Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point User Manual

Transcription

1 Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point User Manual

2 HUAWEI Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point User Manual

3 Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point User Manual Manual Version: T C-1.20 Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. Please feel free to contact our local office or company headquarters. Huawei Technologies Co., Ltd. Address: Administration Building, Huawei Technologies Co., Ltd., Bantian, Longgang District, Shenzhen, P. R. China Postal Code: Website:

4 Copyright 2005 Huawei Technologies Co., Ltd. All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks, HUAWEI, SmartAX, Quidway are trademarks of Huawei Technologies Co., Ltd. All other trademarks mentioned in this manual are the property of their respective holders. Notice The information in this manual is subject to change without notice. Every effort has been made in the preparation of this manual to ensure accuracy of the contents, but all statements, information, and recommendations in this manual do not constitute the warranty of any kind, express or implied.

5 About This Manual Organization Chapter 1 provides a brief description of WA1003A and a list of features. Chapter 2 introduces the hardware installation of WA1003A. Chapter 3 introduces the preparation procedures before configuring the WA1003A. Chapter 4 describes how to use the embedded Web-based management software to configure the WA1003A. Chapter 5 describes the detailed configuration procedures for 6 applications. Chapter 6 lists several FAQs and trouble-locating methods. Chapter 7 gives the technical specifications of the WA1003A. Appendix gives the abbreviation list and default factory settings for WA1003A. Intended Audience The manual is intended for the following readers: Marketing staff Installation engineers & technicians Operation & maintenance personnel

6 Conventions The manual uses the following conventions: I. General conventions Convention Arial Arial Narrow Boldface Description Normal paragraphs are in Arial. Warnings, Cautions, Notes and Tips are in Arial Narrow. Headings are in Boldface. II. Symbols Eye-catching symbols are also used in this manual to highlight the points worthy of special attention during the operation. They are defined as follows: operation. Caution: Means reader be extremely careful during the Note: Means a complementary description.

7 Environmental Protection This product has been designed to comply with the requirements on environmental protection. For the proper storage, use and disposal of this product, national laws and regulations must be observed.

8 Table of Contents 1 WA1003A Overview Structure Front Panel Rear Panel External Splitter Features ADSL Wireless Others Hardware Installation Preparations Checking Computer Configuration Collecting ISP Information Fixing WA1003A Connecting WA1003A Connecting ADSL Line Connecting Your Computer to WA1003A Connecting Ethernet LAN to WA1003A Powering on WA1003A Before Configuring WA1003A When to Configure the WA1003A Setting IP Address on Your Computer Accessing the Web-based Configuration Manager Checking for Proxy Service...13 i

9 3.3.2 Applying the LAN IP Address of WA1003A Inputting the User Name and Password Web-based Management Manager Interface Layout Home Page Setup DHCP Configuration Management IP Firewall / NAT Service Wireless New Connection Modem Setup Advanced Wireless Security Wireless Management SNMP UPnP Port Forwarding Advanced Security LAN Clients Bridge Filters Web Filter Multicast Static Routing Dynamic Routing Customer Port Forwarding Customer Filter IP Tools System Command...61 ii

10 4.5.2 Remote Log User Management Update Gateway Ping Test Modem Test Status Menus Network Statistics Connection Status DHCP Clients Modem Status Product Information System Log Service Configuration Preparation for Service Configuration PPPoE Configuration PPPoA Configuration Bridge Configuration Static IP Configuration DHCP Configuration CLIP (IPoA) Configuration Troubleshooting Guide Quick Troubleshooting FAQs Technical Specifications Appendix Factory Default Settings FCC Abbreviations...98 iii

11 1 WA1003A Overview In this chapter you will learn about the appearance and features of WA1003A. The WA1003A is designed to provide a simple, cost-effective and secure ADSL Internet connection for wired (Ethernet) and wireless (802.11b/g) stations on your network. WA1003A combines high-speed ADSL connection technology, TCP/IP routing and b/g Wireless connectivity in one compact unit. 1.1 Structure Front Panel Place the WA1003A in a location where you can easily view the LED indicators. The LEDs on the front panel of WA1003A are shown below: Figure 1-1 Front panel WA1003A The meanings of LEDs are listed as follows: 1

12 Numb er LED Indicators 1 Power 2 Status 3 4 ADSL: Link/Act Wireless: Link/Act Description Solid green indicates the device is powered on. No light indicates the device is powered off. Solid green indicates power on self-test (POST) is in progress. Blinking green indicates the connection status is stable. Solid green after the POST indicates the system fails and the device needs reboot. Solid green indicates a valid ADSL connection. It is on after the ADSL negotiation process is settled. Blinking green indicates activity on the WAN (ADSL) interface. Solid green indicates a valid WLAN connection. Blinking green indicates activity on the WLAN interface USB: Link/Act LAN 1: Link/Act Solid green indicates a valid USB connection. Blinking green indicates activity on the USB interface. Solid green light indicates a valid link on startup. Blinking green indicates data is currently passing through the Ethernet port. 2

