Intellinet 524582 User Manual

Intellinet 524582 User Manual

Wireless g 4-port vpn router
Hide thumbs Also See for 524582:

Advertisement

Quick Links

INT-524582-UM-0309-01
1

Advertisement

Table of Contents
loading

Summary of Contents for Intellinet 524582

  • Page 1 INT-524582-UM-0309-01...
  • Page 2: Table Of Contents

    Introduction ................4 Section 1: Hardware ................7 1.1 Back Panel ................7 1.2 Front Panel ................8 1.3 Setup Diagram ................9 Section 2: Quick Setup ................10 2.1 Getting Started ................10 2.2 Quick Setup Wizard ................15 2.2.1 Time Zone ................
  • Page 3 3.6.3 Special Applications ............. 53 3.6.4 UPnP ................55 3.6.5 ................56 3.6.6 Static Routing ............... 56 3.7 Firewall ................58 3.7.1 Access Control ..............58 3.7.2 URL Blocking................ 62 3.7.3 ................63 3.7.4 ................64 3.8 VPN ................65 3.8.1 IPSec Server ................
  • Page 4: Introduction

    INTRODUCTION The INTELLINET NETWORK SOLUTIONS Wireless G 4-Port VPN Router lets you experience fast speeds as you surf the Web, download music or photos, and play online games. This wireless router works with 802.11g as well as the older 802.11b products, and also includes a four-port 10/100 LAN switch so you can connect using network cable or go wireless to satisfy all your needs.
  • Page 5: Regulatory Statements

    Regulatory Statements FCC Part 15 This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
  • Page 6 Safety This equipment is designed with the utmost care for the safety of those who install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment. All FCC and computer manufacturer guidelines must therefore be followed at all times to ensure the safe use of the equipment.
  • Page 7: Section 1: Hardware

    1 HARDWARE 1.1 Back Panel The diagram below shows the broadband router’s back panel. The router’s back panel is divided into three sections: LAN, WAN and Reset: Local Area Network (LAN) The router’s four LAN ports (1-4) are where you connect your LAN’s PCs, printer servers, hubs and switches, etc.
  • Page 8: Front Panel

    1.2 Front Panel LED lights inform you of the router’s current status. Status Description Router’s power supply is on. WLAN-G Wireless LAN has been activated. Wireless LAN is disabled. Flashing Wireless LAN has activity (ACT): data being sent. WAN10/100M WAN port 100 Mbps is connected. WAN port 10 Mbps is connected.
  • Page 9: Setup Diagram

    1.3 Setup Diagram The image below depicts a typical setup for a local area network (LAN).
  • Page 10: Section 2: Quick Setup

    2 QUICK SETUP 2.1 Getting Started Once you have your network configured (see the sample setup diagram in Section 1.3 above), you need to set your LAN PC clients so they can obtain an IP address automatically. All LAN clients require an IP address: Just like a street address, it allows LAN clients to find one another.
  • Page 11: Windows Vista

    4. In the Internet Protocol (TCP/IP) Properties window, select “Obtain an IP address automatically” and “Obtain DNS server address automatically.” 5. Click “OK” to confirm the setting. Your PC will now obtain an IP address automatically. Proceed to the Login section below. NOTE: Make sure that the Wireless G VPN Router’s DHCP server is the only DHCP server available on your LAN.
  • Page 12 5. In the Internet Protocol (TCP/IPv4) Properties window, select “Obtain an IP address automatically” and “Obtain DNS server address automatically.” 6. Click “OK” to confirm the setting. Your PC will now obtain an IP address automatically. Proceed to the Login section below. NOTE: Make sure that the Wireless G VPN Router’s DHCP server is the only DHCP server available on your LAN.
  • Page 13 Login Once you have configured your PCs to obtain an IP address automatically, the Wireless G VPN Router’s DHCP server will automatically give your LAN clients an IP address. By default, the DHCP server is enabled to do this. To see if you have obtained an IP address, see the Appendix near the back of this manual.
  • Page 14 General Setup (Section 3) If you want to use more advanced features that this router has to offer, then you’ll need to configure the Quick Setup Wizard and the General Setup section. Alternatively, you can just configure the General Setup section, since the General Setup/WAN and the Quick Setup Wizard contain the same configurations.
  • Page 15: Quick Setup Wizard

