User Manual AR396 ADSL2+ Gateway with 4-port Ethernet Switch 802.11b/g Wireless AP Issue 1.0 31 July 2009...
Page 2
XAVi Technologies Corporation. XAVi Technologies Corporation provides this documentation without warranty of any kind, implied or expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular...
AR396 User’s Guide Introduction....................1 Features ..........................1 Device Requirements ......................2 Getting to know the device................ 3 Parts Check...........................3 Front Panel..........................4 Rear Panel ..........................5 Connecting your device................6 Connecting the Hardware.....................6 Step 1. Connect the WAN port to ADSL network ................. 7 Step 2.
Page 5
AR396 User’s Guide Password ............................. 60 Update Software .........................60 Save / Reboot ........................61 Appendix A - Configuring the Network Settings ..........62 Configuring Ethernet (LAN) Card ..................62 Before you begin.......................... 62 Windows XP PCs ........................62 Assigning static IP addresses to your PCs ................. 62 Configuring Wireless LAN card ..................63...
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
AR396 User’s Guide Device Requirements In order to use the device, you must have the following: High speed broadband service Instructions from your ISP on what type of Internet access you will be using, and the IP addresses needed to set up access One or more computers, each containing an Ethernet card (10Base-T/100Base-T network interface card (NIC)).
AR396 User’s Guide Getting to know the device Parts Check In addition to this document, your package should arrive containing the following: The device (AR396) Ethernet cable Standard phone line cable Power adapter AR396 device RJ-45 Cable RJ-11 Cable Power adapter...
AR396 User’s Guide Front Panel The front panel of this device will be described here which cover all front panel definitions of other models. Figure 2: Front Panel and LEDs Connector and LED definitions from left to right: Label Color...
AR396 User’s Guide Rear Panel The rear panel of this device will be described here which cover all rear panel definitions of other models. Figure 3: Rear Panel Connections Connector definition: Label Function Phone Connects to phone set Line Connects to the ADSL line...
AR396 User’s Guide Connecting your device This chapter provides basic instructions for connecting the device to a computer or LAN and to the Internet. In addition to configuring the device, you need to configure the Internet properties of your computer(s). For more details, see the following sections in Appendix A:...
AR396 User’s Guide Step 1. Connect the WAN port to ADSL network Connect the WAN port to the DSL network which has the high speed internet connection. Step 2. Connect the Ethernet cable Connect up to four single Ethernet computers or to a HUB/Switch directly to the device via Ethernet cable(s).
AR396 User’s Guide Getting Start with the Web pages The device includes a series of Web pages that provide an interface to the software installed on the device. It enables you to configure the device settings to meet the needs of your network.
Page 15
AR396 User’s Guide Advanced Setup: provides information about the current configuration of various system features with options to change the configuration. It includes the sub menus WAN, LAN, Ethernet Mode, NAT, Security, Parental Control, Routing, DNS, DSL, Interface Group, IPSec and Certificate.
AR396 User’s Guide Management: provides the administration utilities. It includes the sub menus, Settings, System Log, SNMP Agent, TR-069 Client, Internet Time, Access Control, Update Software, and Save/Reboot. Testing your Setup Once you have connected your hardware and configured your PCs, any computer on your LAN should be able to use the device to access the Internet.
AR396 User’s Guide Device Information The Device Information web page menu includes the following submenus: Summary Statistics Route DHCP Summary The Summary Page of the device shows the following information, Firmware version, Product name, Serial number, Hardware version, Software version, Bootloader version,, Wireless driver version, and MAC address.
AR396 User’s Guide IGMP enabled or disabled, QoS enabled or disabled, WAN port state, DSL link status, and IP address of WAN port. Figure 7: WAN Port Information Statistic The Statistic Page of the device shows the following information, Interfaces, data transmitting (Received and Transmitted directions) in that interface such as total bytes, packets, error count and drop count of LAN port, WAN port, ATM, and ADSL.
AR396 User’s Guide Route The Route Page of the device shows the route table. It contains Destination IP address, Gateway, Subnet Mask, Flag, Metric, Service and Interface. Figure 12: Device Route Table Information The ARP Page of the device shows the ARP table mapping the IP address and related MAC address.
