LevelOne WBR-3407 11g Wireless ADSL Modem Router User’s Manual
Table of Contents CHAPTER 1 INTRODUCTION ............................................................................................. 1 WBR-3407 Features .......................................................................................................... 1 Package Contents .............................................................................................................. 3 Physical Details......................................................................................................
Diagnostics ....................................................................................................................... 83 Remote Admin ................................................................................................................. 84 Routing ............................................................................................................................. 86 Upgrade Firmware .............................................................................................
1 Chapter 1 Introduction This Chapter provides an overview of the WBR-3407's features and capabilities. Congratulations on the purchase of your new WBR-3407. The WBR-3407 is a multi-function device providing the following services: • • • • ADSL Modem. Shared Broadband Internet Access for all LAN users. WBR3407 for 802.11b and 802.11g Wireless Stations. 4-Port Switching Hub for 10BaseT or 100BaseT connections.
WBR-3407 User Guide • Auto-detection of Internet Connection Method. In most situations, the WBR-3407 can test your ADSL and Internet connection to determine the connection method used by your ISP. • Fixed or Dynamic IP Address. On the Internet (WAN port) connection, the WBR3407 supports both Dynamic IP Address (IP Address is allocated on connection) and Fixed IP Address. Advanced Internet Functions • Application Level Gateways (ALGs).
Introduction • DHCP Server Support. Dynamic Host Configuration Protocol provides a dynamic IP address to PCs and other devices upon request. The WBR-3407 can act as a DHCP Server for devices on your local LAN and WLAN. Configuration & Management • Easy Setup. Use your WEB browser from anywhere on the LAN or WLAN for configuration. • Configuration File Upload/Download.
WBR-3407 User Guide Physical Details Front-mounted LEDs Figure 2: Front Panel Power LED (Green) On - Power on. Status LED (Yellow) Off - Normal operation. LAN For each port, there are 2 LEDs, to indicate the connection speed (10BaseT or 100BaseT) of each port. WLAN LED Off - No power. Blinking - This LED blinks during start up, and during a Firmware Upgrade.
Introduction Rear Panel Figure 3: Rear Panel Power port Connect the supplied power adapter here. 10/100BaseT LAN connections Use standard LAN cables (RJ45 connectors) to connect your PCs to these ports. Note: Any LAN port on the WBR-3407 will automatically function as an "Uplink" port when required. Just connect any port to a normal port on the other hub, using a standard LAN cable. Reset Button (Reset to Defaults) This button will reset the WBR-3407 to the factory default settings.
2 Chapter 2 Installation This Chapter covers the physical installation of the WBR-3407. Requirements • Network cables. Use standard 10/100BaseT network (UTP) cables with RJ45 connectors. • TCP/IP protocol must be installed on all PCs. • For Internet Access, an Internet Access account with an ISP, and a DSL connection. • To use the WBR3407, all Wireless devices must be compliant with the IEEE 802.11g or IEEE 802.11b specifications. Procedure Figure 4: Installation Diagram 1.
Installation 2. Connect LAN Cables Use standard LAN cables to connect PCs to the Switching Hub ports on the WBR-3407. Both 10BaseT and 100BaseT connections can be used simultaneously. If required, connect any port to a normal port on another Hub, using a standard LAN cable. Any LAN port on the WBR-3407 will automatically function as an "Uplink" port when required. 3.
3 Chapter 3 Setup This Chapter provides Setup details of the WBR-3407. Overview This chapter describes the setup procedure for: • Internet Access • LAN configuration • Wireless setup • Assigning a Password to protect the configuration data. PCs on your local LAN may also require configuration. For details, see Chapter 4 - PC Configuration. Other configuration may also be required, depending on which features and functions of the WBR-3407 you wish to use.
Setup Configuration Program The WBR-3407 contains an HTTP server. This enables you to connect to it, and configure it, using your Web Browser. Your Browser must support JavaScript. The configuration program has been tested on the following browsers: • Netscape V4.08 or later • Netscape 7 • Internet Explorer V5.01 or later Preparation Before attempting to configure the WBR-3407, please ensure that: • Your PC can establish a physical connection to the WBR-3407.
WBR-3407 User Guide If you can't connect If the WBR-3407 does not respond, check the following: • The WBR-3407 is properly installed, LAN connection is OK, and it is powered ON. You can test the connection by using the "Ping" command: • Open the MS-DOS window or command prompt window. • Enter the command: ping 192.168.0.1 If no response is received, either the connection is not working, or your PC's IP address is not compatible with the WBR-3407's IP Address. (See next item.