13 1.1.2 Rear Panel All cables are connected to the rear panel of WA1003A. The ports and switch on the rear panel of WA1003A are shown below: Figure 1-2 Rear panel of WA1003A Description of buttons and ports in rear panel: Buttons/Ports 12V/AC 1.2A or 12V/DC 1.25A Reset Power Ethernet USB Description The port and indication for AC or DC power adapter. The WA1003A may be reset to the factory defaults if you press the reset button for a few seconds while the device is powered on. To power on the device, press the button after the power adapter is connected properly.. With this port, you can establish an Ethernet connection. If your computer has a USB port, you can connect the WA1003A to the USB port using a USB cable. 3

14 Buttons/Ports ADSL Antenna Description Plug one end of the cable into the ADSL port (RJ-11 receptacle) on the rear panel of the WA1003A and insert the other end into the RJ-11 wall socket. Screw-on antenna, for b wireless connection External Splitter Using splitter can reduce noises in the telephone line. WA1003A has to use an external splitter, which has three ports: LINE, PHONE and MODEM port. LINE: Connects to the telephone jack. PHONE: Connects to the telephone. MODEM: Connects to ADSL modem with RJ-11 telephone line. 1.2 Features ADSL Supporting ADSL2+, data rates up to 24 Mbps for downstream and 1 Mbps for upstream Supporting up to eight simultaneous virtual connections Supporting T1.413 issue 2, G.dmt and G.lite standards Widest range of DSLAM interoperability 4

15 1.2.2 Wireless Compatible with IEEE g high rate standard to provide wireless 54Mbps data rate Compatible with IEEE b high rate standard to provide wireless 11Mbps data rate Operating at 2.4 ~ 2.5GHz frequency to meet worldwide regulations Dynamic date rate scaling at 6 Mbps, 9 Mbps, 12 Mbps, 18 Mbps, 24 Mbps, 36 Mbps, 48 Mbps and 54 Mbps for IEEE g Dynamic date rate scaling at 1 Mbps, 2 Mbps, 5.5 Mbps and 11Mbps for IEEE b Supporting wireless data encryption with 64/128-bit WEP for security Supporting infrastructure networks through Access Point (AP) and special network through peer-to-peer communication Integrated microstrip antenna WPA enhanced security Others Built-in MIBs for SNMP management Upgradeable firmware through TFTP Friendly Web-based Graphic User Interface (GUI) for configuration and management. Built-in switch, supports up to 4 Ethernet connections Maximum reliability, throughput and connectivity with automatic data rate switching 5

16 One-piece PC Card designed to fully support PC Card type II defined mechanical and environmental stress conditions. 6

17 2 Hardware Installation In this chapter you will learn how to connect your WA1003A. 1) Preparations 2) Connecting WA1003A 3) Powering on WA1003A 2.1 Preparations Checking Computer Configuration Item OS Web browser type Web browser settings Ethernet port Wireless LAN Requirement Web browser, such as IE, is installed. Microsoft Internet Explorer 5.0 or Netscape Navigator 4.7 or higher is installed. JavaScript is enabled NIC adapter is installed TCP/IP is enabled b/g wireless LAN, WEP and WPA are supported Collecting ISP Information VPI, VCI Encapsulation type 7

18 Protocol type Modulation type User name, password 2.2 Fixing WA1003A WA1003A supports horizontal and vertical positions as well as hanging on the wall. Place your WA1003A in a location where you can easily view the LED indicators. 2.3 Connecting WA1003A Connecting ADSL Line Simply plug one end of the UTP cable into the Modem port of the splitter and insert the other end into the ADSL port on the rear panel of WA1003A. Use another telephone cable to connect the splitter to the Phone Jack in the wall Connecting Your Computer to WA1003A Use a straight-through cable to connect your computer to WA1003A. You can connect the WA1003A directly to a 10/100Base-TX Ethernet adapter card on your PC with the provided Ethernet cable as shown in the following figure. 8

19 (1) Computer (2) Phone (3) RJ-45 Ethernet Cable (4) RJ-11 Tel Cable (5) RJ-11 Tel Cable (6) Splitter (7) WA1003A (8) RJ-11 Tel Cable (9) Phone Jack Figure 2-1 Computer to WA1003A connection Connecting Ethernet LAN to WA1003A WA1003A can connect to any 10/100Base-TX Ethernet port. When connecting WA1003A to any Ethernet device capable to operate at speeds higher than 10Mbps, ensure that you enable auto-negotiation mode for the connecting port of WA1003A. Use cross-over cable to connect WA1003A and the uplink port of a switch or hub. Ensure that the cable connecting the LAN to WA1003A is no longer than 100 meters. 9

20 2.4 Powering on WA1003A 1) Plug in the provided power adapter. 2) The Power LED indicator is on, indicating the device is powered on. 3) After a few seconds, ensure the LAN LINK indicator is on with steady light, which indicates a valid connection between the router and your computer. 10

21 3 Before Configuring WA1003A To configure WA1003A, you have to connect WA1003A to a computer as shown below. Use the provided straight-through cable. (1) Computer (2) RJ-45 Ethernet Cable (3) WA1003A Figure 3-1 Connection between computer and WA1003A 3.1 When to Configure the WA1003A The factory defaults of WA1003A are optimized, and make WA1003A operable in most networks. Usually, for the users with simple network topology, the default values can meet their basic requirements and need no change. If the condition of network has been changed due to modification of security, scale, line of communication, protocol or 11

22 topology, for example, a demand of particular VPI and VCI, you should adjust the default settings accordingly to adapt WA1003A to the changes. 3.2 Setting IP Address on Your Computer The steps of setting the IP address are as below. 1) Understand the default IP settings for WA1003A: IP address ( ), Subnet mask ( ). 2) Make sure you install and enable TCP/IP on your computer. If you have an Ethernet port on your computer, the TCP/IP is probably installed. If you are using Windows XP, the TCP/IP is enabled by default for standard installations. 3) Configure the IP address and Subnet mask of your computer to make your computer in the same subnet as that of the WA1003A, for example, IP address: , Subnet mask: For computers running non-windows operating systems (OS), follow the instructions of the OS to configure the IP address of your computer to the same subnet as that of WA1003A. 12

23 3.3 Accessing the Web-based Configuration Manager Once the IP address of the computer is set to access the Web-based configuration manager, you can change the factory defaults to enable WA1003A to connect to the Internet Checking for Proxy Service If the browser on your computer is configured to use a proxy server for Internet access, disable the proxy connection first. In Windows Internet Explorer (IE), you can check whether a proxy server is enabled by following these procedures: 1) In the IE Window, select Tools > Internet Options to display the Internet Options window. 2) In the Internet Options window, select the Connections tab and click LAN Settings. 3) Make sure that the Use proxy server option is not checked. If it is checked, deselect it and click OK Applying the LAN IP Address of WA1003A To access the Web-based configuration manager, launch your Web browser and enter the LAN IP address of the WA1003A. For the first access, the default LAN IP address of the WA1003A is used. Type in followed by the default IP address, in the address bar of the browser. The URL in the address bar should be: 13

24 3.3.3 Inputting the User Name and Password A window appears, prompting you for a user name and password to access the Web-based configuration manager. Figure 3-2 Enter user name and password Enter the user name admin and password admin for the first time login. You can change the password once you access the Web-based configuration manager. The user name and password allows any computer on the same subnet as WA1003A to access the Web-based configuration manger. And the password can also be used to Telnet the device through Ethernet or Internet interfaces. To change the password, see 4 Web-based Management. Note: Do remember the user name and password for accessing the Web-based manager; do remember the ADSL account and password for PPP connections to access your ISP s network as well. 14

25 4 Web-based Management This chapter describes how to use the Web-based management software to configure WA1003A, introduces the parameters and their settings in the configuration interface. The order of sectors is listed according to the functional configuration interfaces. 4.1 Manager Interface Layout The WA1003A initially presents the Home page shown as below when you first log in. The upper part of the page is available menus, including Setup, Advanced, Tools, and Status. The left part of the page is the wizard column. You can enter the Web page of configuration or management through the hyperlink in the column. The right part of the page is the practical domain of configuration and management. 15

26 Figure 4-1 GUI of Web-based Configuration Manager 4.2 Home Page Figure 4-2 Home Status Information window 16

27 A brief introduction to menus is displayed at the upper part of Home page displays, and at the lower part, the current status of WA1003A is displayed, including: System Uptime, DSL Status, DSL Speed, DHCP Server, LAN IP Address, Software Version, status of Ethernet and USB port. 4.3 Setup The Setup window offers links to menus for setting Local Area Network (LAN) and Wide Area Network (WAN). Figure 4-3 Opening Setup window DHCP Configuration WA1003A supports three DHCP modes for the LAN. By default, DHCP service is provided using an IP pool of for a total of 253 IP addresses available. WA1003A can also relay DHCP service from another server through the WAN 17

28 port. You may disable DHCP service and DHCP relay and then use a different method for IP addressing on your LAN. Enter the Setup menu and click DHCP Configuration in the wizard column to open the DHCP Configuration page. To disable the embedded DHCP server, select Server Off and click Apply. I. Configuration page Figure 4-4 Configure DHCP service for the LAN II. Parameter description Server on: Select this option to enable DHCP service on the LAN. Start IP: Type in the base address for the IP pool of unassigned IP addresses. This IP address must be 18

29 consistent with the Management IP address of WA1003A. Normally the Start IP address is one greater than the Management IP address. End IP: Type in the last address of the continuous IP address range to be used by WA1003A for DHCP function. Up to 253 consecutive IP addresses are available for the pool. Lease Time: This specifies the amount of time (in hours) a client can lease an IP address, from the dynamically allocated IP pool. Server off: Select this option to disable DHCP services. In this case, the IP address of ADSL router device shall be assigned manually or received from the DHCP server of LAN or ISP. III. Save Click Apply to save the settings in the RAM. To save these changes permanently, select Tools > System Commands, and then click Save All Management IP The IP address of WA1003A can be changed to meet the requirements of your LAN. Remember, if you are using DHCP from WA1003A, the IP address must be consistent with the DHCP IP settings. Enter the Setup menu and click Management IP in the wizard column to open the Management IP page. 19

