BR-6428nS V3 / BR-6438nS BR-6228nS V3 / BR-6238nS User Manual 08-2014 / v1.
CONTENTS I. Product Information .............................................................................. 1 I-1. Package Contents ..........................................................................................................1 I-2. I-3. I-4. LED Status ......................................................................................................................2 Back Panel .............................................................................................................
III-3-5-4. Access Control .............................................................................................................72 III-3-5-5. III-3-6. III-3-6-1. III-3-6-2. Schedule.......................................................................................................................74 Firewall.........................................................................................................................76 URL Blocking ......................................................
IV-1-3. How to Find Your Network Security Key ...................................................................131 IV-1-3-1. IV-1-3-2. IV-1-4. IV-1-4-1. Windows 7 & Vista.....................................................................................................131 Mac ............................................................................................................................133 How to Find Your Router’s IP Address................................................................
I. Product Information I-1. Package Contents Before you start using this product, please check if there is anything missing in the package, and contact your dealer to claim the missing item(s): BR-6428nS V3* Ethernet Cable or BR-6228nS V3* Quick Installation Guide Power Adapter CD-ROM * BR-6428nS V3 and BR-6438nS are actually the same designed wireless router with different names. * BR-6228nS V3 and BR-6238nS are actually the same designed wireless router with different names.
I-2. LED Status LED Color Power LED Status Description On Device is on. Off Device is off. On Internet is connected. Flashing No Internet connection. On Wi-Fi activity (transferring/receiving data). Off Wi-Fi not active. On WPS connection established (displays on for one minute). Flashing WPS in progress. Off No WPS connection.
I-3.
I-4. Safety Information In order to ensure the safe operation of the device and its users, please read and act in accordance with the following safety instructions. 1. The device is designed for indoor use only; do not place it outdoors. 2. Do not place the device in or near hot/humid places, such as a kitchen or bathroom. 3. Do not pull any connected cable with force; carefully disconnect it from the BR-6428nS V3/BR-6228nS V3. 4. Handle the device with care.
II. Installation 1. Plug the included power adapter into the device’s 5V DC power port and the other end into an electrical socket. 2. Ensure that the power LED is lit. If not, the device is not properly connected. 3. Use a Wi-Fi device (e.g. computer, tablet, smartphone) to search for a Wi-Fi network with the SSID “edimax.setup” and connect to it. iOS 4 or Android 4 and above are required for setup on a smartphone or tablet. 4.
If you cannot access http://edimax.setup, please make sure your computer is set to use a dynamic IP address. Refer to IV-1. Configuring your IP address for more information. 5. Choose if you want to use your product in its default Wi-Fi router mode or in a different mode.
The device’s five available modes are outlined below: Wi-Fi Router Mode The device connects to your modem and provides 2.4GHz Internet (wireless and Ethernet) access for your network devices. Access Point Mode The device connects to an existing router via Ethernet cable and provides 2.4GHz Internet (wireless and Ethernet) access for your network devices. Range Extender Mode The device connects wirelessly to your existing 2.4GHz network and repeats the wireless signal(s).
II-1. 1. Wi-Fi Router Mode Select whether to use the iQ Setup wizard (recommended) to detect your Internet connection type, or enter the settings manually. Manual configuration is only recommended for advanced users. 2. Connect the Internet port of your device to the LAN port of your modem using an Ethernet cable, and then click “Next”.
3. Please wait a moment while the device tests the connection. 4. Click “Next” to continue and configure the device’s wireless network. 5. Enter a name and password for your 2.4GHz wireless network, then click “Next” to continue.
6. A summary of your configuration will be displayed, as shown below depending on your Internet type. Check that all of the details are correct and then click “Next” to proceed. If you wish to backup the device’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file.
7. 8. Please wait while the device applies your settings. A final congratulations screen will indicate that setup is complete. You can now connect to the device’s new SSID(s) which are shown on the screen then close the browser window.