AR396 User’s Guide Advanced Setup The Advance Setup menu includes the sub menus WAN, LAN, Ethernet Mode, NAT, Security, Parental Control, Quality of Service, Routing, DNS, DSL, Interface Group, IPSec and Certificate. Ethernet Mode Security Parental Control Quality of Service...
Page 22
AR396 User’s Guide Figure 16: WAN Port - ATM PVC Configuration To configure ATM PVC on the WAN interface: Enter VPI/VCI values Check to enable the VLAN Mux that allows multiple protocols in the same PVC and then enter the 802.11Q VLAN ID valued from 0 to 4095 Select the Service Category from the list (UBR without PCR, UBR with PCR, CBR, Non Realtime VBR, Realtime VBR).
AR396 User’s Guide Click Next to configure the Connection Type Figure 18: WAN Connection Type Configuration Global settings: Check the WAN protocol from PPP over ATM (PPPoA), PPP over Ethernet (PPPoE), MAC Encapsulation Routing (MER), IP over ATM (IPoA) and Briding.
Page 24
AR396 User’s Guide To configure the PPPoA or PPPoE settings: Enter the User’s PPP Username and Password Enter the Service Provider Name if any Select the Authentication Method (AUTO, PAP, CHAP, or MSCHAP) used during negotiation, default is AUTO. Enter the PPP MTU (Maximum Transmission Unit) size between 128 and 1492. Default is 1492.
Page 25
AR396 User’s Guide Select the Public IP of NAT from Interface IP address or Manual IP address. If it is manual IP address, enter the associated IP address. Check to enable Firewall feature Check to enable IGMP Multicast to avoid the multicast packet flooding to other LAN ports where do not need this IGMP packet to get better efficiency in Ethernet port.
AR396 User’s Guide MAC Encapsulation Routing (MER) Figure 22: WAN Connection, MER Configuration To configure the IP over Ethernet settings: Select “Obtain an IP address automatically” or “Use the following (fixed) IP address” and then also enter the WAN IP address and WAN Subnet Mask.
AR396 User’s Guide IP over ATM (IPoA) Figure 23: WAN Connection, MER Configuration To configure the IP over Ethernet settings: Enter the WAN IP address and WAN Subnet Mask. Select “Use the following default gateway” and then also enter the gateway IP address and Use WAN Interface where packets will be sent to.
AR396 User’s Guide To configure the Bridging settings: Check “Enable Bridge Service” to enable bridge service Enter the Service Name for this bridging interface. Click Next The WAN Setup Summary page shows all of parameters. Click Save if correct and click Back to restart the configuration again.
AR396 User’s Guide related information. Therefore, multicast packets will be generated to the related LAN ports only to avoid the packet flooding on all of LAN ports. Select one of two modes, Standard mode or Blocking mode. Select to Enable or Disable DHCP server. If it is enabled, please enter the DHCP IP pool of Start IP address and End IP address.
AR396 User’s Guide NAT (Network Access Translation) The NAT feature provides the basic firewall feature to avoid hacker attacks from remote site. There are three more setting pages including virtual server, port trigger, and DMZ to provide specified service for remote users.
AR396 User’s Guide Global Setting Select a service from the predefined list or enter the name of Custom Server Enter the Server IP Address located in the LAN to provide the service to remote party Enter the Start External Port # and End External Port # that open to remote to access the...
AR396 User’s Guide blank. Select the Open Protocol Click Save/Apply Figure 31: Add A Rule Of Port Triggering A DMZ (De-Militarized Zone) host is a computer on your network that can be accessed from the Internet. The de-militarized zone (DMZ) is for forwarding IP packets from the remote parties that are not fixed to any of the applications configured in the virtual server.
AR396 User’s Guide Enter the DMZ Host IP address Click Save/Apply Security The Security feature provides two more setting pages including MAC filtering and Parental Control. IP Address Filter The device can block the packet in outgoing and incoming directions. By default, all outgoing IP packets from LAN is allowed to surf Internet, but some IP packets can be blocked by setting up filters.
