1. Manuals
  2. Brands
  3. 3Com Manuals
  4. Firewall router
  5. 3CRWDR300A-73
  6. User manual

3Com 3CRWDR300A-73 User Manual

Wireless 11n adsl
Hide thumbs Also See for 3CRWDR300A-73:
Table of Contents

Advertisement

Quick Links

Download this manual
Wireless 11n ADSL Firewall Router
User Guide
WL-603
3CRWDR300A-73
3CRWDR300B-73
http://www.3Com.com/
Part No. 10015880 Rev. AA
Published June 2008

Advertisement

Table of Contents
loading

Related Manuals for 3Com 3CRWDR300A-73

Summary of Contents for 3Com 3CRWDR300A-73

  • Page 1 Wireless 11n ADSL Firewall Router User Guide WL-603 3CRWDR300A-73 3CRWDR300B-73 http://www.3Com.com/ Part No. 10015880 Rev. AA Published June 2008...
  • Page 2 3Com Corporation reserves the right to revise this documentation and to make changes in content from time USA 01752-3064 to time without obligation on the part of 3Com Corporation to provide notification of such revision or change. 3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose.

  • Page 3: Table Of Contents

    ONTENTS BOUT UIDE Naming Convention Conventions Feedback About This User Guide Related Documentation NTRODUCING THE OUTER Wireless 11n Cable/DSL Firewall Router Router Advantages Package Contents Minimum System and Component Requirements Physical Features NSTALLING THE OUTER Introduction Safety Information Positioning the Router Using the Rubber Feet Wall Mounting Powering Up the Router...
  • Page 4 Disabling PPPoE and PPTP Client Software Disabling Web Proxy UNNING THE ETUP IZARD Accessing the Setup Wizard Wizard - Change Password Wizard - Time and Time Zone Wizard - Connection Type Setup Wizard - LAN Settings Wizard - Wireless Setting Wizard - Configuration Summary ONFIGURING THE OUTER...
  • Page 5 Firewall Special Applications Virtual Servers PC Privileges Schedule Rule URL Filter Advanced Security VLAN Static Routes DDNS SNMP Syslog Proxy ARP QoS Settings System Tools Restart Router Configuration Upgrade Time Zone Ping Traceroute DNS Lookup Status and Logs Status Routing Table Logs Traffic Statistics Support/Feedback...
  • Page 6 Managing the Router over the Network IP Addresses and Subnet Masks How does a Device Obtain an IP Address and Subnet Mask? DHCP Addressing Static Addressing Auto-IP Addressing ECHNICAL PECIFICATIONS 3Com Wireless 11n Cable/DSL Firewall Router Standards AFETY NFORMATION OFTWARE ICENSE GREEMENT BTAINING...
  • Page 7 LOSSARY EGULATORY OTICES NDEX...

  • Page 9: About This Guide

    LANs (Local Area Networks) and Internet Routers. If a release note is shipped with the 3Com Wireless 11n ADSL Firewall Router and contains information that differs from the information in this guide, follow the information in the release note.

  • Page 10: Conventions

    BOUT UIDE Conventions Table 1 Table 2 list conventions that are used throughout this guide. Table 1 Notice Icons Icon Notice Type Description Information note Information that describes important features or instructions. Caution Information that alerts you to potential loss of data or potential damage to an application, system, or device.

  • Page 11: Feedback About This User Guide

    ■ Document part number (on the title page) ■ Page number (if appropriate) ■ Example: 3Com Wireless 11n ADSL Firewall Router User Guide ■ Part Number 10015880 Rev. AA ■ Page 24 ■ Do not use this e-mail address for technical support questions. For...
  • Page 12 BOUT UIDE...

  • Page 13: Ntroducing The Router

    Wireless 11n ADSL The 3Com Wireless 11n ADSL Firewall Router is designed to provide a Firewall Router cost-effective means of sharing a single broadband Internet connection amongst several wired and wireless computers. The Router also provides protection in the form of an electronic “firewall”...
  • Page 14 1: I HAPTER NTRODUCING THE OUTER Figure 1 Example Network Without a Router When you use the Router in your network (Figure 2), it becomes your connection to the Internet. Connections can be made directly to the Router, or to an OfficeConnect Switch or Hub, expanding the number of computers you can have in your network.

  • Page 15: Router Advantages

    Four rubber feet ■ One Ethernet cable ■ One CD-ROM containing this User Guide, copies of the quick install ■ guide in various languages and the 3Com Detect application. Installation guide ■ Support and Safety sheet ■ Warranty sheet ■...

  • Page 16: Minimum System And Component Requirements

    1: I HAPTER NTRODUCING THE OUTER Minimum System Your Router requires that the computer(s) and components in your and Component network be configured with at least the following: Requirements A computer with an operating system that supports TCP/IP ■ networking protocols (for example Windows 2000/XP,/Vista, Unix, Mac OS 8.5 or higher).
  • Page 17 1 Power LED (Illuminated Logo) White The 3Com logo serves as power OK indicator. This LED will light if the router is receiving power from the power adapter. If it is not lit check the power adapter connections. Refer to Chapter 6 Troubleshooting.
  • Page 18 1: I HAPTER NTRODUCING THE OUTER The rear panel (Figure 4) of the Router contains one ADSL port, four LAN ports, one WiFi on/off button, a reset button, one power adapter socket, and one WPS button. Figure 4 Router - Rear Panel 1 Wireless Antennae The antennaes should be placed in a ‘V’...
  • Page 19 Physical Features 5 Reset Button If you want to reset your Router to factory default settings, or cannot access the web management interface (for example, due to a lost password), then you may use this button. Refer to Forgotten Password and Reset to Factory Defaults page 108 for further details.
  • Page 20 1: I HAPTER NTRODUCING THE OUTER...

