Lynx L-510 Web Interface User Guide
Lynx L-510 Web Interface User Guide
ADSL2/2+ Ready Wireless LAN 802.11g 4 Port Ethernet & USB Combo Router
Contents
1. INTRODUCTION ...........................................................................................4
1.1 FEATURES ..................................................................................................4
2. YOUR GATEWAY AT A GLANCE................................................................6
2.1 PORTS AND BUTTONS ..................................................................................6
2.2 LED DESCRIPTION ......................................................................................6
3. INSTALLING YOUR WIRELESS GATEWAY ...............................................7
4. SETTING UP YOUR WIRELESS GATEWAY (BASIC MODE).....................8
4.1 LOG INTO YOUR WIRELESS GATEWAY ..........................................................8
4.2 QUICK START .............................................................................................9
4.3 DIAGNOSTICS TEST .................................................................................. 11
4.3.1 Ping Test .......................................................................................12
4.4 REMOTE ACCESS ..................................................................................... 12
4.5 STATISTICS.............................................................................................. 13
4.6 WIRELESS ............................................................................................... 13
4.6.1 Wireless Setup ..............................................................................13
4.6.2 Wireless Security...........................................................................15
4.7 SAVE SETTINGS ....................................................................................... 15
5. ADVANCED ................................................................................................17
5.1 LAN CONNECTION ................................................................................... 17
5.1.1 DHCP Configuration ......................................................................17
5.1.2 Management IP (Changing the Wireless Gateway IP address).....19
5.2 WAN CONNECTION.................................................................................. 20
5.2.1 Status ............................................................................................20
5.2.2 Configuring the WAN.....................................................................20
5.2.3 New Connection ............................................................................21
5.2.4 Modify an Existing Connection ......................................................27
5.2.5 Modem setup.................................................................................27
5.2.6 Firewall/NAT Services ...................................................................28
5.2.7 UPnP .............................................................................................28
5.2.8 Modem Status ...............................................................................28
5.3 ROUTES .................................................................................................. 29
5.3.1 Show Routes .................................................................................29
5.3.2 Static Routing ................................................................................29
5.3.3 Dynamic Routing ...........................................................................30
5.4 SECURITY ................................................................................................ 31
5.4.1 Port Forwarding .............................................................................31
5.4.2 Access Control ..............................................................................32
5.4.3 IP Filter ..........................................................................................33
5.4.4 DMZ...............................................................................................34
5.4.5 MAC Filter .....................................................................................35
5.4.6 LAN clients ....................................................................................36
5.5 APPLICATIONS ......................................................................................... 37
2
5.5.1 Dynamic DNS ................................................................................37
5.5.2 System Time .................................................................................37
5.5.3 DNS Proxy Settings.......................................................................38
5.6 WIRELESS ............................................................................................... 39
5.6.1 Wireless Security (Advance) .........................................................39
5.6.2 Wireless Management...................................................................40
5.6.3 User Management .........................................................................41
6. APPENDIX A: TROUBLESHOOTING ........................................................45
6.1 THE WIRELESS GATEWAY IS NOT FUNCTIONAL ........................................... 45
6.2 I CAN’T CONNECT TO THE WIRELESS GATEWAY.......................................... 45
6.3 THE DSL LINK LED CONTINUES TO BLINK BUT DOES NOT GO SOLID ............ 45
6.4 THE DSL LINK LED IS ALWAYS OFF .......................................................... 46
7. WIRELESS GATEWAY TERMS .................................................................47
3
1. Introduction
The ADSL 2/2+ Ready Wireless LAN 802.11g 4 Port Ethernet & USB Combo 4 Port Router is the
perfect high-speed WAN bridge/router.
For game users, the Wireless Gateway had already pre configured for several low latency game
ports. Just click on the game you are playing on line and the rest is done for you
The Wireless Gateway is fully compatible with all PCs; as long as the PC supports an Ethernet
interface and is running a TCP/IP protocol stack, your PC can have high-speed WAN access.
So, plug in the Wireless Gateway (refer to easy start guide), configure it (per your ISP’s
requirements) and enjoy the fast Internet access like never before. This router also provides
future proof functionality with higher data transmission rates with ADSL2,ADSL2+, Extended
Reach-ADSL support.