30 I. Configuration page Figure 4-5 Configure Management IP II. Parameter description LAN IP Address: Type in the IP address for the Ethernet LAN interface. The default IP address is LAN Network Mask: Type in the Subnet Mask for the Ethernet LAN IP interface. The default Mask is Hostname: Enter a hostname if WA1003A to be set as local host of LAN. Domain Name: Enter the local domain name if it exists. III. Save Click Apply to save the settings in the RAM. To save these changes permanently, select Tools > System Commands, and then click Save All. 20

31 4.3.3 Firewall / NAT Service Enter the Setup menu and click the Firewall/NAT Service to set the firewall and NAT for LAN clients. I. Configuration page Figure 4-6 Firewall / NAT service You can enable or disable firewall and NAT by selecting Enable or Disable in the configuration page and applying the settings. II. Save Click Apply to save the settings in the RAM. To save these changes permanently, select Tools > System Commands, and then click Save All. 21

32 4.3.4 Wireless Enter the Setup menu and click Wireless in the wizard column to open the Wireless setup page. I. Configuration page Figure 4-7 Wireless configuration window II. Parameter explanation Enable AP: Select this option to allow WA1003A to operate in the wireless environment. Channel: The channel which is available for the Access Point (AP) depends on the local regulatory environment. Remember that all devices communicating with WA1003A must use the same channel (and use the same SSID). Select the channel for your b/g wireless LAN from the drop-down menu. 22

33 SSID: The SSID identifies members of Service Set. If the default SSID is changed, all other devices on the wireless network must also use the changed SSID. III. Save Click Apply to save the settings in the RAM. To save these changes permanently, select Tools > System Commands, and then click Save All New Connection Enter the Setup menu and click New Connection in the wizard column to set up a connection for WAN. You can set up and configure 8 different WAN connections on WA1003A. The default connection protocol used for WA1003A is Point-to-Point Protocol over Ethernet (PPPoE) when you click New Connection button to create a new one. The alternative connection types supported by WA1003A are the PPP over ATM (PPPoA), Bridge, Static (IP for WAN), DHCP (for WAN), and Classical IP over ATM or IPoA (CLIP). I. PPPoE PPP is a standard method for setting up a network connection or session between networked devices. Different forms of PPP include PPPoA and PPPoE. PPPoE requires a username and password to access the network. PPPoE is a method of using PPP through the Ethernet network. 23

34 Click New Connection under WAN Setup to display the Connection Setup configuration menu. Figure 4-8 Set up a New Connection - PPPoE Name: Type in a Name for the connection in the space, such as PPPoE_LLC. Options: Enable NAT and/or Firewall by selecting corresponding check boxes. NAT: Network Address Translation (NAT) is a method by which hosts in a private network domain are allowed simultaneous access to hosts in the external network transparently using a single registered address. Firewall: The Firewall enables you to protect the system against denial of service (DoS) attacks and other types of malicious accesses to your LAN. 24

35 VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all the VPI&VCI default values of PVCs. QoS: You can select UBR, CBR and VBR from the drop-down list of QoS, but it is suggested to leave the default QoS values if you are unsure or the ISP did not provide this information. PCR&SCR: Do not change the PCR or SCR values unless you are required to do so. If prompted to change these, type in the values given by your service provider. Username & Password: Type the username and password to verify your identity. Typically, the username is an account assigned by your ISP. For most users, the remaining settings should not be changed. See your ISP for further information. Idle Timeout/Keep Alive/MAX Fail/MTU: Leave the default values if you are unsure or the ISP did not provide this information. On demand: If this option is selected, WA1003A will automatically connect the Internet while data request is received. Click Apply to set up a connection. Note that a menu button is created (PVC0-PVC5), this links to the configuration menu for PVC0-PVC5. If at any time you want to change, delete, disconnect or connect this WAN connection, click the PVC0-PVC5 button. 25

36 II. PPPoA PPP is a standard method for setting up a network connection or session between networked devices. PPPoA configuration requires the same basic information as the previously discussed PPPoE and both menus are basically identical. Click New Connection under WAN Setup to display the Connection Setup configuration menu. Select PPPoA in the Type drop-down list to enter Connection SetupPPPoA page. Figure 4-9 Configure Connection PPPoA Name: Type in a Name for the connection, such as PVC0. Type: Select PPPoA from the drop-down list.. Options: Enable NAT and/or Firewall by selecting corresponding check box. 26

37 NAT: Network Address Translation (NAT) is a method by which hosts in a private network domain are allowed simultaneous access to hosts in the external network transparently using a single registered address. Firewall: The Firewall enables you to protect the system against denial of service (DoS) attacks and other types of malicious accesses to your LAN. VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all the VPI&VCI default values of PVCs. QoS: You can select UBR, CBR and VBR from the drop-down list, but it is suggested to leave the default values if you are unsure or the ISP did not provide this information. PCR&SCR: Do not change the PCR or SCR values unless you are required to do so. If prompted to change these, type in the values given by your service provider. Encapsulation: The Encapsulation values LLC (SNAP) and VC (MUX) are two different methods for encapsulating the PPP packet. Contact your ISP to make sure the supported encapsulation. Username & Password: Type the username and password to verify your identity. Typically, the username is an account assigned by your ISP. For most users, the remaining settings should not be changed. See your ISP for further information. 27

