Edimax Gemini Home Wi-Fi Roaming Router/Access Point RG21S/RA21S User Manual 02-2017 / v1.
CONTENTS I. Product Information .............................................................................. 1 I-1. I-2. I-3. I-4. I-5. Package Contents ......................................................................................................1 LED Status ..................................................................................................................2 Back Panel .................................................................................................................
III-3-5. III-3-5-1. III-3-5-2. III-3-5-2-1. III-3-5-2-2. III-3-5-2-3. III-3-5-2-4. III-3-5-3. III-3-6. III-3-7. III-3-7-1. III-3-7-2. III-3-7-3. III-3-8. III-3-8-1. III-3-9. III-3-9-1. III-3-9-2. III-3-9-3. III-3-9-4. III-3-9-5. III-3-9-6. III-3-9-7. III-3-9-8. III-3-10. III-3-10-1. III-3-10-2. III-3-10-3. III-3-10-4. III-3-10-5. III-3-10-6. III-3-10-7. III-3-10-8. III-3-10-9. 2.4GHz Wireless & 5GHz Wireless ............................................................................56 Basic ..............
IV-1-1-5. IV-1-2. IV-1-2-1. IV-1-2-2. IV-1-2-3. IV-1-2-4. IV-1-2-5. IV-1-3. IV-1-3-1. IV-1-3-2. IV-1-4. IV-1-4-1. IV-1-4-2. IV-1-4-3. IV-2. Mac OS .................................................................................................................. 108 How to modify the IP address of your computer .................................................... 110 Windows XP ........................................................................................................... 110 Windows Vista .....
I. Product Information I-1.
I-2. LED Status LED Power Color Status Red Description On Internet is connected. Off The device is off.
I-3.
I-4. Safety Information In order to ensure the safe operation of the device and its users, please read and act in accordance with the following safety instructions. 1. The device is designed for indoor use only; do not place it outdoors. 2. Do not place the device in or near hot/humid places, such as a kitchen or bathroom. 3. Do not pull any connected cable with force; carefully disconnect it from the RG21S/RA21S. 4. Handle the device with care. Accidental damage will void the warranty of the device. 5.
I-5. Reset to Factory Default Settings If you experience problems with your RG21S/RA21S, you can reset the device back to its factory settings. This resets all settings back to default. 1. Press and hold the WPS/Reset button found on the rear base of the product for at least 10 seconds. 2. Release the button when the LED is flashing blue. 3. Wait for the RG21S/RA21S to restart.
II. Installation 1. Plug the included power adapter into the device’s 12V DC power port and the other end into an electrical socket. 2. Check that the power LED displays on. 3. Use a Wi-Fi device (e.g. computer, tablet, smartphone) to search for a Wi-Fi network with the SSID “edimax.setup” or “edimax.setup5G” and connect to it. iOS 4 or Android 4 and above are required for setup on a smartphone or tablet.
4. Open a web browser and if you do not automatically arrive at the “Get Started” screen shown below, enter the URL http://edimax.setup and click “Get Started” to begin the setup process. If you cannot access http://edimax.setup, please make sure your computer is set to use a dynamic IP address. 5. Choose if you want to use your RG21S/RA21S in its default Wi-Fi router mode or as an access point.
Wi-Fi Router Mode Access Point Mode The device connects to your modem and provides 2.4GHz and/or 5GHz Internet (wireless and Ethernet) access for your network devices. The device connects to an existing router via Ethernet cable and provides 2.4GHz and/or 5GHz Internet (wireless and Ethernet) access for your network devices. 6. Follow the on-screen instructions to complete setup. Refer to the following chapters if you need more help.
II-1. Wi-Fi Router Mode 1. Select whether to use the iQ Setup wizard (recommended) to detect your Internet connection type, or enter the settings manually. Manual configuration is only recommended for advanced users. 2. Connect the blue Internet port of your device to the LAN port of your modem using an Ethernet cable, and then click “Next”.
3. Please wait a moment while the device tests the connection. 4. Click “Next” to continue and configure the device’s wireless network. 5. Enter a name and password for your 2.4GHz & 5GHz wireless networks, then click “Next” to continue.