1.1 Features
ADSL/ATM Support
• ANSI T1.413 issue 2, ITU-T G.992.1 (G.dmt) and G.992.2 (G.lite) compliant
• ADSL2, ADSL2+, RE-ADSL compliant
• Rate Adaptive modem at 32 Kbps steps
• Dynamic Adaptive Equalisation to improve Carrier’s service area
• Bridge Tap Mitigation support
• ATM Layer with Traffic shaping QoS Support (UBR, CBR, VBR-rt, VBR-nrt)
• AAL ATM Attributes - AAL5
• Multiple PVC up to 8 support (Bridge Support)
• Spectral compatibility with POTS
• F5 OAM Loopback/Send and Receive
Encapsulation Support
• RFC2684 Bridge and Routed LLC and VC Mux support
• RFC2364 PPPoA Client support
• RFC2516 PPPoE Client support
• RFC2225/RFC1577 Classical IP Support
• Transparent Bridge Support
• PAP/CHAP/MS-CHAP for Password Authentication Support
Network Support
• Static IP, Dynamic RIP routing support
• IP/TCP/UDP/ICMP/ARP/RARP Application Support
• Network Address Translation (NAT)
• Port Mapping/Forwarding
• Easy setup of Port Forwarding rules for popular Games/Application
• NAT Application Level Gateway for popular applications
• DHCP Server/Relay/client
• DNS Relay Agent
• DMZ support
• Single Session IP Sec and PPTP/L2TP VPN pass through support
4
• PPP Always on with configurable timeout
• PPP Dial on Demand
• Universal Plug and Play Support
WLAN Support
• IEEE 802.11, 802.11B and 802.11G compliant
• Conforms to Wireless Ethernet Compatibility Alliance (WECA) Wireless Fidelity (Wi-Fi tm)
standard
• Supports 802.11b and 802.11g simultaneously
• Support Direct Sequence Spread Spectrum (DSSS) technology
• Operating Range of >300 Meters (Open Air)
Management Support
• Web Based HTTP management GUI
• TFTP/FTP Support for Firmware Upgrade
• Web Based Firmware Upgrade (Local)
• Soft Factory Reset Button via Web GUI
• Diagnostic Test (DSL, OAM, Network, Ping Test)
• Telnet/CLI (Read Only)
• Syslog Support
• Firmware upgrade-able for future feature enhancement
Security Support
• NAT for basic Firewall support
• Packet Filtering Firewall Support
• Stateful Packet Inspection Support
• Protection against Denial of Service attacks
• Password Authentication to Modem
External Connectors:
• 1 x RJ-11 Telephone socket for ADSL line
• 4 x RJ45 for 10/100Base-T Ethernet (MDI-X)
• 1 x USB 1.1 Type B
• 1 x DC Jack for Power Input
• 1 x Factory Default Reset Button
• 1 x On/Off Power Switch
• 1 x Co-axial Connector for Detachable 180 degree Rotate-able 2.4Ghz 3 dBi Antenna
Platform Support:
• Windows 98SE
• Windows ME
• Windows 2000
• Windows XP
• Windows 2003
5
2. Your gateway at a glance
The ADSL Ethernet & USB Combo may have different ports and LEDs. Let’s take a look at the
different options. Depending upon your model, it may have some or all of the features listed
below
Power is where you connect the power. Make sure to observe the proper power requirements.
The require power is 9 volts.
USB (universal serial port): connects to a PC’s USB port. The Wireless Gateway only supports
Window’s based PCs via an RNDIS driver (included in the software).
DSL port: This is the WAN interface that connects directly to your phone line.
4. USB
Lights up when the USB connection is established.
Flickers when the ADSL is transmitting/receiving data
5. DSL
Lights up when the DSL connection is established.
Flickers when the Wireless Gateway is trying to establish a connection with the ADSL
Service Provider.
6. INTERNET
Lights up when the PPP connection is established.
6
3. Installing your Wireless Gateway
2. For connections to the Ethernet and DSL interfaces, please refer to the easy start guide.
3. Connect the AC Power Adapter. Depending upon the type of network, you may want to put
the power supply on an uninterruptible supply. Only use the power adapter supplied with the
Wireless Gateway. A different adapter may damage the product.
Now that the hardware installation is complete, proceed to Chapter 4: Setting up your
Wireless Gateway
7
4. Setting up your Wireless Gateway (Basic Mode)
Basic tabs consist features which are catered for basic users.
This section will guide you through your Wireless Gateway’s configuration. The Wireless Gateway
is shipped with a standard PPP configuration.
To configure your Wireless Gateway, open your web browser. You may get an error message at
this point; this is normal. Do not panic!. Continue following these directions. Type the default IP
address (192.168.1.1) or type the short-cut name login.router. Press the Enter key and the
following screen.
Note: Before setting up your Wireless Gateway, make sure you have followed the easy
start guide. You should have your computers configured for DHCP mode and have
proxies disabled on your browser. Also if you access the Wireless Gateway, and instead
of getting a login screen, the browser instead displays a login redirection screen, you
should check your browser's setting, and verify that JavaScript support is enabled. Also,
if you do not get the screen shown in Figure 1, you may need to delete your temporary
Internet files (basically flush the cached web pages).
Upon entering the default IP address or the short-cut name (login.router), if the user is first
time login, the user will be brought to the “Setup Wizard” page. As show in figure 1.1
If the your are not login-in the first time, the router will direct you to the “Home Page” as
shown in figure 1.2
8
Figure 1.2 (Setup Wizard Screen)
The screen as shown in Figure 2.1 will be shown when the router detected that there is no DSL
line connected to the modem. Please follow the hint to rectify the problem.