Page 34
AR396 User’s Guide Global Setting Enter the Filter Name Select the Protocol from the selection list. Enter the Source IP Address and Subnet Mask (range of IP addresses) of packet Enter the one port or multi ports (port range) Enter the Destination IP Address and Subnet Mask (range of IP addresses) of packet...
AR396 User’s Guide Global Setting Enter the Filter Name Select the Protocol from the selection list. Enter the Source IP Address and Subnet Mask (range of IP addresses) of packet Enter the one port or multi ports (port range) Enter the Destination IP Address and Subnet Mask (range of IP addresses) of packet Enter the one port or multi ports (port range) Select the WAN interfaces which will be applied with this incoming IP filter rule.
AR396 User’s Guide Global Setting Enter the Username Select the Browser’s MAC Address or Other MAC Address to enter the specific PC MAC address. Check those days you want to block above PC to surf Internet. Enter the Start Blocking Time and End Blocking Time Click Save/Apply.
AR396 User’s Guide Queue Configuration You could configure a maximum 16 QoS queues to provide different service levels. Figure 40: Quality of Service Queue Configuration Click Add to add a class of Qualify of Service. The screen allows to configure a QoS queue entry and assign it to a specific network interface.
AR396 User’s Guide QoS Classification You need to define one or more classes of data traffic and set the priority for each of classes. A maximum 32 entries can be configured. Figure 42: Quality of Service Classification Setup Click Add to add a class of Qualify of Service.
AR396 User’s Guide The screen creates a traffic class rule to classify the traffic, assign queue priority which defines the precedence and type of service. A rule consists of a class name and at least one condition below. All of the specified conditions in this classification rule must be satisfied for the rule to take effect.
AR396 User’s Guide Global Setting Check Enable Automatic Assigned Default Gateway checkbox, this router will accept the first received default gateway assignment from one of the PPPoA, PPPoE or Static IP/DHCP interface. If the checkbox is not checked, enter the static default gateway AND/OR a WAN interface.
AR396 User’s Guide Policy Routing Figure 47: Policy Routing Configuration Click Add to add the static route path. Figure 48: Add Policy Route Configuration Global Setting Enter the Policy Name Select the Source Interface (LAN1 to 4 and Wireless) from the list...
AR396 User’s Guide Figure 49: RIP Configuration Global Setting Check to enable or disable Global RIP mode Select the desired RIP version and operation, followed by placing a check in the 'Enabled' checkbox for the interface. Click Save to save the configuration The RIP can not be configured if the WAN interface has NAT enabled.
AR396 User’s Guide Dynamic DNS The Dynamic DNS feature allows you to bind the dynamic assigned WAN IP address into a specified domain name. You could pass this domain name to friends to access your service in your site instead of informing them every times if WAN IP address is changed.
AR396 User’s Guide The DSL feature provides basic and advance configuration to set the DSL parameters. Please contact technician for details before changing any parameters. Figure 53: DSL Basic Configuration Global Setting Check to select the DSL modulation modes. Select the DSL phone line pair, inner pair or outer pair. The inner pair is default setting.
Page 45
AR396 User’s Guide Click Add to add a new Interface group setting. Check Remove and click Save/Apply button to remove the specified entry. Click Edit button to edit current settings. To create (add) a new interface group: Figure 55: Create New Interface Group Configuration Global Setting Enter the Group Name.
AR396 User’s Guide IPSec The page provides IPSec VPN configuration to establish a VPN tunnel. Figure 56: IPSec VPN Configuration Check the Enable box to enable this IPSec tunnel. Click Add New Connection to create a IPSec VPN profile. Click Edit button to edit the current settings, click Remove button to remove the IPSec VPN profile.
AR396 User’s Guide Select the Authentication Method: Pre-shared Key or Certificate (X.509) Enter the Pre-shared key if chooses Pre-shared key as the authentication method Select to enable or disable the Perfect Forward Secrecy. Click Show Advanced Settings for more settings.
Page 48
AR396 User’s Guide Click Create Certificate Request to generate a certificate. Check Import Certificate to get a certificate from file. Create New Certificate Request: Figure 60: Crate New Certificate Request Global Setting Enter Certificate Name, Common Name, Organization Name, and State/Province Name.