38 Idle Timeout/Keep Alive/MAX Fail/MTU: It is suggested to leave the default values if you are unsure or the ISP did not provide this information. On demand: If this option is selected, WA1003A will automatically connect the Internet while data request is received. III. Bridge Bridge means a pure bridged connection with no IP address assigned to WA1003A. This connection method makes WA1003A act as a bridge, and just passes packets across the DSL port. When the device is used in this manner, install additional connection software on any computer or server to access the Internet. Click New Connection under WAN Setup to enter the Connection Setup configuration menu. Select Bridge in the Type drop-down list to display the Bridged Connection Setup page. Figure 4-10 Configure Connection Bridge 28

39 Name: Type in a Name for the connection, such as PVC0. Type: Select Bridge from the drop-down list. Options: Enable NAT and/or Firewall by selecting corresponding check boxes. Encapsulation: The Encapsulation values LLC (SNAP) and VC (MUX) are two different methods for encapsulating the PPP packet. Contact your ISP to make sure the supported encapsulation. VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all VPI&VCI default values of PVCs. QoS: You can select UBR, CBR and VBR from the drop-down list, but it is suggested to leave the default values if you are unsure or the ISP did not provide this information. PCR&SCR: Do not change the PCR or SCR values unless you are required to do so. If prompted to change these, type in the values given by your service provider. IV. Static Static is used whenever a known static IP is assigned. Related information such as the Subnet mask and the gateway should also be specified to set up the connection. Up to three Domain Name Server (DNS) addresses can also be specified. These enable you to access other web servers. Valid IP addresses range from to

40 Click New Connection under WAN Setup to display the Connection Setup configuration menu. Select Static in the Type drop-down list to enter the Static Connection Setup page. Figure 4-11 Configure Connection Static Name: Type in a Name for the connection, such as PVC0. Type: Select Static from the drop-down list. Options: Enable NAT and/or Firewall by selecting corresponding check boxes. Encapsulation: The Encapsulation values LLC (SNAP) and VC (MUX) are two different methods for encapsulating the PPP packet. Contact your ISP to make sure the supported encapsulation. VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may 30

41 just use the default settings. See the attached table for all VPI&VCI default values of PVCs. QoS: You can select UBR, CBR and VBR from the drop-down list, but it is suggested to leave the default values if you are unsure or the ISP did not provide this information. PCR&SCR/IP Address/Mask/Default GW/DNS: Based on the information provided by your ISP, enter the IP Address, Subnet Mask, Default Gateway (if provided), and DNS values (if provided). Mode: Select the desired Mode, Bridged or Routed. V. DHCP Dynamic Host Configuration Protocol (DHCP) allows the gateway to obtain the IP address automatically from a DHCP server on the service provider s network. The service provider assigns a global IP address from an available address pool. Typically the IP address assigned has a long lease time, so it will likely be the same address each time WA1003A requests an IP address. Click New Connection under WAN Setup to enter the Connection Setup configuration menu. Select DHCP in the Type drop-down list to display the DHCP Connection Setup page. 31

42 Figure 4-12 Configure Connection DHCP Name: Type in a Name for the connection, such as PVC0. Type: Select DHCP from the drop-down list. Options: Enable NAT and/or Firewall by selecting corresponding check boxes. Encapsulation: The Encapsulation values LLC (SNAP) and VC (MUX) are two different methods for encapsulating the PPP packet. Contact your ISP to make sure the supported encapsulation. VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all VPI&VCI default values of PVCs. QoS: You can select UBR, CBR and VBR from QoS drop-down list, but it is suggested to leave the default QoS values if you are unsure or the ISP did not provide this information. 32

43 PCR&SCR: Do not change the PCR or SCR values unless you are required to do so. If prompted to change these, type in the values given by your service provider. IP Address/Mask/Default Gateway: The automatically obtained IP address, subnet mask and default gateway will be displayed here. VI. CLIP CLIP or IPoA connections function in a similar way to DHCP or Static IP connections. Certain CLIP connections function like P2P networks. WA1003A must obtain IP settings from a server owned by an ISP, or use a static IP address assigned by the ISP. Click New Connection under WAN Setup to enter the Connection Setup configuration menu. Select CLIP in the Type drop-down list to display the CLIP Connection Setup page. 33

44 Figure 4-13 Configure Connection CLIP (IPoA) Name: Type in a Name for the connection, such as PVC0. Type: Select CLIP from the drop-down list. Options: Enable NAT and/or Firewall by selecting corresponding check boxes. VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all the VPI&VCI default values of PVCs. QoS: You can select UBR, CBR and VBR from the drop-down list, but it is suggested to leave the default QoS values if you are unsure or the ISP did not provide this information. PCR&SCR: Do not change the PCR or SCR values unless you are required to do so. If prompted to change these, type in the values given by your service provider. 34