By default the Wireless Gateway has being configured to PPP connection and user would only
need to enter the username and password (as specified by the local ISP) to make connection to
the Internet.
9
The Quick Start page is meant for basic users whom only require easy and seamless connectivity
to the Internet without worrying about any other advance configuration setting. If you are in doubt
for what content to enter for the Protocol, VPI and VCI, please contact your Service Provider for
details.
Important:
After clicking on Connect, please be sure to “Save Settings” to register the username / password
or any other changes.
The router will check for wrong username and password, if the Internet connection could not be
established. You can click on “here” hyperlink to re-enter your username and password.
10
4.3 Diagnostics Test
Diagnostic Test is used for investigating whether the Wireless Gateway is properly connected to
the WAN Network. This test may take a few seconds to complete. To perform the test, select your
connection from the list and press the Test button. Before running this test, make sure you have
a valid DSL link;
After running the Diagnostic Test, the screen will indicate that the portion which pass or fail the
test. Please click on the Help links, which will provide remedy to the problem as shown in (Figure
3.2). The purpose of the “Fix It “ button is to restore the router’s VPI and VCI to its originated
setting.
11
4.3.1 Ping Test
Once you have your Wireless Gateway configured, it is a good idea to make sure you can ping
the network. You can get to the Ping page by clicking on the “here” hyperlink in Diagnostic
Page. Type the target address that you want to ping. If you have your PC connected to the
Wireless Gateway via the default DHCP configuration, you should be able to Ping the network
address 192.168.1.1. If your ISP has provided their server address you can try to ping the
address. If the pings for both the WAN and the LAN side complete, and you have the proper
protocols configured, you should be able to surf the Internet.
By default when you select ping test, the Wireless Gateway will ping itself 3 times. As shown in
Figure 20, the Wireless Gateway passed the Ping test; this basically means that the TCP/IP
protocol is up and running. If this first Ping test does not pass, the TCP/IP protocol is not loaded
for some reason; you should restart the Wireless Gateway.
Note: Remote Access Hyperlink will only be visible to you, if you have successfully connected to
the Internet.
Remote Access will allow a remote party to access your router, if you enable Remote Access and
enter the remote party’s IP address.
12
Figure 4 (Remote Access screen)
4.5 Statistics
Information regarding the Status and Statistics of your Ethernet, USB and DSL line will be
displayed
4.6 Wireless
4.6.1 Wireless Setup
The SSID default which is defaulted as “yournetworkname” can be changed.
13
SSID is wireless network name for the wireless router, your wireless client will need this name for
wireless connection.
The wireless setup allows the user to enable or disable the AP (access point for the wireless
feature). Disabling of A.P will prevent the wireless router from emitting any wireless signal.
User can make change the Country selection, which is defaulted as US, channel 6.
After any changes to the Wireless Setup, please click on “Restart Access Point” to allow the
Wireless features to apply the changes.
For user who wants to explore the advanced feature, you can click on the Advance button. The
options listed can be changed to cater for advance users.
14
4.6.2 Wireless Security
It is important for user to enforce security in wireless LAN environment, this is to
prevent unauthorized wireless users from accessing your router. On default, no
wireless security is configured, the “None” radio button is selected.
15
Figure 8 (Save Settings screen)
16
5. Advanced
This mode is catered for advance users, a brief explanation of the links are listed
as shown in figure 9
To enable or disable DHCP, Click setup. Under LAN Setup, select DHCP Configuration. This will
bring up the screen shown in Figure 10.
The Start IP Address is where the DHCP server starts issuing IP addresses. This value must be
greater than the Wireless Gateway IP address value. For example if the Wireless Gateway IP
address is 192.168.1.1 (default) than the starting IP address must be 192.168.1. 2 (or higher).
17
The End IP Address is where the DHCP server stops issuing IP addresses. The ending address
cannot exceed a subnet limit of 254. Hence the max value for our default gateway is
192.168.1.254. If the DHCP server runs out of DHCP addresses, users will not get access to
network resources. If this happens you can increase the Ending IP address (to the limit of 255) or
reduce the lease time.
The Lease Time is the amount of time a network user will be allowed connection to the Wireless
Gateway with their current dynamic IP address. The amount of time is in units of minutes; the
default value is 3600 minutes (60 hours).
Note: If you change the start or end values, make sure the values are still within the same subnet
as the gateways IP address. In other words, if the gateways IP address is 192.168.1.1 (default)
and you change the DHCP start/end IP addresses to be 192.128.1.2/192.128.1.100, you will not
be able to communicate to the Wireless Gateway if your PC has DHCP enabled.
In addition to the DHCP server feature, the Wireless Gateway supports the DHCP relay function.
When the Wireless Gateway is configured as DHCP server, it assigns the IP addresses to the
LAN clients. When the Wireless Gateway is configured as DHCP relay, it is responsible for
forwarding the requests and responses negotiating between the DHCP clients and the server.