II-2. Access Point Mode 1. Select “Access Point” from the top menu and click “Next”. 2. Connect the LAN port of your BR-6428nS V3/BR-6228nS V3 to the LAN port of your existing router using an Ethernet cable, then click “Next”. 3. Select “Obtain an IP address automatically” or “Use the following IP address” for your BR-6428nS V3/BR-6228nS V3. If you are using a static IP, enter the IP address, subnet mask and default gateway. Click “Next” to proceed to the next step.
“Obtain an IP address automatically” is the recommended setting for most users. For more guidance on static IP addresses, please refer to IV-1. Configuring your IP address. 4. Enter a name and password for your 2.4GHz wireless network, then click “Next” to continue. 5. A summary of your configuration will be displayed, as shown below. Check that all of the details are correct and then click “Next” to proceed.
If you wish to backup the device’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file. 6. Please wait a moment until the BR-6428nS V3/BR-6228nS V3 is ready.
8. A final congratulations screen will indicate that setup is complete. You can now connect to the device’s new SSID(s) which are shown on the screen then close the browser window. 9. The BR-6428nS V3/BR-6228nS V3 is working and ready for use. Refer to IV-2. Connecting to a Wi-Fi network if you require more guidance.
II-3. Range Extender Mode 1. Select “Range Extender” from the top menu and click “Next”. 2. Please ensure your BR-6428nS V3/BR-6228nS V3 is within Wi-Fi range of your existing wireless router. Click “Next” to continue. 3. Select the Wi-Fi network name (SSID) which you wish to connect to for the specified frequency and click “Next” to continue. If the Wi-Fi network you wish to connect to does not appear, try clicking “Refresh”.
To connect to a hidden SSID, check the “Setup extender manually” box and enter the details manually on the next page, as shown below. 4. Enter your existing wireless network’s security key/password in the “Security Key” field and click “Next” to continue.
5. Wait a moment while the BR-6428nS V3/BR-6228nS V3 tests the wireless connection. 6. Select “Obtain an IP address automatically” or “Use the following IP address” for your BR-6428nS V3/BR-6228nS V3. If you are using a static IP, enter the IP address, subnet mask and default gateway. Click “Next” to proceed to the next step. “Obtain an IP address automatically” is the recommended setting for most users. The IP address will be displayed in brackets.
7. A summary of your configuration will be displayed, as shown below. Check that all of the details are correct and then click “Next” to proceed. The device will use the same wireless password/security key as the existing wireless network. If you wish to backup the BR-6428nS V3/BR-6228nS V3’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file.
8.Please wait a moment until the BR-6428nS V3/BR-6228nS V3 is ready. 9.A final congratulations screen will indicate that setup is complete. You can now connect to the device’s new SSID(s) which are shown on the screen then close the browser window.
10. The BR-6428nS V3/BR-6228nS V3 is working and ready for use. Refer to IV-2. Connecting to a Wi-Fi network if you require more guidance.
II-4. Wireless Bridge Mode 1. Select “Wireless Bridge” from the top menu and click “Next”. 2. Please ensure your BR-6428nS V3/BR-6228nS V3 is within Wi-Fi range of your existing wireless router. Click “Next” to continue. 3. Select the Wi-Fi network name (SSID) which you wish to connect to and click “Next” to continue.
If the Wi-Fi network you wish to connect to does not appear, try clicking “Refresh”. To connect to a hidden SSID, check the “Setup extender manually” box and enter the details manually on the next page, as shown below. 4. Enter your existing wireless network’s security key/password in the “Security Key” field and click “Next” to continue.
5. Wait a moment while the BR-6428nS V3/BR-6228nS V3 tests the wireless connection. 7. Select “Obtain an IP address automatically” or “Use the following IP address” for your BR-6428nS V3/BR-6228nS V3. If you are using a static IP, enter the IP address, subnet mask and default gateway. Click “Next” to proceed to the next step. “Obtain an IP address automatically” is the recommended setting for most users. The IP address will be displayed in brackets.
8. A summary of your configuration will be displayed, as shown below. Check that all of the details are correct and then click “Next” to proceed. If you wish to backup the BR-6428nS V3/BR-6228nS V3’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file.
9. Please wait a moment until the BR-6428nS V3/BR-6228nS V3 is ready. 10. A final congratulations screen will indicate that setup is complete. Please close the browser window.