    2.2 Quick Setup Wizard If you only want to start using the broadband router as an Internet access device, then you only need to configure the screens in this Quick Setup Wizard section. 2.2.1 Time Zone The Time Zone allows your router to base its time on the settings configured here, which will affect functions such as Log entries and Firewall settings.
  • Page 16: Broadband Type

    Start Daylight Saving Time Select the period in which you wish to start daylight Saving Time. End Daylight Saving Time Select the period in which you wish to end Daylight Saving Time. Click “Next.” 2.2.2 Broadband Type In this section, you have to select one of four types of connections that you will be using to connect your router’s WAN port to your ISP (see screen below).
  • Page 17: Cable Modem

    2.2.2.4 PPTP Your ISP requires you to use a Point-to-Point Tunneling Protocol (PPTP) connection. 2.2.2.5 L2TP Your ISP requires you to use a Layer Two Tunneling Protocol (L2TP) connection. 2.2.2.6 Telstra BigPond This protocol is only used for Australia’s ISP connection.
  • Page 18: Fixed-Ip Xdsl

    Host Name If your ISP requires a Host Name, type in the host name provided by your ISP; otherwise, leave it blank if your ISP does not require a Host Name. MAC Address Your ISP may require a particular MAC address in order for you to connect to the Internet.
  • Page 19: Pppoe

    Parameters Description This is the IP address that your ISP has given you. Gateway IP This is the ISP’s IP address gateway. This is the ISP’s DNS server IP address. Subnet Mask Enter the Subnet Mask provided by your ISP (e.g., 255.255.255.0).
  • Page 20 Password Enter the password provided by your ISP for the PPPoE connection Service Name This is optional. Enter the service name if your ISP requires it; otherwise, leave it blank. Enter the MTU value provided by your ISP. Connection Type If you select “Continuous,”...
  • Page 21: Pptp

    2.2.2.4 PPTP Select PPTP if your ISP requires the PPTP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by automatically DHCP before connecting to the PPTP server.
  • Page 22 PPTP Gateway If your LAN has a PPTP gateway, then enter that PPTP gateway IP address here. If you do not have a PPTP gateway, then enter the ISP’s gateway IP address above. Connection ID This is the ID given by ISP. This is optional. BEZEQ-ISRAEL Select this item if you are using the service provided by Bezeq in Israel.
  • Page 23: L2Tp

    2.2.2.5 L2TP Select L2TP if your ISP requires the L2TP protocol to connect you to the Internet. Your ISP should provide all the information required in this section. Parameter Description Obtain an IP address The ISP requires you to obtain an IP address by automatically DHCP before connecting to the L2TP server.
  • Page 24 IP Address This is the IP address that your ISP has given you to establish an L2TP connection. Subnet Mask Enter the subnet mask provided by your ISP (e.g., 255.255.255.0). Gateway Enter the IP address of the ISP gateway. User ID Enter the username provided by your ISP for the PPTP connection.
  • Page 25: Telstra Bigpond

    work with some ISPs. Make sure this function can work properly when you use this function the first time, especially if your ISP charges you by time used. Click “OK” when you have finished the configuration above. You have completed the configuration for the L2TP connection.
  • Page 26: Section 3: General Setup

    3 GENERAL SETUP Once you click “General Setup” at the Home Page, you should see the screen below. If you have already configured the Quick Setup Wizard you do not need to configure anything thing in the General Setup screen to start using the Internet. General Setup contains advanced features that allow you to configure the router to meet your network’s needs, such as: Wireless, Address Mapping, Virtual Server, Access Control, Hacker Attack Prevention, Special Applications and...
  • Page 27: Time Zone

    3.1.1 Time Zone Time Zone allows your router to reference or base its time on the settings configured here, which will affect functions such as log entries and firewall settings. Parameter Description Set Time Zone Select the time zone of the country you’re in. The router will set its time based on your selection.
  • Page 28: Remote Management