See figure 11.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
The default gateway is the routing device used to forward all traffic that is not addressed to a
station within the local subnet. Your ISP will provide you with the default gateway Address.
Figure 12 shows a default gateway address of 203.125.64.1 because this was the default
gateway defined when the CLIP connection was configured.
The hostname can be any alphanumeric word that does not contain spaces. The domain name is
used to in conjunction with the host name to uniquely identify the gateway. To access the
Wireless Gateway’s web pages the user can type 192.168.1.1 (the default IP address) or type
mygateway.ar7.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
On the other side of the Wireless Gateway is where your Wide Area Network
(WAN) connection; also referred to as a broadband connection. This WAN
connection is different for every WAN supplier. Most of the configuration you will
perform will be in this area. Local Area Network Connection(s)
5.2.1 Status
Status will display all the relevant information regarding your Internet Connection,
it will display the type of protocol used, the WAN IP address, the connection
state, the duration and if it is Disconnected the reason will be displayed. The
“Disconnect” button on the right-hand side is for terminating the connection from
the Internet.
20
• Static
• Bridged
• RFC1577 / CLIP
To complete the connection you must now click the apply button. The apply button will
temporarily save this connection. To make the change permanent, you need to click on Save
Settings. At the system commands page, click on Save All.
21
5.2.3.2 PPPoA Connection Setup
PPPoA is also known as RFC 2364. It is a method of encapsulating PPP packets over ATM cells
which are carried over the DSL line. PPP or Point-to-Point protocol is a method of establishing a
network connection / session between network hosts. It usually provides a mechanism of
authenticating users. LLC and VC are two different methods of encapsulating the PPP packet.
Contact your ISP to make sure which encapsulation is being supported.
By selecting PPPoA, you are forcing your Wireless Gateway to terminate the PPPoA connection.
The advantage is that the PPPoA termination is done within the Wireless Gateway and not on
your PC; this frees up your PC resources and allows multiple users to utilize the PPPoA
connection.
To configure the gateway for PPPoA, click on Setup and then click on New Connection. The
default PPPoE connection setup is displayed. At the Type field select PPPoA and the PPPoA
connection setup page is displayed; figure 5 illustrates a typical PPPoA configuration. Give your
PPPoA connection a unique name; the name must not have spaces and cannot begin with
numbers. In this case the unique name is called PPPoA1. Select the encapsulation type (LLC or
VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your DSL
service provider or your ISP will supply these; in this case the DSL service provider is using
0,100. Also select the quality of service (QOS); leave the default value if you are unsure or the
ISP did not provide this information.
a. Username: The username for the PPPoA access; this is provided by your DSL service
provider or your ISP.
b. Password: The password for the PPPoA access; this is provided by your DSL service
provider or your ISP.
d. Idle Timeout: Specifies that PPPoA connection should disconnect if the link has no
activity detected for n seconds. This field is used in conjunction with the On-Demand
feature. To ensure that the link is always active, enter a 0 in this field.
e. Keep Alive: When on-demand option is not enable, this value specifies the time to wait
without being connected to your provider before terminating the connection. To ensure
that the link is always active, enter a 0 in this field.
MRU: Maximum Receive Unit the DSL connection can receive. It is a negotiated value that asks
the provider to send packets of no more than n bytes. The maximum specified value is 1500
although some DSL/ISP providers require a larger value. The minimum MRU value is 128.
22
Figure 15 (PPPoA Connection Setup)
To complete the connection you must now click the apply button. The apply button will
temporarily save this connection. To make the change permanent you need to click on Save
Setting (at the side of the page). At the system commands page, click on Save All.
To configure the gateway for PPPoE, click on Setup and then click on New Connection. The
default PPPoE connection setup is displayed. At the Type field select PPPoE and the PPPoE
connection setup page is displayed; figure 6 illustrates a typical PPPoE configuration. Give your
PPPoE connection a unique name; the name must not have spaces and cannot begin with
numbers. In this case the unique name is called PPPoE1. Select the encapsulation type (LLC or
VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your DSL
service provider or your ISP will supply these; in this case the DSL service provider is using
0,100. Also select the quality of service (QOS); leave the default value if you are unsure or the
ISP did not provide this information.
a. Username: The username for the PPPoE access; this is provided by your DSL service
provider or your ISP.
23
b. Password: The password for the PPPoE access; this is provided by your DSL service
provider or your ISP.
c. On-Demand: Enables on-demand mode. The connection will disconnect if no activity is
detected after the specified idle timeout value.
d. Idle Timeout: Specifies that PPPoE connection should disconnect if the link has no activity
detected for n seconds. This field is used in conjunction with the On-Demand feature. To
ensure that the link is always active, enter a 0 in this field.
e. Keep Alive: When on-demand option is not enable, this value specifies the time to wait
without being connected to your provider before terminating the connection. To ensure that
the link is always active, enter a 0 in this field.
f. Set Route: Specify this connection as the default-route.
g. MRU: Maximum Receive Unit the DSL connection can receive. It is a negotiated value that
asks the provider to send packets of no more than n bytes. The maximum specified value is
1500 although some DSL/ISP providers require a larger value. The minimum MRU value is
128.
h. Enforce MRU: Check this box if you experience problems accessing the Internet over a
PPPoE connection. This feature will force all TCP traffic to conform with PPP MRU by
changing TCP Maximum Segment Size to PPP MRU.
To complete the connection you must now click the apply button. The apply button will
temporarily save this connection. To make the change permanent you need to click on Save
Setting (at the side of the page). At the system commands page, click on Save All.
24
5.2.3.4 DHCP Connection Setup
Dynamic Host Configuration Protocol (DHCP) allows the Wireless Gateway to automatically
obtain the IP address from the server. This option is commonly used in situations where IP is
dynamically assigned and is not known prior to assignment.
To configure the Wireless Gateway for a DHCP connection, click on Setup and then click on New
Connection. The default DHCP connection setup is displayed. At the Type field select DHCP
and the DHCP connection setup page is displayed; figure 7 illustrates a typical DHCP
configuration. Give your DHCP connection a unique name; the name must not have spaces and
cannot begin with numbers. In this case the unique name is called DHCP1. Select the
encapsulation type (LLC or VC); if you are not sure just use the default mode. Select the VPI and
VCI settings; your DSL service provider or your ISP will supply these; in this case the DSL service
provider is using 0,100. Also select the quality of service (QOS); leave the default value if you
are unsure or the ISP did not provide this information.
If your DSL line is connected and your DSL/IPS provider is supporting DHCP, you can click the
renew button and the gateway will retrieve an IP address, Subnet mask, and Gateway address.
At anytime, you can renew the DHCP address by clicking on the renew button; in most cases you
will never have to use this button.
To complete the connection you must now click the apply button. The apply button will
temporarily save this connection. To make the change permanent you need to click on Save
Settings (at the side of the page). At the system commands page, click on Save All.
25
To configure the Wireless Gateway for a Static connection, click on Setup and then click on New
Connection. The default Static connection setup is displayed. At the Type field select Static and
the Static connection setup page is displayed; figure 8 illustrates a typical Static configuration.
Give your Static connection a unique name; the name must not have spaces and cannot begin
with numbers. In this case the unique name is called STATIC1. Select the encapsulation type
(LLC or VC); if you are not sure just use the default mode. Select the VPI and VCI settings; your
DSL service provider or your ISP will supply these; in this case the DSL service provider is using
0,100. Also select the quality of service (QOS); leave the default value if you are unsure or the
ISP did not provide this information. You can also enable Network Address Translation (NAT)
and the Firewall options. If you are unsure, leave these in the default mode.
Based upon the information your DSL/ISP provided, enter your assigned IP address, Subnet
Mask, Default Gateway (if provided), and Domain Name Services (DNS) values (if provided). For
the static configuration, you can also select a bridge connection or a routed connection. Since
static IP address is typically used to host WEB servers, you may want to use a bridge connection.
To complete the connection you must now click the apply button. The apply button will
temporarily save this connection. To make the change permanent you need to click on Save
Settings (at the side of the page). At the system commands page, click on Save All.
26
To configure the Wireless Gateway for a CLIP connection, click on Setup and then click on New
Connection. The default CLIP connection setup is displayed. At the Type field select CLIP and
the CLIP connection setup page is displayed; figure 9 illustrates a typical CLIP configuration.
Give your CLIP connection a unique name; the name must not have spaces and cannot begin
with numbers. In this case the unique name is called CLIP1. Select the VPI and VCI settings;
your DSL service provider or your ISP will supply these; in this case the DSL service provider is
using 0,101. Also select the quality of service (QOS); leave the default value if you are unsure or
the ISP did not provide this information. You can also enable Network Address Translation (NAT)
and the Firewall options. If you are unsure, leave these in the default mode.
To complete the connection you must now click the apply button. The apply button will
temporarily save this connection. To make the change permanent you need to click on Save
Settings (at the side of the page). At the system commands page, click on Save All.
As a note, if you delete the connection, to make the change permanent you need to click on Save
Settings (at the side of the page). At the system commands page, click on Save All.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
27
5.2.6 Firewall/NAT Services
You can enable or disable Firewall and NAT by clicking on Setup and under LAN Setup, select
Firewall/NAT Services. By unselecting the “Enable Firewall and NAT Services” button the firewall
and NAT services is disabled for all WAN connections.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
5.2.7 UPnP
UPnP NAT and Firewall Traversal allow traffic to pass-thru the Wireless Gateway for applications
using the UPnP protocol. This feature requires one active DSL connection. In presence of
multiple DSL connections, select the one over, which the incoming traffic will be present, for
example the default Internet connection.
To enable UPnP, you must first have a WAN connection configured. Once a WAN connection is
configured, click Advanced and under Advanced, select UPnP. This will bring up the screen
shown in Figure 13. You must enable UPnP and then select which connection will utilize UPnP.
In this case the PPPoA connection is enabled.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
28
Figure 21 (Modem Status screen)
5.3 Routes
If the Wireless Gateway is connected to more than one network, you may need to set up a static
route between them. A static route is a pre-defined pathway that network information must travel
to reach a specific host or network. You can use static routing to allow different IP domain users
to access the Internet through the Wireless Gateway.
The New Destination IP is the address of the remote LAN network or host to which you want to
assign a static route. Enter the IP address of the host for which you wish to create a static route
29
here. For a standard Class C IP domain, the network address is the first three fields of the New
Destination IP, while the last field should be 0. The Subnet Mask identifies which portion of an IP
address is the network portion, and which portion is the host portion. For a full Class C Subnet,
the Subnet Mask is 255.255.255.0. The Gateway IP address should be the IP address of the
gateway device that allows for contact between the Gateway and the remote network or host.
The Hop Count determines the maximum number of steps between network nodes that data
packets will travel. A node is any device on the network (such as a router or switch)
To enable Static Routing, from the Home screen, click Advanced and under Advanced, select
Static Routing. Figure 22 illustrates a typical Static Route
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
The Direction determines the direction that RIP routes will be updated. Selecting In means that
the Wireless Gateway will only incorporate received RIP information. Selecting Out means that
the Wireless Gateway will only send out RIP information. Selecting both means that the Wireless
Gateway will incorporate received RIP information and send out updated RIP information.
The protocol is dependent upon the entire network. Most networks support Rip v1. If RIP v1 is
selected, routing data will be sent in RIP v1 format. If Rip V2 is selected, routing data will be sent
in RIP v2 format using subnet broadcasting. If Rip V1 Compatible is selected, routing data will be
sent in RIP v2 format using multicasting.
To enable Dynamic Routing, click Advanced and under Advanced, select Dynamic Routing.
Figure 18 illustrates a typical Dynamic Route.
30
Figure 24 (Dynamic Routing)
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
5.4 Security
5.4.1 Port Forwarding
Using the Port Forwarding page, you can provide local services (for example web hosting) for
people on the Internet or play Internet games. When users send this type of request to your
network via the Internet, the Wireless Gateway will forward those requests to the appropriate PC.
Port forwarding can be used with DHCP assigned addresses but remember that a DHCP address
is dynamic (not static). For example, if you were configuring a Netmeeting server, you would
want to assign this server a static IP address so that the IP address is not reassigned. Also
remember that if an Internet user is trying to access an Internet application, they must use the
WAN IP address. The port forwarding will translate the WAN IP address into a LAN IP address.
To configure a service, game, or other application select the external connection (for example the
Internet connection), from the Home screen, click Advanced and under Advanced, select Port
Forwarding. Next select the computer hosting the service and add the corresponding firewall rule.
If you want to add a custom application, select the User category, click New and fill in the port,
protocols and description for your application.
For example, if you want to host a Netmeeting session, from the Home screen, click Advanced
and under Advanced, select Port Forwarding. First select the IP address for your Netmeeting
server. Next select the Audio/Video category and add Netmeeting to the applied rules box. To
view the management rules, highlight Netmeeting and select view; this will display the pre
configured protocols and ports that Netmeeting will use. Now assuming that your WAN
connection is correct, you can run Netmeeting from your server and call users that are on the
Internet. If you know your WAN IP address, users can call you.
31
Figure 25 (Port Forwarding)
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
32
Figure 26 (Access Control screen)
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
5.4.3 IP Filter
IP filter is identical to what Port blocking to Access Control. In (figure 26) it demonstrates that the
router will block workstations with the IP in the defined range of 192.168.1.5 to 192.168.1.20 and
port range from 2000 to 3000.
The User Interface for MAC Filter allows the user to add/edit/delete, as well as, enables the filter
rules. To add rules, simply define the source MAC address, destination MAC address and frame
type with desired filtering type (i.e. allow/deny), and press the “Add” button. The MAC address
must be in a xx-xx-xx-xx-xx-xx format, with 00-00-00-00-00-00 as “don’t care”. Blanks can be
used in the MAC address space, and would be considered also as “don’t care”.
To edit/modify an existing filter rule, select the desired rule created previously from “Add” in the
“Edit” select box. The selected filter rule will appear on top section, as with the “Add” filter rule.
Make the desired change to the MAC address, frame type and/or access type, and press “Apply”.
To delete filter rule(s), select the filter rule entry to delete in the “Delete” selection box. Note that
multiple deletions are possible. Once all the desired filter rule(s) is/are selected for deletion, press
the “Apply” button. The “Select All” select box can also be used to delete the entire filter rule. It
provides a quick method of selecting all filter rules for deletion.