Setup Common Connection Types Type Details ISP Data required Dynamic IP Address Your IP Address is allocated automatically, when you connect to you ISP. a) ADSL parameters (VPI and VCI) may be required, if they cannot be detected automatically. b) Some ISP's may require you to use a particular Hostname or Domain name, or MAC (physical) address. Static (Fixed) IP Address PPPoE, PPPoA Your ISP allocates a permanent IP Address to you. Usually, the connection is "Always on".
WBR-3407 User Guide Home Screen After finishing the Setup Wizard, you will see the Home screen. When you connect in future, you will see this screen when you connect. An example screen is shown below. Figure 5: Home Screen Main Menu The main menu, on the left, contains links to the most-commonly used screen. To see the links to the other available screens, click "Advanced" or "Administration". The main menu also contains two (2) buttons: • Log Out - When finished, you should click this button to logout.
Setup Mode Screen Use the Mode link on the main menu to reach the Mode screen. An example screen is shown below. Figure 6: LAN Screen Data - Mode Screen Device Mode Device Name This field displays the current name of this device. Device Mode Select the desired device mode for the router: • Router - Both the ADSL Modem and the Router features are operational. In this mode, this device can provide shared Internet Access to all your LAN users. • Modem - Only the ADSL Modem component is operational.
WBR-3407 User Guide LAN Screen Use the LAN link on the main menu to reach the LAN screen. An example screen is shown below. Figure 7: LAN Screen Data - LAN Screen TCP/IP IP Address IP address for the WBR-3407, as seen from the local LAN. Use the default value unless the address is already in use or your LAN is using a different IP address range. In the latter case, enter an unused IP Address from within the range used by your LAN. Subnet Mask The default value 255.255.255.
Setup DHCP What DHCP Does A DHCP (Dynamic Host Configuration Protocol) Server allocates a valid IP address to a DHCP Client (PC or device) upon request. • The client request is made when the client device starts up (boots). • The DHCP Server provides the Gateway and DNS addresses to the client, as well as allocating an IP Address. • The WBR-3407 can act as a DHCP server. • Windows 95/98/ME and other non-Server versions of Windows will act as a DHCP client.
WBR-3407 User Guide Wireless Screen The WBR-3407's settings must match the other Wireless stations. Note that the WBR-3407 will automatically accept both 802.11b and 802.11g connections, and no configuration is required for this feature. To change the WBR-3407's default settings for the WBR3407 feature, use the Wireless link on the main menu to reach the Wireless screen. An example screen is shown below.
Setup Options Mode Channel No. Broadcast SSID Select the desired mode: • g & b - Both 802.11.g and 802.11b Wireless stations will be able to use the WBR-3407. • g only - Only 802.11g Wireless stations can use the WBR-3407. • b only - Only 802.11b connections are available. 802.11g Wireless Stations will only be able to use the WBR-3407 if they are fully backward-compatible with the 802.11b standard. • Select the Channel you wish to use on your Wireless LAN.
WBR-3407 User Guide Wireless Security The Wireless Security sub-screen is accessed by the "Configure" button on the Wireless screen. It provides 4 options for Wireless Security: • Disabled - No security is used. • WEP - Data is encrypted using the WEP standard. • WPA-PSK - Data is encrypted using the WPA standard. Each Wireless station must have the same Pres-shared Key (PSK). • WPA-802.1x - This system requires that a Radius Server be used for Authentication.
Setup You must enter a Key Value for the Default Key. Key Value Enter the key value or values you wish to use. The Default Key is required, the other keys are optional. Other stations must have the same key. Passphrase If desired, you can generate a key from a phrase, instead of entering the key value directly. Enter the desired phrase, and click the "Generate Keys" button.
WBR-3407 User Guide Wireless Security - WPA-802.1x If WPA-802.1x is selected, the screen will look like the following. Note that to use 802.1x: • You need a Radius Server. • The Radius Server must have "Client" login for the WBR-3407, using its IP address and the the "Shared Key" set on this screen. • Each client (user) must obtain a Certificate to authenticate against the Radius Server. See Chapter 4 - PC Configuration for details. Figure 11: WPA-802.1x Screen Data - WPA-802.
Setup Password Screen The password screen allows you to assign a password to the WBR-3407. Figure 12: Password Screen Old Password Enter the existing password in this field. New password Enter the new password here. Verify password Re-enter the new password here. You will be prompted for the password when you connect, as shown below. Figure 13: Password Dialog • The "User Name" is always admin • Enter the password for the WBR-3407, as set on the Password screen above.