  • Page 21: Nstalling The Router

    NSTALLING THE OUTER Introduction This chapter will guide you through a basic installation of the Router, including: Connecting the Router to the Internet. ■ Connecting the Router to your network. ■ Setting up your computers for networking with the Router. ■...

  • Page 22: Using The Rubber Feet

    ■ Air flow around the unit and through the vents in the side of the case ■ is not restricted. 3Com recommends you provide a minimum of 25 mm (1 in.) clearance. Using the Rubber Use the four self-adhesive rubber feet to prevent your Router from Feet moving around on your desk or when stacking with flat top units.

  • Page 23: Powering Up The Router

    Powering Up the Router Mounting To wall mount the unit: Instructions for Wood Walls 1 Make two holes 100 mm (3.9 in.) apart. 2 Fix two suitable screws directly into the wall, leaving their heads 3 mm (0.12 in.) clear of the wall surface. The screws should be at least 20 mm (0.75 in.) long.
  • Page 24 2: I HAPTER NSTALLING THE OUTER Figure 5 Connecting the Router 1 Run the provided telephone cable from the wall jack providing ADSL service to the ADSL port on your Router. When inserting an ADSL RJ-11 plug, be sure the tab on the plug clicks into position to ensure that it is properly seated.
  • Page 25 Connecting the Router Figure 6 Installing with a splitter Plain Old Telephone System (POTS) Voice Residential Connection Point (NID) Splitter Data Router Ethernet hub or switch...
  • Page 26 Router to communicate with the Internet. 3Com recommends that you perform the initial Router configuration from a computer that is directly connected to one of the LAN ports.

  • Page 27: Setting U P Your Computers

    ETTING OMPUTERS The Router has the ability to dynamically allocate network addresses to the computers on your network, using DHCP. However, your computers need to be configured correctly for this to take place. To change the configuration of your computers to allow this, follow the instructions in this chapter.
  • Page 28 3: S HAPTER ETTING OMPUTERS Figure 8 Local Area Properties Screen 6 Ensure that the options Obtain an IP address automatically, and Obtain DNS server address automatically are both selected as shown in Figure 9. Click OK. Figure 9 Internet Protocol (TCP/IP) Properties Screen 7 Restart your computer.

  • Page 29: Windows Vista

    Obtaining an IP Address Automatically Windows Vista 1 From the Windows Start Menu, select Settings > Network. 2 Click on Organize. Select Properties. 3 Click on Manage network > Connections. 4 Double click Local Area Connection. Select Properties and click continue. 5 A screen similar to (Figure 10) should appear.

  • Page 30: Windows Xp

    3: S HAPTER ETTING OMPUTERS Windows XP 1 From the Windows Start Menu, select Control Panel. 2 Click on Network and Internet Connections. 3 Click on the Network Connections icon. 4 Double click on LAN or High Speed Connection icon. A screen titled Local Area Connection Status will appear.

  • Page 31: Disabling Pppoe And Pptp Client Software

    Disabling PPPoE and PPTP Client Software Disabling PPPoE If you have PPPoE client software installed on your computer, you will and PPTP Client need to disable it. To do this: Software 1 From the Windows Start Menu, select Settings > Control Panel. 2 Double click on Internet Options.
  • Page 32 3: S HAPTER ETTING OMPUTERS...

  • Page 33: Unning The Setup Wizard

    The CD-ROM that comes with this Router contains, in addition to the Detect Application documentation, the 3Com Detect Application. To use 3Com Detect to connect to the Web interface of your Router, do the following: On the computer that is connected to your Router (either directly or on a network that is on the same subnet), insert the CD-ROM into its CD drive.
  • Page 34 UNNING THE ETUP IZARD Figure 13 3Com Detect Application If the computer has multiple network adapters, select the adapter that connects the computer to the network or the Router, click Next. You will then be offered the choice of searching the same subnet that your PC is on for a connected Router (default), or specifying an IP range.

  • Page 35: Accessing The Setup Wizard

    Accessing the Setup Wizard Figure 16 Router List Screen Accessing the Setup The Router setup program is Web-based, which means that it is accessed Wizard through your Web browser (Netscape Navigator 4.7 or higher, Internet Explorer 6.0 or higher, or Mozilla 1.2.1 or higher, or Apple’s Safari). To use the Setup Wizard: 1 Ensure that you have at least one computer connected to the Router.
  • Page 36 4: R HAPTER UNNING THE ETUP IZARD 4 To log in as an administrator, enter the password (the default password is admin) in the System Password field and click Log in (see Figure 18). Figure 18 Router Login Screen 5 When you have logged in, if you are logging in for the first time, the Country Selection screen ■...
  • Page 37 Accessing the Setup Wizard Figure 20 Welcome Screen Go to the Notice Board tab to see the current software information. To ■ view the Web help, click the Help button. Go to the Password tab to change the password (Figure 21).

  • Page 38: Change Password

    4: R HAPTER UNNING THE ETUP IZARD 3 Enter the time period in Login Timeout to set a maximum period of time for which the login session is maintained during inactivity (Default: 10 minutes). Wizard - To ensure the security of your Router, it is recommended that you choose Change Password a new password - this should be a mix of letters and numbers, and not easily guessed by others.