6. A summary of your configuration will be displayed, as shown below. Check that all of the details are correct and then click “Next” to proceed. If you wish to backup the device’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file.
7. 8. Please wait while the device applies your settings. A final congratulations screen will indicate that setup is complete. You can now connect to the device’s new SSID(s) which are shown on the screen then close the browser window.
9. The RG21S/RA21S is working and ready for use. Refer to IV-2. Connecting to a Wi-Fi network if you require more guidance.
II-2. Access Point Mode 1. 2. Select “Access Point” from the top menu and click “Next”. Connect the network port of your RG21S/RA21S to the LAN port of your existing router using an Ethernet cable, then click “Next”.
3. Select “Obtain an IP address automatically” or “Use the following IP address” for your RG21S/RA21S. If you are using a static IP, enter the IP address, subnet mask and default gateway. Click “Next” to proceed to the next step. “Obtain an IP address automatically” is the recommended setting for most users. For more guidance on static IP addresses, please refer to IV-1. Configuring your IP address. 4. Enter a name and password for your 2.4GHz & 5GHz wireless networks, then click “Next” to continue.
5. A summary of your configuration will be displayed, as shown below. Check that all of the details are correct and then click “Next” to proceed. If you wish to backup the device’s settings, click “Backup this configuration” to open a new window and save your current configuration to a .txt file. 6. Please wait a moment until the RG21S/RA21S is ready.
8. A final congratulations screen will indicate that setup is complete. You can now connect to the device’s new SSID(s) which are shown on the screen then close the browser window. 9. The RG21S/RA21S is working and ready for use. Refer to IV-2. Connecting to a Wi-Fi network if you require more guidance.
II-3. Wi-Fi Roaming Your RG21S/RA21S supports Wi-Fi roaming. This means if you have other EDIMAX Wi-Fi products which support roaming (e.g. access point, extender) then your Wi-Fi devices (smartphones, tablets etc.) will automatically connect to the best available Wi-Fi signal as you move around or “roam” between them in your home. To setup other EDIMAX Wi-Fi roaming range extender, refer to their included documentation for instructions.
Browser Based Configuration Interface After you have setup the RG21S/RA21S as detailed in II. Installation or the included Quick Installation Guide, you can use the browser based configuration interface to configure advanced settings. Please ensure that your computer is set to use a dynamic IP address. Refer to IV-1. Configuring your IP address for more information. III-1. Login 1. To access the browser based configuration interface enter http://edimax.
3. You will arrive at the “Status” screen. Use the menu down the left side to navigate.
III-2. Save Settings 1. After you configure any settings, click the “Apply” button at the bottom of the screen to save your changes. The device needs to restart in order to bring any changes into effect. 2. Wait a few moments for the device to save the changes and restart with the changes in effect.
III-3. Main Menu The main menu displays different options depending on your device’s operating mode.
III-3-1. Status The “Status” menu displays basic system information about the device, arranged into categories. Screenshots displayed are examples.The information shown on your screen will vary depending on your configuration. Model Uptime Current Time Hardware Version Boot Code Version Runtime Code Version Displays the model number. Displays the total time since the device was turned on. Displays the current device system time. Displays the hardware version for reference and support purposes.
III-3-1-1. Device 2.4G and 5G wireless and LAN status information is summarized in the device page. Mode Channel ESSID Displays the mode. Displays the channel number the specified wireless frequency is using for broadcast.
Security BSSID IP Address Subnet Mask DHCP Server MAC Address wireless network name. Displays the encryption type for the specified SSID. Displays the BSSID which is a unique identifier for the device in the network, usually the MAC address. Displays the LAN IP address of this device. Displays the subnet mask of this device. The default value is 255.255.255.0 DHCP server is enabled or disabled. Displays the MAC Address of this device. III-3-1-2. IPv4 Displays basic IPv4 related status information.
