ESR9850 Wireless N Gigabit Router (IEEE 802.
Revision History Version Date Notes 1.
Table of Content 1. INTRODUCTION .............................................................................................................................................. 1 1.1. 1.2. 1.3. 1.4. 2. INSTALLATION ................................................................................................................................................ 5 2.1. 2.2. 2.3. 2.4. 2.5. 2.6. 2.7. 2.8. 3. SUMMARY ...............................................................................................
8. ADVANCED...................................................................................................................................................... 49 8.1. 8.2. 8.3. 8.4. 8.5. 8.6. 8.7. 8.8. 9. NETWORK ADDRESS TRANSLATION (NAT) ................................................................................................ 49 - PORT MAPPING ........................................................................................................................................
1. Introduction 1.1. Summary ESR9850 is a 2T2R Wireless 11N Gigabit Router that delivers up to 6x faster speeds and 3x extended coverage than 802.11g devices. ESR9850 supports home network with superior throughput and performance and unparalleled wireless range. With easy to use on the WPS function, it helps users to connect to wireless device with just one push button. There's also a built-in 4-port full-duplex 10/100/1000 Fast Switch to connect your wired-Ethernet devices together.
1.2. Key Features Features Incredible Data Rate up to 600Mbps** Advantages Heavy data payloads such as MPEG video streaming Multiple SSIDs Enhanced management among multiple users groups Four 10/100/1000 Mbps Fast Switch Scalability, extend your network. Ports (Auto-Crossover) Firewall supports Virtual Server Avoids the attacks of Hackers or Mapping, DMZ, IP Filter, ICMP Viruses from Internet Blocking, SPI Support 802.1x Authenticator, 802.
1.3. Package Contents Open the package carefully, and make sure that none of the items listed below are missing. Do not discard the packing materials, in case of return; the unit must be shipped back in its original package. 1 * Dual Band Concurrent AP Router (ESR9850) 1 * 12V/1.
1.4.
2. Installation 2.1. Network + System Requirements To begin using the ESR9850, make sure you meet the following as minimum requirements: PC/Notebook. Operating System – Microsoft Windows 98SE/ME/XP/2000/VISTA 1 Free Ethernet port. WiFi card/USB dongle (802.11 b/g/n) – optional. External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45). PC with a Web-Browser (Internet Explorer, Safari, Firefox, Opera etc.) Few Ethernet compatible CAT5 cables. 2.2.
2.3. ESR9850 Placement You can place ESR9850 on a desk or other flat surface, or you can mount it on a wall. For optimal performance, place your device in the center of your office (or your home) in a location that is away from any potential source of interference, such as a metal wall or microwave oven. This location must be close to a power connection and your ADSL/Cable modem. If the antennas are not positioned correctly, performance loss can occur.
2.4. Setup LAN & WAN LAN connection: Connect Ethernet cable between your PC/Notebook LAN port & one of the 4 available LAN ports on ESR9850. WAN connection: Connect Ethernet cable between WAN ports of your ADSL/CABLE modem & INTERNET port of ESR9850. Make sure your ADSL/CABLE modem is working well. Contact your ISP if you have any questions.
2.5. PC Network Adapter setup (Windows XP) Enter [Start Menu] select [Control panel] select [Network].
Select [Internet Protocol (TCP/IP)] =>Click [Properties]. Select the [General] tab. select both [Obtain an IP address automatically] and [Obtain DNS server address automatically].
2.6. Smart Wizard CD Connect the supplied power-adapter to the power inlet port and connect it to a wall outlet. Then, the router automatically enters the self-test phase. During self-test phase, Power LED will blink briefly, and then will be lit continuously to indicate that this product is in normal operation. CHECK • A standard CD-ROM drive • Internet connection should be setup & ready to use (ADSL or cable modem). • Modem must provide RJ45 port to connect with ESR9850.
Please click on Setup Wizard and follow the instruction given to complete the device initiation configuration.