AR396 User’s Guide Import Certificate: Figure 62: Import Certificate Global Setting Enter Certificate Name Enter the Certificate and Private Key Click Apply Trusted CA Certificate CA (Certificate Authority) is used by you to verify peer’s certificate. It can be imported only.
Page 50
AR396 User’s Guide Figure 64: Import CA Certificate Global Setting Enter Certificate Name. Enter the Certificate. Click Apply.
AR396 User’s Guide Wireless Setup The Wireless Setup web page menu comprises: Basic Security MAC Filter Wireless Bridge Advanced Station Information Basic The device provides wireless connection to wireless clients. This page allows you to enable the wireless service, hide the network from active scan and set the SSID (Service Set Identifier).
AR396 User’s Guide The BSSID is the MAC address of the device Input to set the maximum wireless clients the device wants to provide service. Click Save/Apply to save the configuration Security The device provides wireless connection with security including authentication method and data encryption to protect your data in the air.
Page 53
AR396 User’s Guide the same as Network Authentication is Open and WEP Encryption is enabled. If the Network Authentication is 802.1X, enter the IP address and Port number of Radius server, Radius Key, enable or disable WEP encryption. If WEP Encryption is enabled, select the Encryption Strength with 64bits or 128bits, select the current Key Index and enter the key and four keys when necessary.
Page 54
AR396 User’s Guide Figure 70: Wireless Setting – WPA-PSK Security If the Network Authentication is WPA2, select Enable or Disable for WPA2 Pre-authentication, enter value of Network Re-Auth Interval, enter value of WPA Group Rekey Interval, the IP address and Port number of Radius server, Radius Key, WPA Encryption Method (TKIP, AES, TKIP+AES), enable or disable WEP encryption.
Page 55
AR396 User’s Guide current Key Index and enter the key and four keys when necessary. Figure 73: Wireless Setting – Mixed WPA2/WPA Security If the Network Authentication is Mixed WPA2/WPA-PSK (pre-shared key), enter the WPA Pre-Shared Key and enter WPA Group Rekey Interval, WPA Encryption Method (TKIP, AES, TKIP+AES), enable or disable WEP encryption.
AR396 User’s Guide MAC Filter With this configuration, you could allow or deny wireless to access the device by wireless MAC address filtering feature. It is disabled as default. Figure 75: Wireless MAC Filter Configuration Global Setting Select the MAC Restrict Mode from one of Disable (no MAC filter), Allow (only those PCs with MAC addresses in the table can surf Internet) and Deny (only those PCs with MAC addresses in the table can not surf Internet).
AR396 User’s Guide Global Setting Set the AP mode as Access Point or Wireless Bridge When the AP mode is set to Wireless Bridge, the Wireless Restrict determine where it can communicate with all other wireless bridges (set Bridge Restrict is Disabled) or just the specified MAC addresses of remote wireless bridge devices (set Bridge Restrict is Enable or Enable (scan)).
AR396 User’s Guide Set the Maximum Associated Wireless Client Set XPress Technology enabled or disabled. Set 54g Mode to 54g Auto, 54g Performance, 802.11b, 54g LRS (limited rate support). Set 54g Protection to AUTO if there are 802.11g and 802.11b coexisting in the wireless network.
AR396 User’s Guide Diagnostic The Diagnostic web page provides the connection check in physical layer and upper layer. The result is helpful to figure out the problem if you have problem to surf Internet. Diagnostic This page will show up the result of diagnostic in physical layer like WAN port and also upper layer of PPP if ISP provides the PPP access protocol.
AR396 User’s Guide Management The Management web page menu comprises: Settings System Log SNMP Agent TR-069 Client Internet Time Access Control Update Software Save/Reboot Settings This page allows you to backup the current configuration of the device, update the configuration, and restore default configuration (factory setting).
AR396 User’s Guide Restore Default Figure 83: Restore Default Settings Click Restore Default Settings to restore the factory default settings. System Log This page allows you to view system log and also configure system log that way you want to see.
AR396 User’s Guide Global Setting Select to Enable Log function or not Select Log Level from the list Select Display Level from the list Select Mode from the list Click Save/Apply to save the configuration. SNMP Agent This page allows you to use a management application to retrieve statistics and status from the SNMP agent in the device.