III-3-1-3. IPv6 IPv6 standard is not yet widely available. Contact your ISP to check if your Internet supports IPv6. IPv6 Connection Type LAN IPv6 Link-Local Address Displays the WAN IPv6 connection type. Displays the LAN IPv6 link-local IP address.
III-3-2. Setup Wizard You can run the setup wizard again to reconfigure the basic settings of the device or switch the device to a different operating mode. Click “Run Wizard” to begin. 1. Follow the on-screen instructions to back up your current settings and then reset the device back to its factory default settings. 2. After the device has reset you will see the screen below. Close your browser and open it again. 3. Follow the on-screen wizard to setup your device in a different mode. Refer to II.
III-3-3. Internet The “Internet” menu provides access to WAN IPv4, WAN IPv6, DDNS and VPN server settings. Click on an item from the submenu to view and/or configure the settings. III-3-3-1. IPv4 Select a Login Method (WAN connection type) and configure the settings. If you are unsure about your login method/connection type, contact your ISP. III-3-3-1-1. Static IP Select “Static IP” if your ISP provides Internet access via a fixed IP address.
Fixed IP Address Subnet Mask Default Gateway Primary DNS Secondary DNS (optional) Input the IP address assigned by your ISP here. Input the subnet mask assigned by your ISP here. Input the default gateway assigned by your ISP here. Some ISPs may call this “Default Route”. Enter the primary DNS address assigned by your ISP here. Enter the secondary DNS address assigned by your ISP here.
III-3-3-1-2. Dynamic IP Select “Dynamic IP”. If your Internet service provider assigns IP address automatically using DHCP (Dynamic Host Configuration Protocol). Host Name MAC Address Enter the host name of your computer. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address.
III-3-3-1-3. PPPoE Select “PPPoE” if your ISP is providing you Internet access via PPPoE (Point-to-Point Protocol over Ethernet). Username Password MAC Address Service Name MTU Connection Type Enter the user name assigned by your ISP here. Enter the password assigned by your ISP here. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here.
Idle Time Connect when you initiate an Internet connection. 3. “Manual Connect/Disconnect”: Connect/disconnect manually using the “Connect” and “Disconnect” buttons. Specify the amount of time the router waits before shutting down an idle connection. Only available when “Connect on Demand” (above) is selected.
III-3-3-1-4. PPTP Select “PPTP” if your ISP is providing you Internet access via PPTP (Point-to-Point Tunneling Protocol). Then select “Obtain an IP address automatically” or “Use the following IP address” depending on your ISP.
Host Name MAC Address IP Address Subnet Mask Default Gateway Address Username Password PPTP Gateway Connection ID MTU Connection Type Idle Time Enter the host name of your computer here If required. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address. Input the IP address assigned by your ISP here.
III-3-3-1-5. L2TP Select “L2TP” if your ISP is providing you Internet access via L2TP (Layer 2 Tunneling Protocol). Host Name MAC Address IP Address Subnet Mask Default Gateway Enter the host name of your computer here If required. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here. If you are connecting the router to a computer, press “Clone Mac” to automatically enter your computer’s MAC address.
Username Password L2TP Gateway MTU Connection Type Idle Time here. Some ISPs may call this “Default Route”. Input the user name assigned by your ISP here. Input the password assigned by your ISP here. Input the L2TP gateway assigned by your ISP here. Enter the maximum transmission unit (MTU) value of your network connection. The default value is 1392. Specify a connection type: 1. “Keep Connection”: Connected all the time. 2.
III-3-3-1-6. Russia L2TP (Dual-Access) Select “L2TP” if your ISP is providing you Internet access via L2TP (Layer 2 Tunneling Protocol). Multi WAN Bridge Port Host Name MAC Address Check which LAN port to bridge for multi-WAN. Enter the host name of your computer here If required. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here.
IP Address Subnet Mask Default Gateway Username Password L2TP Gateway MTU Connection Type Idle Time automatically enter your computer’s MAC address. Input the IP address assigned by your ISP here. Input the subnet mask assigned by your ISP here. Input the default gateway assigned by your ISP here. Some ISPs may call this “Default Route”. Input the user name assigned by your ISP here. Input the password assigned by your ISP here. Input the L2TP gateway assigned by your ISP here.