Chapter 4 PC Configuration 4 This Chapter details the PC Configuration required on the local ("Internal") LAN. Overview For each PC, the following may need to be configured: • TCP/IP network settings • Internet Access configuration • Wireless configuration Windows Clients This section describes how to configure Windows clients for Internet access via the WBR3407. The first step is to check the PC's TCP/IP settings.
PC Configuration Checking TCP/IP Settings - Windows 9x/ME: 1. Select Control Panel - Network. You should see a screen like the following: Figure 14: Network Configuration 2. 3. Select the TCP/IP protocol for your network card. Click on the Properties button. You should then see a screen like the following. Figure 15: IP Address (Win 95) Ensure your TCP/IP settings are correct, as follows: Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically.
WBR-3407 User Guide • On the Gateway tab, enter the WBR-3407's IP address in the New Gateway field and click Add, as shown below. Your LAN administrator can advise you of the IP Address they assigned to the WBR-3407. Figure 16: Gateway Tab (Win 95/98) • On the DNS Configuration tab, ensure Enable DNS is selected. If the DNS Server Search Order list is empty, enter the DNS address provided by your ISP in the fields beside the Add button, then click Add.
PC Configuration Checking TCP/IP Settings - Windows NT4.0 1. Select Control Panel - Network, and, on the Protocols tab, select the TCP/IP protocol, as shown below. Figure 18: Windows NT4.0 - TCP/IP 2. Click the Properties button to see a screen like the one below.
WBR-3407 User Guide Figure 19: Windows NT4.0 - IP Address 3. 4. Select the network card for your LAN. Select the appropriate radio button - Obtain an IP address from a DHCP Server or Specify an IP Address, as explained below. Obtain an IP address from a DHCP Server This is the default Windows setting. Using this is recommended. By default, the WBR-3407 will act as a DHCP Server. Restart your PC to ensure it obtains an IP Address from the WBR-3407.
PC Configuration Figure 20 - Windows NT4.0 - Add Gateway 2. The DNS should be set to the address provided by your ISP, as follows: • Click the DNS tab. • On the DNS screen, shown below, click the Add button (under DNS Service Search Order), and enter the DNS provided by your ISP.
WBR-3407 User Guide Figure 21: Windows NT4.
PC Configuration Checking TCP/IP Settings - Windows 2000: 1. 2. Select Control Panel - Network and Dial-up Connection. Right - click the Local Area Connection icon and select Properties. You should see a screen like the following: Figure 22: Network Configuration (Win 2000) 3. 4. Select the TCP/IP protocol for your network card. Click on the Properties button. You should then see a screen like the following.
WBR-3407 User Guide Figure 23: TCP/IP Properties (Win 2000) 5. Ensure your TCP/IP settings are correct, as described below. Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. Using this is recommended. By default, the WBR-3407 will act as a DHCP Server. Restart your PC to ensure it obtains an IP Address from the WBR-3407.
PC Configuration Checking TCP/IP Settings - Windows XP 1. 2. Select Control Panel - Network Connection. Right click the Local Area Connection and choose Properties. You should see a screen like the following: Figure 24: Network Configuration (Windows XP) 3. 4. Select the TCP/IP protocol for your network card. Click on the Properties button. You should then see a screen like the following.
WBR-3407 User Guide Figure 25: TCP/IP Properties (Windows XP) 5. Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. Using this is recommended. By default, the WBR-3407 will act as a DHCP Server. Restart your PC to ensure it obtains an IP Address from the WBR-3407.
PC Configuration Internet Access To configure your PCs to use the WBR-3407 for Internet access: • Ensure that the DSL modem, Cable modem, or other permanent connection is functional. • Use the following procedure to configure your Browser to access the Internet via the LAN, rather than by a Dial-up connection. For Windows 9x/ME/2000 1. 2. 3. 4. 5. 6. 7. Select Start Menu - Settings - Control Panel - Internet Options. Select the Connection tab, and click the Setup button.
WBR-3407 User Guide Macintosh Clients From your Macintosh, you can access the Internet via the WBR-3407. The procedure is as follows. 1. Open the TCP/IP Control Panel. 2. Select Ethernet from the Connect via pop-up menu. 3. Select Using DHCP Server from the Configure pop-up menu. The DHCP Client ID field can be left blank. 4. Close the TCP/IP panel, saving your settings.
PC Configuration Wireless Station Configuration This section applies to all Wireless stations wishing to use the WBR-3407's Access Point, regardless of the operating system which is used on the client. To use the WBR3407 in the WBR-3407, each Wireless Station must have compatible settings, as follows: Mode The mode must be set to Infrastructure (rather than Ad-hoc) Access points only operate in Infrastructure mode. SSID (ESSID) This must match the value used on the WBR-3407.