  • Page 39: Connection Type

    Accessing the Setup Wizard 1 Select the correct base date and time. 2 If you want to automatically synchronize the Router with a public time server, check the Enable box in the Using Time Server (NTP) field. 3 Select the time zone in the Set Time Zone drop-down menu. 4 Enter the time in the Synchronization Interval field.
  • Page 40 4: R HAPTER UNNING THE ETUP IZARD Dynamic/Fixed IP in 1483 Bridge Mode (For Multiple PCs) — see ■ page 43 and click Next. For further information on selecting a mode see Internet Settings on page...
  • Page 41 Accessing the Setup Wizard PPPoE PPPoE is often used for DSL connection. To set up the Router for use with a PPPoE (PPP over Ethernet) connection, use the following procedure: Figure 25 PPPoE Screen 1 Enter your user name in the Username field. 2 Enter your password in the Password field.
  • Page 42 4: R HAPTER UNNING THE ETUP IZARD PPPoA To set up the Router for use with a PPP over ATM (PPPoA) connection, use the following procedure: Figure 26 PPPoA Screen 1 Enter your user name in the Username field. 2 Enter your password in the Password field. 3 Re-type your password in the Retype Password field.
  • Page 43 Accessing the Setup Wizard Bridge Mode (for a single PC) To set up the Router for use with an RFC1483 bridged connection, use the following procedure: Figure 27 Bridged Mode Screen 1 Enter your VPI and VCI information in the VPI/VCI fields. 2 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu.
  • Page 44 4: R HAPTER UNNING THE ETUP IZARD Routing Mode over ATM To set up the Router for use with an RFC1483 routed connection, use the following procedure: Figure 28 Routing mode over ATM Screen 1 Enter your Internet IP address in the WAN IP field. 2 Enter the subnet mask in the Subnet Mask field.
  • Page 45 Accessing the Setup Wizard Dynamic/Fixed IP in 1483 Bridge Mode (For Multiple PCs) For bridge mode to work, you need to assign an IP address to the Router. You can either configure the Router to obtain an IP address automatically from a DHCP server or assign a fixed or static IP address to it.

  • Page 46: Setup Wizard - Lan Settings

    4: R HAPTER UNNING THE ETUP IZARD Setup Wizard - LAN The LAN Settings screen allows you to set the default IP address and Settings DHCP client IP range for the Router. Figure 30 The LAN Settings Screen 1 To change the Router’s default IP address, enter the new IP address in the IP Address field, and then enter the subnet mask in the Subnet Mask field.

  • Page 47: Wizard - Wireless Setting

    Accessing the Setup Wizard Wizard - Wireless The Wireless Settings screen allows you to set up the SSID and radio Setting channel used for the wireless connection. Figure 31 Wireless Setting Screen 1 Select the channel you want to use from the Channel drop-down menu. 2 Specify the SSID to be used by your wireless network in the SSID field.
  • Page 48 4: R HAPTER UNNING THE ETUP IZARD 64-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be setup on your Router and wireless client devices to use WEP. Figure 32 64-bit WEP Screen Security Mode is 64-bit WEP.
  • Page 49 Accessing the Setup Wizard 128-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be set up on your Router and wireless client devices to use WEP. Figure 33 128-bit WEP Security Mode is 128-bit WEP.
  • Page 50 4: R HAPTER UNNING THE ETUP IZARD WPA-PSK (no server) WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. If your network does not have a RADIUS server. Select the no server option. Note that in home and very small office deployments, PSK is typically used.
  • Page 51 Accessing the Setup Wizard WPA with Radius Server WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. This function requires that a RADIUS server is running on the network. Figure 35 WPA with Radius Server Screen 1 Select WPA with RADIUS server from the Security Mode drop-down menu.

  • Page 52: Wizard - Configuration Summary

    Configuration will appear. Verify the configuration information of the Router and then Summary click Apply to save your settings. 3Com recommends that you print out this page for your records. Figure 36 Configuration Summary Screen Your Router is now configured and ready for use.

  • Page 53: Onfiguring The Router

    ONFIGURING THE OUTER Navigating This chapter describes all the screens available through the Router Through the Router configuration screens, and is provided as a reference. To get to the Configuration configuration screens, enter the Router’s default IP in the location bar of screens your browser.

  • Page 54: Lan Settings

    Specify the IP address Lease Time. The default is One day. ■ Specify a local Domain Name. This field is optional. ■ Specify the IP address of 3Com NBX call processor. ■ The Router will also provide a list of all client computers connected to the Router.

  • Page 55: Dhcp Clients List

    DHCP server will reserve the IP address for each computer. 5 Specify the Local Domain Name for your network (this step is optional). 6 Enter the IP address of the NBX Call Processor in the 3Com NBX Call Processor field (this step is optional).
  • Page 56 5: C HAPTER ONFIGURING THE OUTER Host Name — The client machine’s host name, if configured. ■ MAC Address — The Media Access Control (MAC) address of the ■ client’s network card. Client Type — Whether the client is connected to the Router by wired ■...

  • Page 57: Wireless Settings

    Wireless Settings Wireless Settings The Wireless Settings screens allow you to configure the settings for the wireless connections. You can enable or disable the wireless connection for your LAN. When disabled, no wireless PCs can gain access to either the Internet or other PCs on your wired or wireless LAN through this Router.

  • Page 58: Configuration

    5: C HAPTER ONFIGURING THE OUTER Configuration The Wireless Configuration Screen allows you to turn on/ turn off the wireless function, and set up basic wireless settings. Figure 34 Wireless Configuration Screen To enable the wireless function: 1 Check Enable Wireless Networking checkbox. 2 Select the wireless channel you want to use from the Channel drop-down menu.

