Table of Contents OVERVIEW THE PRODUCT .............. 1 Introduction ....................1 Features ......................2 Key Features....................2 Security Features ..................5 INSTALL THE HARDWARE..............6 OVERVIEW THE LEDS ............... 7 SETUP THE SOFTWARE..............8 PC Configuration ..................8 Configuring PCs to be Wired to the Router .......... 8 Configuring PCs to be Wireless Clients ..........
Page 3
Setup WAN for Cable Internet with Dynamic IP Assignment ... 54 Setup WAN for Cable Internet with Static IP Assignment ....56 ....................56 Setup WAN for ADSL Internet Using PPPoE .......... 57 Setup WAN for ADSL Internet using PPTP ..........58 Setup WAN for ADSL Internet using L2TP..........
Page 4
Reboot the System.................. 99 Change Your Login Password ............. 100 View System Information ..............101 ........................101 APPENDIX: LEARN ABOUT COMMONLY USED TERMS .... 102 APPENDIX: VIEW THE TECHNICAL SPECIFICATIONS ....106 1. For configurations using the integral antenna, the separation distance between the antenna(s) and any person’s body (including hands, wrists, feet and ankles) must be at least 2.5cm (1 inch).
Chip (SoC) solution, NP25G supports high-speed data transmission of up to 54Mbps. NetPassage NP25G combines 3 devices into one box. It works as a Wireless Access Point, which allows you to connect Wireless B/G devices to the network. It also has a 4-port full-duplex 10/100Mbps switch which connects your wired Ethernet devices directly to 4 PCs or to additional hubs and switches to create a larger network.
Features Key Features Wireless One-Touch Registration Remove the complexity of setting up a secured network – at a touch of a single access button, a shared security key is set up in the network. Page 2...
Page 7
Wireless multimedia (WMM) Suitable for simple applications that require Quality of Service (QoS), such as Voice over IP (VoIP), WMM prioritizes data traffic according to 4 access categories: Voice, Video, Best Effort and Background. Page 3...
Page 8
Bandwidth Control Available in Routing Mode, this feature gives the administrator the ability to manage the bandwidth of subscribers to prevent massive data transfers from slowing down the Internet access of other users. The Upload / Download bandwidth at WAN / LAN ports can be limited using either IP address or MAC address.
Page 9
Compatible with IEEE 802.11g and IEEE 802.11b standards Adopting the industry standard 802.11g standard, the router provides fast wireless access within your office or home network. Since it is fully backward compatible with 802.11b, you can safeguard your existing network investments. Page 5...
Page 10
Static IP, Dynamic IP, PPP over Ethernet, PPTP and L2TP WAN types Whether you are going to use your router for broadband Cable or ADSL modem connection sharing, you will be up and running in no time using our fuss-free web-based configuration menu. Page 6...
Page 11
Auto MDI/MDI-X crossover support on all Ports Forget the confusing past! We no longer need to use crossover cables for uplinking! The router supports Auto MDI/MDI-X on all its ports, auto-detecting the inserted cable type. Page 7...
Page 12
Virtual Servers based on Port-forwarding, IP-forwarding The router allows you to set up application servers such as FTP file servers and HTTP web servers based on IP-forwarding and Port- forwarding. Page 8...
Page 13
Domain Name System (DNS) Redirection To avoid repetitive setup of DNS addresses for every PC in your network, the router supports DNS redirection, which enables all DNS connection requests from your PCs to be automatically redirected by the router. Page 9...
Page 14
Static Routing By defining a Static Routing entry, you define a specific Router IP address to which data packets will be re-directed to reach a specific IP address or subnet. Page 10...
Page 15
Dynamic DNS The router supports Dynamic DNS. By automatically maintaining the relationship between the fixed URL name and the changing IP, it makes webhosting feasible, with easier implementation, control and flexibility. Page 11...
Page 16
De-Militarized Zone (DMZ) hosting The router supports a form of Virtual Server hosting known as DMZ so that you can operate specific applications that require the opening of multiple TCP/IP ports. Page 12...
Page 17
Universal Plug and Play (UPnP) UPnP allows you enjoy the benefits of NAT without elaborate configuration procedures. Working alongside an UPnP-aware operating system like Windows XP, other UPnP-enabled devices and applications can negotiate to open certain ports to traverse the NAT device. Page 13...
