URL/Keyword Add Enter the URL or keyword to be blocked. Add the URL or keyword to the blocked table. Blocked URLs/keywords entries will be listed in the table as shown below. Select an entry using the “Select” checkbox. Delete Selected / Delete All Delete selected or all entries from the table.
III-3-6-2. Access Control Access Control (MAC filtering) can also be configured from III-3-5-4. Access Control. Access Control is a security feature that can help to prevent unauthorized users from connecting to your wireless router. This function allows you to define a list of network devices permitted or denied to connect to the BR-6428nS V3/BR-6228nS V3. Devices are each identified by their unique MAC address or IP address. Specific services can also be allowed/denied for IP addresses.
MAC Filtering: Enable MAC Filtering Client PC MAC Address Computer Name Comment Add Check the box to enable MAC filtering and select whether to “Deny” or “Allow” access for specified MAC address. Enter a MAC address of computer or network device manually without dashes or colons e.g. for MAC address ‘aa-bb-cc-dd-ee-ff’ enter ‘aabbccddeeff’. Select a computer name from the drop-down list and click “<<” to add its MAC address into the “Client PC Mac Address” field.
IP Filtering: Enable IP Filtering Add PC Check the box to enable IP filtering and select whether to “Deny” or “Allow” access for specified IP address. Opens a new window to add a new IP to the list, to deny or allow access/services according to above.
Client PC Enter a description for reference/identification Description of up to 16 alphanumeric characters. Client PC IP address Enter a starting IP address in the left field and the end IP address in the right field to define a range of IP addresses; or enter an IP address in the left field only to define a single IP address. Service Name Various services are listed here with a short description. Check/uncheck the box for each service you wish to select.
III-3-6-3. DMZ A Demilitarized Zone (DMZ) is an isolated area in your local network where private IP addresses are mapped to specified Internet IP addresses, allowing unrestricted access to the private IP addresses but not to the wider local network. You can define a virtual DMZ host here. This is useful for example, if a network client PC cannot run an application properly from behind an NAT firewall, since it opens the client up to unrestricted two-way access.
DMZ entries will be displayed in the table shown below: Delete Selected/ Delete All III-3-6-4. Delete selected or all entries from the table. DoS Denial-of-Service (DoS) is a common form of malicious attack against a network. The router’s firewall can protect against such attacks. If you are not familiar with these functions, it is recommended you keep the default settings.
Ping of Death Specify the frequency of ping of death packets which will trigger the router’s DoS protection function. Discard Ping from Check this box and the router will not answer WAN ping requests from the Internet. Port Scan Intruders use “port scanners” to detect open Internet IP address ports. Check each type of port scan to prevent. Sync Flood Specify the frequency of sync flood packets which will trigger the DoS protection function.
III-3-7. QoS Quality of Service (QoS) is a feature to manage Internet bandwidth efficiently. Some applications require more bandwidth than others to function properly, and QoS allows you to ensure that sufficient bandwidth is available. Minimum or maximum bandwidth can be guaranteed for a specified application. QoS can improve the BR-6428nS V3/BR-6228nS V3’s performance. QoS is recommended to optimize performance for online gaming. III-3-7-1.
Rule Name Bandwidth Enter a name for the QoS rule for reference/identification. Set the bandwidth limits for the QoS rule: (1) (2) (3) 1. Select “Download” or “Upload” for the QoS rule. 2. Enter the bandwidth limit. Local IP Address 3. Select whether the bandwidth is a “Guarantee” (minimum) or “Max” (maximum). Enter the IP address range to which the QoS rule will be applied.
Local Port Range Remote IP Address Remote Port Range Traffic Type Protocol Save Enter the port range to activate the QoS rule. Enter a single port number e.g. 110 or a range of port numbers e.g. 110-120 Enter the remote IP address range which will activate the QoS rule. Enter a starting IP address in the left field and the end IP address in the right field to define a range of IP addresses; or enter an IP address in the left field only to define a single IP address.
III-3-7-2. iQoS iQoS is a more intuitive and automated tool to manage internet bandwidth than manually configuring the settings using QoS. For online gamers or users with bandwidth requirements for audio/video, iQoS is a useful function. iQoS cannot be used in conjunction with QoS and vice-versa. When one is enabled, the other is automatically disabled.