  • Page 59: Encryption

    Wireless Settings 8 Select to turn on/off the Protected Mode function. 9 Click Apply. Encryption This feature prevents any non-authorized party from reading or changing your data over the wireless network. Figure 35 Encryption Screen Select the wireless security mode that you want to use from the drop-down menu, and click Apply.
  • Page 60 5: C HAPTER ONFIGURING THE OUTER 64-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be setup on your Router and wireless client devices to use WEP. Figure 36 64-bit WEP Screen To setup 64-bit WEP: 1 You can enter the 64-bit WEP key manually: enter the WEP key as 5 pairs of hex digits (0-9, A-F).
  • Page 61 Wireless Settings 128-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be set up on your Router and wireless client devices to use WEP. Figure 37 128-bit WEP Screen To setup 128-bit WEP: 1 You can enter the 128-bit WEP key manually: enter your WEP key as 13 pairs of hex digits (0-9, A-F).
  • Page 62 5: C HAPTER ONFIGURING THE OUTER WPA-PSK (no server) WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. If your network does not have a RADIUS server. Select the no server option. Figure 38 WPA-PSK (no server) Screen 1 Select WPA-PSK (no server) from the WPA drop-down menu.
  • Page 63 Wireless Settings WPA (with RADIUS Server) WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. This function requires that a RADIUS server is running on the network. Figure 39 WPA (with RADIUS Server) Screen 1 Select WPA with RADIUS server from the Security Mode drop-down menu.

  • Page 64: Wps

    Wireless Provisioning Services (WPS) is a standard for easy and secure establishment of a wireless home network, created by the Wi-Fi Alliance. 3Com Wireless 11n Cable/DSL firewall Router supports the PIN method. Check the Enable WPS Function box. The WPS-PIN field will appear.

  • Page 65: Connection Control

    Wireless Settings Connection Control This feature is used to filter the clients based on their MAC addresses. Check the Enable MAC Address Filtering checkbox, the Connection Control screen will appear. Figure 41 Connection Control Screen There are two options available in the Access rule for registered MAC address field: if you click Allow, this means only the MAC addresses registered here ■...

  • Page 66: Client List

    5: C HAPTER ONFIGURING THE OUTER Client List You can view the list of all wireless clients that are connected to the Router. Figure 42 Client List Screen Click Refresh to update the list.

  • Page 67: Wmm

    Wireless Settings Wireless Multimedia (WMM) mode, which supports devices that meet the 802.11E QBSS standard. WMM uses traffic priority based on the four ACs; Voice, Video, Best Effort, and Background. The higher the AC priority, the higher the probability that data is transmitted. Check the Enable WMM Function box, the WMM parameters table will appear.

  • Page 68: Wds

    5: C HAPTER ONFIGURING THE OUTER The Router supports WDS (Wireless Distribution System). WDS enables one or more Access Points to rebroadcast received signals to extend range and reach, though this can affect the overall throughput of data. Figure 44 Wireless WDS Settings Screen 1 Check the Enable WDS Function checkbox.

  • Page 69: Advanced

    Wireless Settings Advanced The Advanced screen allows you to configure detailed settings for your wireless connection. Figure 46 Wireless Advanced Setting Screen There are six parameters that you can configure: Beacon Interval: this represents the amount of time between beacon ■...

  • Page 70: Internet Settings

    5: C HAPTER ONFIGURING THE OUTER Internet Settings You can configure the settings for your WAN port connection. This feature is used to configure the parameters for your Internet connection. The information necessary to complete these screens should be obtained from your ISP. Check with your ISP first to find out what type of connection you should choose.
  • Page 71 Internet Settings Disable Selecting this option means that you do not want your Router to connect to the Internet. Figure 48 Disable Internet Connection Screen Bridge Mode If your ISP limits access to the Internet to specific computers, this means that traffic to/from these computers only will be forwarded.
  • Page 72 5: C HAPTER ONFIGURING THE OUTER Dynamic IP You can configure the Router to obtain an IP address automatically from a DHCP server. Figure 50 Dynamic IP Screen 1 Select Dynamic IP from the Internet sharing protocol drop-down menu. 2 If the ISP requires you to input a Host Name, type it in the Host Name field.
  • Page 73 Internet Settings Static IP If your Service Provider has assigned a fixed IP address, enter the assigned IP address information on the screen. Figure 51 Static IP Screen 1 Select Static IP from the Internet sharing protocol drop-down menu. 2 Enter your IP address in the IP address assigned by your service provider field.
  • Page 74 5: C HAPTER ONFIGURING THE OUTER PPPoE PPP over Ethernet, provides routing for multiple PCs. To configure this function correctly, you should obtain the information from your ISP. Figure 52 PPPoE Settings Screen 1 Select PPPoE from the Internet sharing protocol drop-down menu. 2 Enter the user name assigned to you by your ISP in the Username field.
  • Page 75 Internet Settings PPTP If your ISP uses PPTP as the Internet connection protocol, setup the details on this screen. Figure 53 PPTP Screen 1 Select PPTP from the Internet sharing protocol drop-down menu. 2 Enter the PPTP Server information. 3 Enter the user ID in the User ID field. And enter the password assigned to you by your ISP in the Password field.
  • Page 76 5: C HAPTER ONFIGURING THE OUTER L2TP If your ISP uses L2TP as the Internet connection protocol, setup the details on this screen. Figure 54 L2TP Connection Screen 1 Select L2TP from the Internet sharing protocol drop-down menu. 2 Enter the L2TP Server information. 3 Enter the User ID and Password required by your ISP.

  • Page 77: Dns

    Internet Settings Domain Name Service (or Server) is an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, a DNS service must translate the name into the corresponding IP address.

  • Page 78: Clone Mac Address

    5: C HAPTER ONFIGURING THE OUTER Clone MAC address To configure the Hostname and Clone MAC Address information for your Router, select Internet Settings, then go to the Clone MAC address tab. The Hostname and MAC Address screen displays. Figure 56 Hostname and Clone MAC Address Screen 1 Some ISPs require a host name.