Page 18
Virtual Private Network (VPN) pass-through The router is an advanced device that will recognize tunneled packets (IPSec, PPTP) for VPN connections and allow them to pass through. Page 14...
Page 19
WDS2 WDS2 (Wireless Distributed System 2) links up access points to create a wider network in which mobile users can roam while still staying connected to available network resources. Page 15...
Security Features WPA-PSK and 64/128-bit WEP encryption support for wireless security The router uses a private key encryption known as Wired Equivalent Privacy protocol with key lengths of either 64-bit or 128- bit, so that data communication in your wireless network can be protected.
Page 21
Built-in “NAT” firewall As the router handles the incoming and outgoing traffic of data packets between the internal and external network, it checks whether incoming WAN packets are legitimate replies to requests from LAN users before allowing them to pass into the LAN. This checking provides effective firewall protection because rogue Internet packets will be automatically discarded.
Page 22
Stateful Packet Inspection (SPI) firewall More than just a “NAT” firewall, there is a powerful Stateful Packet Inspection (SPI) firewall in the router. Stateful inspection compares certain key parts of the packet to a database of trusted information. SPI Firewall is unlike the normal firewall that only checks the headers of the packets, it also scrutinizes the contents of the packets, ensuring the integrity of the packets.
Page 23
Internet Access Policies: Time-based Management, URL filtering, Packet filtering To complement the powerful firewall technologies incorporated into the router product, you can use the comprehensive set of security management features to regulate the types of Internet access permitted. You may set up time-based access policies and block objectionable websites from children, or even set up packet filtering rules to control the transmission of TCP, UDP packets for different ports.
Setup the Software PC Configuration Configuring PCs to be Wired to the Router The first step is to make sure the PC gets an IP address that it will use to communicate with the router and with other PCs across the network. You can begin by setting up your PC to function as a DHCP client, which will obtain an IP address automatically from router.
Page 26
Important: By default, Windows 98SE, ME, 2000 and XP have the TCP/IP protocol installed and set to obtain an IP address automatically. Page 22...
Page 27
Configuring PC to dynamically obtain an IP address for Windows 98SE or ME… 1. Click the Start button. Select Settings and click the Control Panel icon. Then double-click the Network icon. You will see the Network dialog on the right. 2.
Page 28
Configure PC to dynamically obtain IP address for Windows 2K or XP 1. Click the Start button. Select Settings and click the Control Panel icon. Then double-click the Network and Dial-up Connection (Windows 2000) or Network Connection (Windows XP) icon. 2.
Page 29
Configure PC with static IP address for Windows 98SE or ME 1. To begin the Static IP address configuration, follow steps 1 & 2 of Part 1(a) to get to the page on the right. 2. Click on the IP Address tab. Then type in an IP address and Subnet Mask as 192.168.168.X and 255.255.255.0 respectively,...
Page 30
Configure PC with static IP address for Windows 2K or XP 1. To begin the Static IP address configuration, follow steps 1, 2 & 3 of Part 1(b) to get to the page on the right. 2. Select Use the following IP address, and then key in 192.168.168.X for the IP address field, where X is any number...
Configuring PCs to be Wireless Clients The first step is similar to that of wired PCs connected to the Fast Ethernet. We have to ensure that the wireless client gets an IP address that it will use to communicate with the router and other PCs across the network.
Page 32
Configure Wireless Client for Windows XP 1. Right-click on Wireless Network Connection corresponding the wireless adapter you wish to connect with the router, and click on Properties. 2. On the dialog box presented, click the Wireless Networks tab, and click on the Add button. 3.
Perform Basic Router Setup In this basic setup, you will find information on how you may configure the router to function in your network and to access the Internet. Use UConfig The powerful uConfig utility has been developed to provide you hassle-free access to the router’s web-based configuration page.
Page 34
Step 3: When the uConfig window is prompted, click Yes to proceed. With the router selected under Products List, click on Open Web. Click on OK and you are done! Page 30...