WBR-3407 User Guide Using WPA-802.1x - Overview 802.1x mode provides greater security and centralized management, but it is more complex to configure. Wireless Station Configuration For each of the following items, each Wireless Station must have the same settings as the WBR3407. 802.1x Authentication Each client must obtain a Certificate which is used for authentication for the Radius Server. 802.1x Encryption Typically, EAP-TLS is used.
PC Configuration 802.1x Server Setup (Windows 2000 Server) This section describes using Microsoft Internet Authentication Server as the Radius Server, since it is the most common Radius Server available that supports the EAP-TLS authentication method. The following services on the Windows 2000 Domain Controller (PDC) are also required: • dhcpd • dns • rras • webserver (IIS) • Radius Server (Internet Authentication Service) • Certificate Authority Windows 2000 Domain Controller Setup 1. 2.
WBR-3407 User Guide Figure 26: Components Screen 4. 5. Click Next. Select the Enterprise root CA, and click Next. Figure 27: Certification Screen 6. Enter the information for the Certificate Authority, and click Next.
PC Configuration Figure 28: CA Screen 7. 8. Click Next if you don't want to change the CA's configuration data. Installation will warn you that Internet Information Services are running, and must be stopped before continuing. Click Ok, then Finish. DHCP server configuration 1. 2. Click on the Start - Programs - Administrative Tools - DHCP Right-click on the server entry as shown, and select New Scope. Figure 29: DHCP Screen 3. 4. 5. Click Next when the New Scope Wizard Begins.
WBR-3407 User Guide Figure 30:IP Address Screen 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank. Click Next. 7. Change the Lease Duration time if preferred. Click Next. 8. Select Yes, I want to configure these options now, and click Next. 9. Enter the router address for the current subnet. The router address may be left blank if there is no router. Click Next. 10.
PC Configuration Certificate Authority Setup 1. 2. Select Start - Programs - Administrative Tools - Certification Authority. Right-click Policy Settings, and select New - Certificate to Issue. Figure 32: Certificate Authority Screen 3. Select Authenticated Session and Smartcard Logon (select more than one by holding down the Ctrl key). Click OK. Figure 33: Template Screen 4. 5. Select Start - Programs - Administrative Tools - Active Directory Users and Computers.
WBR-3407 User Guide Figure 34: Active Directory Screen 6. Select the Group Policy tab, choose Default Domain Policy then click Edit. Figure 35: Group Policy Tab 7. Select Computer Configuration - Windows Settings - Security Settings - Public Key Policies, right-click Automatic Certificate Request Settings - New - Automatic Certificate Request.
PC Configuration Figure 36: Group Policy Screen 8. 9. When the Certificate Request Wizard appears, click Next. Select Computer, then click Next. Figure 37: Certificate Template Screen 10. Ensure that your certificate authority is checked, then click Next. 11. Review the policy change information and click Finish. 12. Click Start - Run, type cmd and press enter. Enter secedit /refreshpolicy machine_policy This command may take a few minutes to take effect.
WBR-3407 User Guide Internet Authentication Service (Radius) Setup 1. 2. Select Start - Programs - Administrative Tools - Internet Authentication Service Right-click on Clients, and select New Client. Figure 38: Service Screen 3. 4. 5. 6. 7. Enter a name for the access point, click Next. Enter the address of the WBR3407, and set the shared secret, as entered on the WBR3407. Click Finish. Right-click on Remote Access Policies, select New Remote Access Policy.
PC Configuration 11. Click Edit Profile... and select the Authentication tab. Enable Extensible Authentication Protocol, and select Smart Card or other Certificate. Deselect other authentication methods listed. Click OK. Figure 40: Authentication Screen 12. Select No if you don't want to view the help for EAP. Click Finish.
WBR-3407 User Guide Remote Access Login for Users 1. 2. 3. Select Start - Programs - Administrative Tools- Active Directory Users and Computers. Double click on the user who you want to enable. Select the Dial-in tab, and enable Allow access. Click OK.
PC Configuration 802.1x Client Setup on Windows XP Windows XP ships with a complete 802.1x client implementation. If using Windows 2000, you can install SP3 (Service Pack 3) to gain the same functionality. If you don't have either of these systems, you must use the 802.1x client software provided with your wireless adapter. Refer to your vendor's documentation for setup instructions.