  • Page 79: Firewall

    (PoD) and Denial of Service (DoS) attacks. You can turn the firewall function off if needed. Turning off the firewall protection will not leave your network completely vulnerable to hacker attacks, but 3Com recommends that you leave the firewall enabled whenever possible.
  • Page 80 5: C HAPTER ONFIGURING THE OUTER To enable the firewall function: 1 Select the level of protection (High, Medium, or Low) that you desire from the Firewall level drop-down menu. 2 Click Apply. For low and medium levels of firewall protection, refer to Figure ■...
  • Page 81 Firewall Figure 59 High Level Firewall Protection Screen If you select high level of protection, you will need to configure additional parameters for the firewall. Fragmentation half-open wait - Configures the number of seconds ■ that a packet state structure remains active. When the timeout value expires, the Router drops the un-assembled packet, freeing that structure for use by another packet.
  • Page 82 5: C HAPTER ONFIGURING THE OUTER Total incomplete TCP/UDP sessions HIGH - Defines the rate of new ■ unestablished sessions that will cause the software to start deleting half-open sessions. Total incomplete TCP/UDP sessions LOW - Defines the rate of new ■...

  • Page 83: Special Applications

    Firewall Special Applications Special Applications let you choose specific ports to be open for specific applications to work properly with the Network Address Translation (NAT) feature of the Router. Figure 60 Special Applications Screen A list of popular applications has been included to choose from. Select the application from the Popular Applications drop-down menu.

  • Page 84: Virtual Servers

    5: C HAPTER ONFIGURING THE OUTER Virtual Servers The Virtual servers feature allows you to route external (Internet) calls for services such as a web server (port 80), FTP server (Port 21), or other applications through your Router to your internal network. Since your internal computers are protected by a firewall, machines from the Internet cannot get to them because they cannot be 'seen'.

  • Page 85: Dmz

    Firewall 3 Specify the public port that will be seen by clients on the Internet, and the LAN port which the traffic will be routed to. 4 You can enable or disable each Virtual Server entry by checking or unchecking the appropriate Enabled checkbox. 5 Click Apply to save the changes for each Virtual Server entry.

  • Page 86: Pc Privileges

    5: C HAPTER ONFIGURING THE OUTER PC Privileges The Router can be configured to restrict access to the Internet, email or other network services at specific days and times. Restriction can be set for a single computer, a range of computers, or multiple computers. You can define the traffic type permitted or not-permitted to the Internet.
  • Page 87 Firewall Figure 64 PC Privileges Add PC Screen 1 Enter a description in the Client PC Description field, and the IP address or IP address range into the Client PC IP Address fields. 2 To bypass the URL Filter and Content Filter, check the corresponding Bypass checkbox.

  • Page 88: Schedule Rule

    5: C HAPTER ONFIGURING THE OUTER Schedule Rule The Router can be configured to restrict access to the Internet, email or other network services at specific days and times. Define the time in this screen, and define the rules in the PC Privileges screen (see page 78).

  • Page 89: Url Filter

    Firewall URL Filter To configure the URL filter feature, use the table on the URL Filter screen to specify the Web sites (www.somesite.com) and/or keywords you want to filter on your network. For example, entering a keyword of xxx would block access to any URL that contains the string xxx.

  • Page 90: Advanced

    5: C HAPTER ONFIGURING THE OUTER Advanced The Advanced section allows you to set additional parameter details for the Router. You can configure: Security ■ VLAN ■ Static Routes ■ ■ DDNS ■ SNMP ■ Syslog ■ Proxy Arp ■ QoS Settings ■...
  • Page 91 Advanced NAT — Before you enable NAT (Network Address Translation), make ■ sure you have changed the administrator password. NAT is the method by which the Router shares the single IP address assigned by your ISP with the computers on your network. This function should only be disabled by advanced users, and if your ISP assigns you multiple IP addresses or you need NAT disabled for an advanced system configuration.
  • Page 92 5: C HAPTER ONFIGURING THE OUTER MSS Clamping — You might not be able to browse some Web sites or ■ to send email messages that contain attachments from an Internet Connection Sharing client computer if your outbound connection is through a Windows XP-based Internet Connection Sharing host computer that uses Point-to-Point Protocol over Ethernet (PPPoE).

  • Page 93: Vlan

    Advanced VLAN The VLAN screen allows you to setup VLAN groups. Figure 69 VLAN Screen Static Routes You can configure static routes in this screen. Figure 70 Static Routes Screen To add a static route entry to the table, click Add (see Figure 71).
  • Page 94 5: C HAPTER ONFIGURING THE OUTER Figure 71 Add Static Route Screen Enter the following information: Index — the index of the entry. ■ Network Address — the network address of the static route. ■ Subnet Mask — the subnet mask of the route. ■...

  • Page 95: Rip

    4 In the Version field, select 1 or 2. 3Com recommends that you only use RIPv1 if there is an existing RIP-enabled device on your network that does not support RIPv2. In all...
  • Page 96 5: C HAPTER ONFIGURING THE OUTER 5 Use the Poison Reverse drop-down menu to enable or disable Poison Reverse on the Router. Enabling Poison Reverse on your Router allows it to indicate to other RIP-enabled devices that they have both routes that point to each other, preventing data loops.

  • Page 97: Ddns

    Advanced DDNS The Router provides a list of dynamic DNS providers for you to choose from. Dynamic Domain Name Server (DDNS) enables you to map a static domain name to a dynamic IP address. Before you set up DDNS, you must obtain an account, password or key and static domain name from your DDNS provider.

  • Page 98: Snmp

    5: C HAPTER ONFIGURING THE OUTER SNMP SNMP (Simple Network Management Protocol) allows remote management of your Router by a PC that has an SNMP management agent installed. Check the Enable SNMP box, the table will appear. Figure 74 SNMP Screen To Configure SNMP Community: 1 In the Community column, enter the name of the SNMP communication channel.

  • Page 99: Syslog

    Advanced You can configure your Router to send status messages to the SNMP management agent if a problem occurs on the network. To configure SNMP traps: 1 In the IP Address field, enter the IP address of the PC to which you want your Router to send status messages.