Access Web Interface 1. Open your web browser. At the Address bar, enter the IP address of the router, as http://192.168.168.1 and hit the Enter key. Note: If your PC has a TCP/IP setting differing from the steps described in Part 1, or if you have changed but forgotten the management IP of the router, you may be unable to access the web-configuration page with step 1.
Setup Secured Wireless Connection Setup Secured Wireless Connection with One-Touch Registration The router supports the new Wireless One-Touch Registration feature using WSC (Wireless Simple Config). WSC allows users unfamiliar with network security to set up a secured wireless connection. The router has a Wireless One-Touch Registration button which when pressed lets router automatically setup a WPA-PSK secured wireless connection with the client computer.
Page 37
Step 2: On the Client computer, run the JumpStart program. In the Welcome to JumpStart page, select the Join a wireless network radio button. Click the Next button. Step 3: In the Join a wireless network page, select the Push the button on my access point radio button.
Step 4: Configuring the wireless network screen appears. The client device found NP25G and negotiating with NP25G to do the registration. Step 5: The Wireless Configuration Completed page displays, indicating that configuration was successfully. Click on the Finish button to exit the page.
Personal security. For other security modes, please refer to the Set Security Mode section. Setup Secured Wireless Connection without using One-Touch Registration Step 1: In the Connect to a network configuration page, select the secondary SSID (compex-np25g) and click the Connect button. Page 35...
Page 40
Step 2: Click the Connect Anyway button when prompted. Connection to the secondary SSID (compex-np25g) will commence. Step 3: Click the Close button to complete the connection. Page 36...
Page 41
Configuration – WLAN Setup – Virtual AP to view the Virtual AP List. Select the secondary SSID (compex-np25g). Step 5: Set the Security Mode to WPA-Personal and click on the Apply button. Please refer to the Setup WPA section for detailed configuration of the security mode.
Perform Configuration This part of the setup for the router is meant for the advanced user who requires more than the essential information to set up a wired/wireless network infrastructure. Adopting a top-down approach to explain the features found on the router, what follows is a detailed walkthrough of the configurable settings available within the web-based administration menu: Once you have successfully logged in, you shall find a comprehensive...
Configure Wireless Setup The router supports wireless LAN connectivity that is fully compliant with the IEEE 802.11g and IEEE 802.11b standards. ESSID : Enter a preferred name for the wireless network. Your wireless clients must be configured with the same ESSID (or sometimes simply referred to as SSID).
Set Security Mode Security plays a vital role in securing wireless 802.11 networks to prevent unauthorised users from accessing and using the network resources. Disable Security To disable the Security mode (not recommended), follow these instructions: Under CONFIGURATION command menu, you will find the Wireless Setup page.
Setup WEP Wired Equivalent Privacy is implemented in the network. It is a security protocol in a wireless local area network. To set the Security mode to WEP, follow these instructions: You can define up to 4 WEP keys. Click Edit to set the keys. For hexadecimal key entry: 1.
Page 46
For ASCII key entry: 1. Select the ASCII radio button. 2. Select the radio button of the key to be entered. 3. Select the key encryption mode from the drop down menu. 4. Fill in the key value. An ASCII value can take in any alphanumeric character and is NOT case-sensitive.
Setup WPA Follow these steps to setup the router for using WPA Personal, WPA2 Personal, and WPA Auto Personal. At the page, Specify the , by selecting either: • • • • Fill in the pre-shared network key: If you are using the format, your entry can consist of a minimum of 8 alphanumeric characters or a maximum of 63 alphanumeric characters.
Page 48
Set the to allow the router to automatically detect the cipher type to use. Enter the This is the length of time after which the router will automatically generate a new shared key to secure multicast/broadcast traffic among all stations that are communicating with it.
Setup WSC Follow these steps to setup the router for using WSC. At the page, in the WSC Particular Setup section, Specify whether you wish to enable the Pushbutton Mode. Pushbutton Mode is required for Wireless One-Touch Registration. If you wish to create a new PIN: Click on the Create New PIN button and in the Count New PIN page, enter in the desired PIN and click on the Count button.
Configure the Advanced WLAN Settings Follow these steps to change the radio settings of the router. 1. Click on WLAN Setup from the CONFIGURATION menu. 2 Select Advanced 1. Set the Beacon Interval (the time lapse between every beacon sent) to any value between 20 and 1000.