2.7. Wizard Configuration Click to enter mode selection. Select the mode that ESR9850 is going to be and set its configurations. AP Repeater mode does not enable WAN interface, Setup Wizard will skip WAN Configuration. Click to automatically detect your Internet Network settings. Smart Wizard has detected DHCP client. Configure the host name and MAC address of your ADSL modem. Click Next to proceed.
Smart Wizard has finished setting up WAN Configuration. Click to proceed. Enter the name for your wireless network (SSID) and security key Click to proceed To apply the entire configuration, click . NOTE: After Wireless settings are applied, you need to connect from your WLAN client with the security settings you just finished configuring. Remember the type of security & security key.
2.8. Initial Setup ESR9850 ESR9850 provides web-interface for configuration through web browser, such as Internet Explorer, Firefox or Safari. 1. 2. Open your browser (e.g. Internet Explorer). Type in http://192.168.0.1 in the address bar and press [Enter]. 3. 4. Click to navigate into ESR9850 configuration home page. You will see the home page of ESR9850 as follows.
15
3. SYSTEM 3.1. Status This page allows you to monitor the current status of your router. You can use the status page to quickly see if you have any updated firmware available (bug fixes, updates). You can navigate from this page with a few interesting options for reminding or skipping this page forever & so forth. Once you click on button to go to the requested page, you can see the status page of the ESR9850.
WLAN Settings: This section displays the current WLAN configuration settings you’ve configured in the Wizard / Basic Settings / Wireless Settings section. Wireless configuration details such as SSID, Security settings, BSSID, Channel number, mode of operation are briefly shown.
3.2. LAN The LAN Tabs reveals LAN settings which can be altered at will. If you are an entry level user, try accessing a website from your browser. If you can access website without a glitch, just do not change any of these settings. Click at the bottom of this screen to save the changed configurations. LAN IP IP address: 192.168.0.1. It is the router’s LAN IP address (Your LAN clients default gateway IP address). It can be changed based on your own choice. IP Subnet Mask: 255.255.255.
3.3. DHCP View the current LAN clients which are assigned with an IP Address by the DHCP-server. This page shows all DHCP clients (LAN PCs) currently connected to your network. The table shows the assigned IP address, MAC address and expiration time for each DHCP leased client. Use the button to update the available information. Hit to get the updated table. You can check “Enable Static DHCP IP“. It is possible to add more static DHCP IPs.
3.4. Schedule This page allows user to set up schedule function for Firewall and Power Saving. Add schedule, edit schedule options to allow configuration of firewall and power savings services. Fill in the schedule and select type of service. Click to implement those settings. The schedule table lists the pre-schedule service-runs. You can select any of them using the check box.
3.5. Event Log View operation event log. This page shows the current system log of the Broadband router. It displays any event occurred after system start up. At the bottom of the page, the system log can be saved to a local file for further processing or the system log can be cleared or it can be refreshed to get the most updated information. When the system is powered down, the system log will disappear if not saved to a local file.
3.6. Monitor Show histogram for network connection on WAN, LAN & WLAN. Auto refresh keeps information updated frequently.
3.7. Language This Wireless Router support multiple language of web pages, You could select your native language here.
4. Wizard Please refer to Chapter 2.
5. INTERNET 5.1.
5.2. Dynamic IP Use the MAC address when registering for Internet service, and do not change it unless required by your ISP. If your ISP used the MAC address of the Ethernet card as an identifier, connect only the PC with the registered MAC address to the broadband router and click the button. This will replace the current MAC address with the already registered Ethernet card MAC address Host Name: This is optional.
5.3. Static IP If your ISP Provider has assigned a fixed IP address, enter the assigned IP address, Subnet mask, Default Gateway IP address, and Primary DNS of your ISP provider.
5.4. Point-to-Point over Ethernet Protocol (PPPoE) Login / Password: Enter the PPPoE username and password assigned by your ISP Provider. Service Name: This is normally optional. Maximum Transmission Unit (MTU): This is the maximum size of the packets. Type: Enable the Auto-reconnect option to automatically re-establish the connection when an application attempts to access the Internet again. Idle Timeout: This is a maximum period of time for which the Internet connection is maintained during inactivity.
5.5. Point-to-Point Tunneling Protocol (PPTP) PPTP allows the secure connection over the Internet by simply dialing in a local point provided by your ISP provider. The following screen allows client PCs to establish a normal PPTP session and provides hassle-free configuration of the PPTP client on each client PC. Click to save configuration and connect to ISP provider.
6. WIRELESS 6.1. Basic Radio: You can turn on/off wireless radio. If wireless Radio is off, you cannot associate with AP through wireless. Mode: In this device, we support three operation modes which are AP router, AP route with WDS (we will introduce this function later section), and repeater. If you choose AP Router Mode, you can select AP or WDS function in the drop-down menu. Band: You can select the wireless standards running on your network environment. Band 2.4G: 2.
6.2. Mode: WDS Wireless Distribution System, a system that enables the wireless interconnection of access point, allows a wireless network to be expended using multiple access points without a wired backbone to like them. Each WDS APs need setting as same channel and encryption type. MAC address 1~4: Please enter the MAC address of the neighboring APs that participates in WDS, we support 4 devices now. Set Security: WDS Security depends on your AP security settings.
Fragment Threshold: This specifies the maximum size of a packet during the fragmentation of data to be transmitted. If you set this value too low, it will result in bad performance. RTS Threshold: When the packet size is smaller than the RTS threshold, the wireless router will not use the RTS/CTS mechanism to send this packet. Beacon Interval: is the interval of time that this wireless router broadcasts a beacon. A Beacon is used to synchronize the wireless network.
6.4. Security This Access Point provides complete wireless LAN security functions, included are WEP, IEEE 802.1x, IEEE 802.1x with WEP, WPA with pre-shared key and WPA with RADIUS. With these security functions, you can prevent your wireless LAN from illegal access. Please make sure your wireless stations use the same security function, and are setup with the same security key.
ESSID Selection: This broadband router support multiple ESSID, you could select and set up the wanted ESSID. Broadcast ESSID: If you enabled “Broadcast ESSID”, every wireless station located within the coverage of this access point can discover this access point easily. If you are building a public wireless network, enabling this feature is recommended. Disabling “Broadcast ESSID” can provide better security.
WEP Encryption When you select 64-bit or 128-bit WEP key, you have to enter WEP keys to encrypt data. You can generate the key by yourself and enter it. You can enter four WEP keys and select one of them as a default key. Then the router can receive any packets encrypted by one of the four keys. Authentication Type: There are two authentication types: "Open System" and "Shared Key". When you select "Open System", wireless stations can associate with this wireless router without WEP encryption.
pre-shared key to authenticate wireless stations and encrypt data during communication. It uses TKIP or CCMP (AES) to change the encryption key frequently. So the encryption key is not easy to be cracked by hackers. This is the best security available. WPA-Radius Encryption Wi-Fi Protected Access (WPA) is an advanced security standard. You can use an external RADIUS server to authenticate wireless stations and provide the session key to encrypt data during communication.
6.5. Filter This wireless router supports MAC Address Control, which prevents unauthorized clients from accessing your wireless network. Enable wireless access control: Enable the wireless access control function Adding an address into the list Enter the "MAC Address" and "Comment" of the wireless station to be added and then click . The wireless station will now be added into the "Current Access Control List" below.
6.6. WPS (Wi-Fi Protected Setup) WPS is the simplest way to establish a connection between the wireless clients and the wireless router. You don’t have to select the encryption mode and fill in a long encryption passphrase every time when you try to setup a wireless connection. You only need to press a button on both wireless client and wireless router, and the WPS will do the rest for you. The wireless router supports two types of WPS: WPS via Push Button and WPS via PIN code.
Interface: If device is set to repeater mode, you can choose “Client” interface to connect with other AP by using WPS, otherwise you may choose “AP” interface to do WPS with other clients. WPS via Push Button: Press the button to start the WPS process. The router will wait for the WPS request from the wireless devices within 2 minutes. WPS via PIN: You can fill-in the PIN code of the wireless device and press the button to start the WPS process.
6.7. Client List This WLAN Client Table shows the Wireless client associate to this Wireless Router.
6.8. Policy Policy provides a list of control policies. These settings define whether wireless or wired clients are able to “see” each in the LAN. If you are offering Internet access to your clients, please enable WAN connection. If you allow communication between Wireless clients please enable the second item. If you allow communication between Wireless client and Wired client please enable the last item. Disable WAN connection if you do not provide Internet access.
7. FIREWALL 7.1. Enable The Broadband router provides extensive firewall protection by restricting connection parameters, thus limiting the risk of hacker attacks, and defending against a wide array of common Internet attacks. However, for applications that require unrestricted access to the Internet, you can configure a specific client/server as a Demilitarized Zone (DMZ).
7.2. Demilitarized Zone (DMZ) If you have a client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, then you can open up the firewall restrictions to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN.
7.3. Denial of Service (DoS) The Broadband router's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the router can log the events. Ping of Death: Protections from Ping of Death attack. Discard Ping From WAN: The router’s WAN port will not respond to any Ping requests Port Scan: Protects the router from Port Scans. Sync Flood: Protects the router from Sync Flood attack.
7.4. - MAC Filter If you want to restrict users from accessing certain Internet applications / services (e.g. Internet websites, email, FTP etc.), and then this is the place to set that configuration. Access Control allows users to define the traffic type permitted in your LAN. You can control which PC client can have access to these services. Enable MAC Filtering: Check to enable or disable MAC Filtering.
Add PC MAC Address Fill in “LAN MAC Address” and of the PC that is allowed to access the Internet, and then click . If you find any typo before adding it and want to retype again, just click and the fields will be cleared. Remove PC MAC Address If you want to remove some PC from the "MAC Filtering Table", select the PC you want to remove in the table and then click . If you want to remove all PCs from the table, just click the button.
7.5. IP Filter Enable IP Filtering: Check to enable or disable IP Filtering. Deny: If you select “Deny” then all clients will be allowed to access Internet accept for the clients in the list below. Allow: If you select “Allow” then all clients will be denied to access Internet accept for the PCs in the list below. Add PC IP Address You can click PC to add an access control rule for users by an IP address or IP address range.
7.6. URL Filter You can block access to some Web sites from particular PCs by entering a full URL address or just keywords of the Web site. Enable URL Blocking: Enable or disable URL Blocking Add URL Keyword Fill in “URL/Keyword” and then click . You can enter the full URL address or the keyword of the web site you want to block. If you happen to make a mistake and want to retype again, just click "Reset" and the field will be cleared.
8. Advanced 8.1. Network Address Translation (NAT) Network Address Translation (NAT) allows multiple users at your local site to access the Internet through a single Public IP Address or multiple Public IP Addresses. NAT provides Firewall protection from hacker attacks and has the flexibility to allow you to map Private IP Addresses to Public IP Addresses for key services such as Websites and FTP. Select Disable to disable the NAT function. 8.2.
Port Range: The range of ports to be forward to the private IP. Add Port Mapping Fill in the "Local IP", “Type”, “Port Range” and "Description" of the setting to be added and then click "Add". Then this Port Mapping setting will be added into the "Current Port Mapping Table" below. If you find any typo before adding it and want to retype again, just click and the fields will be cleared.
Remove Port Mapping If you want to remove a Port Mapping setting from the "Current Port Mapping Table", select the Port Mapping setting that you want to remove in the table and then click D. If you want to remove all Port Mapping settings from the table, click button. Click will clear your current selections. Click at the bottom of the screen to save the above configurations. 8.3.
Enable Port Forwarding: Enable or disable Port Forwarding. Description: The description of this setting. Local IP / Local Port: This is the LAN Client/Host IP address and Port number that the Public Port number packet will be sent to. Type: Select the port number protocol type (TCP, UDP or both). If you are unsure, then leave it to the default “both” setting.
Enable Trigger Port: Enable or disable the Port Trigger function. Trigger Port: This is the outgoing (Outbound) range of port numbers for this particular application. Trigger Type: Select whether the outbound port protocol is “TCP”, “UDP” or “BOTH”. Public Port: Enter the In-coming (Inbound) port or port range for this type of application (e.g.
application to correctly pass through the NAT gateway. 8.6. UPNP With UPnP, all PCs in you Intranet will discover this router automatically. So, you don’t have to configure your PC and it can easily access the Internet through this router. Enable/Disable UPnP: You can enable or Disable the UPnP feature here.
“Others”. The rule with a smaller priority number has a higher priority; the rule with a larger priority number has a lower priority. You can adjust the priority of the rules by moving them up or down. Port-based Qos This is hardware port-based QoS control method. It will limit the packets throughput in LAN1~4, WAN port. Enable Port-based QoS: Check this to enable port-based QoS functionality for the LAN/WAN port. You can also uncheck to disable.
Unlimited Priority Queue: The LAN IP address will not be bounded in the QoS limitation. High/Low Priority Queue: This can put the packets in the protocol and port range to High/Low QoS Queue. Bandwidth Allocation: This can reserve / limit the throughput of specific protocols and port range. You can set the upper bound and Lower bound. Type: Specify the direction of packets. Upload or download. IP range: Specify the IP address range. You could also fill one IP address Protocol: Specify the packet type.
Policy: Specify the policy the QoS, Min option will reserve the selected data rate in QoS queue. Max option will limit the selected data rate in QoS queue. Rate: The data rate of QoS queue. Disabled: This could turn off QoS feature. 8.8. Routing You can set enable Static Routing to let the router forward packets by your routing policy. Destination LAN IP: Specify the destination LAN IP address of static routing rule. Subnet Mask: Specify the Subnet Mask of static routing rule.
9. TOOLS 9.1. Admin You can change the password required to log into the broadband router's system web-based management. By default, the password is: admin. Passwords can contain 0 to 12 alphanumeric characters, and are case sensitive. Current Password: Fill in the current password to allow changing to a new password.
9.2. Time The Time Zone allows your router to reference or base its time on the settings configured here, which will affect functions such as Log entries and Firewall settings. Time Zone: Select the time zone of the country you are currently in. The router will set its time based on your selection. NTP Time Server: The router can set up external NTP Time Server. Daylight Savings: The router can also take Daylight Savings into account.
9.3. DDNS DDNS allows you to map the static domain name to a dynamic IP address. You must get an account, password and your static domain name from the DDNS service providers. This router supports DynDNS, TZO and other common DDNS service providers. Enable/Disable DDNS: Enable or disable the DDNS function of this router Server Address: Select a DDNS service provider Host Name: Fill in your static domain name that uses DDNS. Username: The account that your DDNS service provider assigned to you.
9.4. Power Saving power in WLAN/Ethernet mode can be enabled/disabled in this page.
9.5. Diagnosis This page could let you diagnosis your current network status.
9.6. Firmware This page allows you to upgrade the router’s firmware. To upgrade the firmware of your Broadband router, you need to download the firmware file to your local hard disk, and enter that file name and path in the appropriate field on this page. You can also use the Browse button to find the firmware file on your PC.
9.7. Back-Up This page allows you to save the current router configurations. When you save the configurations, you also can re-load the saved configurations into the router through the Restore Settings. If extreme problems occur you can use the Restore to Factory Defaults to set all configurations to its original default settings. Backup Settings: This can save the Broadband router current configuration to a file named "config.bin" on your PC.
9.8. Reset You can reset the broadband router when system stops responding correctly or stop functions.
Appendix A – FCC Interference Statement Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Appendix B – IC Interference Statement Industry Canada statement: This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. IMPORTANT NOTE: Radiation Exposure Statement: This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
68