45 IP Address/Mask/Default Gateway: Based on the information your ISP provided, enter the IP Address (e.g ), the Subnet Mask (e.g ), ARP Server (e.g ) and the Default Gateway (e.g ). VII. Save Click Apply to save the settings in the RAM. To save the changes permanently, select Tools > System Commands, and then click Save All Modem Setup Enter the Setup menu and Click Modem Setup in wizard column to open the Modem Setup page. The Modem Setup menu is used to change the Modulation Type for the ADSL connection. This setting should be changed only if your service provider has given explicit instructions. 35

46 I. Configuration page Figure 4-14 Modem Setup menu If instructed by your ISP to change the Modulation type for your service, select the desired modulation type. The available modulation types are MMODE, T1413, GDMT, GLITE, ADSL2 and ADSL2Plus. By default, WA1003A will automatically detect the modulation used; this setting is listed as MMODE (Multi-mode). II. Save Click Apply to save the settings in the RAM. To save the changes permanently, select Tools > System Commands page, and then click Save All. 36

47 4.4 Advanced Click the Advanced tab to access the menus for configuring Wireless Security, Wireless Management, UPnP, Port Forwarding, Advanced Security (including NAT, Firewall and DMZ setup), LAN Clients, Bridge Filters, Multicast pass-through, Static Routing, Dynamic Routing (RIP setup), Customer Port Forwarding and Customer Filter IP Wireless Security Enter the Advanced menu and Click Wireless Security in wizard column to open the Wireless Security page. WA1003A offers two types of network security: WEP and WPA. It is None by default. I. WEP WEP (Wireless Encryption Protocol) encryption can be enabled for security and privacy. WEP encrypts the data portion of each frame transmitted from the wireless adapter by using one of the preset keys. To display the WEP configuration window, click the WEP radio button. 37

48 Figure 4-15 WEP configuration window Enable WEP Wireless Security: Select this option to enable the WEP encryption. Authentication Type: From the drop-down list, select an Authentication Type: Open, Shared, or Both. Encryption Key: WA1003A offers 64-bit, 128-bit, or 256-bit encryption with four keys available. Select a key by clicking a button on the left, select an encryption level from the drop-down list on the right, and then enter the proper-length key. (Key length is outlined at the bottom of the window.) 38

49 Note: If encryption of any kind, at any level is applied to WA1003A, all devices such as WA1003A and user s wireless card on the network must comply with all security measures including: SSID, channel, security method and encryption key s length and value. Encryption key can be English letters and digits. Pay attention that the encryption key is case sensitive. Do remember to set the encryption key. II. WPA (Wi-Fi Protected Access) Wi-Fi Protected Access was designed to provide improved data encryption, perceived as weak in WEP, and to provide user authentication, largely nonexistent in WEP. For most small networks, such as those in a small business or home-based enterprise, WPA is the easiest way to obtain effective network security. In the three options of WPA, PSK String is the easiest to implement. 39

50 Figure 4-16 WPA configuration window Group Key Interval: Time (in seconds) after which the Group Key is changed automatically ( ) X: Enter the IP address of the RADIUS server, Port number, and Secret (password) that can be obtained from your Internet Service Provider (ISP). PSK HEX: Pre-Shared Key (PSK) Hex is a hexadecimal value with 1-32 characters in length. PSK String: PSK is a numeral of 1-63 characters in length. Note: If encryption of any kind, at any level is applied to WA1003A, all devices on the network must comply with the security measures. 40

51 4.4.2 Wireless Management Enter the Advanced menu and click Wireless Management in the wizard column to open the Wireless Management page. For the added security, you can use access control based on the MAC address. This feature lets you create a list of MAC addresses that are allowed or denied to access WA1003A through the wireless interface. When it is enabled, the access point is instructed to forward packets only from the wireless devices if the MAC address of the device is granted association. Packets received through the wireless interface from non-authorized devices, including other access points, will be discarded. I. Configuration page Figure 4-17 Wireless Management 41

52 II. Parameter Description Enable Access List: Check this option to enable the access control based on MAC address. MAC address: Enter a MAC Address in the box, choose Allow or Ban, and then click Add. III. Save Click Apply to save the settings in the RAM. To save these changes permanently, select Tools > System Commands, and then click Save All SNMP Enter the Advanced menu and click SNMP in the wizard column to open the SNMP page. Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices. Use SNMP to configure system features for proper operation, monitor performance and detect potential problems in the switch, switch group or network. 42

53 I. Configuration page Figure 4-18 SNMP Management II. Parameters Description Enable SNMP Agent: Check the option of Enable SNMP Agent. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device. Enable SNMP Traps: Check the option of Enable SNMP Traps. Traps are messages that alert network personnel of events that occur on the device. The device generates 43