The “Enable MAC Filters” button allow the user to enable or disable MAC filtering. It can be
set/unset during any add/edit/delete operation. It can also be set/unset independently by just
pressing the “Apply” button.
Note: The MAC filter table contains 3 hidden rules. These rules are entered automatically by the
system to ensure the user does not "lock" them out of the system. The first rule allows any and all
ARP frames through the system. The second rule allows all IPv4 frames with the destination MAC
address of the bridge to go through. The third rule allows all IPv4 frames with the source MAC
address of the bridge to go through.
Note: On a windows based machine, to find a MAC address, at a dos prompt type ipconfig /all.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
35
Figure 29 (MAC Filter screen)
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
36
5.5 Applications
Dynamic DNS allows the user to register with a Dynamic DNS Provider as listed.
The dynamic DNS will be linked with the WAN IP of the router even after the ISP
update the WAN IP to another IP address. It can be useful in web hosting and
FTP services.
This feature allows the time in the router to be synchronizing with a specified
Time server.
The “system log” and “current time” will be able to reflect the updated time upon
successfully connected the time server
37
Figure 32 (System Time)
This feature allows the user to select the (Domain Name Server) DNS Server
Priority as well as enter IP addresses for Primary DNS and secondary DNS
38
5.6 Wireless
39
5.6.2 Wireless Management
The Wireless Management consist of Access List, Associated Stations and
Multiple SSID features.
Note: You must restart the Wireless Access Point to activate the changes for the wireless settings
to take effect.
Note: You must restart the Wireless Access Point to activate the changes for the wireless settings
to take effect.
Note: You must restart the Wireless Access Point to activate the changes for the wireless settings
to take effect.
You can change your Wireless Gateway’s username and password by clicking on User
Management. From here you can change the login name and password for Admin and Normal
User. You can also change the idle timeout; you will need to log back onto the Wireless Gateway
once the timeout expires.
If you forget your password, you can press and hold the reset to factory defaults button for 10
seconds (or more). The Wireless Gateway will reset to its factory default configuration and all
custom configurations will be lost.
The apply button will temporarily save this connection. To make the change permanent you need
to click on Save Settings (at the side of the page). At the system commands page, click on Save
All.
41
Figure 36 (HTTP Authentication screen)
42
Figure 37.1 (Firmware Update screen)
NOTE: Connectivity to the router will be lost. You will be re-connected to the router after the unit
reboots.
NOTE: Connectivity to the unit will be lost. You can reconnect after the unit reboots
43
Figure 37.4 (System Log screen)
44
6. Appendix A: Troubleshooting
Below is a list of commonly asked questions. Before calling technical support, please look
through these issues to see if they help to solve your problem.
1. Check to see that the power LED is green and than the network cables are installed
correctly. Refer to the easy start guide for more details.
2. Check to see that the ETH and Internet LEDs are green.
3. Check to see that the DSL LED is green
4. Check the settings on your PC. Again, refer to the easy start guide for more details
5. Check the Wireless Gateway’s settings.
6. From your PC, can you PING the Wireless Gateway? Assuming that the Wireless
Gateway has DHCP enabled and your PC is on the same subnet as the gateway, you
should be able to PING the gateway.
7. Can you PING the WAN IP? Your ISP should have provided the IP address of their
server. If you can ping the Wireless Gateway and your protocols are configured
correctly, you should be able to ping the ISPs network. If you cannot PING the ISPs
network, make sure you are using the correct protocols with the correct VPI/VCI values.
8. Make sure NAT is enabled for your connection. If NAT is disabled the Wireless Gateway
will not route frames correctly (except in Bridge connection).
1. Check to see that the power LED is green and that the network cables are installed
correctly; see the easy start guide for more details.
2. Make sure that your PC and the Wireless Gateway is on the same network segment.
The Wireless Gateway’s default IP address is 192.168.1.1. If you are running a Windows
based PC, you can open a DOS window and type IPCONFIG; make sure that the
network adapter that is connected to the gateway is within the same 192.168.1.x subnet.
3. Also, your PC’s Subnet Mask should match the gateways subnet mask. The gateway
has a default subnet mask of 255.255.255.0.
4. If this still does not work, press the reset button for 10 seconds. This will place the
gateway into its factory default state. Go through the above procedures again.
5. Make sure NAT is enabled for your connection. If NAT is disabled the Wireless Gateway
will not route frames correctly (except in Bridge connection).
6.3 The DSL Link LED continues to blink but does not go solid
1. This means that the DSL line is trying to train but for some reason it cannot establish a
valid connection. The main cause of this is that you are too far away from the central
office. Contact your DSL service provider for further assistance.
2. Verify that the phone line is connected directly to the wall and to the line input on the
Wireless Gateway.
3. Make sure that for every parallel phone line connected to telephone or fax to install with a
micro filter.