  • Page 100: Proxy Arp

    5: C HAPTER ONFIGURING THE OUTER Proxy ARP Proxy ARP is the technique in which one host, usually a Router, answers ARP requests intended for another machine. By “faking” its identity, the Router accepts responsibility for routing packets to the “real” or intended destination.

  • Page 101: Qos Settings

    Advanced QoS Settings The QoS (Quality of Service) function allows you to differentiate your network traffic and provide it with high-priority forwarding service. The bandwidth gap between LAN and WAN may significantly degrade performance of critical network applications, such as VoIP, gaming, and VPN.

  • Page 102: Vpn

    5: C HAPTER ONFIGURING THE OUTER The Router has a Virtual Private Network (VPN) feature that provides a secure link between remote users and the corporate network by establishing an authenticated and encrypted tunnel for passing secure data over the Internet. The Router supports three modes of VPN operation: IPsec (IP Security) —...
  • Page 103 1 Check the Enable IPsec box. Figure 78 VPN Screen 2 Enter the Local ID Name of your VPN. 3 Click Add to create a new entry. Figure 79 Add New VPN Tunnel Configuration Screen...
  • Page 104 5: C HAPTER ONFIGURING THE OUTER On the VPN Tunnel Configuration screen, 1 Select IPSec as the VPN Tunnel Type. 2 Enter a descriptive name for the tunnel in the Tunnel Name field. 3 Remote VPN Gateway - select IP address, and then enter the IP address in the IP Address/Host Name field.
  • Page 105 Enter the following Phase II IPSec Parameters: Authentication Algorithm ■ Encrypt Algorithm ■ Key lifetime ■ ■ Diffie-Hellman Group ■ IKE Keep Alive - ■...

  • Page 106: System Tools

    5: C HAPTER ONFIGURING THE OUTER System Tools These screens allow you to manage different parameters of the Router and perform certain administrative functions. Restart Router Sometimes it may be necessary to restart (or reboot) the Router. Restarting the Router from this screen will not delete any of your configuration settings.

  • Page 107: Upgrade

    To restore the factory default settings, click Reset. Note that all of your current configuration will be lost. Upgrade From time to time 3Com may release new versions of the Router’s firmware. Firmware updates contain improvements and fixes to problems that may have existed.

  • Page 108: Time Zone

    5: C HAPTER ONFIGURING THE OUTER Time Zone You can set the time settings for the Router on this screen. Figure 83 Time Zone Screen The Router keeps time by connecting to a Network Time Protocol (NTP) server. This allows the Router to synchronize the system clock to the Internet.

  • Page 109: Ping

    System Tools Ping The ping tool is used to test if the network is working properly. Figure 84 Ping Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field, and click Ping. 2 Select from the Number of times to Ping drop-down menu. 3 The Router keeps a log of the ping test, click Clear Log to delete the records.

  • Page 110: Traceroute

    5: C HAPTER ONFIGURING THE OUTER Traceroute Traceroute is the program that shows you the route over the network between two systems, listing all the intermediate routers a connection must pass through to get to its destination. It can help you determine why your connections to a given server might be poor, and can often help you figure out where exactly the problem is.

  • Page 111: Dns Lookup

    System Tools DNS Lookup DNS Lookup is the process of resolving an IP address (i.e. 192.168.11.137) to a host name (i.e. xxxcompany.net). Figure 86 DNS Lookup Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field, and click Dns lookup.

  • Page 112: Status And Logs

    5: C HAPTER ONFIGURING THE OUTER Status and Logs You can use the Status Screen to view version numbers for your Router’s software and hardware and check the status of connections to WAN, LAN and WLAN interfaces. Status This screen shows Router status and statistics. Figure 87 Status Screen Routing Table This screen displays details for the default routing used by your Router...

  • Page 113: Logs

    Status and Logs Logs This screen shows any attempts that have been made to gain access to your network as well as the system activities. Figure 89 Logs Screen Click Help to view the help file. ■ Click Save to save the log to the hard disk as a text file. When ■...

  • Page 114: Support/Feedback

    3Com. Support Figure 91 Support Screen This screen shows support information. Feedback To provide feedback to 3Com, please click Provide Feedback, and this will connect you to the 3Com Web site. Figure 92 Feedback Screen This screen shows feedback information.

  • Page 115: Basic Connection Checks

    ROUBLESHOOTING Basic Connection Check that the Router is connected to your computers and to the ■ Checks telephone line, and that all the equipment is powered on. Check that the LAN Status and SYNC LEDs on the Router are illuminated, and that any corresponding LEDs on the NIC are also illuminated.

  • Page 116: Connecting To The Internet

    6: T HAPTER ROUBLESHOOTING If you cannot browse to the Router, use the winipcfg utility in ■ Windows 98/ME to verify that your computer has received the correct address information from the Router. From the Start menu, choose Run and then enter winipcfg. Check that the computer has an IP address of the form 192.168.1.xxx (where xxx is in the range 2-254), the subnet mask is 255.255.255.0, and the default Router is 192.168.1.1 (the address of the Router).

  • Page 117: Wireless Networking

    Wireless Networking 4 Press and hold the Reset button on the rear panel (see Figure 4 page 16) for 5 seconds. 5 The Router will restart, and when the start-up sequence has completed, browse to: http://192.168.1.1 and run the configuration wizard. You may need to restart your computer before you attempt this.
  • Page 118 6: T HAPTER ROUBLESHOOTING Additionally consider moving the wireless computer closer to the Router to confirm that the building structure or fittings are not adversely affecting the connectivity. If this resolves the problem consider relocating the wireless computer or the Router, or trying a different channel on the Router.

  • Page 119: Recovering From Corrupted Software

    Recovering from Corrupted Software Recovering from If the system software has become corrupted, the Router will enter a Corrupted Software “recovery” state; DHCP is enabled, and the LAN IP address is set to 192.168.1.1. Follow the instructions below to upload a new copy of the system software to a Router unit in this state.

