers