Kraun ADSL2/2+ Wireless-N Router User Manual

Adsl2/2+ wireless-n router 300mbps
Hide thumbs Also See for ADSL2/2+ Wireless-N Router:

Advertisement

Quick Links

Manual
ADSL2/2+ Wireless-N
Router 300Mbps
User's Manual
Cod. KN.3N
Warning
The manufacturer is under no circumstances liable for any unauthorised modifications made to
the product by the user or any other parties which may compromise its conformity and safety.
www.kraun.it

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ADSL2/2+ Wireless-N Router and is the answer not in the manual?

Questions and answers

Summary of Contents for Kraun ADSL2/2+ Wireless-N Router

  • Page 1 Manual ADSL2/2+ Wireless-N Router 300Mbps User’s Manual Cod. KN.3N Warning The manufacturer is under no circumstances liable for any unauthorised modifications made to the product by the user or any other parties which may compromise its conformity and safety. www.kraun.it...
  • Page 2: Table Of Contents

    4.1.2 System Log 4.1.3 Statistics 4.2 Quick Start 4.3 Interface Setup 4.3.1 Internet Dynamic IP Address Static IP Address PPPoA/PPPoE Bridge Mode 4.3.2 LAN 4.3.3 Wireless WEP-64Bits WEP-128Bits WPA-PSK WPA2-PSK WPA-PSK/WPA2-PSK 4.4 Advanced Setup 4.4.1 Firewall 4.4.2 Routing 4.4.3 NAT 4.4.3.1 DMZ 4.4.3.2 Virtual Server 4.4.3.3 IP Address Mapping 4.4.4 QoS www.kraun.it...
  • Page 3 Filter 4.5.2.1 IP Filter 4.5.2.2 MAC Filter 4.5.2.3 Application Filter 4.5.2.4 URL 4.5.3 SNMP 4.5.4 UPnP 4.5.5 DDNS 4.5.6 CWMP 4.6 Maintenance 4.6.1 Administration 4.6.2 Time Zone NTP Server automatically PC’s Clock Manually 4.6.3 Firmware 4.6.4 System Restart 4.6.5 Diagnostic 4.7 Help Chapter 5. Appendix A: Specifications www.kraun.it...
  • Page 4: Package Contents

    One Power Adapter for Kraun ADSL2/2+ Wireless-N Router 300Mbps y Quick Installation Guide y One RJ45 cable y Two RJ11 cables y One ADSL splitter y One Resource CD, which includes this User Manual NOTE: Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact your distributor. Chapter 1. Introduction Thank you for choosing the Kraun ADSL2/2+ Wireless-N Router 300Mbps. 1.1 Product Overview The device is designed to provide a simple and cost-effective ADSL Internet connection for a private Ethernet or IEEE 802.11n/ IEEE 802.11g/ IEEE 802.11b wireless network. The Kraun-300N connects to an Ethernet LAN or computers via standard Ethernet ports. The ADSL connection is made using ordinary telephone line with standard connectors. Multiple workstations can be networked and connected to the Internet using a single Wide Area Network (WAN) interface and single global IP address. The advanced security enhancements, IP/MAC Filter, Application Filter and URL Filter can help to protect your network from potentially devastating intrusions by malicious agents from the outside of your network. Quick Start of the Web-based Utility is supplied and friendly help messages are provided for the configuration. Network and Router management is done through the Web-based Utility which can be accessed through local Ethernet using any web browser.
  • Page 5: Main Features

    Supports Dynamic DNS, UPnP and Static Routing. y Supports system log and flow Statistics. y Provides WPA-PSK/WPA2-PSK data security, TKIP/AES encryption security. y Provides 64/128-bit WEP encryption security and wireless LAN ACL (Access Control List). 1.3 Factory Defaults Item Default Value Common Default Settings Username admin Password admin IP Address 192.168.1.1 Subnet Mask 255.255.255.0 Wireless KRAUN_XXXXXX SSID KRAUN_the last 6 characters of MAC address (example KRAUN_123456) Wireless Security Enable Security Type WPA-PSK/WPA2-PSK Encryption TKIP+AES WPA KEY KRAUN_KN.3N DHCP Server Enable www.kraun.it...
  • Page 6: Chapter 2. Hardware Installation

    The ADSL negotiation is in progress. ADSL The LINE port is linked up. The LINE port is linked down. There is no successful PPP connection or the Router works on Bridge mode. Internet A successful PPP connection has been built. Flash Data is being transferred over the Internet. The wireless function is enabled but no data is being transmitted. WLAN Flash There is wireless data being transmitted. The wireless function is disabled. Flash Data is being transferred over the 1-4 (LAN) port. There is a successful connection on the corresponding 1-4 (LAN) port but no LAN(1-4) activity. There is no connection on the corresponding 1-4 (LAN) port or the connection is abnormal. A wireless device is connecting to the network by WPS function. This process will Flash last in the first 2 minutes and then turn off. A wireless device has been successfully added to the network by WPS function. The WPS LED will keep on for about 5 minutes and then turn off. The WPS function is disabled or a wireless device is failed to add the network. www.kraun.it...
  • Page 7: The Back Panel

    Method two: Restore the default setting from “Maintenance-SysRestart” of the Router’s Web-based Utility. y LINE: Through the port, you can connect the router with the telephone. Or you can connect them by an external separate splitter. For details, please refer to 2.4. y Antenna: Used for wireless operation and data transmit. 2.3 Installation Environment y The Product should not be located where it will be exposed to moisture or excessive heat. y Place the Router in a location where it can be connected to the various devices as well as to a power source. y Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard. y The Router can be placed on a shelf or desktop. y Keep away from the strong electromagnetic radiation and the device of electromagnetic sensitive. www.kraun.it...
  • Page 8: Connecting The Router

    Manual 2.4 Connecting the Router Before installing the device, please make sure your broadband service provided by your ISP is available. If there is any problem, please contact your ISP. Before cable connection, cut off the power supply and keep your hands dry. You can follow the steps below to install it. Step 1: Connect the ADSL Line. Method one: Plug one end of the twisted-pair ADSL cable into the ADSL LINE port on the rear panel of Kraun-300N, and insert the other end into the wall socket. Method two: You can use a separate splitter. External splitter can divide the data and voice, and then you can access the Internet and make calls at the same time. The external splitter has three ports: • LINE: Connect to the wall jack • PHONE: Connect to the phone sets • MODEM: Connect to the ADSL LINE port of Kraun-300N Plug one end of the twisted-pair ADSL cable into the ADSL LINE port on the rear panel of Kraun-300N. Connect the other end to the MODEM port of the external splitter. Step 2: Connect the Ethernet cable. Attach one end of a network cable to your computer’s Ethernet port or a regular hub/switch port, and the other end to the LAN port on the Kraun-300N. Step 3: Power on the computers and LAN devices. Step 4: Attach the power adapter. Connect the power adapter to the power connector on the rear of the device and plug in the adapter to a wall outlet or power extension.
  • Page 9: Chapter 3. Quick Installation Guide

    Manual Chapter 3. Quick Installation Guide 3.1 Configure PC After you directly connect your PC to the Kraun-300N or connect your adapter to a Hub/Switch which has con- nected to the Router, you need to configure your PC’s IP address. Follow the steps below to configure it. Step 1: Click the Start menu on your desktop, right click My Network Places, and then select Properties (shown in Figure 3-1). Figure 3-1 Step 2: Right click Local Area Connection (LAN), and then select Properties. Figure 3-2 www.kraun.it...
  • Page 10 Manual Step 3: Select General tab, highlight Internet Protocol (TCP/IP), and then click the Properties button. Figure 3-3 Step 4: Configure the IP address as Figure 3-4 shows. After that, click OK. Figure 3-4 www.kraun.it...
  • Page 11 Is the connection between your PC and the Router correct? The LEDs of LAN port which you link to the device and the LEDs on your PC’s adapter should be lit. Is the TCP/IP configuration for your PC correct? If the Router’s IP address is 192.168.1.1, your PC’s IP address must be within the range of 192.168.1.2 ~ 192.168.1.254. www.kraun.it...
  • Page 12: Login

    Manual 3.2 Login Once your host PC is properly configured, please proceed as follows to use the Web-based Utility: Start your web browser and type the private IP address of the Router in the URL field: 192.168.1.1. After that, you will see the screen shown below, enter the default User Name admin and the default Password admin, and then click OK to access to the Quick Setup screen. You can follow the steps below to complete the Quick Setup. Figure 3-7 Step 1: Select the Quick Start tab, then click RUN WIZARD, and you will see the next screen. Click the NEXT button. Figure 3-8 www.kraun.it...
  • Page 13 Manual Step 2: Configure the time for the Router, and then click the NEXT button. Figure 3-9 Step 3: Select the connection type to connect to the ISP (We select PPPoE/PPPoA mode for example here), and then click the NEXT button. Figure 3-10 Step 4: Configure the following options provided by your ISP: Username, Password, VPI, VCI and Connection Type. Then click Next. Figure 3-11 www.kraun.it...
  • Page 14 Manual Step 5: Configure the rules for the WLAN, and click NEXT. Figure 3-12 NOTE: If the Access Point is activated, the wireless function will be available even without the external antenna because of an additional printed antenna. To adopt the wireless security protection measures, please refer to section 4.3.3. Step 6: Click NEXT to finish the Quick Start. Figure 3-13 www.kraun.it...
  • Page 15: Chapter 4. Software Configuration

    Manual Chapter 4. Software Configuration This User Guide recommends using the “Quick Installation Guide” for first-time installation. For advanced users, if you want to know more about this device and make use of its functions adequately, maybe you will get help from this chapter to configure the advanced settings through the Web-based Utility. After your successful login, you can configure and manage the device. There are main menus on the top of the Web-based Utility; submenus will be available after you click one of the main menus. On the center of the Web- based Utility, there are the detailed configurations or status information. To apply any settings you have altered on the page, please click the SAVE button. 4.1 Status Choose “Status”, you can see the next submenus: Device Info, System Log and Statistics. Click any of them, and you will be able to configure the corresponding function. Figure 4-1 Click any of them, and you will be able to view the corresponding information. 4.1.1 Device Info Choose “StatusDevice Info” menu, and you will be able to view the device information, including LAN, WAN and ADSL. The information will vary depending on the settings of the Router configured on the Interface Setup screen. Figure 4-2 www.kraun.it...
  • Page 16: System Log

    Manual NOTE: Click the other submenus System Log or Statistics in Figure 4-2, and you will be able to view the system log and traffic statistics about the Router. 4.1.2 System Log Choose “StatusSystem Log” menu, and you will be able to query the logs of the Router. Figure 4-3 The Router can keep logs of all traffic. You can query the logs to find what happened to the Router. Click the CLEAR LOG button to clear the logs. Click the SAVE LOG button to save the logs. 4.1.3 Statistics Choose “StatusStatistics” menu, and you will be able to view the network traffic over Ethernet, ADSL and WLAN. Figure 4-4 www.kraun.it...
  • Page 17 Transmit Transmit total Bytes The total bytes transmitted over the Ethernet port. Statistics The collision occurred over the Ethernet port when data is being transmit- Transmit Collision ted. Transmit Error Frames The error frames over the Ethernet port when data is being transmitted. Receive Frames The frames received over the Ethernet port. Receive Multicast Frames The multicast frames received over the Ethernet port. Receive Receive total Bytes The total bytes received over the Ethernet port. Statistics Receive CRC Errors The CRC errors occurred over the Ethernet port when data is being received. Receive Under-size Frames The Under-size frames received over the Ethernet port. y Select ADSL, and you will see the statistics table as below. www.kraun.it...
  • Page 18: Quick Start

    Tx Frames Count mitted. Transmit Statistics Tx Errors Count The errors occurred over the WLAN when wireless data is being transmitted. Tx Drops Count The drops occurred over the WLAN when wireless data is being transmitted. The frames received over the WLAN when wireless data is being transmit- Rx Frames Count ted. Receive Statistics Rx Errors Count The errors occurred over the WLAN when wireless data is being received. Rx Drops Count The drops occurred over the WLAN when wireless data is being received. Click the Refresh button to refresh immediately. 4.2 Quick Start Please refer to “3.2 Login”. 4.3 Interface Setup Choose “Interface Setup”, you can see the next submenus: Internet and LAN. Figure 4-5 Click any of them, and you will be able to configure the corresponding function. www.kraun.it...
  • Page 19: Internet

    • QoS: Select the Quality of Service types for this Virtual Circuit, including CBR (Constant Bit Rate), UBR (Unspecified Bit Rate) and VBR (Variable Bit Rate). These QoS types are all controlled by the parameters specified below, including PCR (Peak Cell Rate), SCR (Sustained Cell Rate) and MBS (Maximum Burst Size), please configure them according to your needs. y Encapsulation: There are four connection types: Dynamic IP Address, Static IP Address, PPPoA/PPPoE and Bridge Mode. Please choose the designed type that you want to use. After that, you should follow the configuration below to proceed. www.kraun.it...
  • Page 20: Dynamic Ip Address

    ADSL Router will periodically send routing information and accept routing information, and then incorporate them into routing table. IN only means the ADLS router will only accept but will not send RIP packet. OUT only means the ADLS router will only send but will not accept RIP packet. y Multicast: Select IGMP version, or disable the function. IGMP (Internet Group Multicast Protocol) is a session- layer protocol used to establish membership in a multicast group. The ADSL ATU-R supports both IGMP version 1 (IGMP v1) and IGMP v2. Select “Disabled” to disable it. y MAC Spoofing: Enable the MAC Spoofing, and enter a MAC address to configure the WAN port. It makes your inside network appear as a device with this MAC address to the outside world. www.kraun.it...
  • Page 21: Static Ip Address

    Manual 2) Static IP Address Select this option if your ISP provides static IP information to you. You should set static IP address, IP subnet mask, and gateway address in the screen below (shown in Figure 4-8). Figure 4-8 NOTE: Each IP address entered in the fields must be in the appropriate IP form, which is four IP octets separated by a dot (x.x.x.x), such as 192.168.1.100. The Router will not accept the IP address if it is not in this format. www.kraun.it...
  • Page 22: Pppoa/Pppoe

    Manual 3) PPPoA/PPPoE Select this option if your ISP requires you to use a PPPoE connection. This option is typically used for DSL servic- es. Select Dynamic PPPoE to obtain an IP address automatically for your PPPoE connection. Select Static PPPoE to use a static IP address for your PPPoE connection. Please enter the information accordingly. Figure 4-9 y Servicename: Enter a name to mark current connection, or you can leave it blank. y Username: Enter your username for your PPPoE/PPPoA connection. y Password: Enter your password for your PPPoE/PPPoA connection. y Encapsulation: For both PPPoE/PPPoA connection, you need to specify the type of Multiplexing, either LLC or VC Mux. y Bridge Interface: Activate the option, and the Router can also work in Bridge mode. y Connection: For PPPoE/PPPoA connection, you can select Always on or Connect on-Demand or Connect Manually. Connect on demand is dependent on the traffic. If there is no traffic (or Idle) for a pre-specified period of time), the connection will tear down automatically. And once there is traffic send or receive, the connection will be automatically on. www.kraun.it...
  • Page 23: Bridge Mode

    Manual y Static/Dynamic IP Address: For PPPoE/PPPoA connection, you need to specify the public IP address for this ADSL Router. The IP address can be either dynamically (via DHCP) or given IP address provided by your ISP. For Static IP, you need to specify the IP address, Subnet Mask and Gateway IP address. y Default Route: You should select Yes to configure the PVC as the default gateway to internet from this device. y MAC Spoofing: Enable the MAC Spoofing, and enter a MAC address to configure the WAN port. It makes your inside network appear as a device with this MAC address to the outside world. 4) Bridge Mode If you select this type of connection, the modem can be configured to act as a bridging device between your LAN and your ISP. Bridges are devices that enable two or more networks to communicate as if they are two seg- ments of the same physical LAN. Figure 4-10 NOTE: After you finish the Internet configuration, please click SAVE to make the settings take effect. www.kraun.it...
  • Page 24: Lan

    • Direction: Select this option to specify the RIP direction. None is for disabling the RIP function. Both means the ADSL Router will periodically send routing information and accept routing information, and then incorporate them into routing table. IN only means the ADLS router will only accept but will not send RIP packet. OUT only means the ADLS router will only send but will not accept RIP packet. • Multicast: Select IGMP version, or disable the function. IGMP (Internet Group Multicast Protocol) is a session-layer protocol used to establish membership in a multicast group. The ADSL ATU-R supports both IGMP version 1 (IGMP v1) and IGMP v2. Select “Disabled” to disable it. • IGMP Snoop: Enable the IGMP Snoop function if you need. y DHCP Server: Select Enabled, then you will see the screen below (shown in Figure 4-12). The Router will work as a DHCP Server; it becomes the default gateway for DHCP client connected to it. DHCP stands for Dynamic Host Control Protocol. The DHCP Server gives out IP addresses when a device is booting up and request an IP address to be logged on to the network. That device must be set as a DHCP client to obtain the IP address automatically. By default, the DHCP Server is enabled. The DHCP address pool contains the range of the IP address that will automatically be assigned to the clients on the network. www.kraun.it...
  • Page 25 Current Pool Summary: Click the button, then you can view the IP addresses that the DHCP Server gives out. NOTE: If Use Auto Discovered DNS Server Only is selected in DNS Relay, this router will accept the first re- ceived DNS assignment from one of the PPPoA, PPPoE or MER/DHCP enabled PVC(s) during the connec- tion establishment. If Use User Discovered DNS Server Only is selected in DNS Relay, it is necessary for you to enter the primary and optional secondary DNS server IP addresses. After type in the address, click SAVE button to save it and invoke it. y DHCP Relay: Select Relay, then you will see the next screen (shown in Figure 4-13), and the Router will work as a DHCP Relay. A DHCP relay is a computer that forwards DHCP data between computers that request IP addresses and the DHCP server that assigns the addresses. Each of the device’s interfaces can be configured as a DHCP relay. If it is enabled, the DHCP requests from local PCs will forward to the DHCP server runs on WAN side. To have this function working properly, please run on router mode only, disable the DHCP server on the LAN port, and make sure the routing table has the correct routing entry. Figure 4-13 y DHCP Server IP for Relay Agent: Enter the DHCP server IP Address runs on WAN side. NOTE: If you select Disabled, the DHCP function will not take effect. www.kraun.it...
  • Page 26: Wireless

    • Access point: Select Activated to allow wireless station to associate with the access point. • Channel: Select the channel you want to use from the drop-down List of Channel. This field determines which operating frequency will be used. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point. • Beacon Interval: Enter a value between 20-1000 milliseconds. The Beacon Interval value indicates the frequency interval of the beacon. A beacon is a packet broadcast by the Router to synchronize the wireless network. The default value is 100. www.kraun.it...
  • Page 27 • Broadcast SSID: When wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the Router. To broadcast the Router’s SSID, keep the default setting. If you don’t want to broadcast the Router’s SSID, select “No”. • Use WPS: Use WPS (Wi-Fi Protected Setup) function, you can add a new wireless device to an existing network quickly. To Use WPS, keep the default setting, and configure the parameters in WPS Settings. If you don’t want to Use WPS, select “No”, then you will see the screen as shown below. Figure 4-15 • SSID: Wireless network name shared among all points in a wireless network. The SSID must be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32 characters (use any of the characters on the keyboard). Make sure this setting is the same for all stations in your wireless network. Type the desired SSID in the space provided. • Authentication Type: Select an authentication type from the drop-down list, which allows you to configure security features of the wireless LAN interface. Options available are: Disabled, WEP-64Bits, WEP-128Bits, WPA-PSK, WPA2-PSK, and WPA-PSK/ WPA2-PSK. www.kraun.it...
  • Page 28: Wep-64Bits

    Manual 1) WEP-64Bits To configure WPA-64Bits settings, select the WPA-64Bits option from the drop-down list. The menu will change to offer the appropriate settings. WPA-64Bits is a data privacy mechanism based on a 64-bit shared key algo- rithm, as described in the IEEE 802.11g standard. Figure 4-16 2) WEP-128Bits To configure WPA-64Bits settings, select the WPA-64Bits option from the drop-down list. The menu will change to offer the appropriate settings. 128-bit is stronger than 64-bit. Figure 4-17 3) WPA-PSK To configure WPA-PSK settings, select the WPA-PSK option from the drop-down list. The menu will change to offer the appropriate settings. WPA-PSK requires a shared key and does not use a separate server for authentica- tion. PSK keys can be ASCII or Hex type. Figure 4-18 www.kraun.it...
  • Page 29: Wpa2-Psk

    • AES (Advanced Encryption Standard) - A security method that uses symmetric 128-bit block data encryption. y Pre-Shared Key: Enter the key shared by the Router and your other network devices. It must have 8-63 ASCII characters or 64 Hexadecimal digits. 4) WPA2-PSK To configure WPA2-PSK settings, select the WPA2-PSK option from the drop-down list. The menu will change to offer the appropriate settings. WPA2-PSK requires a shared key and does not use a separate server for authenti- cation. PSK keys can be ASCII or Hex type. Figure 4-19 5) WPA-PSK/WPA2-PSK To configure WPA-PSK/WPA2-PSK settings, select the WPA-PSK/WPA2-PSK option from the drop-down list. The menu will change to offer the appropriate settings. WPA-PSK/WPA2-PSK requires a shared key and does not use a separate server for authentication. PSK keys can be ASCII or Hex type. WPA-PSK/WPA2-PSK is more flexible than WPA-PSK or WPA2-PSK. Figure 4-20 y WPS Settings: These are the settings of the WPS. If the wireless adapter supports Wi-Fi Protected Setup and the PIN method, you can add it to the network by PIN with the following two methods. Click PIN code, you will see the screen as shown below. Figure 4-21 www.kraun.it...
  • Page 30 Step 1: For the configuration of the wireless adapter, please choose “Enter a PIN into my access point or a registrar” in the configuration utility of the WPS, and get the PIN code on the screen as below, then click Next. The WPS Configuration Screen of Wireless Adapter Step 2: For the Router, keep PIN code selected and enter the PIN code of the wireless adapter in the field after enrollee PIN code as shown below. Then click Start WPS. Figure 4-22 Method Two: Enter the PIN from my Router Step 1: Get the Current PIN code of the Router from AP self PIN code in Figure 4-22(each Router has its unique PIN code, here takes the PIN code 55924054 of this Router for example). Step 2: For the configuration of the wireless adapter, please choose “Enter a PIN from my access point” in the configuration utility of the WPS as below, and enter the PIN code of the Router into the field after “Access Point PIN”. Then click Next. www.kraun.it...
  • Page 31 • SSID: Wireless network name shared among all points in a wireless network. The SSID must be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32 characters (use any of the characters on the keyboard). Make sure this setting is the same for all stations in your wireless network. Type the desired SSID in the space provided. • Authentication Type: Select an authentication type from the drop-down list, which allows you to configure security features of the wireless LAN interface. Options available are: Disabled, WEP-64Bits, WEP-128Bits, WPA-PSK, WPA2-PSK, and WPA-PSK/ WPA2-PSK. y WDS Settings: Select On/Off to enable/disable WDS. With this function enabled, the Router can bridge two or more WLANs. • MAC Address: Enter the MAC Address you wish to bridge in the field. y Wireless MAC Address Filter: Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network’s RADIUS. • Active: If you wish to filter users by MAC Address, select “Activated”, and “Deactived” for don’t. • Action: To filter wireless users by MAC Address, select “Allow Association” or “Deny Association” the follow Wireless LAN station(s) association. • MAC Address: Enter the MAC Address you wish to filter in the field. NOTE: For most users, it is recommended to use the default Wireless LAN Performance settings. Any changes made to these settings may adversely affect your wireless network. Under certain circumstances, chang- es may benefit performance. Carefully consider and evaluate any changes to these wireless settings. www.kraun.it...
  • Page 32: Advanced Setup

    Manual 4.4 Advanced Setup Choose “Advanced Setup”, you can see the next submenus: Figure 4-24 Click any of them, and you will be able to configure the corresponding function. 4.4.1 Firewall Choose “Advanced SetupFirewall” menu, and you will see the next screen (shown in Figure 4-25). Figure 4-25 y Firewall: Select this option can automatically detect and block Denial of Service (DoS) attacks, such as Ping of Death, SYN Flood, Port Scan and Land Attack. y SPI: If you enable SPI, all traffics initiated from WAN would be blocked, including DMZ, Virtual Server, and ACL WAN side. 4.4.2 Routing Choose “ Advanced SetupRouting” menu, and you will see the routing information in the next screen (shown in Figure 4-26). Figure 4-26 www.kraun.it...
  • Page 33: Nat

    4.4.3 NAT Choose “Advanced SetupNAT” menu, you can setup the NAT (Network Address Translation) function for the Router (shown in Figure 4-28). Figure 4-28 y Virtual Circuit: Enter Virtual Circuit Index that you plan to setup for the NAT function. y NAT Status: This field shows the current status of the NAT function for the current VC. You can go to the previous screen (shown in Figure 4-6) to activate the function. y Number of IPs; This field is to specify how many IPs are provided by your ISP for current VC. It can be single IP or multiple IPs. We select Multiple to explain. NOTE: For VCs with single IP, they share the same DMZ and Virtual servers; for VCs with multiple IPs, each VC can set DMZ and Virtual servers. Furthermore, for VCs with multiple IPs, they can define the Address Map- ping rules; for VCs with single IP, since they have only one IP, there is no need to individually define the Address Mapping rule. www.kraun.it...
  • Page 34: Dmz

    DMZ Host IP Address: Enter the specified IP Address for DMZ host on the LAN side. 4.4.3.2 Virtual Server Choose “Advanced SetupNATVirtual Server” in Figure 4-28, you can configure the Virtual Server in the next screen. The Virtual Server is the server or server(s) behind NAT (on the LAN), for example, Web server or FTP server, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world. Figure 4-30 y Rule Index: The Virtual server rule index for this VC. You can specify 10 rules in maximum. All the VCs with single IP will use the same Virtual Server rules. y Application: The Virtual servers can be used for setting up public services on your LAN. y Protocol: The protocol used for this application. y Start & End port number: Enter the specific Start and End Port number you want to forward. If it is one port only, you can enter the End port number the same as Start port number. For example, if you want to set the FTP Virtual server, you can set the start and end port number to 21. y Local IP Address: Enter the IP Address for the Virtual Server in LAN side. y Virtual Server Listing: This displays the information about the Virtual Servers you establish. www.kraun.it...
  • Page 35: Ip Address Mapping

    Local Start & End IP: Enter the local IP Address you plan to map to. Local Start IP is the starting local IP address and Local End IP is the ending local IP address. If the rule is for all local IPs, then the Start IP is 0.0.0.0 and the End IP is 255.255.255.255. y Public Start & End IP: Enter the public IP Address you want to do NAT. Public Start IP is the starting public IP address and Public End IP is the ending public IP address. If you have a dynamic IP, enter 0.0.0.0 as the Public Start IP. y Address Mapping List: This displays the information about the Mapping addresses. www.kraun.it...
  • Page 36 Step 1: Select the “ Virtual Circuit” and Multiple for the “ Number of IPs”. Then select the tab IP Address Mapping (shown in Figure 4-28). NOTE: IP Address Mapping is only available for VCs with Multiple IPs. Step 2: Select the Rule index for the rule as shown in Figure 4-31. Step 3: Select the rule type you want from the drop-down list. Step 4: Enter the local and public IP addresses in the corresponding fields. Step 5: After that, click SAVE to make the entry take effect. Other operations for the entries as shown in Figure 4-31: Select the index of assigned entry, and click the DELETE button to delete the entry. Click the BACK button to return to the previous screen. Click the CANCEL button to cancel the configuration which is made just now. www.kraun.it...
  • Page 37: Qos

    • Physical Ports: Select the port whose traffic flow are controlled by the rule. • Destination MAC & IP & Mask & Port Range: Enter the IP information about the Destination host for the rule. • Source MAC & IP & Mask & Port Range: Enter the IP information about the Source host for the rule. • Protocol ID: Select one among TCP/UDP, TCP, UDP or ICMP protocols for the application. • Vlan ID Range: Enter the Vlan range, and the rule will be effective to the selected Vlans. • IPP/DS Field: Select the type of the action to assign the priority. www.kraun.it...
  • Page 38: Vlan

    • 802.1p: Select the priority range for the rule. y Action: Configure the action that the Router takes to deal with the traffic which accord with the rule. • IPP/DS Field: Select the type for the action. • IP Precedence Remarking: Select the number to remark the priority for IP precedence. • Type of Service Remarking: Select the type to remark the service. • DSCP Remarking: Enter the number to remark the DSCP priority. • 802.1p Remarking: Select the type to remark the 802.1p priority. • Queue: Select the priority type for the action. 4.4.5 VLAN Choose “Advanced SetupVLAN”, you can activate the VLAN function in the next screen. Virtual LAN (VLAN) is a group of devices on one or more LANs that are configured so that they can communicate as if they were attached to the same LAN, when in fact they are located on a number of different LAN segments. Because VLANs are based on logical instead of physical connections, it is very flexible for user/host manage- ment, bandwidth allocation and resource optimization. There are two types of VLAN as follows: Port-Based VLAN: Each physical switch port is configured with an access list specifying membership in a set of VLANs. ATM VLAN: Using LAN Emulation (LANE) protocol to map Ethernet packets into ATM cells and deliver them to their destination by converting an Ethernet MAC address into an ATM address. Figure 4-33 www.kraun.it...
  • Page 39: Assign Vlan Pvid For Each Interface

    Manual 1) Assign VLAN PVID for each Interface Click Assign VLAN PVID for each Interface in Figure 4-33, you can assign the PVID for each interface in the next screen (shown in Figure 4-34). Figure 4-34 y PVID: Each physical port has a default VID called PVID (Port VID). PVID is assigned to untagged frames or priority tagged frames (frames with null (0) VID) received on this port. 2) Define VLAN Group Click Define VLAN Group in Figure 4-33, you can define VLAN groups in the next screen (shown in Figure 4-35). Figure 4-35 www.kraun.it...
  • Page 40: Adsl

    VLAN ID: This indicates the VLAN group. y ATM VCs: Select the ATM VCs as members of VLAN, and if you leave the Tagged blank, the tag in frames will be deleted when transmitted from the VC. y Ethernet: Select the Ethernet port as a member of VLAN. y Wireless LAN: Select the wireless LAN port as a member of VLAN, and if you leave the Tagged blank, the tag in frames will be deleted when transmitted from the port. y VLAN Group Summary: This displays the information about the VLAN Groups. 4.4.6 ADSL Choose “Advanced SetupADSL”, you can select the ADSL Type and ADSL Mode in the next screen. The ADSL feature can be selected when you meet the physical connection problem. Please check the proper settings with your Internet service provider. Figure 4-36 y ADSL Mode: Select the ADSL operation mode which your ADSL connection uses. y ADSL Type: Select the ADSL operation type which your ADSL connection uses. 4.5 Access Management Choose “Access Management”, you can see the next submenus: Figure 4-37 Click any of them, and you will be able to configure the corresponding function. www.kraun.it...
  • Page 41: Acl

    ACL: If Activated, the IP addresses which are contained in the Access Control List can access to the Router. If Deactivated, all IP addresses can access to the Router. y ACL Rule Index: Select the ACL rule index for the entry. y Active: Enable the ACL rule. y Secure IP Address: Select the IP addresses which are permitted to access to the Router remotely. With the default IP 0.0.0.0, any client would be allowed to remotely access the ADSL Router. y Application: Select the application for the ACL rule, and then you can access the Router through it. y Interface: Select the interface for access: LAN, WAN or Both. y Access Control of Listing: This displays the information about the ACL Rules. 4.5.2 Filter Choose “Access ManagementFilter”, you can see the Filter screen (the default is IP/MAC Filter screen shown in Figure 4-39 ). The filtering feature includes IP/MAC Filter, Application Filter, and URL Filter. The feature makes it possible for administrators to control user’s access to the Internet, protect the networks. 4.5.2.1 IP Filter Select IP/Mac Filter as the Filter type, and select IP as the Rule type (shown in Figure 4-39), then you can config- ure the filter rules based on IP address. The filtering includes Outgoing and Incoming, the detailed descriptions are provided below. www.kraun.it...
  • Page 42 (Source IP Address and Destination IP Address). If select LAN as an interface, the filter will match the IP traffic of LAN port with specified IPs. y Direction: Select the direction for this IP Filter rule. There are three filtering directions: Both, Incoming, Outgoing. NOTE: Incoming means that IP traffic which is coming into the router, and the Outgoing means that IP traffic which is going out the router. y IP/MAC Filter Rule Index: Select the Rule index for the IP Filter entry. NOTE: You should set the IP/MAC Filter Set Index and IP/MAC Filter Rule Index together to appoint the ad- dress (shown in the Filter List) for the IP Filter rule. For example, (1, 2), it means the rule will be shown in the row 2 IP/MAC Filter Set Index 1. www.kraun.it...
  • Page 43 If you select Next, the router will find the next filter rule (show in Filter list) to match. y IP/MAC Filter Listing: This displays the information about the IP Filter rules. To add an IP Address filtering entry: Step 1: For example: If you desire to block E-mail received and sent by the IP address 192.168.1.7 on your local network; And wish to make the PCs with IP address 192.168.1.8 unable to visit the website of IP address 202.96.134.12, while other PCs have no limit. You can configure the rules as follows. Presume the rules are both aimed at the interface PVC0, and their indexes are (1, 1), (1, 2) Select the “IP/MAC Filter” as the Filter Type Selection (show in Figure 4-39). Select the “IP” as the Rule Type on the Filter screen, then you can configure the specific rule for the example. Step 2: Select the IP/MAC Filter Set Index and IP/MAC Filter Rule Index for the rule, then select the Interface “PVC0”, and select the Direction “Both” for the first rule. NOTE: If you want to make the rule take effect, please select Yes to active the rule. www.kraun.it...
  • Page 44 Step 4: Select the Protocol as “TCP” and select the Unmatched rule as “Next”. Step 5: Finally, click the SAVE to save the entry. Step 6: Go to Step 2 to configure the next two rules: Block E-mail received by the IP address 192.168.1.7 on your local network; Make the PC with IP address 192.168.1.8 unable to visit the website of IP address 202.96.134.12. NOTE: After you complete the IP filter rules for the example, the Filter list will show as follows. You can enter the IP / MAC Filter Set Index to view the information about the rule. Other operations for the entries as shown in Figure 4-39: Select the IP / MAC Filter Set Index and IP/MAC Filter Rule Index to view or modify the entry. Select the IP / MAC Filter Set Index and IP/MAC Filter Rule Index to locate the specific rule, and then click the DELETE button to delete the entry. www.kraun.it...
  • Page 45: Mac Filter

    Figure 4-40 y Rule Type: Select MAC for the MAC Filter rule. y Active: Select “Yes” to make the rule to take effect. y MAC Address: Enter the MAC address for the rule. y Rule Unmatched: If the current rule can not match, and you select Forward, the router will skip the rule and transmit directly. If you select Next, the router will find the next filter rule (show in Filter list) to match. y IP/MAC Filter Listing: This displays the information about the MAC Filter rules. To add a MAC Address filtering entry: For example: If you want to block the PCs with MAC addresses 00-0A-EB-00-07-BE and 00-0A-EB-00-07-5F to access the Internet, you can configure as follows. Presume the rules are both aimed at the interface PVC0, and their indexes are (1, 1) and (1, 2). Step 1: Select the “IP/MAC Filter” as the Filter Type Selection: Select the “MAC” as the Rule Type on the Filter screen (show in Figure 4-40). , Then you can configure the specific rule for the example. www.kraun.it...
  • Page 46 NOTE: If you want to make the rule take effect, please select Yes to active the rule. Step 3: Enter the “MAC Address” and select the Unmatched rule as “Next”. Step 4: Finally, click the SAVE to save the entry. Step 5: Go to Step 2 to configure the next rule: Block the PC with MAC address 00-0A-EB-00-07-5F to access the Internet. NOTE: After you complete the MAC filter rules for the example, the Filter list will show as follows. You can enter the IP / MAC Filter Set Index to view the information about the rule. Other operations for the entries as shown in Figure 4-39: Select the IP / MAC Filter Set Index and IP/MAC Filter Rule Index to view or modify the entry. Select the IP / MAC Filter Set Index and IP/MAC Filter Rule Index to locate the specific rule, and then click the DELETE button to delete the entry. www.kraun.it...
  • Page 47: Application Filter

    Manual 4.5.2.3 Application Filter Select Application Filter as the Filter type (shown in Figure 4-41), and then you can configure the filter rules based on application. Figure 4-41 y Filter Type Selection: Select the Application Filter for the next configuration. y Application Filter: Activate or deactivate the function. y ICQ & MSN & YMSG & Real Audio/Video: Select Allow or Deny for these applications. If you select Allow, the Router will accept the application; if you select Deny, the Router will forbid the application. 4.5.2.4 URL Select Application Filter as the Filter type (shown in Figure 4-42), and then you can configure the filter rules based on URL. Figure 4-42 www.kraun.it...
  • Page 48: Snmp

    Step 1: For example: If you want to forbid the user to access the website: www.yahoo.com. Presume the rule is aimed at the interface PVC0, and its index is “1”. Step 2: Select the “URL Filter” as the Filter Type Selection (show in Figure 4-42). Step 3: Select the Index for the rule, and then enter the website in the URL field. Step 4: Finally, Select Yes to active the rule, and then click the SAVE to save the entry. Other operations for the entries as shown in Figure 4-39: Select the URL Index to view or modify the entry. Select the URL Index to locate the specific rule, and then click the DELETE button to delete the entry. 4.5.3 SNMP Choose “Access ManagementSNMP”, you can see the SNMP screen. The Simple Network Management Pro- tocol (SNMP) is used for exchanging information between network devices. Figure 4-43 y Get Community: Set the password for the incoming Get and Get next requests from the management station. y Set Community: Set the password for incoming Set requests from the management station. www.kraun.it...
  • Page 49: Upnp

    Choose “Access ManagementUPnP”, you can configure the UPnP in the screen (shown in Figure 4-44). UPnP (Universal Plug and Play) is a distributed, open networking standard that uses TCP/IP for simple peer-to- peer network connectivity between devices. An UPnP device can dynamically join a network, obtain an IP ad- dress, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. UPnP broadcasts are only allowed on the LAN. Figure 4-44 y UPnP: Activate or Deactivate the UPnP function. Only when the function is activated, can the UPnP take effect. y Auto-Configure: If you activate the function, then the UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions. 4.5.5 DDNS Choose “Access ManagementDDNS”, you can configure the DDNS function in the screen (shown in Figure 4-45). The router offers a Dynamic Domain Name System (DDNS) feature. The feature lets you use a static host name with a dynamic IP address. User should type the host name, user name and password assigned to your ADSL Router by your Dynamic DNS provider. User also can decide to turn on DYNDNS Wildcard or not. Figure 4-45 www.kraun.it...
  • Page 50: Cwmp

    My Host Name: Enter your host name here. y E-mail Address: Enter your E-mail address here. y Username & Password: Type the “User Name” and “Password” for your DDNS account. y Wildcard support: Select the option to use Wildcard function 4.5.6 CWMP Choose “Access ManagementCWMP”, you can configure the CWMP function in the screen (shown in Figure 4-46). The router offers CWMP feature. The function supports TR-069 protocol which collects information, diagnoses the devices and configures the devices automatically via ACS (Auto-Configuration Server). Figure 4-46 y CWMP: Select activate the CWMP function. y URL: Enter the website of ACS which is provided by your ISP. y User Name/Password: Enter the User Name and password to login the ACS server. y Path: Enter the path that connects to the ACS server. y Port: Enter the port that connects to the ACS server. y User Name/Password: Enter the User Name and Password that provided the ACS server to login the router. y Periodic Inform: Activate or deactivate the function. If Activated, the information will be informed to ACS server periodically. y Interval: Enter the interval time here. www.kraun.it...
  • Page 51: Maintenance

    4.6 Maintenance Choose “Maintenance”, you can see the next submenus: Figure 4-47 Click any of them, and you will be able to configure the corresponding function. 4.6.1 Administration Choose “MaintenanceAdministration”, you can set new password for admin in the screen (shown in Figure 4-48). Figure 4-48 NOTE: There is only one account that can access Web-Management interface. The default account is “admin”, and the password is “admin”. Admin has read/write access privilege. When you change the password, you should enter the new password twice, and then click SAVE to make the new password take effect. 4.6.2 Time Zone Choose “MaintenanceTime Zone”, you can configure the system time in the screen (shown in Figure 4-49). The system time is the time used by the device for scheduling services. There are three methods to configure the time. You can manually set the time or connect to a NTP (Network Time Protocol) server. If a NTP server is set, you will only need to set the time zone. If you manually set the time, you may also set Daylight Saving dates and the system time will automatically adjust on those dates. www.kraun.it...
  • Page 52: Ntp Server Automatically

    Manual 1) NTP Server automatically Select NTP Server automatically as the Synchronize time, you only need to set the time zone. Figure 4-49 NOTE: The ADSL Router built-in some NTP Servers, when the Router connects to the Internet, the Router will get the system time automatically from the NTP Server. You can also configure the NTP Server address manually, and then the Router will get the time from the specific Server firstly. 2) PC’s Clock Select PC’s Clock as the Synchronize time, you don’t need to set any items. Figure 4-50 www.kraun.it...
  • Page 53: Manually

    4.6.3 Firmware Choose “MaintenanceFirmware”, you can upgrade the firmware of the Router in the screen (shown in Figure 4-52). Make sure the firmware or romfile you want to use is on the local hard drive of the computer. Click Browse to find the local hard drive and locate the firmware or romfile to be used for upgrade. Figure 4-52 To upgrade the router’s firmware, follow these instructions below: Step 1: Type the path and file name of the update file into the “New Firmware Location” field. Or click the Browse button to locate the update file. Step 2: Click the UPGRADE button. Note: 1) When you upgrade the router’s firmware, you may lose its current configurations, so please back up the router’s current settings before you upgrade its firmware. 2) Do not turn off the router or press the Reset button while the firmware is being upgraded. 3) The router will reboot after the upgrading has been finished. www.kraun.it...
  • Page 54 Manual To back up the Router’s current settings: Step 3: Click the ROMFILE SAVE button (shown in Figure 4-52), click Save button in the next screen (shown in Figure 4-53) to proceed. Figure 4-53 Save the file as the appointed file (shown in Figure Figure 4-54 To restore the Router’s settings: Step 1: Click the Browse button to locate the update file for the device, or enter the exact path in “ New Romfile Location” field. Step 2: Click the UPGRADE button to complete. www.kraun.it...
  • Page 55: System Restart

    Manual 4.6.4 System Restart Choose “MaintenanceSysRestart”, you can select to restart the device with current settings or restore to fac- tory default settings in the screen (shown in Figure 4-55). Figure 4-55 4.6.5 Diagnostic Choose “MaintenanceDiagnostic”, you can view the test results for the connectivity of the physical layer and protocol layer for both LAN and WAN sides in the screen (shown in Figure 4-56). Figure 4-56 www.kraun.it...
  • Page 56: Help

    Manual 4.7 Help Choose “Help”, you can view the help information for configuration of any function. Figure 4-57 NOTE: Click the tab, and you will be able to get the corresponding information. www.kraun.it...
  • Page 57: Chapter 5. Appendix A: Specifications

    5% ~ 90% RH (non-condensing) CE Mark Warning This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. National Restrictions This device is intended for home and office use in all EU countries (and other countries following the EU directive 1999/5/EC) without any limitation except for the countries mentioned below: Country Restriction Reason/remark General authorization required for outdoor use and public Bulgaria None service Military Radiolocation use. Refarming of the 2.4 GHz band has Outdoor use limited to 10 mW e.i.r.p. France been ongoing in recent years to allow current relaxed regulation. within the band 2454-2483.5 MHz Full implementation planned 2012 If used outside of own premises, general authorization is Italy None required General authorization required for network and service Luxembourg None supply(not for spectrum) This subsection does not apply for the geographical area within Norway Implemented a radius of 20 km from the centre of Ny-Ålesund Russian Federation None Only for indoor applications Note: Please don’t use the product outdoors in France. www.kraun.it...

This manual is also suitable for:

Kn.3n

Table of Contents