    Parameter Description Current Password Enter your current password for the remote management administrator to log in to your router. Note: By default there is no password. New Password Enter your new password. Confirmed Password Enter your new password again for verification. Note: If you forget your password, you’ll have to reset the router to the factory defaults (no password) with the Reset button (on the router’s back panel).
  • Page 29 Parameter Description Host Address This is the IP address of the host on the Internet that will have remote management/configuration access to the router. This means if you’re at home and your home IP address has been designated the Remote Management host IP address for this router (located in your company office), then you’re able to configure this router from your home.
  • Page 30: Wan

    3.2 WAN Use the WAN Settings screen if you have already configured the Quick Setup Wizard section and you would like to change your Internet connection type: Dynamic IP, Static IP Address, PPPoE, PPTP, L2TP, Telstra BigPond, DNS and DDNS. Once you’ve made a selection, click “More Configuration” at the bottom of the screen and proceed to the manual’s corresponding sub-section.
  • Page 31: L2Tp

    3.2.5 L2TP Select if your ISP requires the L2TP protocol to connect to the Internet. Your ISP should provide all the information required in this section. (see Section 2.2.2 for more details). 3.2.6 Telstra BigPond Select if your ISP requires the Telstra BigPond protocol to connect you to the Internet.
  • Page 32: Ddns

    Click “Apply” at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place). 3.2.8 DDNS DDNS allows you to map the static domain name to a dynamic IP address. You must get an account, password and your static domain name from the DDNS service providers.
  • Page 33: Lan

    3.3 LAN Use this screen to specify a private IP address for your router’s LAN ports (LAN IP panel), as well as a subnet mask for your LAN segment (DHCP Server panel). Parameter Default Description IP Address 192.168.2.1 This is the router’s LAN port IP address (your LAN clients’...
  • Page 34: Wireless

    period that the DHCP lends an IP address to your LAN clients. The DHCP will change your LAN clients’ IP address when this time threshold period is reached. Start IP / End IP You can select a particular IP “address pool” for your DHCP server to issue IP addresses to your LAN clients.
  • Page 35: Basic

    Click “Apply” at the bottom of the screen to save the above configurations. You can now configure other advanced sections or start using the router (with the advanced settings in place). 3.4.1 Basic Settings Set the parameters that are used for the wireless stations to connect to this router.
  • Page 36 Station–Infrastructure mode: AP Bridge–Point to Point mode:...
  • Page 37 AP Bridge–Point to Multi-Point mode: AP Bridge–WDS mode:...
  • Page 38 Parameter Default Description Mode Select one of the six modes shown above. Band Fix the AP at 802.11b or 802.11g mode, or select the B+G mode to allow the AP to select either 802.11b or 802.11g automatically. ESSID Default This is the name of the wireless LAN. All the devices in the same wireless LAN should have the same ESSID.
  • Page 39: Advanced

    3.4.2 Advanced Settings Among the advanced wireless LAN parameters you can set are Authentication Type, Fragment Threshold, RTS Threshold, Beacon Interval and Preamble Type. Note: You should not change these parameters unless you know what effect the changes will have on this router. Parameter Description Authentication Type...
  • Page 40: Security

    RTS Threshold When the packet size is smaller the RTS threshold, the wireless router will not use the RTS/CTS mechanism to send this packet. Beacon Interval This is the interval of time that this wireless router broadcasts a beacon, which is used to synchronize the wireless network.
  • Page 41 Parameter Default Description Key Length 64-bit Select “64-bit” or “128-bit.” The larger WEP key length will provide a higher level of security, but the throughput will be lower. Key Format You can use ASCII characters (alphanumeric format; e.g., “guest”) or hexadecimal digits (in the "A-F,"...
  • Page 42: 802.1X Only

    3.4.3.2 802.1x Only IEEE 802.1x is an authentication protocol. Every user must use a valid account to log in to this Wireless G VPN Router before accessing the wireless LAN. The authentication is processed by a RADIUS server. This mode only authenticates a user by IEEE 802.1x;...
  • Page 43: Wpa Pre-Shared Key

    For the WEP settings, refer to Section 3.4.3.1 (WEP Only). For the 802.1x settings, refer to section 3.4.3.2 (802.1x Only). 3.4.3.4 WPA Pre-Shared Key Wi-Fi Protected Access (WPA) is an advanced security standard. You can use a pre-shared key to authenticate wireless stations and encrypt data during communication.
  • Page 44: Wpa Radius