The icons represent the following categories: Internet Browsing P2P/BT Downloads FTP Multimedia Online Gaming The iQoS table is ordered left to right, high to low priority. Click a small icon below the table to insert it into the table, and click a large icon in the table to remove it. All spaces in the priority table must be filled.
III-3-8. Advanced Advanced features of the BR-6428nS V3/BR-6228nS V3 can be configured from the “Advanced” menu. III-3-8-1. Static Routing Static routing is a method of configuring path selection of routers, characterized by the absence of communication between routers regarding the current topology of the network. The opposite of static routing is dynamic routing, sometimes also referred to as adaptive routing. You can configure static routing and manually add routes to the routing table shown below.
Default Gateway Enter the default gateway of the destination network. Enter the hop count (the distance between destination network and this broadband router) here. Enter the interface which leads to destination network. Add the route to the current static routing table. Hop Count Interface Add Static Routing Table entries will be displayed in the table shown below: Delete Selected/ Delete All III-3-8-2. Delete selected or all entries from the table.
Private IP Computer Name Type Port Range Comment Enter the IP address of the computer on the local network. Windows computers on the local network will be listed here – select a computer from the list and click << to automatically add the IP address to the “Private IP” field. Select the type of connection, “TCP”, “UDP” or “Both”. Input the starting port number in the left field, and input the ending port number in the right field.
III-3-8-3. Virtual Server This function allows you to set up an internet service on a local computer, without exposing the local computer to the internet. You can also build various sets of port redirection, to provide various internet services on different local computers via a single internet IP address. Private IP Computer Name Private Port Type Public Port Comment Specify the IP address of the computer on your local network.
Delete Selected/ Delete All III-3-8-4. Delete selected or all entries from the table. 2.4GHz Wireless These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Fragment Threshold RTS Threshold Beacon Interval DTIM Period Data Rate N Data Rate Set the Fragment threshold of the wireless radio. The default value is 2346. Set the RTS threshold of the wireless radio. The default value is 2347.
Channel Width Preamble Type CTS Protect Tx Power WMM Select wireless channel width (bandwidth used by wireless signals from the device) – the recommended value is Auto 20/40MHz. Set the wireless radio preamble type. The default value is “Short Preamble”. Enabling this setting will reduce the chance of radio signal collisions between 802.11b and 802.11g wireless access points. It’s recommended to set this option to “Auto”. Set the power output of the wireless radio. You may not require 100% output power.
III-3-8-5. IGMP IGMP is a communications protocol used to establish multicast group memberships. It allows for a more efficient use of resources and better performance for applications such as IPTV video streaming. IGMP Snooping IGMP Proxy IGMP snooping monitors traffic between hosts and multicast routers to facilitate bandwidth conservation. Select enable or disable. IGMP proxy enables intelligent multicast forwarding based on IGMP snooping information. Select enable or disable.
III-3-8-6. UPnP Universal plug-and-play (UPnP) is a set of networking protocols which enables network devices to communicate and automatically establish working configurations with each other. Select “Enable” or “Disable”.
III-3-9. Administration Various administrative functions can be accessed from the “Administration” menu. III-3-9-1. Time Zone Set Time Zone Time Server Address Daylight Saving Select the time zone of your country or region. The travel router supports NTP (Network Time Protocol) for automatic time and date setup. Input the host name of the IP server manually. If your country/region uses daylight saving time, please check the “Enable Function” box, and select the start and end date.
III-3-9-2. Password You can change the password used to login to the browser-based configuration interface here. It is advised to do so for security purposes. Please make a note of the new password. In the event that you forget the password and are unable to login to the browser based configuration interface, see II-7. Reset to factory default settings for how to reset the device. Current Password New Password Confirmed Password Enter your current password. Enter your new password.
III-3-9-3. Remote Access Check “Enabled” to enable the remote access feature and then enter the appropriate values. Host IP Address Specify the IP address which is allowed remote access. Port Specify a port number (0–65535) used for remote access.
