TABLE OF CONTENTS WELCOME.................................................................................6 WNR2004 FEATURES ..............................................................7 Internet Access Features ................................................7 Wireless Features ...........................................................8 LAN Features ..................................................................8 Router/Security Features ................................................
CONFIGURING A FIXED IP ADDRESS FOR A PC .........................45 CONFIGURING A PC AS A HOST (PORT MAPPING).....................50 CONFIGURING UNIVERSAL PLUG AND PLAY (UPNP) .................55 CONFIGURING A DMZ .............................................................56 CHANGING THE DHCP CONFIGURATION ..................................57 ENABLING DYNAMIC DNS........................................................63 EDITING THE ROUTING TABLE ..................................................
Figure 20 Figure 21 Figure 22 Figure 23 Figure 24 Figure 25 Figure 26 Figure 27 Figure 28 Figure 29 Figure 30 Figure 31 Figure 32 Figure 33 Figure 34 Figure 35 Figure 36 Figure 37 Figure 38 Figure 39 Port Mapping Screen .............................................52 Port Mapping, Add Screen ....................................53 UPnP Setup Screen ..............................................55 DMZ Screen...........................................................57 DHCP Server Screen......................
WIRELESS FEATURES WNR2004 Features • 802.11b Compliant: The Wireless Cable/DSL Router complies with the IEEE 802.11b specifications for Wireless LANS. • WEP/Wireless Security: Supports both 64-bit and 128-bit Wired Equivalent Privacy (WEP) for secure wireless connections. • Access Control: Allows to you to control who you allow or block access to your wireless network. • Easy Configuration: The default settings can be quickly and easily changed. The Uniden WNR2004 802.
erroneous packets, protecting your network from hackers. • ADVANCED ROUTER FEATURES DoS Protection: Denial of Service (DoS) attacks overload your router with invalid packets and connection requests, using so many resources that your router crashes and Internet access is no longer available. The WNR2004 protects against DoS attacks. • VPN Support: The router passes through Virtual Private Networking (VPN) connections, so it can support VPNs that use IPSec, L2TP and PPTP without any user configuration.
Package Contents The following items are included with the WNR2004: • One WNR2004 unit with stand. • One 7.5V DC power adapter. • One Easy-Start Installation Guide. • Owner’s Manual on CD-ROM. • One Cat-5 cable with RJ-45 connectors. If any of these items are missing or damaged, immediately contact your place of purchase or Uniden Customer Service at: (800) 775-9060, Monday-Sunday, 24/7.
Rear View Details • Wireless Antenna: For better performance, place the AP/Router at a high location. Placing the unit under a desk reduces performance. • Reset Button: Pressing this button once performs a soft reboot, similar to turning the power on and off. However, if you press and hold the button for approximately 10 seconds, the device will reset to the factory default settings, erasing any configuration changes you have made (including the password).
INSTALLING THE HARDWARE 1. Connect to the DSL/Cable Modem: Connect one end of the supplied CAT 5 network cable to the DSL/Cable Modem. Insert the other end into the WNR2004 port labeled WAN. STEP 2: PC CONFIGURATION In order for your computer to communicate with the WNR2004, both devices must be on the same LAN, i.e. the first three parts of their IP addresses must be the same: 2.
FOR WINDOWS 2000 FOR WINDOWS 95, 98, AND ME 1. Click on Start, Settings, Control Panel. Double click on Network. 2. In “The following network components are installed” box, select the TCP/IP associated with your network adapter. (If you have only one network adapter installed, you will only see one TCP/IP listed.) Highlight it and click the Properties button. 3. In the “TCP/IP Properties” window, select the “IP Address” tab.
FOR WINDOWS XP FOR WINDOWS NT 4.0 1. Click on Start, Settings, Control Panel. Double click on Network. 2. Select the Protocol tab, and double click on TCP/IP Protocol. 3. When the window appears, select the correct adapter for your network adapter. If the Obtain an IP address from a DHCP Server is checked, this computer is ready to communicate with the WNR2004. If it is not, proceed to step 4. 4. If there is an IP address listed, WRITE DOWN this IP address on the memo page of this manual (page 115). 5.
with your network (MAC address blocking function). Repeat for each PC on your network. When all of your PCs are configured, continue to Step 3: Basic Router Configuration below. • You need to configure the router’s DHCP settings or configure the router to operate within a LAN that has an existing DHCP server. STEP 3: BASIC ROUTER CONFIGURATION • You want to route or block data based on information in each individual data packet (packet filtering feature). The WNR2004 802.
Figure 1 Enter Network Password Screen 4. In the User Name field, enter the following (in upper case): UNIDEN 5. Leave the Password field blank and click OK. The router will display the System Information screen. Figure 2 System Information Screen 6. On the System Information screen (Figure 2), note the hardware version, software version, and boot code version in the memo section of this manual (page 115) for future reference. CHANGING THE DEFAULT PASSWORD 1.
Figure 3 Account Configuration Screen 2. Change the Administrative Login Name and Administrative Password. Make a note of the login name and password in the memo section of this manual (page 115). 3. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click Cancel. We will reboot the router after all the changes are made. NOTE: The new name and password will take effect when you reboot the router.
SETTING PARENTAL CONTROLS Parental controls allow you to control Internet access for the network as a whole or for each PC using its MAC address (a hardware identification number assigned to an individual PC). To access parental control features, in the menu on the left of the screen, click on Firewall/Security and then Parental Controls. This displays the Parental Controls screen (see Figure 5).
which you want to Block or Allow Internet access. (Times are in 24-hour format, so to block access from 10:00 pm to 6:00 am, select Block from 22:00 to 06:00.) 5. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click Cancel. We will reboot the router after all the changes are made. allowed full Internet access (ALLOW ALL), no Internet access (BLOCK ALL), or Internet access based on a rule (ALLOW RULE).
at the left of the screen (see X-REF). The bottom of this screen displays the MAC addresses of all computers connected to the router.) 10. To change the rules configuration for a PC, select the PC’s MAC address on the PC Access Rules screen (see Figure 7 on page 29) and click the Modify button. 3. Select the level of Internet access you want to allow for the network: full Internet access, no Internet access, or access based on rules.
The Restrict Rules screen allows you to create a list of keywords for restricting Internet access. You can list keywords to block or to allow. NOTE: The same keyword list applies any PCs configured to use keyword-based restrictions. 1. Under Block/Allow the Keywords for URL Filtering, select whether you want to create a list of keywords to Block or to Allow. If you select Block, PCs restricted by this rule will not be allowed to access sites that match keywords on the list.
amount of time has expired, the router will disconnect the PC. 5. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click Cancel. We will reboot the router after all the changes are made. 1. In the menu on the left of the screen, click on Basic Configuration and then WAN. This displays the WAN Configuration, Dynamic IP screen (see Figure 5).
6. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click OK. This will reboot the router and apply all configuration changes. NOTE: If the router does not prompt you to reboot it at the end of the last configuration step, use the reboot command. See Rebooting the Router on page 77.
• You want to link your router to a dynamic DNS service. CONFIGURING FOR A STATIC IP ADDRESS Follow the procedure below if your ISP provided you with a static IP address. If your ISP gave you a four-part number as “your address,” it is probably a static IP address. If your ISP did not give you an IP address at all, you do not have a static IP address. If you are not sure if you have a static IP address or what it might be, contact your ISP.
8. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click OK. This will reboot the router and apply all configuration changes. 3. At the top of the screen, click the radio button marked PPPoE. This displays the PPPoE screen (see Figure 13). NOTE: If the router does not prompt you to reboot it at the end of the last configuration step, use the reboot command. See Rebooting the Router on page 77.
packet every 45 seconds to make sure the ISP does not disconnect the link. 7. Dial-on-demand is a feature that only activates the Internet connection when a program specifically calls for it. If you want to turn on the dial-on-demand function, select Enable in the Dial-on-Demand field. 8. In the MTU field, enter the maximum transmission unit allowed by your ISP. If your ISP has not specified an MTU size then 1492 is typically the default. character code separated by dashes or colons.
6. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click OK. This will reboot the router and apply all configuration changes. NOTE: If the router does not prompt you to reboot it at the end of the last configuration step, you must use the reboot command. See Rebooting the Router on page 77.
9. Repeat the process with any other computers you wish to reserve IP addresses for. 10. To change the IP address for a PC, select the PC’s MAC address on the Fixed IP Table screen and click the Modify button. Make any changes and click Apply. The router will return you to the Fixed IP Table screen. Figure 16 DHCP, Fixed IP Table Screen 5. Click the Add button at the bottom of the screen. This displays the Add Fixed IP screen. (See Figure 17.) 11.
8. To change the IP address, select the address on the Excluded IP Table screen and click the Modify button. Make any changes and click Apply. The router will return you to the Excluded IP Table screen. 9. To delete the IP address for a PC, select the PC’s MAC address on the Excluded IP Table screen and click the Delete button. Figure 18 DHCP, Excluded IP Table Screen 4. Click the Add button at the bottom of the screen. This displays the Add Excluded IP screen. (See Figure 19.
Table 2 Commonly Used Well-Known Ports (TCP) Number Description 18 Message Send Protocol (MSP) 20 FTP – Data 21 FTP – Control 22 SSH Remote Login Protocol 23 Telnet 25 Simple Mail Transfer Protocol (SMTP) 49 Login Host Protocol (Login) 53 Domain Name System (DNS) 69 Trivial File Transfer Protocol (TFTP) 70 Gopher Services 80 HTTP 109 POP2 110 POP3 119 Newsgroup (NNTP) 194 Internet Relay Chat (IRC) 458 Apple QuickTime 1080 Socks Once you have determined which PCs need to s
twice with the different port ranges (see Figure 20 on page 52). 10. In the Protocol field, select TCP, UDP, or TCP/UDP according to the needs of your network. TCP port mappings are different from UDP port mappings, but most of the common well-known ports are the same across both protocols. The ports listed in Table 2 are TCP protocol port mappings. 11. Enter any Remark or comment to help you remember what this port mapping function is. 12. Click Apply.
CONFIGURING UNIVERSAL PLUG AND PLAY (UPnP) Universal Plug and Play or UPnP is a networking architecture that provides compatibility among computers, networking equipment, software and peripherals. With UPnP, connected devices communicate their features to the network at a times interval so other devices can access those features. 6. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click OK.
The WNR2004 router can act as a DHCP server, so it can provide IP addresses to computers on your network. By default, the DHCP server function is enabled. In most cases, the default settings will serve your network just fine. However, you will have to change the DHCP settings if the following conditions apply: Figure 23 DMZ Screen 4. In the DMZ field, select Enable. 5. In the DMZ Address field, enter the fixed IP address reserved for the DMZ computer.
7. Under the End Address field, enter the last IP address you want the router to be able to assign. The router will assign any IP address that falls into this range. NOTE: The Start and End Addresses should be in the same subnet as the LAN IP address. If the LAN IP Address were 192.168.1.1 and the subnet mask were 255.255.255.0 then the first three parts of the Start and End IP addresses would need to be 192.168.1. 8. Click Apply. If the router displays a dialogue box that says “Values are saved.
3. At the PC that serves as your network’s DHCP server, reserve a fixed IP address for the router. Record this IP address along with the network subnet mask. 8. Click Basic Configuration, then LAN. This displays the LAN Configuration screen (see Figure 24). 4. Open a browser window and login to the router. 5. Click Basic Configuration, then DHCP Server. This displays the DHCP Server screen (see Figure 24). Figure 26 LAN Configuration Screen 9.
both the PC and the router are using the same subnet mask. ENABLING DYNAMIC DNS A Domain Name System (DNS) server maintains a list of Internet addresses and URLs (web addresses) and the IP address of the computer that maintains the website. Usually, the IP address for the host computer must be static. A dynamic DNS service provides an alias for host computer that have dynamic IP addresses.
NOTE: If the router does not prompt you to reboot it at the end of the last configuration step, you must use the reboot command. See Rebooting the Router on page 77. Follow the steps below to edit the routing table: 1. Open a browser window and login to the router. 2. Click Advanced Configuration, then Routing Table. This displays the Routing Table screen (see Figure 28). EDITING THE ROUTING TABLE To provide Internet access, the router must be able to contact all the PCs on your network.
not need a route to the WAN so LAN should almost always be set. If the Router is being used to create a subnetwork then the WAN may be more commonly used. 8. Click Apply. This will take you back to the Routing Table screen. 9. To change the routing for a PC, select the PC’s IP address on the Routing Table screen (see Figure 28 on page 66) and click the Modify button. 10.