Page 63
AR396 User’s Guide Figure 87: Management Configuration – Firmware Upgrade Global Setting Select to Enable or Disable to send Inform packet to ACS. Enter the Inform Interval number of seconds. The Inform packet will be sent to ACS periodically. Enter the ACS URL to reach ACS Enter the ACS User Name and Password Select to Enable or Disable to send the TR-069 SOAP messages to serial console port.
AR396 User’s Guide Internet Time This page allows you to sync up the real time clock from Internet. . Figure 88: Internet Time Configuration Global Setting Check to enable Automatically synchronize with Internet time servers Click Save to save your settings Access Control This submenu provides you local (LAN) or remote (WAN) access to the device.
AR396 User’s Guide • • HTTP • ICMP (Ping) • SNMP • • TELNET • TFTP Click Save/Apply to save the configuration. IP Address Figure 90: Management Configuration – Access Control: IP Address Click to enable or disable Access Control by IP address.
AR396 User’s Guide Password There are three levels of access accounts: admin, support, and user. The user name “admin” has unrestricted access to change and view configuration of the device. The user name “support” is used to allow an ISP technician to access the device for maintenance and to run diagnostics.
AR396 User’s Guide Global Setting: First of all, you have to get the updated software (firmware) from ISP or manufacture. Click Browser to specify the location and filename Click Update Software to start the process. It could take minutes to complete it.
AR396 User’s Guide Appendix A - Configuring the Network Settings To surf Internet through the device, you need to configure the network settings of your PC correctly. This appendix provides the guide for a reference. Configuring Ethernet (LAN) Card Before you begin By default, the device automatically assigns the required Internet settings to your PCs.
AR396 User’s Guide Click OK to confirm your changes, and then close the Control Panel. Configuring Wireless LAN card If your PC is connected to the device through wireless link, you need to configure the network setting of wireless LAN card in stead of LAN card. The steps to configure the network settings of wireless LAN card are the same procedure described in previous section, Configuring Ethernet LAN card section.
AR396 User’s Guide Appendix B - Troubleshooting During the installing or using the device, you may encounter problem, this appendix provides the solution and instructions to solve the issues. In case, the problem can not be solved, please contact Customer Support for further support.
AR396 User’s Guide Problem Troubleshooting Suggestion Cannot access the web pages Verify the Ethernet connection by using ping utility. Command: ping device’s LAN IP address (by default 192.168.1.1). If it cannot, check the Ethernet cabling. Verify that you are using latest Internet Explorer or Netscape Navigator or other browsers.
Page 72
AR396 User’s Guide Nslookup Click OK. A Command Prompt window is prompted. Enter the domain name like www.yahoo.com www.microsoft.com. The associated IP address will be shown as below In this case, you see multiple IP addresses associated with that domain name. It is common for Web server.
AR396 User’s Guide Appendix C - Specification A1. Hardware Specifications Local Interface • Four port 10/100BaseT Ethernet Switch (4 * RJ-45 connectors), IEEE 802.3u with MDI/MDIX auto-detection • Integrated 802.11b/g WLAN Access Point WAN ADSL Line Interface • Compliant with ITU-T G.992.1, G.992.2, G.992.3, G.992.5 and ANSI T1.413 Issue 2 •...
Page 74
AR396 User’s Guide Protection against IP and MAC address spoofing Configuration and Network Management Features SNMP GETs, SETs and TRAPs for four groups in MIB-II DHCP client and server for IP management UPnP Internet Gateway Device (IGD) compliance WEB for local or remote management...
XAVi Technologies’ repair procedures; or - XAVi Technologies’ tests disclose that the alleged defect is not due to defects in material or workmanship. XAVi Technologies’ liability shall be limited to either repair or replacement of the defective goods, at XAVi Technologies’...
You can help us serve you better by sending us your comments and feedback. Listed below are the addresses, telephone and fax numbers of our offices. You can also visit us on the World Wide Web at www.xavi.com.tw for more information. We look forward to hearing from you!
Need help?
Do you have a question about the AR396 and is the answer not in the manual?
Questions and answers