54 traps and sends them to the trap recipient (or network manager). Name/Location/Contact: Enter the information of trap recipient. Vendor OID: Displaying the OID (Object ID) of vendor. OID is a unique set of numbers that allows Objectivity/DB to locate and manage persistent objects. Community: In SNMP v.1 and v.2, user authentication is carried out using community strings, which function like passwords. The remote user SNMP application and the device SNMP must use the same community string. Name: The default community strings for the device used for SNMP v.1 and v.2 management access are: Public and Private Access Right: Specifies the level of access for an authorized user. The levels can be ReadOnly or ReadWrite. Traps: Traps are messages that alert network personnel of events that occur on the device. The device generates traps and sends them to the trap recipient (or network manager). Destination IP: Trap Community: A string of up to 20 characters to authenticate users that want to receive traps from the SNMP agent of the device. Trap Version: Choose SNMP v1 or SNMP v2c. III. Save Click Apply to save the settings in the RAM. 44

55 To save these changes permanently, select Tools > System Commands, and then click Save All UPnP Enter the Advanced menu and click UPnP in the wizard column to open the UPnP page. UPnP supports zero-configuration networking and automatic discovery for many types of networked devices. When enabled, it allows other devices that support UPnP to dynamically join a network, obtain an IP address, convey its capabilities, and learn about the presence and capabilities of other devices. DHCP and DNS service can also be used if available on the network. UPnP also allows supported devices to leave a network automatically without adverse effects to the device or other devices on the network. Diverse networking media including Ethernet, b/g wireless, Firmware, phone line and power line networking can support UPnP. 45

56 I. Configuration page Figure 4-19 UPnP To enable UPnP for any available connection, check Enable UPnP, select the connection or connections on which you will enable UPnP listed under Available Connections. II. Save Click Apply to save the settings in the RAM. To save these changes permanently, select Tools > System Commands, and then click Save All Port Forwarding Click Port Forwarding from the Advanced menu to display the Port Forwarding page. 46

57 Port Forwarding enables specific functions to ignore NAT protection that would otherwise not allow them to function. To use Port Forwarding, you must configure the client IP addresses. Use the LAN Clients menu to configure client IP addresses for port forwarding. I. Configuration page Figure 4-20 Port Forwarding II. Parameters explanation Choose a connection: Select a WAN connection from the drop-down menu. LAN IP: Choose the client IP address listed in the LAN IP drop-down menu, or click New IP button to go to the LAN Clients menu. 47

58 Category: This column lists various traffic types. Select a traffic type to view the available rules in Available Rules. Available/Applied Rules: Click Add to place the rule in the Applied Rules list. The available rules can be applied to one client IP address only. III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All Advanced Security Click Advanced Security from the Advanced menu to display the Advanced Security page. Using the advanced security features of WA1003A, you can enable or disable NAT and Firewall protection for any WAN connection, enable or disable DMZ IP addresses, enable or disable remote Telnet or web management from specified IP addresses, and enable or disable ICMP ping packets from the WAN. 48

59 I. Configuration page Figure 4-21 Advanced security II. Parameters explanation Select your WAN Connection: Select a WAN connection from the drop-down menu. Enable DMZ: A DMZ address is used by a device that is not protected by NAT or Firewall. You may select an IP address from the drop-down menu or create a New IP by pressing the button. Enable Remote Web/Telnet: Telnet and web management through the WAN port can be enabled for specified IP addresses. To enable remote management, click Remote Telnet or Remote Web. If there is IP address in IP Access List, choose one. Otherwise, enter a 49

60 new one in New IP, select the Add checkbox and then click the Apply button. Enable Incoming ICMP: To enable ICMP packets from the WAN, click Enable Incoming ICMP. III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All LAN Clients Click LAN Clients from the Advanced menu to display the LAN Clients menu. Using the LAN Clients menu, you can define Port Forwarding, Access Control and Advanced Security rules for IP addresses on the LAN. To access this menu, click LAN Clients or hyperlink from the advanced menu. You can also click New IP from the Port Forwarding, Access Control and Advanced Security menus to access this menu. In order to use these advanced features, you need to configure the IP addresses of LAN Clients. If there are no IP addresses in the LAN Clients menu, you cannot configure Port Forwarding, Access Control and Advanced Security. 50

61 I. Configuration page Figure 4-22 LAN Clients II. Parameters explaination New IP Address: Type a valid IP address and click Add to add it to the list. Any addresses added will appear in the list of Static Addresses for advanced configuration. These addresses can be used in the Port Forwarding, Access Control and Advanced Security menus. Hostname: Type a hostname for the static IP address. MAC address: Enter a MAC Address in the box, and then click Add. III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All. 51

62 4.4.8 Bridge Filters Click Bridge Filters from the Advanced menu to display the Bridge Filters page. Bridge filters are used to block or allow various types of packets through the WAN interface, to improve network security or efficiency. The rules are configured for individual devices based on MAC addresses. Filter rules can be set up for source, destination or both. You can set up filter rules or disable a set of rules without loosing the rules that have been configured. I. Configuration page Figure 4-23 Bridge Filters II. Parameters explaination Enable Bridge Filters: select this option to add a bridge filter rule. 52