Figure 30 Packet Filtering Screen 3. When you first view this screen, the table will be blank. Click the Add button to add a packet filtering entry to the table. This displays the Packet Filtering, Add screen (see Figure 31). Figure 31 Packet Filtering, Add Screen 4. Under the Status field, click Enable. 5.
IP address as the Start IP Address. Be sure to enter the four separate parts of the IP address into the four separate boxes in the field. from. Be sure to enter the four separate parts of the IP address into the four separate boxes in the field. 6. In the Source End IP Address field, enter the last IP address of the range of you want to filter packets from. If you want to filter from a single IP address, enter the same IP address as the Start IP Address.
17. To change the packet filtering settings, select the IP address range on the Packet Filtering screen (see Figure 30 on page 69) and click the Modify button. Router Maintenance Features 18. To delete the packet filtering settings, select the IP address range on the Packet Filtering screen (see Figure 30 on page 69) and click the Delete button. SYSTEM INFORMATION SCREEN 19. Click Apply. If the router displays a dialogue box that says “Values are saved.
HARDWARE, SOFTWARE, AND BOOTCODE VERSION WAN STATUS This information defines the version of your router. Record this information in case you have to contact customer support. SYSTEM UP TIME Default MAC Address This field displays the MAC address the router uses to communicate with the ISP. IP Address This field displays the IP address the router uses to communicate with the ISP. It also indicates whether the router is obtaining an IP address automatically from the ISP.
REBOOTING THE ROUTER Whenever you have changed the router’s configuration, you must reboot the router before the changes take effect. If the router does not prompt you to reboot it at the end of the last configuration step, you must use the reboot command. SOFTWARE REBOOT 1. From the menu at the left of the screen, click on System Administration, then Reboot the Device. This displays the Reboot the Device screen (Figure 33).
RESTORING FACTORY DEFAULTS WITH THE HARDWARE If you cannot access the configuration screens, you will need to reset the factory defaults through the hardware. Use a pencil or pin to press the reset button at the rear of the router. Hold the reset button in for 10 seconds, then release it. After you reset the router to its factory default configuration, you must login to the router using the factory default IP address and password. (See Logging In on page 22.
8. If you select the Weekly log, select what day each week and what time on that day the router should send the log. 9. Click Apply. If the router displays a dialogue box that says “Values are saved. Do you really want to reboot the system now?” click OK. This will reboot the router and apply all configuration changes. NOTE: If the router does not prompt you to reboot it at the end of the last configuration step, you must use the reboot command. See Rebooting the Router on page 77. READING SYSTEM LOGS 1.
UPDATING THE FIRMWARE Follow the steps below to upgrade the firmware on your router. NOTE: Updating the firmware may erase some or all of your configuration changes. Be sure to record any configuration changes you have made before updating the router’s firmware. 1. Open a browser window and login to the router. 2. In the menu at the left side of the screen, click System Administration, then Firmware Update. This opens the Firmware Update screen (see Figure 37). Wireless Configuration The WNR2004 802.
wanting to connect using the 802.11b wireless network. Clear To Send (CTS) messages before data can be transmitted from a client. RTS is used to avoid collisions. The default value is 2432, which is quite large so that RTS is not activating in most cases. When RTS is activated, overall performance decreases due to the associated overhead incorporated into the packets. In most network environments, RTS is not necessary.
Note: Some products refer to 64-bit encryption as 40-bit encryption. Both are names for the same encryption technology. 4. Click Apply. Remember that changes do not take effect until after you Reboot your WNR2004 Wireless AP/Router. See Rebooting the Router on page 77. A sample WEP configuration using a pass phrase is shown in the following figure. 802.11b clients inserted into your laptop or desktop computer must have the same WEP settings as the AP in order for them to communicate with each other.
MANUAL KEY ENTRY To manually enter the WEP keys, perform the following steps: 1. Select either 64-bit or 128-bit WEP encryption from the pull-down menu. 2. When WEP 64-bit is selected, type 5 alpha characters in the range of “A-Z” (e.g. MyKey) in the WEP Key 1 entry field. Alternatively, you may enter 10 digit hexadecimal values in the range of “A-F” and “0-9”. You can also enter WEP keys in the Key 2, Key 3 and Key 4 if you wish. Select the active WEP key set (1, 2, 3, or 4) for 64-bit encryption.