III-3-9-4. Backup/Restore Backup Settings Restore Settings Restore to Factory Default III-3-9-5. Click “Save” to save the current settings on your computer as config.bin file. Click “Browse” to find a previously saved config.bin file and then click “Upload” to replace your current settings. Click “Reset” to restore settings to the factory default. A pop-up window will appear and ask you to confirm and enter your log in details. Enter your username and password and click “Ok”.
III-3-9-6. Restart In the event that the router malfunctions or is not responding, then it is recommended that you restart the device. III-3-9-7. Logs You can view the system log and security log here. Use the drop down menu in the top-right corner to select which log to view.
Save Clear Refresh III-3-9-8. Click “Save” to save the log on your computer as .txt file. Click “Clear” to clear/erase the existing log. Click “Refresh” to refresh the log and update any activity. Active DHCP Client Information about active DHCP clients is shown in the table, which displays the DHCP server assigned IP address, MAC address and time expired for each computer or device on the local network. III-3-9-9. Statistics Displays sent and received packet network statistics.
IV. Appendix IV-1. Configuring your IP address For first time access to the URL http://Edimax.Setup please ensure your computer is set to use a dynamic IP address. This means your computer can obtain an IP address automatically from a DHCP server. You can check if your computer is set to use a dynamic IP address by following IV-1-1. How to check that your computer uses a dynamic IP address. Static IP users can also temporarily modify your computer’s IP address to be in the same IP address subnet e.g. 192.
IV-1-1. How to check that your computer uses a dynamic IP address Please follow the instructions appropriate for your operating system. IV-1-1-1. Windows XP 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. Double-click the “Network and Internet Connections” icon, click “Network Connections”, and then double-click “Local Area Connection”. The “Local Area Connection Status” window will then appear, click “Properties”. 2.
106
IV-1-1-2. Windows Vista 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. Click “View Network Status and Tasks”, then click “Manage Network Connections”. Right-click “Local Area Network”, then select “Properties”. The “Local Area Connection Properties” window will then appear, select “Internet Protocol Version 4 (TCP / IPv4)”, and then click “Properties”. 2.
108
IV-1-1-3. Windows 7 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. 2. Under “Network and Internet” click “View network status and tasks”. 3. Click “Local Area Connection”.
4. Click “Properties”. 5. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
6. Select “Obtain an IP address automatically” and “Obtain DNS server address automatically” should be selected.
IV-1-1-4. Windows 8 1. From the Windows 8 Start screen, you need to switch to desktop mode. Move your curser to the bottom left of the screen and click. 2. In desktop mode, click the File Explorer icon in the bottom left of the screen, as shown below. 3. Right click “Network” and then select “Properties”.
4. 5. In the window that opens, select “Change adapter settings” from the left side. Choose your connection and right click, then select “Properties”.
6. 7. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”. Select “Obtain an IP address automatically” and “Obtain DNS server address automatically” should be selected.
115
IV-1-1-5. Mac OS 1. 2. Have your Macintosh computer operate as usual, and click on “System Preferences”. In System Preferences, click on “Network”. 3. Click on “Wi-Fi” in the left panel and then click “Advanced” in the lower right corner. 4. Select “TCP/IP” from the top menu and “Using DHCP” in the drop down menu labeled “Configure IPv4” should be selected.
117
IV-1-2. How to modify the IP address of your computer Please follow the instructions appropriate for your operating system. In the following examples we use the IP address 192.168.2.10 though you can use any IP address in the range 192.168.2.x (x = 3 – 254) in order to access iQ Setup/browser based configuration interface. Please make a note of your static IP before you change it. IV-1-2-1. Windows XP 1.
Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.2.1 Click ‘OK’ when finished.
IV-1-2-2. Windows Vista 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. Click “View Network Status and Tasks”, then click “Manage Network Connections”. Right-click “Local Area Network”, then select “Properties”. The “Local Area Connection Properties” window will then appear, select “Internet Protocol Version 4 (TCP / IPv4)”, and then click “Properties”. 2.
IV-1-2-3. Windows 7 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. 2. Under “Network and Internet” click “View network status and tasks”. 3.Click “Local Area Connection”.