III-3-3-1-7. DS-Lite Dual-stack lite (DS-Lite) is a technology that enables Internet service providers to move to an IPv6 network while simultaneously handling IPv4 address depletion. The DS-Lite architecture uses IPv6-only links between the provider and the user while maintaining the IPv4 (or dual-stack) hosts in the user network. Refer to your ISP or network administrator for help configuring DS-Lite.
III-3-3-2. IPv6 Select a Login Method (WAN connection type) and configure the settings. If you are unsure about your login method/connection type, contact your ISP. Check with your ISP for correct IPv6 configuration.
III-3-3-2-1. Static IP Select “Static IP” if your ISP provides Internet access via a fixed IP address. Your ISP will provide you with such information as IP address, subnet mask, gateway address, and DNS address. Check with your ISP for correct IPv6 configuration. Use Link-Local Address IPv6 Address Check the box to use a link-local address. Input the IPv6 address assigned by your ISP here. Subnet Prefix Length Specify the prefix length for the subnet.
Address LAN IPv6 Address LAN IPv6 Link-Local Address IPv6 Auto Address Allocation Auto-configuration Type Router Advertisement Lifetime your ISP here. Enter the LAN IPv6 address. If using link-local IPv6 address, it’s displayed here. Enable or disable auto address allocation for IPv6. Select your auto-configuration type Select your auto-configuration type. Stateless: DNS server information is received from DHCPv6 server but address is generated separately.
III-3-3-2-2. PPPoE Select “PPPoE” if your ISP is providing you Internet access via PPPoE (Point-to-Point Protocol over Ethernet). Username Password MAC Address Enter the user name assigned by your ISP here. Enter the password assigned by your ISP here. For some applications, you may need to designate a specific MAC address for the router. Please enter the MAC address here.
your computer’s MAC address. Service Name MTU Connection Type Idle Time Automatic DNS Address Primary IPv6 DNS Address Secondary IPv6 DNS Address Enable DHCP-PD LAN IPv6 Address LAN IPv6 Link-Local Address IPv6 Auto Address Allocation Auto-configuration Type Router Give this Internet service a name (optional). Enter the maximum transmission unit (MTU) value of your network connection. The default value is 1392. Specify a connection type: 4. “Keep Connection”: Connected all the time. 5.
Advertisement Lifetime III-3-3-2-3. the default router. 0 tells the host this router should not be used as the default. Auto-configuration Auto-configuration allow various devices attached to an IPv6 network to connect to the Internet using Stateless Auto-configuration without requiring intermediate IP support in the form of a DHCP server.
Auto-configuration Type Router Advertisement Lifetime Select your auto-configuration type. Stateless: DNS server information is received from DHCPv6 server but address is generated separately. Stateful: DNS server information and address are received from DHCPv6 server. Time in seconds this router should be used as the default router. 0 tells the host this router should not be used as the default.
III-3-3-2-4. 6rd 6rd facilitates rapid deployment of IPv6 across ISP's IPv4 infrastructures. 6rd Configuration 6rd IPv6 Prefix IPv4 Address IPv6 Prefix Arrange Tunnel Link-Local Address 6rd BR IPv4 Address Primary IPv6 DNS Address Secondary IPv6 DNS Select to configure 6rd with DHCPv4 server or manually. When manual is selected, enter the information in the fields below. Enter the IPv6 prefix. Specify the IPv4 address and mask length. Displays the prefix arrangement. Displays link-local tunnel address.
Address LAN IPv6 Address LAN IPv6 Link-Local Address IPv6 Auto Address Allocation Auto-configuration Type Router Advertisement Lifetime your ISP here. Enter the LAN IPv6 address. If using link-local IPv6 address, it’s displayed here. Enable or disable auto address allocation for IPv6. Select your auto-configuration type Select your auto-configuration type. Stateless: DNS server information is received from DHCPv6 server but address is generated separately.