WBR-3407 User Guide Figure 43: Wireless CA Screen 5. Select User certificate request and select User Certificate, the click Next. Figure 44: Request Type Screen 6. Click Submit.
PC Configuration Figure 45: Identifying Information Screen 7. A message will be displayed, then the certificate will be returned to you. Click Install this certificate. Figure 46:Certificate Issued Screen 8. . You will receive a confirmation message. Click Yes.
WBR-3407 User Guide Figure 47: Root Certificate Screen 9. Certificate setup is now complete. 802.1x Authentication Setup 1. 2. 3. Open the properties for the wireless connection, by selecting Start - Control Panel Network Connections. Right Click on the Wireless Network Connection, and select Properties. Select the Authentication Tab, and ensure that Enable network access control using IEEE 802.1X is selected, and Smart Card or other Certificate is selected from the EAP type.
PC Configuration • Your network administrator can advise you of the correct settings for each network. 802.1x networks typically use EAP-TLS. This is a dynamic key system, so there is no need to enter key values. Enabling Encryption To enable encryption for a wireless network, follow this procedure: 1. Click on the Wireless Networks tab. Figure 49: Wireless Networks Screen 2. 3. Select the wireless network from the Available Networks list, and click Configure.
WBR-3407 User Guide Figure 50: Properties Screen Setup for Windows XP and 802.1x client is now complete.
Chapter 5 Operation and Status 5 This Chapter details the operation of the WBR-3407 and the status screens. Operation Once both the WBR-3407 and the PCs are configured, operation is automatic. However, there are some situations where additional Internet configuration may be required. Refer to Chapter 6 - Advanced Features for further details. Status Screen Use the Status link on the main menu to view this screen.
WBR-3407 User Guide Data - Status Screen Internet Modem Status This indicates the status of the ADSL modem component. DownStream Connection Speed If connected, displays the speed for the DownStream (download) ADSL Connection. UpStream Connection Speed If connected, displays the speed for the UpStream (upload) ADSL Connection. Connection Method This indicates the current connection method, as set in the Setup Wizard.
Operation and Status System Device Name The current name of the WBR-3407. This is also the "hostname" provided to ISPs who request this information. Firmware Version The version of the current firmware installed. Buttons Connection Details Click this button to open a sub-window and view a detailed description of the current connection. Attached Devices This will open a sub-window, showing all LAN and Wireless devices currently on the network. Refresh Screen Update the data displayed on screen.
WBR-3407 User Guide Buttons Connect If not connected, establish a connection to your ISP. Disconnect If connected to your ISP, hang up the connection. Close Close this window. Connection Details - Dynamic IP Address If your access method is "Direct" (no login), with a Dynamic IP address, a screen like the following example will be displayed when the "Connection Details" button is clicked.
Operation and Status Server. Close this window. Close Connection Details - Fixed IP Address If your access method is "Direct" (no login), with a fixed IP address, a screen like the following example will be displayed when the "Connection Details" button is clicked. Figure 54: Connection Details - Fixed/Dynamic IP Address Data - Fixed IP address Screen Internet IP Address The IP Address of this device, as seen by Internet users. This address is allocated by your ISP (Internet Service Provider).
Chapter 6 Advanced Features 6 This Chapter explains when and how to use the WBR-3407's "Advanced" Features. Overview The following advanced features are provided: • Internet: • DMZ • URL filter • Dynamic DNS • Firewall Rules • Firewall Services • Schedule • Virtual Servers Internet This screen provides access to the DMZ and URL Filter features.
Advanced Features URL Filter If you want to limit access to certain sites on the Internet, you can use this feature. The URL filter will check each Web site access. If the address, or part of the address, is included in the block site list, access will be denied. On the Advanced Internet screen, select the desired setting: • Disable - disable this feature. • Block By Schedule - block according to the settings on the Schedule page.
WBR-3407 User Guide Trusted PC Allow Trusted PC Enable this to allow one computer to have unrestricted access to the Internet. For this PC, the URL filter will be ignored. If enabled, you must select the PC to be the trusted PC. Trusted PC Select the PC to be the Trusted PC. Dynamic DNS (Domain Name Server) This free service is very useful when combined with the Virtual Server feature. It allows Internet users to connect to your Virtual Servers using a URL, rather than an IP Address.
Advanced Features Dynamic DNS Screen Select Advanced on the main menu, then Dynamic DNS, to see a screen like the following: Figure 57: DDNS Screen Data - Dynamic DNS Screen DDNS Service Use a Dynamic DNS Service Use this to enable or disable the DDNS feature as required. DDNS Data Service Provider Select the desired DDNS Service provider. Host Name Enter the domain name allocated to you by the DDNS Service. If you have more than one name, enter the name you wish to use.