11. The BR-6428nS V3/BR-6228nS V3 is working and ready for use. You can now connect the BR-6428nS V3/BR-6228nS V3 to your network device using an Ethernet cable and connect to your network as usual.
II-5. 1. WISP Mode Select “WISP” from the top menu and click “Next”. 2. Please ensure your BR-6428nS V3/BR-6228nS V3 is within Wi-Fi range of your WISP network and click “Next” to continue. 3. Select whether to use the iQ Setup wizard (recommended) to detect your Internet connection type, or enter the settings manually.
Manual configuration is only recommended for advanced users. 5. Select the WISP SSID which you wish to connect to and click “Next” to continue. If the Wi-Fi network you wish to connect to does not appear, try clicking “Refresh”.
To connect to a hidden SSID, check the “Setup extender manually” box and enter the details manually on the next page, as shown below. 6. Enter your existing wireless network’s security key/password in the “Security Key” field and click “Next” to continue. 7. Wait a moment while the BR-6428nS V3/BR-6228nS V3 tests the wireless connection.
8. 9. Click “Next” to continue your Internet service type configuration. Wait a moment while the BR-6428nS V3/BR-6228nS V3 connects to the Internet.
10. When the Internet is connected, click “Next” to configure your wireless network. 11. Enter a name and password for your 2.4GHz wireless network, then click “Next” to continue.
12. A summary of your configuration will be displayed according to your connection type, as shown below. Check that all of the details are correct and then click “Next” to proceed. If you wish to backup the device’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file.
13. Please wait a moment until the BR-6428nS V3/BR-6228nS V3 is ready. 14. A final congratulations screen will indicate that setup is complete. You can now connect to the device’s new SSID(s) which are shown on the screen then close the browser window.
15. The BR-6428nS V3/BR-6228nS V3 is working and ready for use. Refer to IV-2. Connecting to a Wi-Fi network if you require more guidance.
II-6. WPS Setup If your wireless device supports WPS (Wi-Fi Protected Setup) then you can use this method to connect to the BR-6428nS V3/BR-6228nS V3’s Wi-Fi network. 1. Press the WPS button on the BR-6428nS V3/BR-6228nS V3 for 2 – 5 seconds to activate WPS. The WLAN LED will flash to indicate that WPS is active. 2. Within two minutes, press the WPS button on the wireless device/client to activate its WPS. 3. The devices will establish a connection. Repeat for additional wireless devices.
III. Browser Based Configuration Interface After you have setup the BR-6428nS V3/BR-6228nS V3 as detailed in II. Installation or the included Quick Installation Guide, you can use the browser based configuration interface to configure advanced settings. Please ensure that your computer is set to use a dynamic IP address. Refer to IV-1. Configuring your IP address for more information. III-1. 1. Login To access the browser based configuration interface enter http://edimax.
3. You will arrive at the “Status” screen. Use the menu down the left side to navigate.
III-2. 1. Save Settings After you configure any settings, click the “Save Settings” button at the bottom of the screen to save your changes. The device needs to restart in order to bring any changes into effect. 2. Then, click “Click here to restart” in order to restart the device and bring the changes into effect. 3. To make several changes at once, use the “Save Settings” button after each change and then click “click here to restart” after your final change.
III-3. Main Menu The main menu displays different options depending on your device’s operating mode. For Range Extender mode: WPS please refer to 2.
III-3-1. Status The “Status” page displays basic system information about the device, arranged into four categories: System, LAN, Internet & 2.4GHz Wireless. Screenshots displayed are examples.The information shown on your screen will vary depending on your configuration.
III-3-2. Setup Wizard You can run the setup wizard again to reconfigure the basic settings of the device, or you can run a wizard to help you switch the device to a different operating mode. Select “Setup Wizard” or “Switch to Router/AP/Range Extender/Wireless Bridge/WISP mode” and then click “Run Wizard” to begin. Setup Wizard This wizard will help you to set up the basic functions and settings of the device. For guidance about using the setup wizard, please refer to II. Installation.