III-3-3-2-5. Link-local A link-local address is a network address for communications only within the broadcast domain or network segment that the host is connected to. LAN IPv6 Link-Local Address If using link-local IPv6 address, it’s displayed here.
III-3-3-3. DDNS Dynamic DNS (DDNS) is a service which provides a hostname-to-IP service for dynamic IP users. The changing nature of dynamic IPs means that it can be difficult to access a service provided by a dynamic IP user; a DDNS service though can map such dynamic IP addresses to a fixed hostname, for easier access. The router supports several DDNS service providers, for more details and to register for a DDNS account please visit the DDNS providers website(s), examples of which are listed below.
III-3-3-4. VPN Server A VPN is a virtual private network which you can connect to remotely. VPNs are secure and encrypted. Your router has a built-in VPN server which you can configure and access on your network devices, including smartphones, tablets and computers. 1. 2. Enable VPN server. Export your VPN server configuration file. You can open this file on your network device (smartphone, tablet, computer) using VPN software/app to automatically connect to your VPN on your device.
will configure your network device to use the VPN for all Internet traffic. “Send Only Home Network Traffic over VPN Server” will configure your network device to access the Internet as usual but use the VPN to access your home (router) network. The 2nd option is ideal if you only wish to use the VPN for remote access to your home network. The 1st option will encrypt all Internet traffic through the VPN. 3. Setup a login account for your VPN. This is required to access your VPN on your network device. 4.
III-3-4. LAN You can configure your Local Area Network (LAN) on this page. You can enable the router to dynamically allocate IP addresses to your LAN clients, and you can modify the IP address of the device. The device’s default IP address is 192.168.2.1. You can access the browser based configuration interface using the device’s IP address instead of using the URL http://edimax.setup. IP Address Subnet Mask 802.1d Spanning Tree Specify the IP address here.
DHCP Server Lease Time Start IP End IP DNS Primary DNS Address Secondary DNS Address Enable or disable the DHCP server. Select a lease time for the DHCP leases here. The DHCP client will obtain a new IP address after the period expires. Enter the start IP address for the DHCP server’s IP address leases. Enter the end IP address for the DHCP server’s IP address leases. Select whether to get DNS addresses dynamically from ISP or manually enter DNS addresses.
55
III-3-5. 2.4GHz Wireless & 5GHz Wireless The “2.4GHz WiFi” & “5GHz WiFi” menu allows you to configure SSID and security settings for your Wi-Fi network along with a guest Wi-Fi network. WPS, access control and scheduling functions can also be managed from here. You can quickly enable/disable the 2.4GHz or 5GHz Wi-Fi from this screen. In Access Point mode, the Guest SSID feature is not available.
III-3-5-1. Basic The “Basic” screen displays settings for your 2.4GHz or 5GHz Wi-Fi networks. Mode Band Guest Network Guest IP Address Guest Subnet Mask Guest Lease Time Guest Start IP Guest End IP Keep the default “AP” value for the device to act as a standard wireless access point. Displays the wireless standard used for the RG21S/RA21S’s “2.4GHz (B+G+N)” means that 802.11b, 802.11g, and 802.11n wireless clients can connect to the RG21S/RA21S.
SSID Guest SSID Channel Number range for guest IP addresses. This is the name of your Wi-Fi network for identification, also sometimes referred to as “SSID”. The SSID can consist of any combination of up to 32 alphanumerical characters. This is the name of your guest Wi-Fi network for identification, also sometimes referred to as “SSID”. The SSID can consist of any combination of up to 32 alphanumerical characters. Select a wireless radio channel or use the default “Auto” setting from the drop-down menu.
WMM Encryption will not be visible as an available Wi-Fi network to clients – clients must manually enter the SSID in order to connect. A hidden SSID is typically more secure than a visible SSID. WMM (Wi-Fi Multimedia) technology can improve the performance of certain network applications, such as audio/video streaming, network telephony (VoIP) and others.
III-3-5-2-1. Disable Encryption is disabled and no password/key is required to connect to the RG21S/RA21S. Disabling wireless encryption is not recommended. When disabled, anybody within range can connect to your device’s SSID. Enable 802.1x Authentication Check the box to enable the 802.1x authentication. A RADIUS server is required to perform 802.1x authentication: enter the RADIUS server’s information in the relevant fields (below).
III-3-5-2-2. WEP WEP (Wired Equivalent Privacy) is a basic encryption type. For a higher level of security consider using WPA encryption. Authentication Type Key Length Key Type Default Key Encryption Key 1 4 Enable 802.1x Authentication Open System, Shared Key, Auto authentication types are available. Select 64-bit or 128-bit. 128-bit is more secure than 64-bit. Choose from “ASCII” (any alphanumerical character 0-9, a-z and A-Z) or “Hex” (any characters from 0-9, a-f and A-F).
III-3-5-2-3. WPA Pre-Shared Key WPA pre-shared key is the recommended and most secure encryption type. WPA Type Pre-shared Key Type Pre-shared Key Select from WPA (TKIP), WPA2 (AES) or WPA2 Mixed. WPA2 (AES) is safer than WPA (TKIP), but not supported by all wireless clients. Please make sure your wireless client supports your selection. WPA2 (AES) is recommended followed by WPA2 Mixed if your client does not support WPA2 (AES).
III-3-5-2-4. WPA Radius WPA RADIUS is a combination of WPA encryption and RADIUS user authentication. If you have a RADIUS authentication server, you can authenticate the identity of every wireless client against a user database. WPA Type Select from WPA (TKIP), WPA2 (AES) or WPA2 Mixed. WPA2 (AES) is safer than WPA (TKIP), but not supported by all wireless clients. Please make sure your wireless client supports your selection.
III-3-5-3. WPS Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. WPS can be activated on compatible devices by pushing a WPS button on the device or from within the device’s firmware/configuration interface. When WPS is activated in the correct manner and at the correct time for two compatible devices, they will automatically connect. PIN code WPS includes the use of a PIN code between the two devices for verification.
Button WPS via PIN access point. WPS will be active for 2 minutes. Enter the wireless client’s PIN code here and click “Start to Process” to activate PIN code WPS. Refer to your wireless client’s documentation if you are unsure of its PIN code.
III-3-6. Schedule The schedule feature allows you to automate the wireless network for specified times. Check/uncheck the box “Enable Schedule” to enable/disable the wireless scheduling function. The RG21S/RA21S must have time & date settings initially set to use scheduling. Wireless scheduling can save energy and increase the security of your network. 1. Check Enable and use the Select, Add, Edit or Delete checkboxes to select and modify schedule(s). 2.
3.Remember to Apply your changes and make sure Enable is checked.
III-3-7. Firewall The “Firewall” menu provides access to access control, DMZ and DoS functions to improve the security of your wireless network. Enable or Disable Firewall Module Function Enable or disable the Stateful Packet Inspection (SPI) firewall. III-3-7-1. Access Access Control is a security feature that can help to prevent unauthorized users from connecting to your wireless router. This function allows you to define a list of network devices permitted or denied to connect to the RG21S/RA21S.
69
MAC Filtering: Enable MAC Filtering Client PC MAC Address Comment Add Check the box to enable MAC filtering and select whether to “Deny” or “Allow” access for specified MAC address. Enter a MAC address of computer or network device manually without dashes or colons e.g. for MAC address ‘aa-bb-cc-dd-ee-ff’ enter ‘aabbccddeeff’. Enter a comment for reference/identification consisting of up to 16 alphanumerical characters. Click “Add” to add the MAC address to the MAC address filtering table.
Client PC Enter a description for reference/identification Description of up to 16 alphanumeric characters.
Service Name Protocol Port Range Add range of IP addresses; or enter an IP address in the left field only to define a single IP address. Various services are listed here with a short description. Check/uncheck the box for each service you wish to select. Select protocol “TCP” or “UDP” or “Both” for a service not included in the “Client PC Service” list. Enter the port range for the service not included in the “Client PC Service” list. Enter a single port number e.g. 110, a range of port numbers e.g.