    Parameter Description WPA (TKIP) TKIP can change the encryption key frequently to enhance the wireless LAN security. WPA2 (AES) This uses the CCMP protocol to change the encryption key frequently. AES can provide high-level encryption to enhance the wireless LAN security. WPA2 Mixed This will automatically use TKIP or AES based on the other communication peer.
  • Page 45: Access Control

    Parameter Description WPA(TKIP) TKIP can change the encryption key frequently to enhance the wireless LAN security. WPA2(AES) This uses the CCMP protocol to change the encryption key frequently. AES can provide high-level encryption to enhance the wireless LAN security. WPA2 Mixed This will automatically use TKIP or AES based on the other communication peer.
  • Page 46: Qos

    Add MAC address Fill in the "MAC Address" and "Comment" fields for into the list the wireless station to be added and click "Add." This wireless station will then be added into the Current Access Control List that will display. Click "Clear" to empty both "MAC Address"...
  • Page 47 Parameter Description Enable/Disable QoS Select to activate the QoS function for the WAN port. De-select to disable it. Add a QoS rule Click “Add” to enter a form of the QoS rule. Click into the table “Apply” after filling out the form and the rule will be added into the table.
  • Page 48 Parameter Description Rule Name Enter a name for this rule. Bandwidth Select “Download” or “Upload” and assign a value (in Kbps). You can limit the maximum bandwidth consumed by this rule by selecting “Maximum.” You also can reserve enough bandwidth for this rule by selecting “Guarantee.”...
  • Page 49: Nat

    3.6 NAT Network Address Translation (NAT) allows multiple users at your local site to access the Internet through a single public IP address or multiple public IP addresses. NAT provides firewall protection from hacker attacks and has the flexibility to allow you to map private IP addresses to public IP addresses for key services such as Web sites and FTP sites.
  • Page 50: Virtual Server

    Parameter Description Enable Port Forwarding Select to activate the function. Private IP This is the private IP of the server behind the NAT firewall. Note: You need to give your LAN PC clients a fixed/static IP address for Port Forwarding to work properly.
  • Page 51 Parameter Description Enable Virtual Server Select to activate the function. Private IP This is the LAN client/host IP address that the public port number packet will be sent to. Note: You need to give your LAN PC clients a fixed/static IP address for the virtual server to work properly.
  • Page 52 added to the Current Virtual Server Table below. To change or correct an entry before adding it, click "Clear" and re-enter. Remove Virtual Server Select the Virtual Server settings you want to remove from the Current Virtual Server table and click "Delete Selected."...
  • Page 53: Special Applications

    3.6.3 Special Applications Some applications — such as Internet games, video conferencing and Internet telephone — require multiple connections. On this screen, you can configure the router to support multiple connections for these types of applications. Parameter Description Enable Trigger Port Select to activate the function.
  • Page 54 require multiple connections. Select an application from the list, select a location (1-10) in the “Copy to” selection box, then click “Copy to.” This automatically lists the public ports required for this popular application in the location (1-10) you’ve specified. Add Special Application Fill in the "Trigger Port,"...
  • Page 55: Upnp

    3.6.4 UPnP With UPnP, all PCs in you intranet will discover this router automatically: You do not need to do any configuration for your PC and can access the Internet through this router easily. Parameter Description UPnP Feature Select “Enable” or “Disable” (the default is “Disable”). After you enable the feature, all client systems that support UPnP, like Windows XP, can discover this router automatically and access the Internet through...
  • Page 56: Alg

    3.6.5 ALG You can select applications that need Application Layer Gateway for support. Parameter Description Enable Select to enable Application Layer Gateway for any of the listed items. The router will then let that application correctly pass through the NAT gateway. Click “Apply”...
  • Page 57 Parameter Description Enable Static Routing Select to enable the function (it’s disabled by default). Destination LAN IP Enter the network address of the destination LAN. Subnet Mask Enter the subnet mask of the destination LAN. Default Gateway Enter the next stop gateway of the path toward the destination LAN.
  • Page 58: Firewall