WBR-3407 User Guide Firewall Rules The Firewall Rules screen allows you to define "Firewall Rules" which can allow or prevent certain traffic. By default: • All Outgoing traffic is permitted. • All Incoming traffic is denied. "Traffic" means incoming connection attempts, not packets. Because of this default behavior, any Outgoing rules will generally Block traffic, and Incoming rules will generally Allow traffic. Firewall Rules Screen An example screen is shown below.
Advanced Features WAN Users The WAN IP address or addresses covered by this rule. Log Indicates whether or not connections covered by this rule should be logged. Buttons Use the Add button to create a new rule. The other buttons - Edit, Move, or Delete - require that a rule be selected first. Use the radio buttons in the left column to select the desired rule. Outgoing Rules # For the default rule, this will display "Default".
WBR-3407 User Guide Incoming Rules This screen is displayed when the "Add" or "Edit" button for Incoming Rules is clicked. Figure 59: Inbound Services Screen Data – Incoming Rules Screen Inbound Services Service Select the desired Service. This determines which packets are covered by this rule. If necessary, you can define a new Service on the "Services" screen, by defining the protocols and port numbers used by the Service.
Advanced Features Log This determines whether packets covered by this rule are logged. Select the desired action. • Always - always log traffic considered by this rule, whether it matches or not. (This is useful when debugging your rules.) • Never - never log traffic considered by this rule, whether it matches or not. • Match - Log traffic only it matches this rule. (The action is determined by this rule.
WBR-3407 User Guide • LAN Users To define the Schedule used in these selections, use the "Schedule" screen. Select the desired option to determine which PCs are covered by this rule: • Any - All PCs are covered by this rule. • Single PC - Only the selected PC is covered by this rule. If selected, you must select the PC. PC - If using Single PC above, select the PC or Server on your LAN which will be covered by this rule.
Advanced Features Firewall Services This screen is used to modify the list of Services which are available when creating Firewall Rules. Figure 61: Add Services Screen Data – Add Services Services Services List This lists all defined Services. Add Use this to open a sub-screen where you can add a new service. Edit To modify a service, select it, and then click this button. Delete Pre-defined Services can not be deleted, but you can use this button to delete any services you have defined.
WBR-3407 User Guide Add/Edit Service This screen is displayed when the Add or Edit button on the Services screen is clicked. Figure 62 : Add/Edit Service Data – Add/Edit Service Services Name If editing, this shows the current name of the Service. If adding a new service, this will be blank, and you should enter a suitable name. Type Select the protocol used by the Service. Start Port Enter the beginning of the port range used by the Service.
Advanced Features Options This screen allows advanced users to enter or change a number of settings. For normal operation, there is no need to use this screen or change any settings. An example Options screen is shown below. Figure 63: Options Screen Data - Options Screen Internet Respond to Ping MTU Size • If checked, the WBR-3407 will repond to Ping (ICMP) packets received from the Internet. • If not checked, Ping (ICMP) packets from the Internet will be ignored.
WBR-3407 User Guide Schedule This Schedule can be used for the Firewall Rules and the URL filter. Figure 64: Schedule Screen Data - Schedule Screen Schedule Sunday, Monday… Use these checkboxes to select the desired days. Start Time Enter the start using a 24 hr clock. Finish Time Enter the finish time using a 24 hr clock. Local Time Time Zone In order to display your local time correctly, you must select your "Time Zone" from the list.
Advanced Features Virtual Servers This feature, sometimes called Port Forwarding, allows you to make Servers on your LAN accessible to Internet users. Normally, Internet users would not be able to access a server on your LAN because: • Your Server does not have a valid external IP Address. • Attempts to connect to devices on your LAN are blocked by the firewall in this device. The "Virtual Server" feature solves these problems and allows Internet users to connect to your servers, as illustrated below.
WBR-3407 User Guide Figure 66: Virtual Servers Screen Data - Virtual Servers Screen Servers Servers This lists a number of common Server types. If the desired Server type is not listed, you can create a Firewall Rule to achieve the same effect as the Virtual Server function. Properties Enable Use this to Enable or Disable support for this Server, as required. If Enabled, you must select the PC to which this traffic will be sent. PC (Server) Select the PC for this Server.
Chapter 7 Advanced Administration 7 This Chapter explains the settings available via the "Administration" section of the menu. Overview Normally, it is not necessary to use these screens, or change any settings. These screens and settings are provided to deal with non-standard situations, or to provide additional options for advanced users. The available settings and features are: PC Database This is the list of PCs shown when you select the "DMZ PC" or a "Virtual Server".