III-3-7-2. DMZ A Demilitarized Zone (DMZ) is an isolated area in your local network where private IP addresses are mapped to specified Internet IP addresses, allowing unrestricted access to the private IP addresses but not to the wider local network. You can define a virtual DMZ host here. This is useful for example, if a network client PC cannot run an application properly from behind an NAT firewall, since it opens the client up to unrestricted two-way access.
DMZ Table”. DMZ entries will be displayed in the table shown below: Delete Selected/ Delete All Delete selected or all entries from the table. III-3-7-3. DoS Denial-of-Service (DoS) is a common form of malicious attack against a network. The router’s firewall can protect against such attacks. If you are not familiar with these functions, it is recommended you keep the default settings.
Ping of Death Specify the frequency of ping of death packets which will trigger the router’s DoS protection function. Discard Ping from Check this box and the router will not answer WAN ping requests from the Internet. Port Scan Intruders use “port scanners” to detect open Internet IP address ports. Check each type of port scan to prevent. Sync Flood Specify the frequency of sync flood packets which will trigger the DoS protection function.
III-3-8. QoS Quality of Service (QoS) is a feature to manage Internet bandwidth efficiently. Some applications require more bandwidth than others to function properly, and QoS allows you to ensure that sufficient bandwidth is available. Minimum or maximum bandwidth can be guaranteed for a specified application. QoS can improve the RG21S/RA21S’s performance. QoS is recommended to optimize performance for online gaming. III-3-8-1. QoS Check/uncheck the box “Enable QoS” to enable/disable the QoS function.
Rule Name Bandwidth Enter a name for the QoS rule for reference/identification. Set the bandwidth limits for the QoS rule: (1) (2) (3) 1. Select “Download” or “Upload” for the QoS rule. 2. Enter the bandwidth limit. Local IP Address Local Port Range 3. Select whether the bandwidth is a “Guarantee” (minimum) or “Max” (maximum). Enter the IP address range to which the QoS rule will be applied.
Remote IP Address Remote Port Range Traffic Type Protocol Save Enter the remote IP address range which will activate the QoS rule. Enter a starting IP address in the left field and the end IP address in the right field to define a range of IP addresses; or enter an IP address in the left field only to define a single IP address. Enter the remote port range to activate the QoS rule. Enter a single port number e.g. 110 or a range of port numbers e.g.
III-3-9. Advanced Advanced features of the RG21S/RA21S can be configured from the “Advanced” menu. III-3-9-1. Static Routing Static routing is a method of configuring path selection of routers, characterized by the absence of communication between routers regarding the current topology of the network. The opposite of static routing is dynamic routing, sometimes also referred to as adaptive routing. You can configure static routing and manually add routes to the routing table shown below.
Enable Static Routing Check/uncheck the box to enable/disable static routing. Destination LAN IP Enter the destination network’s IP address. Subnet Mask Enter the subnet mask of the destination network. Default Gateway Enter the default gateway of the destination network. Metric Enter the hop count (the distance between destination network and this broadband router) here. Interface Enter the interface which leads to destination network. Add Add the route to the current static routing table.
III-3-9-2. Port Forwarding This function allows you to redirect a single port or consecutive ports of an Internet IP address to the same port of a local IP address. The port number(s) of the Internet IP address and local IP address must be the same. If the port number of the Internet IP address and local IP address is different, please use the “Virtual Server” function instead. Local IP Type Port Range Comment Enter the IP address of the computer on the local network.
III-3-9-3. Virtual Server This function allows you to set up an internet service on a local computer, without exposing the local computer to the internet. You can also build various sets of port redirection, to provide various internet services on different local computers via a single internet IP address. Local IP Local Port Type Public Port Comment Delete Selected/ Delete All Specify the IP address of the computer on your local network.
III-3-9-4. 2.4GHz Wireless These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Fragment Threshold RTS Threshold Beacon Interval DTIM Period Data Rate N Data Rate Channel Bandwidth Set the Fragment threshold of the wireless radio. The default value is 2346. Set the RTS threshold of the wireless radio. The default value is 2347. Set the beacon interval of the wireless radio. The default value is 100.