Set Wireless Multimedia Wireless Multimedia (WMM) is a QoS (Quality of Service) standard in IEEE802.11E that we have adopted to improve and support the user experience for multimedia, video, and voice applications by prioritizing data traffic. QoS can be realized through 4 different Access Categories (AC).
Page 52
Follow these steps to change the setup Wireless Multimedia on your router. 1. Click on WLAN Setup from the CONFIGURATION menu. 2. Select Advanced. Click Settings. Select to Enable Wireless Multimedia (WMM) 2. Enter the desired WMM parameters. Using the default parameters is recommended.
Page 53
WMM Parameters (for advanced users) AIFs (Arbitrary Arbitrary Inter-Frame Space is the minimum wait Inter-Frame time interval between the wireless medium Space) becoming idle and the start of transmission of a frame over the network. Cwmin Contention Window Minimum is the minimum (Contention random wait time drawn from this interval or Window...
Setup WDS2 WDS2 (Wireless Distributed System 2) links up access points to create a wider network in which mobile users can roam while still staying connected to available network resources. The wireless client and root access point has to be set up with the same channel frequency. This allows them to connect even when the link is lost, as the channel frequency setting is preserved.
Page 55
Follow these steps to change the setup the root access point. Click on from the menu. You will see the sub-menus expanded under . Click on Ensure that is set to Select Select the common to both access point 1 and access point 2. Page 51...
Page 56
Follow these settings to setup access point 2. Click on from the menu. You will see the sub-menus expanded under . Click on Select the common to both access point 1 and access point 2. Page 52...
Page 57
Click on from the menu. You will see the sub-menus expanded under . Click on Under , click on the button. Options for configuring WDS2 link: • By Remote AP MAC – Enter the Remote AP MAC • By Remote AP SSID – Uncheck the Remote AP MAC checkbox and enter the Remote AP SSID.
Setup Management Port Follow these steps to define the IP addresses. Click on from from the menu. In the page, refer to the table below to replace the default settings with appropriate values to suit the needs of your network. Click on the button to save your new parameters.
To Setup DHCP Server There are 3 DHCP Modes: • NONE Select NONE if you do not wish to use a DHCP server. • DHCP Server Select this mode to setup a DHCP server. • DHCP Relay Select this mode to setup a DHCP relay. By default, DHCP broadcast messages do not cross router interfaces.
Page 60
The following will guide you to setup the DHCP Server. Click on from from the menu. , refer to the table below to set the appropriate values to suit the needs of your network. Click on the button. Page 56...
Page 61
This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN.
Page 62
DHCP Lease Time This is the length of time that the client may use the assigned address before having to check with the DHCP server to see if the Address is still valid. Always use these DNS Enable this checkbox if you only want to use the servers DNS server(s) you have specified.
Page 63
The following will guide you to setup the DHCP Relay. Click on from from the menu. , refer to the table below to set the appropriate values to suit the needs of your network. Click on the button. Page 59...
Page 64
This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description DHCP Server IP This is the IP address of the DHCP server. DHCP Gateway IP Though the DHCP server usually also acts as the Default Gateway of the DHCP client, the router allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client.
View Active DHCP Leases Select from the menu. Go to the section and click on the button. The DHCP Active Leases table displays: The Host Name of the DHCP client. • The IP Address allocated to the DHCP client. • The Hardware (MAC) Address of the DHCP client.
Reserve IP Addresses for Predetermined DHCP Clients A reserved IP address is excluded from the pool of free IP addresses the DHCP server draws on for dynamic IP address allocation. For instance if you set up a publicly accessible FTP or HTTP server within your private LAN, while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
Page 67
Fill in: The IP Address to be reserved. The Hardware Address, in pairs of two hexadecimal values. Press the button to effect your new entry. page refreshes to display the currently reserved IP addresses. Page 63...
View Statistics Follow these steps to view the WLAN detailed connections statistics per WLAN station. 1. Click on WLAN Setup from the CONFIGURATION menu. 2. Select Statistics. 1. Select the WLAN connection to view statistics of. • Click Refresh to refresh the WLAN Connection List.
Set Virtual AP In Virtual AP a single wireless card can setup 2 virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes. Virtual AP delivers multiple services by network segmentation: making the network think there are many SSIDs available and channeling each connection through different segments to the respective virtual network segments on the Ethernet network.
Setup WAN A correct WAN Setup allows you to successfully share your Internet connection among the wired and wireless clients of the router. To do so, you need to identify the type of broadband Internet access you are subscribed to: Cable Internet where your ISP dynamically assigns a WAN IP address Cable Internet where your ISP provides you with a fixed WAN...
Setup WAN for Cable Internet with Dynamic IP Assignment The router is pre-configured to support a WAN type that dynamically obtains an IP address from the ISP. However, you may verify the WAN settings with the following steps: 1. Under the CONFIGURATION command menu, click on WAN Setup.
Page 73
Note: There are exceptional cases where additional configuration is required before your ISP allocates an IP address to the router. b. Certain ISPs log the MAC address of the first device used to connect to the broadband channel and will not release a WAN IP address unless the MAC address matches the one in their log.
Setup WAN for Cable Internet with Static IP Assignment If you have an ISP that leases a static WAN IP for your subscription, you will need to configure your router’s WAN type accordingly. For example, if the ISP provided you with the following setup information, you can set up your WAN as described below: IP Address 203.120.12.47...
Setup WAN for ADSL Internet Using PPPoE If you subscribe to an ADSL service using PPP over Ethernet (PPPoE) authentication, you can set up your router’s WAN type as follows. For example, you may configure an account whose username is ‘guest’ as described below: 1.
Setup WAN for ADSL Internet using PPTP If you subscribe to an ADSL service using Point-to-Point Tunneling Protocol (PPTP) authentication, you can set up your router’s WAN type from the steps that follow. For example, if the ISP provided you with the following set up information, you can set up your WAN as described below: IP Address 203.120.12.47...
Page 77
3. Fill in the information, followed by clicking the Apply button. • Select whether to enable DHCP. • Enter in the client IP Address. • Enter in the Network Mask. • Enter in the Gateway. • Enter in the Username of your Internet account.
Setup WAN for ADSL Internet using L2TP L2TP (Layer 2 Tunneling Protocol) is an extension to the PPP protocol used for Virtual Private Networks (VPNs) that supports multiple protocols and unregistered and privately administered IP addresses over the Internet. Select L2TP as your WAN Type at Select...
Configure Static Routing The router allows the network administrator to add a static routing entry into its routing table so that the router can re-route IP packets to another network router. This feature is very useful for a network with more than one router.
Page 80
1. Under CONFIGURATION command menu, click Routing to be brought to the System Routing Table shown (on the right). Initially, the table will contain the default routing entries built into the router. 2. Click on the Static Routing Table button above. 3.
Configure NAT The basic purpose of NAT is to share a single public IP address when there are multiple PCs in the private network by using different TCP ports to identify requests coming from different PCs. NAT is enabled by default.
Configure Virtual Server Based on DMZ Host When NAT is enabled, an Internet request from a client within the private network first goes to the router. Upon receiving a request, the router keeps track of which client is using which port number. Since any reply from Internet goes to the router first, the router (from the port number in the reply packet) knows to which client to forward the reply.
Page 83
Configure Virtual Servers Based on Port Forwarding Virtual Server based on Port Forwarding is implemented to forward Internet requests arriving at the router’s WAN interface, based on their TCP ports, to specific PCs in the private network. 1. Under the CONFIGURATION command menu, click on NAT.
Page 84
4. On the following Add Port Forward Entry screen, you can set up a Virtual Server for a Known Server type by selecting from a drop-down menu OR you can define a Custom Server. Page 80...
Page 85
For standard server applications (HTTP/FTP/POP3/Netmeeting), go to Known Server: 1. Enter the Private IP Address. 2. Pick the appropriate Server Type. 3. Enter the range in the From: and To: fields. 4. Click Add. To set up Internet applications not included under Known Server, go to...
Page 86
NAT Static Port Based Entries reflects the new entry. To assign more servers in your LAN: 1. Click Add. This will bring you back to Add New NAT Port-Based Entry. 2. Repeat Step 3 above. To delete table entries: 1. Select the entry to delete. 2.
Configure Virtual Server Based on IP Forwarding When you have subscribed for more than one IP address from your ISP, you may define Virtual Servers based on IP Forwarding for which all Internet requests, regardless of ports, are forwarded to defined computers in the private network.
Configure Bandwidth Control for WAN Bandwidth Control allows you to decide the available bandwidth in levels of 1kbit. Follow these steps to setup Bandwidth Control for WAN. Click Bandwidth Control from the CONFIGURATION menu. Select whether to Enable or Disable Bandwidth Control and click Apply.
Configure Bandwidth Control for LAN Bandwidth Control allows you to decide the available bandwidth in levels of 1kbit. Follow these steps to setup Bandwidth Control for LAN. Click Bandwidth Control from the CONFIGURATION menu. Select whether to Enable or Disable Bandwidth Control and click Apply.
Use Remote Management The advanced network administrator will be delighted to know that remote management is supported on the router. With this feature enabled, you will be able to access the router’s web-based configuration pages from anywhere on the Internet and manage your home/office network remotely.
Use Parallel Broadband The router is equipped with the exclusive Parallel Broadband technology to provide scalable Internet bandwidth with Load Balancing and Fail-Over Redundancy. By installing multiple units of the router cascaded using Parallel Broadband, you may balance the Internet traffic generated from your private network over multiple broadband connections - providing the network with aggregated bandwidth! In the event of a particular broadband connection failing, the router in cascade will use the...
Page 92
Before you begin, ensure that each of the routers within the network is properly configured to connect to its individual broadband Internet account. Then ensure that either: • each of the routers is connected to an Ethernet port in the network as illustrated above or •...
Configure Email Notification The router provides this feature to notify you by email when there is a change in the WAN IP address that was supplied to you earlier. 1. Under CONFIGURATION command menu, click WAN Setup, and you will be brought following screen.
Page 94
This is the mail account user’s name that should be entered if authentication is required. Password: This is the mail account user’s password that should be entered if authentication is required. Email address of Sender: This is the email address of the sender from whom the message will appear to come.
Use Static Address Translation If you use a notebook for work at the office, it is probable that you also bring it home to connect to the Internet and retrieve emails or surf the web. Since it is most likely that your office’s and your home’s broadband-sharing network subnets are differently configured, you would have to struggle with reconfiguring your TCP/IP settings each time you use the notebook in a different place.
Use DNS Redirection When you enter a URL in your Internet browser, the browser requests for a name-to-IP address translation from the Domain Name System (DNS) servers to be able to locate the web server hosting the website you want to access. The DNS server, in turn, looks for the answer in its local cache and if an appropriate entry is found, sends back this cached IP address to the browser.
Page 97
Note: For Internet access, please do NOT leave the DNS Server field of the PC’s TCP/IP Properties blank. Simply key in any legal IP address for it (e.g. 10.10.10.10) even though you do not have the exact DNS IP address. Page 93...
Page 98
Setup DDNS It is difficult to remember the IP addresses used by computers to communicate on the Internet. It gets even more complicated when ISPs change your public IP address regularly, as is the case when the Internet connection type is Dynamic IP or PPPoE with Dynamic IP. If you are doing some web hosting on your computer and are using Dynamic IP, Internet users would have to keep up with the changing IP address before being able to access your computer.
DDNS List 1. Under the HOME USER FEATURES command menu, click on Dynamic DNS Setup. 2. If have already created a list earlier, click on the Refresh button to update the list. 3. To add a new Dynamic DNS to the list, click on the Add button and you will see the Choice DDNS Provider page appear.
Select 2MyDNS as DDNS Service Provider 1. Under the Choice column in Choice DDNS Provider check the radio button next to the 2MyDNS – DNS Service Provider. Then click on the Next button to proceed. Enter your Domain Name. Select Auto Detect to let the DDNS server learn your current WAN IP address.
Page 101
3. The new domain is added to the Dynamic DNS list table. It will appear as a hyperlink that you can click to go back to the Dynamic DNS Edit page. From this page, you can update any of the parameters, delete the domain name or reset all parameters to be blank...
Select DtDNS as DDNS Service Provider 1. Under the Choice column in the table of Choice DDNS Provider check the radio button next to the DtDNS. Then click on the Next button to proceed. Enter your Domain Name. Select Auto Detect to let the DtDNS server learn your current WAN IP address.
Configure UPnP The following are issues that can arise when using NAT: Some network applications assume the IP address and port that • the client has been assigned are global routable values that can be used on the Internet directly. Often, this is not the case as the client has been assigned a private IP address that can only be used on the LAN.
Page 104
Although NAT traversal does not solve all NAT-related issues, it allows several applications to run behind NAT-enabled devices. It is recommended that you enable UPnP when running: Multi-player games • Peer-to-peer connections • Real-time communications • Remote Assistance • 1. Under the HOME USER FEATURES command menu, click on UPnP Configuration 2.
Configure Security Configure Packet Filtering As part of the comprehensive security package found on the router, you may perform IP packet filtering to selectively allow/disallow certain applications from connecting to the Internet. 1. Under the SECURITY CONFIGURATION command menu, click on Packet Filtering.
Page 106
4. Click on the Add button and you will be able to define the details of your Packet Filter Rule from the screen on the right. 4a). Enter Rule Name for this new packet filtering rule. For example, BlockCS 4b). Enter MAC Address for this new packet filtering rule.
Page 107
define (From) which port (To) which port, your rule applies. Single TCP port Here, you need only specify the source port in the (From) field. IP port You may here, leave both, the (From) as well as the (To) fields, blank. Here, the rule will apply to all ports.
Page 108
Filtering Configuration table will then be updated. 5. In this example, let us say we would like to block an application called CS from all PCs (any IP address within the network) from Monday to Friday 7am to 6pm, and this application is using the port number 27015.
Configure URL Filtering The router supports URL Filtering that allows you to easily set up rules to block objectionable web sites from your LAN users. 1. Under the SECURITY CONFIGURATION command menu, click on URL Filtering. 2. You may now define the URL Filter Type clicking...
Configure Firewall More than just a “NAT” firewall, there is a powerful Stateful Packet Inspection (SPI) firewall option that can be activated on the router. Stateful inspection compares certain key parts of the packet to a database of trusted information before allowing it through. Common hacker attacks like IP Spoofing, Port Scanning, Ping of Death and SynFlood can be easily thwarted with the router’s SPI firewall.
Page 111
Rule Name Enter a unique name to identify this firewall rule. Disposition This parameter determines whether the packets obeying Policy the rule should be accepted or denied by the firewall. Choose between Accept and Deny. Protocols Users are allowed to select the type of data packet from: TCP, UDP, ICMP, IGMP or ALL.
Page 112
IGMP Types This IP protocol is used to establish host memberships in particular multicast groups on a single network. The mechanisms of the protocol allow a host to inform its local router, using Host Membership Reports. Host Information that is from the Membership IGMP data packet.
Page 113
to their Time-To-Live (TTL) value available options are: 1. Equal 2. Less than 3. Greater than 4. Not equal Page 109...
View Firewall Logs When the router’s SPI firewall is in operation, valuable traffic patterns in your network will be captured and stored into the Firewall Logs. From these logs, you can extract detailed information about the type of data traffic, the time, the source and destination address/port as well as the action taken by the SPI firewall.
Administer the System Use the SYSTEM TOOLS Menu Use the Ping Utility This feature lets you determine whether your router can communicate (ping) with another network host. 1. Select Ping Utility under the SYSTEM TOOLS command menu. 2. Enter the IP address of the target host where the target host you want the router to ping to.
Set the Time The router is specially designed with Simple Network Time Protocol (SNTP) compatibility so that the router’s clock can be synchronized with that of the managing computer. The router’s clock is an important feature that affects all the time-based functions. It is a simple 2 steps process to ensure that the router’s clock is synchronized.
Upgrade the Firmware Significantly, the router is built with upgradability in mind. You can keep your router updated with the latest capabilities by means of a simple firmware upgrade obtainable from your vendor. 1. Select Firmware Upgrade under the SYSTEM TOOLS command menu. The screen displays a notice to inform you that the services being used will be terminated.
Settings Profile A useful feature is built into the router allowing you to save configuration profiles, especially the painstakingly crafted firewall security rules, and the intricate IP and Port settings of your Virtual Servers that effect a host of network applications. You may choose to save the configuration profile onto the router as a backup onto your hard disk drive.
Reboot the System This feature serves an important function so that the router settings will become effective. 1. Select Reboot Router under the SYSTEM TOOLS command menu. 2. The router will prompt you to confirm your decision before executing a reboot. Hit the Reboot button again when you are ready.
Change Your Login Password This feature serves an important security so that the router will not be misused or abused by unauthorized users. 1. Select Change Password under the SYSTEM TOOLS command menu. 2. Type in the Current Password, the New Password and allow verification by keying your new password in the Confirm Password field.
View System Information The About System page gives the administrator an overview of the router customizations/settings. This is a useful summary of the operating parameters you have put in place. 1. Click About System under the HELP command menu, and you will be brought to the following System Information page.
Appendix: Learn About Commonly Used Terms 10Base-T An IEEE Ethernet standard for 10Mbps data transmission using unshielded twisted pair wires 100Base-Tx An IEEE Ethernet standard for 100Mbps data transmission using two pairs of Category 5 UTP wire 802.11b An IEEE standard for wireless networking standard specifying a maximum data transmission rate of 11Mbps using DSSS modulation and an operating frequency of 2.4GHz.
Page 123
Driver A piece of software developed to interface a piece of hardware with its immediate upper-layer software (i.e. operating system) so that it can be recognized and operated. DSSS Direct Sequence Spread Spectrum is a modulation scheme employed by the 802.11b standard that uses a chipping code (redundant bit) during its transmission to reject interference.
Page 124
Membership Reports that it wants to receive messages addressed to a specific multicast group. All hosts conforming to level 2 of the IP multicasting specification require IGMP. IEEE It is the Institute of Electrical and Electronic Engineers. The IEEE is a professional technical body promoting the development and application of technology.
Page 125
particular network device (IP address) is available online. It works by sending out a packet to the device and waiting for its response. PPPoE Point-to-Point Protocol over Ethernet method encapsulation of PPP packets over Ethernet frames. PPTP PPTP stands for Point-to-Point Tunneling Protocol. It is a protocol that allows authorized users to extend their own networks through private “tunnels”...
Appendix: View the Technical Specifications Industry Standards Wired: IEEE 802.3 10Base-T IEEE 802.3u 100Base-Tx IEEE 802.3x Flow Control Wireless: - IEEE 802.11b IEEE 802.11g WAN Interface 1x Auto MDI/MDI-X RJ45 Ethernet Port for external Cable/ADSL modem WAN Type - Static IP - Dynamic IP - PPP over Ethernet (PPPoE) Point to Point Tunneling Protocol...
Page 127
WPA2-Personal WPA-Auto-Personal External Antenna Type 2dBi antenna IP Addressing All Classful/Classless subnets Built-in DHCP Server DHCP Reservation NAT Firewall Stateful Packet Inspection (SPI) Firewall Load-Balancing/ Fail-Over Parallel Broadband Redundancy Virtual Server IP and Port Forwarding, De-Militarized Zone hosting IP Packet Filtering Time-based, TCP Port, Source IP filtering URL Filtering IP Routing...
ICES 003 Statement This Class B digital apparatus complies with Canadian ICES-003. Declaration of Conformity Compex, Inc. declares the following: Product Name: Wireless-G Internet Router Model No.: NP25G conforms to the following Product Standards: The device complies with the Electromagnetic Compatibility Directive (89/336/EEC), Low Voltage Directive (73/23/EEC) and the Amendment Directive (93/68/EEC) issued by the Commission of the European Community.
Page 130
We value your feedback. If you have any suggestions on improving, we would like to hear from you. Please contact us at: Fax: (65) 62809947 Email: feedback@compex.com.sg We hope this manual was helpful to you. For more Compex information, please visit us at www.Compex.com.sg Page 126...
warning Class B: FEDERAL COMMUNICATIONS COMMISSION INTERFERENCE STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Need help?
Do you have a question about the NETPASSAGE NP25G and is the answer not in the manual?
Questions and answers