3. Follow the on-screen wizard to setup your device in a different mode. Refer to II. Installation Step 3 onwards for help if needed. If you don’t see the “Get Started” screen, try reconnecting to the edimax.setup SSID and go to http://edimax.setup in a web browser.
III-3-3. Internet/WISP The “Internet” menu provides access to WAN and DDNS settings. Click on an item from the submenu to view and/or configure the settings. In WISP mode, the screen below will be displayed: Enable / Disable SSID Site Survey Security Setting Enable or disable your WISP connection. The name of the WISP network which your BR-6428nS V3/BR-6228nS V3 is connected to. Manually enter an SSID if you wish or use “Site Survey” below.
III-3-3-1. WAN Setup Select a Wide Area Network (WAN) connection mode and configure the settings. If you are unsure about your connection type, contact your ISP. In WISP mode, only Dynamic IP, Static IP & PPPoE are available for WAN Connection Mode. III-3-3-1-1. Dynamic IP Select “Dynamic IP”. If your Internet service provider assigns IP address automatically using DHCP (Dynamic Host Configuration Protocol).
Host Name MAC Address Enter the host name of your computer. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address. DNS Address Select “Obtain an IP address automatically” or “Use the following IP address”. Check with your ISP if you are unsure. DNS Address 1,2 & 3 Enter the DNS address(es) assigned by your ISP here.
Fixed IP Address Subnet Mask Default Gateway Address MAC Address DNS Address 1, 2 & 3 DNS Proxy DNS Proxy Rules (URL) TTL Input the IP address assigned by your ISP here. Input the subnet mask assigned by your ISP here. Input the default gateway assigned by your ISP here. Some ISPs may call this “Default Route”. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here.
III-3-3-1-3. PPPoE Select “PPPoE” if your ISP is providing you Internet access via PPPoE (Point-to-Point Protocol over Ethernet). User Name Password MAC Address Enter the user name assigned by your ISP here. Enter the password assigned by your ISP here. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address.
DNS Address Select “Obtain an IP address automatically” or “Use the following IP address”. Check with your ISP if you are unsure. DNS Address 1, 2 & 3 DNS Proxy DNS Proxy Rules (URL) Service Name MTU Enter the DNS address(es) assigned by your ISP here. Enable or disable a DNS proxy server. When DNS proxy is enabled, enter the URL of a DNS proxy server. Give this Internet service a name (optional). Enter the maximum transmission unit (MTU) value of your network connection. The default value is 1392.
III-3-3-1-4. PPTP Select “PPTP” if your ISP is providing you Internet access via PPTP (Point-to-Point Tunneling Protocol). Then select “Obtain an IP address automatically” or “Use the following IP address” depending on your ISP. Host Name MAC Address Enter the host name of your computer here If required. For some applications, you may need to designate a specific MAC address for the router.
Static IP Address Subnet Mask Default Gateway Address MAC Address DNS Address DNS Address 1,2 & 3 DNS Proxy DNS Proxy Rules (URL) User ID Password PPTP Gateway Connection ID MTU BEZEQ-ISRAEL Connection Type Idle Time Out the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address. Input the IP address assigned by your ISP here. Input the subnet mask assigned by your ISP here.
III-3-3-1-5. L2TP Select “L2TP” if your ISP is providing you Internet access via L2TP (Layer 2 Tunneling Protocol). Host Name MAC Address Enter the host name of your computer here If required. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address.
Static IP Address Subnet Mask Default Gateway Address MAC Address DNS Address DNS Address 1,2 & 3 DNS Proxy DNS Proxy Rules (URL) User ID Password L2TP Gateway Connection ID MTU Connection Type Idle Time Out Input the IP address assigned by your ISP here. Input the subnet mask assigned by your ISP here. Input the default gateway assigned by your ISP here. Some ISPs may call this “Default Route”. If your ISP filters access by MAC addresses, enter your computer’s MAC address here.