  • Page 120: Frequently Asked Questions

    You can expand the number of connections available on your LAN by using hubs, switches and wireless access points connected to the Router. 3Com wireless access points and hubs and switches provide a simple, reliable means of expanding your network;...

  • Page 121: Ip Addressing

    IP A DDRESSING The Internet The Internet Protocol suite consists of a well-defined set of Protocol Suite communications protocols and several standard application protocols. Transmission Control Protocol/Internet Protocol (TCP/IP) is probably the most widely known and is a combination of two of the protocols (IP and TCP) working together.
  • Page 122 A: IP A PPENDIX DDRESSING For your network to work correctly, all devices on the network must have: The same sub-network address. ■ The same subnet mask. ■ The only value that will be different is the specific host device number. This value must always be unique.

  • Page 123: How Does A Device Obtain An Ip Address And Subnet Mask

    How does a Device Obtain an IP Address and Subnet Mask? This type of IP Address operates on a subnet mask of ‘255.255.0.0’. Table 4 for an example about how a network (only four computers represented) and a Router might be configured. Table 4 IP Addressing and Subnet Masking Device IP Address...
  • Page 124 A: IP A PPENDIX DDRESSING an IP address at random from the industry standard subnet of 169.254.x.x (with a subnet mask of 255.255.0.0). If two devices allocate themselves the same address, the conflict is detected and one of the devices allocates itself a new address. Automatic IP addressing support was introduced by Microsoft in the Windows 98 operating system and is also supported in Windows 2000 and Windows XP.

  • Page 125: Technical Specifications

    ECHNICAL PECIFICATIONS This section lists the technical specifications for the 3Com Wireless 11n ADSL Firewall Router. 3Com Wireless 11n Interfaces Cable/DSL Firewall WAN connection Router LAN connection — four 10 Mbps/100 Mbps dual speed Ethernet ports (10BASE-T/100BASE-TX) WLAN Interfaces IEEE draft 802.11n, Orthogonal Frequency Division Multiplexing (OFDM) Transmission rate: 802.11n 40MHz: 270Mbps, automatic fallback to 243,...
  • Page 126 B: T PPENDIX ECHNICAL PECIFICATIONS Modulation: CCK, BPSK, QPSK, OFDM Encryption: 40/64 bit WEP, 128 bit WEP, WPA/WPA2 Maximum clients: 128 O/P Power: 14dBm Standard IEEE 802.11b, Direct Sequence Spread Spectrum (DSSS) Transmission rate: 11Mbps, automatic fallback to 5.5, 2, or 1 Mbps Maximum channels: 13 Range up to 304.8m (1000ft) Sensitivity: 1, 2, 5.5 Mbps: -85 dBm;...

  • Page 127: 3Com Wireless 11N Cable/Dsl Firewall Router

    3Com Wireless 11n Cable/DSL Firewall Router EMC: FCC Part15 B EN 55022 EN 55024 EN 61000 EN 301 489-1 ICES-003 Radio FCC Part 15 C RSS-210 EN 300 328 Environmental: EN 60068 (IEC 68) *See “Regulatory Notices” for conditions of operation.
  • Page 128 B: T PPENDIX ECHNICAL PECIFICATIONS...