4. Click “Properties”.
5.Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”. 6. Select “Use the following IP address” and “Use the following DNS server addresses”, then input the following values: Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.2.1 Click ‘OK’ when finished.
IV-1-2-4. Windows 8 1. From the Windows 8 Start screen, you need to switch to desktop mode. Move your curser to the bottom left of the screen and click. 2. In desktop mode, click the File Explorer icon in the bottom left of the screen, as shown below.
3. 4. Right click “Network” and then select “Properties”. In the window that opens, select “Change adapter settings” from the left side.
5. Choose your connection and right click, then select “Properties”. 6. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
7. Select “Use the following IP address” and “Use the following DNS server addresses”, then input the following values: Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.2.1 Click ‘OK’ when finished.
IV-1-2-5. Mac 1. 2. Have your Macintosh computer operate as usual, and click on “System Preferences” In System Preferences, click on “Network”. 3. Click on “Wi-Fi” in the left panel and then click “Advanced” in the lower right corner. 4. Select “TCP/IP” from the top menu and select “Manually” from the drop down menu labeled “Configure IPv4”, then click “OK”.
Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. 5. In the “IPv4 Address” and “Subnet Mask” field enter IP address 192.168.2.10 and subnet mask 255.255.255.0. Click on “OK”.
6. Click “Apply” to save the changes.
IV-1-3. How to Find Your Network Security Key To find your network security key, please follow the instructions appropriate for your operating system. If you are using Windows XP or earlier, please contact your ISP or router manufacturer to find your network security key. IV-1-3-1. Windows 7 & Vista 1. Open “Control Panel” and click on “Network and Internet” in the top menu. 2. Click on “View network status and tasks” which is under the heading “Network and Sharing Center”. 3.
4. You should see the profile of your Wi-Fi network in the list. Right click on your Wi-Fi network and then click on “Properties”. 5.Click on the “Security” tab, and then check the box labeled “Show characters”. This will show your network security key. Click the “Cancel” button to close the window.
IV-1-3-2. Mac 1. Open a new Finder window, and select “Applications” from the menu on the left side. Open the folder labeled “Utilities” and then open the application “Keychain Access”. 2. Select “Passwords” from the sub-menu labeled “Category” on the left side, as shown below. Then search the list in the main panel for the SSID of your network. In this example, the SSID is “EdimaxWireless” – though your SSID will be unique to your network.
3. Double click the SSID of your network and you will see the following window. 4. Check the box labeled “Show password” and you will be asked to enter your administrative password, which you use to log into your Mac. Enter your password and click “Allow”.
Your network security password will now be displayed in the field next to the box labeled “Show password”. In the example below, the network security password is “edimax1234”. Please make a note of your network security password.
IV-1-4. How to Find Your Router’s IP Address To find your router’s IP address, please follow the instructions appropriate for your operating system. IV-1-4-1. Windows XP, Vista & 7 1. Go to “Start”, select “Run” and type “cmd”, then press Enter or click “OK”. 2. A new window will open, type “ipconfig” and press Enter.
3. Your router’s IP address will be displayed next to “Default Gateway”.
IV-1-4-2. Windows 8 1. From the Windows 8 Start screen, move your curser to the top right corner of the screen to display the Charms bar. 2. Click “Search” and enter “cmd” into the search bar. Click the “Command Prompt” app which be displayed on the left side.
3. A new window will open, type “ipconfig” and press Enter.
4.Your router’s IP address will be displayed next to “Default Gateway”.
IV-1-4-3. Mac 1. Launch “System Preferences” and click on “Network”. 2. If you are using an Ethernet cable to connect to your network, your router’s IP address will be displayed next to “Router”. 3. If you are using Wi-Fi, click “Wi-Fi” in the left panel, and then “Advanced” in the bottom right corner.
4. Click the “TCP/IP” tab and your router’s IP address will be displayed next to “Router”.
IV-2. Connecting to a Wi-Fi network For help connecting to your device’s Edimax.Setup SSID for initial setup, or to connect to your device’s new Wi-Fi network (SSID) after setup is complete, follow the guide below: Below is an example of how to connect using Windows Vista – the process may vary slightly for other versions of Windows. 1. Click the network icon ( to a network”. 2. Search for the SSID of your BR-6428nS V3/BR-6228nS V3 and then click “Connect”.