III-3-3-1-6. WISP Select “WISP” if you use a wireless internet service from Internet Service Provider (WISP). WISP SSID Select Site Survey Channel Number Security Settings Enable or disable the WISP function. Enter the SSID of the WISP network, or click “Select Site Survey” below to view all available networks in a new window and select the WISP network from there. Click “Select Site Survey” to display all available wireless SSIDs in a new window and select your WISP network.
III-3-3-2. DDNS Dynamic DNS (DDNS) is a service which provides a hostname-to-IP service for dynamic IP users. The changing nature of dynamic IPs means that it can be difficult to access a service provided by a dynamic IP user; a DDNS service though can map such dynamic IP addresses to a fixed hostname, for easier access. The router supports several DDNS service providers, for more details and to register for a DDNS account please visit the DDNS providers website(s), examples of which are listed below.
NS2GO NO-IP http://www.ns2go.com/ http://www.noip.
III-3-4. LAN You can configure your Local Area Network (LAN) on this page. You can enable the router to dynamically allocate IP addresses to your LAN clients, and you can modify the IP address of the device. The device’s default IP address is 192.168.2.1. You can access the browser based configuration interface using the device’s IP address instead of using the URL http://edimax.setup. IP Address Subnet Mask 802.1d Spanning Tree DHCP Server Lease Time Specify the IP address here.
Start IP End IP Enter the start IP address for the DHCP server’s IP address leases. Enter the end IP address for the DHCP server’s IP address leases. Your device’s DHCP server can be configured to assign static (fixed) IP addresses to specified network devices, identified by their unique MAC address. Enable Static DHCP Leases MAC Address IP Address Add Clear Delete Selected / Delete All Enable/disable static DHCP leases. This must be enabled in order to assign any network device a static IP address.
59
III-3-5. 2.4GHz Wireless The “2.4GHz Wireless” menu allows you to configure SSID and security settings for your Wi-Fi network along with a guest Wi-Fi network. WPS, access control and scheduling functions can also be managed from here. Access Point Mode: In Access Point mode, the “Guest” feature in the menu is replaced by “Multiple SSID”. III-3-5-1. Basic The “Basic” screen displays settings for your primary 2.4GHz Wi-Fi network.
Band Wireless Network Name (SSID) Broadcast SSID Enable Wireless Clients Isolation Channel Number Site Survey Wireless Clients select “AP Bridge-WDS” for the device to function in WDS mode (see below). Displays the wireless standard used for the BR-6428nS V3/BR-6228nS V3’s “2.4GHz (B+G+N)” means that 802.11b, 802.11g, and 802.11n wireless clients can connect to the BR-6428nS V3/BR-6228nS V3. This is the name of your Wi-Fi network for identification, also sometimes referred to as “SSID”.
AP Bridge-WDS: Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel.
Wireless Security: Select an encryption type from the drop-down menu: “WPA Pre-shared Key” is the recommended and most secure encryption type. In WISP mode, WPA RADIUS is unavailable for the wireless band that is used to connect to WISP’s AP.
III-3-5-1-1. Disable Encryption is disabled and no password/key is required to connect to the BR-6428nS V3/BR-6228nS V3. Disabling wireless encryption is not recommended. When disabled, anybody within range can connect to your device’s SSID. Enable 802.1x Authentication Check the box to enable the 802.1x authentication. A RADIUS server is required to perform 802.1x authentication: enter the RADIUS server’s information in the relevant fields (below).
III-3-5-1-2. WEP WEP (Wired Equivalent Privacy) is a basic encryption type. For a higher level of security consider using WPA encryption. Key Length Key Format Encryption Key Enable 802.1x Authentication Select 64-bit or 128-bit. 128-bit is more secure than 64-bit. Choose from “ASCII” (any alphanumerical character 0-9, a-z and A-Z) or “Hex” (any characters from 0-9, a-f and A-F). Enter your encryption key/password according to the format you selected above. A complex, hard-to-guess key is recommended.
III-3-5-1-3. WPA Pre-Shared Key WPA pre-shared key is the recommended and most secure encryption type. WPA Unicast Cipher Suite Pre-shared Key Format Pre-shared Key Select from WPA (TKIP), WPA2 (AES) or WPA2 Mixed. WPA2 (AES) is safer than WPA (TKIP), but not supported by all wireless clients. Please make sure your wireless client supports your selection. WPA2 (AES) is recommended followed by WPA2 Mixed if your client does not support WPA2 (AES).