Common Problems and Solutions
45
6.4 The DSL Link LED is always off
1. Make sure you have DSL service. You should get some kind of information from your
ISP that states that DSL service is installed. You can usually tell if the service is installed
by listening to the phone line; you will hear some high-pitched noise. If you do not hear
high-pitched noise, contact your ISP.
2. Verify that the phone line is connected directly to the wall and to the line input on the
Wireless Gateway. If the phone line is connected to the phone side of the Wireless
Gateway or you have a splitter installed on the phone line, the DSL light will not come on.
46
7. Wireless Gateway terms
What is DSL ?
DSL which is short for Digtal Subscriber Line is a technology that increases the digital capacity of
a ordinary telephone line into home of office and , because it is utilitsing the unused bandwidth,
the line allows normal phone usage and signal to be for broadband to be used at the same time.
DSl has the capability to impart “always-connected” services, thus eliminating the need to dial in
to the service
What is a firewall?
A firewall is protection between the Internet and your local network. It acts similarly to the firewall
in your car, protecting the interior of the car from the engine. Your car's firewall has very small
opening that allow desired connections from the engine into the cabin (gas pedal connection,
etc), but if something happens to your engine, you are protected.
The firewall in the Wireless Gateway is very similar. Only the desired connections that you allow
are passed through the firewall. These connections are normally originating from the local
network; such as web browsing, checking your email, downloading a file, and playing a game.
However, in some cases, you can allow incoming connections so that you can run programs like
a web server.
What is NAT?
NAT stands for Network Address Translation. Another name for it is Connection Sharing. What
does this mean? Your ISP provides you with a single network address for you to access the
Internet through. However, you may have several machines on your local network that want to
access the Internet at the same time. The Wireless Gateway provides NAT functionality that
converts your local network addresses to the single network address provided by your ISP. It
keeps track of all these connections and makes sure that the correct information gets to the
correct local machine.
Occasionally, there are certain programs that don't work well through NAT. Some games, and
some specialty applications have a bit of trouble. The Wireless Gateway contains special
functionality to handle the vast majority of these troublesome programs and games. NAT does
cause problems when you want to run a SERVER though. When running a server, please see the
DMZ section below.
What is a DMZ?
DMZ really stands for Demilitarized Zone. It is a way of separating out part of your local network
so that is more open to the Internet. Suppose that you want to run a web-server, or a game
server. Normal servers like these are blocked from working by the NAT functionality. The solution
is to "isolate" the single local computer into a DMZ. This makes the single computer look like it is
directly on the Internet, and others can access this machine.
Your machine isn't really directly connected to the Internet, and it really has an internal local
network address. When you provide the servers network address to others, you must provide the
address of the Wireless Gateway. The Wireless Gateway "fakes" the connection to your machine.
You should use the DMZ when you want to run a server that others will access from the Internet.
Internal programs and servers (like print servers, etc) should NOT be connected to the DMZ
47
What is a Gateway?
The Internet is so large that a single network cannot handle all of the traffic and still deliver a
reasonable level of service. To overcome this limitation, the network is broken down into smaller
segments or subnets that can deliver good performance for the stations attached to that segment.
This segmentation solves the problem of supporting a large number of stations, but introduces
the problem of getting traffic from one subnet to another.
To accomplish this, devices called routers or gateways are placed between segments. If a
machine wishes to contact another device on the same segment, it transmits to that station
directly using a simple discovery technique. If the target station does not exist on the same
segment as the source station, then the source actually has no idea how to get to the target.
One of the configuration parameters transmitted to each network device is its default gateway.
This address is configured by the network administrators and it informs each personal computer
or other network device where to send data if the target station does not reside on the same
subnet as the source. If your machine can reach all stations on the same subnet (usually a
building or a sector within a building), but cannot communicate outside of this area, it is usually
because of an incorrectly configured default gateway.
What is SSID ?
A service set identifier (SSID) is a sequence of characters that uniquely names a wireless local
area network (WLAN). This name allows stations to connect to the desired network when multiple
independent networks operate in the same physical area
What is WEP ?
Wired Equivalent Privacy (WEP) is a security protocol, specified in the IEEE Wireless Fidelity (Wi-
Fi) standard, 802.11b, that is designed to provide a wireless local area network (WLAN) with a
level of security and privacy comparable to what is usually expected of a wired LAN. A wired local
area network (LAN) is generally protected by physical security mechanisms (controlled access to
a building, for example) that are effective for a controlled physical environment, but may be
ineffective for WLANs because radio waves are not necessarily bound by the walls containing the
network. WEP seeks to establish similar protection to that offered by the wired network's physical
security measures by encrypting data transmitted over the WLAN. Data encryption protects the
vulnerable wireless link between clients and access points; once this measure has been taken,
other typical LAN security mechanisms such as password protection, end-to-end encryption,
virtual private networks (VPNs), and authentication can be put in place to ensure privacy.
48
© 2005 Starbridge Networks LLC. All rights reserved.
www.starbridgenetworks.com