    3.7 Firewall This router provides extensive firewall protection by restricting connection parameters, thus limiting hacker attacks and defending against common Internet attacks. However, for applications that require unrestricted access to the Internet, you can configure a specific client/server as a Demilitarized Zone (DMZ). Note: To enable the Firewall settings, select “Enable”...
  • Page 59 Parameter Description Enable MAC Filtering Select to filter client PCs by MAC addresses. Deny Select for all PCs to be allowed Internet access, except for the PCs in the table below. Allow Select for all PCs to be denied Internet access, except for the PCs in the table below.
  • Page 60 Access Control Add PC: Parameter Description Client PC Description Enter a description for this client PC rule, if desired. Client PC IP Addresses Enter the IP address range you want to apply to this Access Control rule. This is the user’s IP address(es) that you want to set up an Access Control rule for.
  • Page 61 Port Range You can enter (then click “Add”) up to five port ranges. The router will block clients from accessing Internet services that use these ports. Reset Click “Reset” to clear all fields. Click “Apply Changes” at the bottom of the screen to save the above configurations.
  • Page 62: Url Blocking

    3.7.2 URL Blocking Access can block access to some Web sites from particular PCs by entering a full URL address or just keyword of the Web site. Parameter Description Enable URL Blocking Select to activate the function. Add URL Keyword Fill in the “URL/Keyword”...
  • Page 63: Dos

    3.7.3 DoS The router's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur, the router can log the events. Intrusion Detection Feature Description Ping of Death Protects from Ping of Death attack. Discard Ping From WAN The router’s WAN port will not respond to any Ping requests.
  • Page 64: Dmz

    3.7.4 DMZ If you have a local client PC that cannot run an Internet application (e.g., games) properly from behind the NAT firewall, you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN.
  • Page 65: Vpn

    3.8 VPN Virtual Private Network (VPN) provides a secure, private communication tunnel between two or more devices across the Internet. These VPN devices can be either a computer running VPN software or a special device like a VPN-enabled router. It allows your home computer to be connected to your office network or can allow two home computers in different locations to connect to each over the Internet.
  • Page 66 Parameter Description Enable IPSEC VPN Select to activate the function. Enable NAT Traversal Enabling the NAT Traversal function allows clients behind NAT to connect to this VPN server. Generate RSA Key Click to automatically generate the RSA Public Key. Show RSA Public Key Click to show the RSA public key (below).
  • Page 67 Edit Connection: Parameter Description Enable Tunnel # Select to enable this tunnel setting. Connection Name Enter a name for this connection. Note: Each of the names needs to be unique (not duplicated). Local Site Choose a type for the local site: single site or subnet. Remote Site Choose a type for the remote site: single site, subnet, any address, any NAT Traversal address or L2TP...
  • Page 68 tunnel will connect only when you click “Connect.” Local/Remote ID Specify the ID of the local and remote sites. It can be an IP address, domain name, or e-mail address. Auth Method Choose “PSK” or “RSA” and enter the key for the authentication.
  • Page 69: L2Tp Server

    Diffie Hellman Choose which Diffie Hellman protocol you want to use for Phase 1. Key Life Time Enter the life time for the key. After this time interval, the key will expire. If you select “On,” the keys that protect data transmission are not used to derive additional keys.
  • Page 70: Pptp Server

    Parameter Description Enable L2TP Server Click to enable the operation of a virtual private network (VPN) over the Internet. Server IP Address Specify the IP address the L2TP clients communicate with. Note: The Server IP Address can be different from the LAN IP or WAN IP. Client IP Pool Specify the IP address for L2TP clients to use.
  • Page 71 Parameter Description Enable PPTP Server Click to enable the operation of a virtual private network (VPN) over the Internet. Server IP Address Specify the IP address PPTP clients communicate with. Note: The Server IP Address can be different from the LAN IP or WAN IP. Client IP Pool Specify the IP address for PPTP clients to use.
  • Page 72: Section 4: Status

    4 STATUS The Status section allows you to monitor the current status of your router: WAN/ LAN interface connections, the current firmware and hardware version numbers, any illegal attempts to access your network, information on all DHCP client PCs currently connected to your network, and more. 4.1 Internet Connection View the router’s current Internet connection status and other related information, such as whether the WAN port is connected to a cable/DSL connection;...
  • Page 73: Device Status