  • Page 129: Standards

    AFETY NFORMATION Important Safety Information WARNING: Warnings contain directions that you must follow for your personal safety. Follow all directions carefully. You must read the following safety information carefully before you install or remove the unit: WARNING: The Router generates and uses radio frequency (rf) energy. In some environments, the use of rf energy is not permitted.
  • Page 130 C: S PPENDIX AFETY NFORMATION WARNING: RJ-45 ports. These are shielded RJ-45 data sockets. They cannot be used as telephone sockets. Only connect RJ-45 data connectors to these sockets. Wichtige Sicherheitshinweise VORSICHT: Warnhinweise enthalten Anweisungen, die Sie zu Ihrer eigenen Sicherheit befolgen müssen. Alle Anweisungen sind sorgfältig zu befolgen.
  • Page 131 VORSICHT: Es sind keine von dem Benutzer zu ersetzende oder zu wartende Teile in dem Gerät vorhanden. Wenn Sie ein Problem mit dem Router haben, das nicht mittels der Fehleranalyse in dieser Anleitung behoben werden kann, setzen Sie sich mit Ihrem Lieferanten in Verbindung.
  • Page 132 C: S PPENDIX AFETY NFORMATION conditions ne sont maintenues que si l'équipement auquel il est raccordé fonctionne dans les mêmes conditions. AVERTISSEMENT: Il n’y a pas de parties remplaceables par les utilisateurs ou entretenues par les utilisateurs à l’intérieur du moyeu. Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des problèmes dans ce guide, contacter votre fournisseur.
  • Page 133 Subject to the restrictions set forth herein, the Software is licensed to be used on any workstation or any network server owned by or leased to you, for your internal use, provided that the Software is used only in connection with this 3Com product. You may reproduce and provide one (1) copy of the Software and Documentation for each such workstation or network server on which the Software is used as permitted hereunder.
  • Page 134 License Agreement amends such Limited Warranty Card or product manual as follows: 3Com's warranty and warranty disclaimers for the materials runs from 3Com to the purchasing Internet Service Provider only (not the end user of the materials), and such warranty is only for a total of fifteen (15) months from the date of manufacture.
  • Page 135 To take advantage of warranty and other service benefits, you must first Product to Gain register your product at: http://eSupport.3com.com/ Service Benefits 3Com eSupport services are based on accounts that are created or that you are authorized to access. Solve Problems 3Com offers the following support tool: Online 3Com Knowledgebase —...
  • Page 136 3Com as a separately ordered product. Separately orderable software releases and licenses are listed in the 3Com Price List and are available for purchase from your 3Com reseller.
  • Page 137 BTAINING UPPORT FOR RODUCTS To send a product directly to 3Com for repair, you must first obtain a return materials authorization number (RMA). Products sent to 3Com without authorization numbers clearly marked on the outside of the package will be returned to the sender unopened, at the sender’s expense.
  • Page 138 Spanish speakers, enter the URL: ■ http://lat.3com.com/lat/support/form.html Portuguese speakers, enter the URL: ■ http://lat.3com.com/br/support/form.html English speakers in Latin America, send e-mail to: ■ lat_support_anc@3com.com US and Canada — Telephone Technical Support and Repair All locations: All 3Com products: 1 800 876 3266...
  • Page 139 E: O PPENDIX BTAINING UPPORT FOR RODUCTS...
  • Page 140 LOSSARY 802.11b The IEEE specification for wireless Ethernet which allows speeds of up to 11 Mbps. The standard provides for 1, 2, 5.5 and 11 Mbps data rates. The rates will switch automatically depending on range and environment. 802.11g The IEEE specification for wireless Ethernet which allows speeds of up to 54 Mbps.
  • Page 141 LOSSARY Auto-negotiation Some devices in the range support auto-negotiation. Auto-negotiation is where two devices sharing a link, automatically configure to use the best common speed. The order of preference (best first) is: 100BASE-TX full duplex, 100BASE-TX half duplex, 10BASE-T full duplex, and 10BASE-T half duplex.
  • Page 142 DNS Server Address DNS stands for Domain Name System, which allows Internet host computers to have a domain name (such as 3com.com) and one or more IP addresses (such as 192.34.45.8). A DNS server keeps a database of host computers and their respective domain names and IP addresses, so that when a domain name is requested (as in typing “3com.com”...
  • Page 143 LOSSARY A device that regenerates LAN traffic so that the transmission distance of that signal can be extended. Hubs are similar to repeaters, in that they connect LANs of the same type; however they connect more LANs than a repeater and are generally more sophisticated. IEEE Institute of Electrical and Electronics Engineers.
  • Page 144 LOSSARY Local Area Network. A network of end stations (such as PCs, printers, servers) and network devices (hubs and switches) that cover a relatively small geographic area (usually not larger than a floor or building). LANs are characterized by high transmission speeds over short distances (up to 1000 metres).
  • Page 145 LOSSARY RJ-45 A standard connector used to connect Ethernet networks. The “RJ” stands for “registered jack”. Router A device that acts as a central hub by connecting to each computer's network interface card and managing the data traffic between the local network and the Internet.
  • Page 146 LOSSARY Traffic The movement of data packets on a network. Universal Plug and Universal Plug and Play is a system which allows compatible applications Play to read some of their settings from the Router. This allows them to automatically configure some, or all, of their settings and need less user configuration.
  • Page 147 LOSSARY WLAN Wireless Local Area Network. A WLAN is a group of computers and devices connected together by wireless in a relatively small area (such as a house or office). Wi-Fi Protected Access. A dynamically changing encryption mechanism for wireless networking. Encryption strength is 256 bit.
  • Page 148 ENERAL TATEMENTS The 3Com Wireless 11n ADSL Firewall Router (WL-603) must be installed and used in strict accordance with the manufacturer's instructions as described in the user documentation that comes with the product. This product contains encryption. It is unlawful to export out of the U.S. without obtaining a U.S. Export License.
  • Page 149 The correction of interference caused by such unauthorized modification, substitution or attachment will be the responsibility of the user. Changes or modifications not expressly approved by 3Com could void the user's authority to operate this equipment. FCC P 68 S TATEMENT This equipment complies with Part 68 of the FCC rules and the requirements adopted by the ACTA.
  • Page 150 This equipment may be operated in: Intended use: ADSL 802.11g/b/n Firewall Router For connection to ADSL networks NOTE: To ensure product operation is in compliance with local regulations, select the country in which the product is installed. Refer to 3CRWDR300A-73, 3CRWDR300B-73 User Guide.
  • Page 151 [Italian] questo RLAN device è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Latviski Ar šo 3Com Corporation deklarç, ka RLAN device atbilst [Latvian] Direktîvas 1999/5/EK bûtiskajâm prasîbâm un citiem ar to saistîtajiem noteikumiem. Lietuviø...
  • Page 152 3Com Corporation declara que este RLAN device está [Portuguese] conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/CE. Slovensko 3Com Corporation izjavlja, da je ta RLAN device v [Slovenian] skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 1999/5/ES. Slovensky 3Com Corporation týmto vyhlasuje, ze RLAN device...
  • Page 153 AFETY TATEMENT This product is intended to be supplied by a UL listed power unit marked “Class 2” or ‘LPS” rated 15V dc minimum 0.8A. ANASONIC ICENSED ATENT Only for xDSL Product UMBER Licensed under one or more of U.S. Patent Nos.6694470; 6735245; 6751254; 6765957; 6768772; 6873652; 6901547;...
  • Page 154 NDEX DNS Screen 55 Numbers DSL mode 29 128-bit WEP 46 Dynamic Domain Server (DDNS) Screen 70 128-bit WEP Screen 46 Dynamic IP Address 34 1483 Bridge Mode 55 Dynamic/Fixed IP for Bridge Mode Screen 35, 55 64-bit WEP Screen 47 DYNDNS 70 Access Control Screen 62 Editing DHCP Clients List Screen 42...
  • Page 155 NDEX configuring 56 Subnet Mask 85 MAC Address Filtering Screen 66 mode 30 TCP/IP 23, 25, 85 Technical NAT (Network Address Translation) 68 specifications 89 NAT-T (NAT Traversal) 68 standards 89 Network Time and Time Zone screen 76 addresses 85 TZO.com 70 Networking wireless 81...

This manual is also suitable for:

3crwdr300b-73

Table of Contents