III-3-5-1-4. WPA Radius WPA RADIUS is a combination of WPA encryption and RADIUS user authentication. If you have a RADIUS authentication server, you can authenticate the identity of every wireless client against a user database. WPA Unicast Cipher Suite Select from WPA (TKIP), WPA2 (AES) or WPA2 Mixed. WPA2 (AES) is safer than WPA (TKIP), but not supported by all wireless clients. Please make sure your wireless client supports your selection.
III-3-5-2. Guest/ Multiple SSID You can setup an additional “Guest” Wi-Fi network so guest users can enjoy Wi-Fi connectivity without accessing your primary network. The “Guest” screen displays settings for your guest Wi-Fi network. The guest network is separate from your primary network. The settings for your primary network can be found in the “Basic” menu. In access point mode, the “Guest” feature in the menu is replaced by “Multiple SSID”.
Band Channel Number Encryption Displays the wireless standard used for the BR-6428nS V3/BR-6228nS V3’s frequency band: 2.4GHz (B+G+N): Allows 802.11b, 802.11g, and 802.11n wireless clients to connect to the BR-6428nS V3/BR-6228nS V3. Channel number for the guest network is the same as the main SSID and cannot be adjusted independently. Please refer to III-3-5-1. Basic: Wireless Security for details about security settings. WPA RADIUS encyrption type is not available for the guest network.
Multiple SSID Wireless Network Name (SSID) Enable Multiple SSID Enable Wireless Clients Isolation Band Channel Number VLAN ID Use the drop down menu to select which SSID ( numbered 1 – 4) to configure. Enter a reference/ID name to separate your wireless network. Check/uncheck this box to enable/disable the specified SSID. Must be checked for the SSID to function. Check the box to enable wireless clients isolation.
III-3-5-3. WPS Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. WPS can be activated on compatible devices by pushing a WPS button on the device or from within the device’s firmware/configuration interface. When WPS is activated in the correct manner and at the correct time for two compatible devices, they will automatically connect. PIN code WPS includes the use of a PIN code between the two devices for verification.
Configure via Push Button Click “Start PBC” (Push-Button Configuration) to activate WPS on the access point. WPS will be active for 2 minutes. Configure via Client Enter the wireless client’s PIN code here and PIN Code click “Start PIN” to activate PIN code WPS. Refer to your wireless client’s documentation if you are unsure of its PIN code. III-3-5-4. Access Control Access Control is a security feature that can help to prevent unauthorized users from connecting to your wireless router.
it manually. Comment Add Enter a MAC address of computer or network device manually without dashes or colons e.g. for MAC address ‘aa-bb-cc-dd-ee-ff’ enter ‘aabbccddeeff’. Enter a comment for reference/identification consisting of up to 16 alphanumerical characters. Click “Add” to add the MAC address to the MAC address filtering table. MAC address entries will be listed in the table as shown below. Select an entry using the “Select” checkbox.
III-3-5-5. Schedule The schedule feature allows you to automate the wireless radio to switch on/off at specified times. Multiple schedules can be configured. Check/uncheck the box “Enable Schedule Settings” to enable/disable the wireless on/off scheduling function. The BR-6428nS V3/BR-6228nS V3 must remain connected to the Internet and use an NTP server for the schedule feature to function correctly. Wireless scheduling can save energy and increase the security of your network. 1.
Add Add the schedule to the table of active schedules. Active schedules will be displayed in the table as shown below. Select an entry using the “Select” checkbox. Delete Selected/ Delete All Delete selected or all entries from the table.
III-3-6. Firewall The “Firewall” menu provides access to URL blocking, access control, DMZ and DoS functions to improve the security of your wireless network. SPI firewall III-3-6-1. Enable or disable the Stateful Packet Inspection (SPI) firewall. URL Blocking This function can block Internet access by either specific URLs or keywords. Check/uncheck the “Enable URL Blocking” box to enable/disable URL blocking.