    4.2 Device Status View the router’s current configuration settings established in the Quick Setup Wizard and/or General Setup sections, such as the LAN port’s current LAN IP address and subnet mask, and whether the DHCP Server function is enabled or disabled.
  • Page 74: Security Log

    Parameter Description Save Click to save the system log to a local file for further processing. Clear Click to clear the log entries. Refresh Click to get the most updated situation. 4.4 Security Log View any attempts that have been made to illegally gain access to your network. When the system is powered down, the security log will disappear if not saved to a local file.
  • Page 75: Statistics

    4.6 Statistics View the statistics of packets sent and received on WAN, LAN and wireless LAN. Click “Refresh” to get the most updated situation.
  • Page 76: Section 5: Tools

    5 TOOLS This section presents three basic, but important, sub-sections: Configuration Tools (to save or restore configuration settings), Firmware Upgrade (to upgrade system firmware) and Reset. 5.1 Configuration Tools This screen allows you to save (back up) the router’s current configuration, which provides added protection and convenience should problems occur and you need to reset to factory defaults.
  • Page 77: Firmware Upgrades

    Restore Settings Click “Upload” to restore the saved configuration to the router. Restore to Factory Click “Reset” to force the router to perform a power Defaults reset and restore the original factory settings. 5.2 Firmware Upgrade This screen allows you to upgrade the router’s firmware. Download the firmware file to your local hard disk, then enter that file name and path in the appropriate field on this screen.
  • Page 78: Appendix: How To Manually Find Ip And Mac Addresses

    APPENDIX This shows you how to manually find your PCs IP and MAC addresses. 1. In Windows, open the Command Prompt program 2. Type “Ipconfig /all” and press <Enter>. • Your PC’s IP address: 192.168.1.77 • The router’s IP address: Default Gateway 192.168.1.254 •...
  • Page 79: Glossary

    IP addresses (such as 192.34.45.8). A DNS server keeps a database of Internet servers and their respective domain names and IP addresses so that when a domain name is requested (as in typing "intellinet- network.com" into your Internet browser), the user is sent to the proper IP address.
  • Page 80 11111111.11111111.11110000.00000000, it means the device’s network address is 11011001.10110000.10010000.00000000, and its host ID is 00000000.00000000.00000000.00000111. This is a convenient and efficient method for routers to route IP packets to their destination. ISP Gateway Address: (see ISP). This is an IP address for the Internet router located at the ISP's office.
  • Page 81 Protocol: A protocol is a set of rules for interaction agreed upon among multiple parties so that when they interface with each other based on such a protocol, the interpretation of their behavior is well defined and can be made objectively, without confusion or misunderstanding.
  • Page 82: Specifications

    SPECIFICATIONS Standards • IEEE 802.1d (Spanning Tree Protocol) • IEEE 802.1x (Wireless User Authentication) • IEEE 802.11b (11 Mbps Wireless LAN) • IEEE 802.11g (54 Mbps Wireless LAN) • IEEE 802.3 (10Base-T Ethernet) • IEEE 802.3u (100Base-TX Fast Ethernet) General •...
  • Page 83 - Access control based on MAC address - DMZ (demilitarized zone) • Supports UPnP (Universal Plug and Play) • Supports DHCP (client/server) Wireless • Chipset: RTL8225 • Wireless frequency range: 2.412 - 2.484 GHz • Modulation technologies: - 802.11b: Direct Sequence Spread Spectrum (DSSS): DBPSK, DQPSK, CCK - 802.11g: Orthogonal Frequency Division Multiplexing (OFDM): BPSK, QPSK, 16QAM, 64QAM •...
  • Page 84 • WLAN Link/Act • WAN Link/Act • WAN 10/100 Mbps • LAN 1-4 Link/Act • LAN 1-4 10/100 Mbps Environmental • Dimensions: 187 (W) x 100 (L) x 30 (H) mm (7.4 x 3.9 x 1.2 in.) • Weight: 0.8 kg (1.7 lbs.) •...

Table of Contents