WBR-3407 User Guide PC Database The PC Database is used whenever you need to select a PC (e.g. for the "DMZ" PC). • It eliminates the need to enter IP addresses. • Also, you do not need to use fixed IP addresses on your LAN. However, if you do use a fixed IP address on some devices on your LAN, you should enter details of each such device into the PC database, using the PC Database screen. PC Database Screen An example PC Database screen is shown below.
Advanced Administration Data - PC Database Screen Known PCs This lists all current entries. Data displayed is name (IP Address) type. The "type" indicates whether the PC is connected to the LAN. Name If adding a new PC to the list, enter its name here. It is best if this matches the PC's "hostname". IP Address Enter the IP Address of the PC. The PC will be sent a "ping" to determine its hardware address. If the PC is not available (not connected, or not powered On) you will not be able to add it.
WBR-3407 User Guide PC Database (Admin) This screen is displayed if the "Advanced Administration" button on the PC Database is clicked. It provides more control than the standard PC Database screen. Figure 68: PC Database (Admin) Data - PC Database ( Admin) Screen Known PCs This lists all current entries. Data displayed is name (IP Address) type. The "type" indicates whether the PC is connected to the LAN. PC Properties Name If adding a new PC to the list, enter its name here.
Advanced Administration MAC Address Select the appropriate option • Automatic discovery - Select this to have the WBR-3407 contact the PC and find its MAC address. This is only possible if the PC is connected to the LAN and powered On. • MAC address is - Enter the MAC address on the PC. The MAC address is also called the "Hardware Address", "Physical Address", or "Network Adapter Address". The WBR-3407 uses this to provide a unique identifier for each PC.
WBR-3407 User Guide Config File This feature allows you to download the current settings from the WBR-3407, and save them to a file on your PC. You can restore a previously-downloaded configuration file to the WBR-3407, by uploading it to the WBR-3407. This screen also allows you to set the WBR-3407 back to its factory default configuration. Any existing settings will be deleted. An example Config File screen is shown below.
Advanced Administration Logging The Logs record various types of activity on the WBR-3407. This data is useful for troubleshooting, but enabling all logs will generate a large amount of data and adversely affect performance. Since only a limited amount of log data can be stored in the WBR-3407, log data can also be E-mailed to your PC. Use the E-mail screen to configure this feature. Figure 70: Logging Screen Data - Logging Screen Logs Current Time The current time on the WBR-3407 is displayed.
WBR-3407 User Guide Logs Include (Checkboxes) Use these checkboxes to determine which events are included in the log. Checking all options will increase the size of the log, so it is good practice to disable any events which are not really required. • Attempted access to blocked sites - If checked, attempted Internet accesses which were blocked are logged.
Advanced Administration E-mail This screen allows you to E-mail Logs and Alerts. A sample screen is shown below. Figure 71: E-mail Screen Data – E-mail Screen E-Mail Notification Turn E-mail Notification on Check this box to enable this feature. If enabled, the E-mail address information (below) must be provided. Send to this Email address Enter the E-mail address the Log is to be sent to. The E-mail will also show this address as the Sender's address.
WBR-3407 User Guide E-mail Alerts Send E-mail alerts immediately You can choose to have alerts E-mailed to you, by checking the desired checkboxes. The WBR-3407 can send an immediate alert when it detects a significant security incident such as • A known hacker attack is directed at your IP address • A computer on the Internet scans your IP address for open ports • Someone on your LAN (Local Area Network) tries to visit a blocked site.
Advanced Administration Diagnostics This screen allows you to perform a "Ping" or a "DNS lookup". These activities can be useful in solving network problems. An example Network Diagnostics screen is shown below. Figure 72: Network Diagnostics Screen Data - Network Diagnostics Screen Ping Ping this IP Address Enter the IP address you wish to ping. The IP address can be on your LAN, or on the Internet.
WBR-3407 User Guide Remote Admin If enabled, this feature allows you to manage the WBR-3407 via the Internet. Figure 73: Remote Administration Screen Data - Remote Administration Screen Remote Administration Enable Remote Management Check to allow administration/management via the Internet. (To connect, see below). If Disabled, this device will ignore Administration connection attempts from the Internet.
Advanced Administration To connect from a remote PC via the Internet 1. 2. Ensure your Internet connection is established, and start your Web Browser. In the "Address" bar, enter "HTTP://" followed by the Internet IP Address of the WBR3407. If the port number is not 80, the port number is also required. (After the IP Address, enter ":" followed by the port number.) e.g. HTTP://123.123.123.123:8080 This example assumes the WAN IP Address is 123.123.123.123, and the port number is 8080. 3.