63 Source/Destination MAC: Enter a Source MAC, a Destination MAC or both in the entry fields. Protocol: Select the protocols for the bridge filter. The supported protocols are IPv4, IPv6, RARP, PPPoE Discovery and PPPoE Session. Mode: Specify to allow or deny a bridge filter. Note: To edit an existing rule, select the rule by clicking Edit. The rule will appear in the edit box on the top. Edit the rule and click Add. To remove a bridge filter from the table at the bottom, click Delete and then Apply. III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All Web Filter Click Web Filters from the Advanced menu to display the Web Filters page. The Web filtering enables users to allow/deny most Web applications, including Proxy, Cookies, Java Applets, ActiveX and Pop-Ups. Select the checkboxes to enable or disable the Web applications. 53

64 I. Configuration page Figure 4-24 Web Filters II. Save Click the Apply button to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All Multicast Click Multicast from the Advanced menu to display the Multicast page. Multicast pass-through can be enabled or disabled for any WAN connection. When enabled, it allows IGMP packets to pass through the WAN interface. IGMP packets are used to control multicasts and discontinue multicasts to individual IP addresses when they are no longer needed. 54

65 I. Configuration page Figure 4-25 Multicast To enable Multicast pass-through for any WAN connection, select the connection, click Enable IGMP Multicast and then Apply. II. Save Click the Apply button to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All Static Routing Click Static Routing from the Advanced menu to display the Static Routing page. 55

66 Static Routing specifies a route used for data traffic within your Ethernet LAN or routes data on the WAN. All packets destined for a particular network or subnet use a preset gateway. I. Configuration page Figure 4-26 Static Routing II. Parameter explaination Connection: choose a connection from the drop-down menu for adding a route. New Destination IP/Mask/Gateway/Metric: Enter the proper parameters in these blanks and click Add. A new static route will be added in the table below and the route becomes active immediately. III. Save Click Apply to save the settings in the RAM. 56

67 To save these changes, select Tools > System Commands, and click Save All Dynamic Routing Click Dynamic Routing from the Advanced menu to display the Dynamic Routing page. The WA1003A supports RIP v1 and RIP v2 used to share routing tables with other Layer 3 routing devices. It also supports password protection which requires password verification for RIP requests. Use the Dynamic Routing menu to enable RIP and configure password protection. I. Configuration page Figure 4-27 Dynamic Routing 57

68 II. Parameter explaination Enable RIP: To enable RIP v1, check Enable RIP, select RIP v1 Protocol, and select the Direction (In, Out, or Both) from the drop-down list. To enable RIP v2 or RIP v1 Compatible, select the appropriate Protocol and Direction. Enable Password: To use password protection for RIP v2 or RIP v1 Compatible protocols, check Enable Password, enter a Password. III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All Customer Port Forwarding Click Custom Port Forwarding from the Advanced menu to display the Customer Port Forwarding page. 58

69 I. Configuration page Figure 4-28 Custom Port Forwarding II. Parameter explaination Connection: Select a WAN connection from the drop-down list. Application: Enter a name for the customer port forwarding. WAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field. LAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field. Port Start/End/Map: Enter the port number in each field for the starting port, ending port and mapping port. Protocol: Select the transmitting protocol for the customer port forwarding, including TCP, UDP and Both. 59

70 III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All Customer Filter IP Click Custom Filter IP from the Advanced menu to display the Custom Filter IP page. I. Configuration page Figure 4-29 Custom Filter IP II. Parameter explaination Filter Name: Enter a name for the customer filter. LAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field. 60

71 WAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field. Port Start/End: Enter the port number in each fieldfor the starting port and ending port. Protocol: Select the transmitting protocol for the customer port forwarding, including TCP, UDP and Both. III. Save Click Apply to save the settings in the RAM. To save these changes, select Tools > System Commands, and click Save All. 4.5 Tools The menus under the Tools menu are used for System Commands to save settings, restart and reset the WA1003A; to set up Remote Log information; for User Management to update firmware and load saved configuration files (in the Update Gateway menu); to perform a Ping test; to test the DSL network connectivity in the Modem Test menu System Command Enter the Tools menu and click System Commands from the Advanced menu to display the System Commands page. System Commands are used to save settings to non-volatile memory, to reboot the WA1003A and to restore factory default settings of the WA1003A. 61

72 I. Configuration Page Figure 4-30 Tools System Commands menu II. Parameter Explanation Save All: In order to save the changes you have just made, click Save All to save them to the non-volatile RAM. Restart: Click Restart to restart the WA1003A. If you have not saved your changes, the WA1003A will revert to the previously configuration upon rebooting. Restart AP: Click to restart the Wireless AP (Access Point). The Wireless AP must be restarted whenever the wireless configuration is changed. Restore: The WA1003A can be reset to the default settings using the Restore option. This will also change both the LAN and WAN IP address of the device, so these will need to be reconfigured accordingly. To perform a reset, click Restore. Since the IP settings will return to their 62

73 default, you will lose access to the Web Manager. To use the Web Manager interface, the LAN IP address will need to be reconfigured Remote Log Click Remote Log from the Tools menu to display the Remote Log Settings page. Use the Remote Log menu to set up logging to servers or computers that are located outside of the LAN or subnet of the WA1003A. I. Configuration page Figure 4-31 Remote Log menu 63