A SINGLE PC CANNOT CONNECT TO THE ROUTER OR THE INTERNET 10. If you do not receive any replies from the PING command, the PC is not communicating with the router. Contact customer support. Follow these steps if a single PC on the network cannot connect to the router or to the Internet: 1. Check the Ethernet connection between your computer and the router. Verify that the PC is connected to one of the four LAN ports on the router. 2. Verify that the IP address of the PC is in the correct network range.
21 and Advanced Router Configuration on page 38 for details on configuring the router to connect to your ISP. Specifications 7. If the configuration seems correct, contact your ISP to verify the settings needed to connect to their network. 8. If the configuration settings you have match those of your ISP, there may be an incorrect configuration setting on some other screen. Reset your router to factory defaults, and start the configuration again. 9.
Legal Notice Statement of Conditions Uniden reserves the right to make changes to the products described in this document without notice. Uniden does not assume any liability due to the user or application of the product(s) or circuit layout(s) described herein. IC NOTICE: This Class B digital apparatus complies with Canadian ICES-003. will not occur in a particular installation.
Precautions! Before you read anything else, please observe the following: Warning! Uniden America Corporation DOES NOT represent this unit to be waterproof. To reduce the risk of fire, electrical shock, or damage to the unit, DO NOT expose this unit to rain or moisture. IMPORTANT SAFETY INSTRUCTION When using your product, these basic safety precautions should always be followed to reduce the risk of fire, electrical shock, and injury to persons: 7.
household wiring and damage any device connected to it. This product is no exception. Warning! Please do not attempt to unplug any appliance during an electrical storm. One Year Limited Warranty Important: Evidence of original purchase is required for warranty service.
WARRANTY PERTAINING TO THE PRODUCT AND IS IN LIEU OF AND EXCLUDES ALL OTHER WARRANTIES OF ANY NATURE WHATSOEVER, WHETHER EXPRESS, IMPLIED OR ARISING BY OPERATION OF LAW, INCLUDING, BUT NOT LIMITED TO ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. THIS WARRANTY DOES NOT COVER OR PROVIDE FOR THE REIMBURSEMENT OR PAYMENT OF INCIDENTAL OR CONSEQUENTIAL DAMAGES.
Browser - An application program that provides a way to look at and interact with all the information on the World Wide Web or PC. The word “browser” seems to have originated prior to the Web as a generic term for user interfaces that let you browse text files online. Cable Modem – A device that connects a computer to the cable television network, which in turn connects to the Internet. Once connected, cable modem users have a continuous connection to the Internet.
greater the probability that the original data can be recovered. Even if one or more bits in the chip are damaged during transmission, statistical techniques embedded in the radio can recover the original data without the need for retransmission. To an unintended receiver, DSSS appears as low power wideband noise and is rejected (ignored) by most narrowband receivers. network from users from other networks. (The term also implies the security policy that is used with the programs.
has several large societies in special areas, such as the IEEE Computer Society. IEEE 802.11 - Industry standard that enables wireless LAN hardware from different manufacturers to communicate. Infrastructure Mode - A mode of operation of the 802.11b wireless protocol that allows all computers on a wired and wireless network to share a peripheral, such as a printer or high speed Internet Access.
NIC (Network Interface Card) – A board installed in a computer system, usually a PC, to provide network communication capabilities to and from that computer system. Also called an adapter. Ping (Packet Internet Groper) – An Internet utility used to determine whether a particular IP address is online. It is used to test and debug a network by sending out a packet and waiting for a response. NTP (Network Time Protocol) - is a protocol used to synchronize computer clock times in a network of computers.
known to waste bandwidth. AppleTalk, DECnet, TCP/IP, NetWare, and VINES all use incompatible versions of RIP. SOHO (Small Office/Home Office) – Market segment of professionals who work at home or in small offices. RJ-11 (Registered Jack-11) – A telephone connector that holds up to six wires. The RJ-11 is the common connector used to plug a telephone into a wall. Static IP Address - A permanent IP address that is assigned to a node in a TCP/IP network.
can also be used as a communication protocol in a private network (either an intranet or an extranet). When you are set up with access to the Internet, your computer is uses the TCP/IP protocol. TFTP (Trivial File Transfer Protocol) – A version of the TCP/IP FTP protocol that has no directory or password capability. Throughput - The amount of data moved successfully from one place to another in a given time period.
MEMO 115 116