WBR-3407 User Guide Routing Overview • If you don't have other Routers or Gateways on your LAN, you can ignore the "Routing" page completely. • If the WBR-3407 is only acting as a Gateway for the local LAN segment, ignore the "Routing" page even if your LAN has other Routers. • If your LAN has a standard Router (e.g. Cisco) on your LAN, and the WBR-3407 is to act as a Gateway for all LAN segments, enable RIP (Routing Information Protocol) and ignore the Static Routing table.
Advanced Administration Figure 74: Routing Screen Data - Routing Screen RIP RIP Direction Select the desired RIP Direction. RIP Version Choose the RIP Version for the Server. Static Routing Static Routing Table Entries This list shows all entries in the Routing Table. • This area shows details of the selected item in the list. • Change any the properties as required, then click the "Edit" button to save the changes to the selected entry.
WBR-3407 User Guide Destination IP Address Normally 0.0.0.0, but check your router documentation. Network Mask Normally 0.0.0.0, but check your router documentation. Gateway IP Address The IP Address of the WBR-3407. Metric 1 Other Routers on the Local LAN Other routers on the local LAN must use the WBR-3407's Local Router as the Default Route. The entries will be the same as the WBR-3407's local router, with the exception of the Gateway IP Address.
Advanced Administration Gateway IP Address 192.168.0.100 Metric 3 For Router A's Default Route Destination IP Address 0.0.0.0 Network Mask 0.0.0.0 Gateway IP Address 192.168.0.1 (WBR-3407's IP Address) For Router B's Default Route Destination IP Address 0.0.0.0 Network Mask 0.0.0.0 Gateway IP Address 192.168.1.
WBR-3407 User Guide Upgrade Firmware The firmware (software) in the WBR-3407 can be upgraded using your Web Browser. You must first download the upgrade file, then select Upgrade Firmware on the Administration menu. You will see a screen like the following. Figure 76: Router Upgrade Screen To perform the Firmware Upgrade: 4. 5. 6. Click the Browse button and navigate to the location of the upgrade file. Select the upgrade file. Its name will appear in the Upgrade File field.
Appendix A Troubleshooting A This Appendix covers the most likely problems and their solutions. Overview This chapter covers some common problems that may be encountered while using the WBR3407 and some possible solutions to them. If you follow the suggested steps and the WBR3407 still does not function properly, contact your dealer for further advice. General Problems Problem 1: Can't connect to the WBR-3407 to configure it.
WBR-3407 User Guide For incoming connections, you must use the Virtual Server or Firewall Rules to specify the PC which will receive the incoming traffic. You can also use the DMZ function. This should work with almost every application, but: • It is a security risk, since the firewall is disabled. • Only one (1) PC can use this feature. Wireless Access Problem 1: My PC can't locate the WBR3407. Solution 1: Check the following. • Your PC is set to Infrastructure Mode.
Appendix B About Wireless LANs B This Appendix provides some background information about using Wireless LANs (WLANs). Modes Wireless LANs can work in either of two (2) modes: • Ad-hoc • Infrastructure Ad-hoc Mode Ad-hoc mode does not require an Access Point or a wired (Ethernet) LAN. Wireless Stations (e.g. notebook PCs with wireless cards) communicate directly with each other. Infrastructure Mode In Infrastructure Mode, one or more Access Points are used to connect Wireless Stations (e.g.
WBR-3407 User Guide Channels The Wireless Channel sets the radio frequency used for communication. • Access Points use a fixed Channel. You can select the Channel used. This allows you to choose a Channel which provides the least interference and best performance. In the USA and Canada, 11 channel are available. If using multiple Access Points, it is better if adjacent Access Points use different Channels to reduce interference.
Appendix C Specifications C Multi-Function WBR-3407 Model WBR-3407 ADSL Interface T1.413, G.DMT, G.lite, multi-mode Dimensions 189mm(W) * 122mm(D) * 33mm(H) Operating Temperature 0° C to 40° C Storage Temperature -10° C to 70° C Network Protocol: TCP/IP Network Interface: 4 * 10/100BaseT (RJ45) LAN connection 1 * RJ11 for ADSL line LEDs 12 Power Adapter 15 V AC External Wireless Interface Standards IEEE802.11b, IEEE802.11g WLAN, Frequency 2.4 to 2.
WBR-3407 User Guide Regulatory Approvals FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.