3. After correctly entering your password, you will be successfully connected to the BR-6428nS V3/BR-6228nS V3’s wireless network.
IV-3. Troubleshooting If you are experiencing problems with your BR-6428nS V3/BR-6228nS V3, please check below before contacting your dealer of purchase for help. If you are experiencing problems immediately after a firmware upgrade, please contact your dealer of purchase for help. 1. In range extender mode, how do I connect to a network which has a hidden SSID? a. During iQ Setup select “Setup extender manually” as shown below.
2. I can’t access the Internet. a. Ensure that all cables are connected properly. Try a different Ethernet cable. b. Switch your BR-6428nS V3/BR-6228nS V3 and network device off and back on again. Check the LED status of the BR-6428nS V3/BR-6228nS V3. c. Check if you can access the web based configuration interface. If not, please ensure your computer is set to use a dynamic IP address. d.
Router Login Enter this URL in a web browser to run iQ Setup or configure advanced settings. You must be connected to the device by Wi-Fi or Ethernet cable. Username/Password This is the default username and password to access the browser based configuration interface when you go to the “Router Login” URL (above). Wi-Fi Network This is the default Wi-Fi network name for the Name device. Search for this name (SSID) and connect to it in order to access the “Router Login” URL (above).
7. Do the WAN and LAN ports work the same when the device is in different modes? No, the WAN and LAN ports have slightly different functions depending on the operating mode of the device. a. In Wi-Fi router mode, the WAN port is for a direct connection to your xDSL modem. The LAN ports are for wired network clients. b. In access point mode, the WAN port is not functional. Connect your existing router to the device’s LAN port, and the other LAN ports can connect wired network clients. c.
IV-4. Glossary Default Gateway (Wireless bridge): Every non-access point IP device needs to configure a default gateway’s IP address. When the device sends out an IP packet, if the destination is not on the same network, the device has to send the packet to its default gateway, which will then send it out towards the destination. DHCP: Dynamic Host Configuration Protocol. This protocol automatically gives every computer on your home network an IP address.
A network mask is also a 32-bit binary pattern, and consists of consecutive leading 1’s followed by consecutive trailing 0’s, such as 11111111.11111111.11111111.00000000. Therefore sometimes a network mask can also be described simply as “x” number of leading 1’s. When both are represented side by side in their binary forms, all bits in the IP address that correspond to 1’s in the network mask become part of the IP network address, and the remaining bits correspond to the host ID.
Application Protocol Port Number Telnet TCP 23 FTP TCP 21 SMTP TCP 25 POP3 TCP 110 H.323 TCP 1720 SNMP UCP 161 SNMP Trap UDP 162 HTTP TCP 80 PPTP TCP 1723 PC Anywhere TCP 5631 PC Anywhere UDP 5632 Access point: A access point is an intelligent network device that forwards packets between different networks based on network layer address information such as IP addresses. Subnet Mask: A subnet mask, which may be a part of the TCP/IP information provided by your ISP, is a set of four numbers (e.g. 255.255.255.
COPYRIGHT Copyright Edimax Technology Co., Ltd. all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission from Edimax Technology Co., Ltd. Edimax Technology Co., Ltd.
FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
EU Declaration of Conformity English: This equipment is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC, 2009/125/EC. Français: Cet équipement est conforme aux exigences essentielles et autres dispositions de la directive 1999/5/CE, 2009/125/CE. Čeština: Toto zařízení je v souladu se základními požadavky a ostatními příslušnými ustanoveními směrnic 1999/5/ES, 2009/125/ES.
Declaration of Conformity We, Edimax Technology Co., Ltd., declare under our sole responsibility, that the equipment described below complies with the requirements of the European R&TTE directives. Equipment: Model No.: Equipment: Model No.: 5-in-1 N300 Wi-Fi Router, Access Point & Range Extender BR-6428nS V3 5-in-1 N150 Wi-Fi Router, Access Point & Range Extender BR-6228nS V3 The following European standards for essential requirements have been followed: AN/NZS CISPR 22: 2009+A1:2010 EN 300 328 V1.8.
156