Preamble Type CTS Protection Tx Power Set the wireless radio preamble type. The default value is “Short Preamble”. Enabling this setting will reduce the chance of radio signal collisions between 802.11b and 802.11g wireless access points. It’s recommended to set this option to “Auto”. Set the power output of the wireless radio. You may not require 100% output power.
III-3-9-5. 5GHz Wireless These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Fragment Threshold RTS Threshold Beacon Interval DTIM Period Data Rate N Data Rate Channel Bandwidth Preamble Type Set the Fragment threshold of the wireless radio. The default value is 2346. Set the RTS threshold of the wireless radio. The default value is 2347. Set the beacon interval of the wireless radio.
Tx Power Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal.
III-3-9-6. IGMP IGMP is a communications protocol used to establish multicast group memberships. It allows for a more efficient use of resources and better performance for applications such as IPTV video streaming. IGMP Proxy IGMP proxy enables intelligent multicast forwarding based on IGMP snooping information. Select enable or disable. It is recommended to set “IGMP Proxy” to “Enable”.
III-3-9-7. UPnP Universal plug-and-play (UPnP) is a set of networking protocols which enables network devices to communicate and automatically establish working configurations with each other. Select “Enable” or “Disable”. III-3-9-8. NAT Enable or disable NAT (Network Address Translation) hardware acceleration for better network performance on fast connections.
III-3-10. Toolbox Various administrative functions can be accessed from the “Administration” menu. III-3-10-1. Time Zone Setup time zone for your RG21S/RA21S. Set Time Zone Time Server Address Daylight Saving Select the time zone of your country or region. The travel router supports NTP (Network Time Protocol) for automatic time and date setup. Input the host name of the IP server manually.
III-3-10-2. Password You can change the password used to login to the browser-based configuration interface here. It is advised to do so for security purposes. Please make a note of the new password. In the event that you forget the password and are unable to login to the browser based configuration interface, see I-5. Reset to factory default settings for how to reset the device. Current Password New Password Confirmed Password Enter your current password. Enter your new password.
III-3-10-3. Remote Check “Enable” to enable the remote access feature and then enter the appropriate values. Host IP Address Port Specify the IP address which is allowed remote access. Specify a port number (0–65535) used for remote access.
III-3-10-4. Backup/Restore Backup Settings Restore Settings Restore to Factory Default Click “Save” to save the current settings on your computer as config.bin file. Click “Browse” to find a previously saved config.bin file and then click “Upload” to replace your current settings. Click “Reset” to restore settings to the factory default. A pop-up window will appear and ask you to confirm and enter your log in details. Enter your username and password and click “Ok”. See below for more information.
III-3-10-6. Restart In the event that the router malfunctions or is not responding, then it is recommended that you restart the device. III-3-10-7. Log You can view the system log here.
Save Clear Refresh Click “Save” to save the log on your computer as .txt file. Click “Clear” to clear/erase the existing log. Click “Refresh” to refresh the log and update any activity. III-3-10-8. Active DHCP Client Information about active DHCP clients is shown in the table, which displays the DHCP server assigned IP address, MAC address and time expired for each computer or device on the local network.
Delete Selected / Delete All Delete selected or all entries from the table. III-3-10-9. Statistics Displays sent and received packet network statistics.
III. IV-1. Appendix Configuring your IP address For first time access to the URL http://edimax.setup please ensure your computer is set to use a dynamic IP address. This means your computer can obtain an IP address automatically from a DHCP server. You can check if your computer is set to use a dynamic IP address by following IV-1-1. How to check that your computer uses a dynamic IP address. Static IP users can also temporarily modify your computer’s IP address to be in the same IP address subnet e.g.
IV-1-1. How to check that your computer uses a dynamic IP address Please follow the instructions appropriate for your operating system. IV-1-1-1. Windows XP 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. Double-click the “Network and Internet Connections” icon, click “Network Connections”, and then double-click “Local Area Connection”. The “Local Area Connection Status” window will then appear, click “Properties”. 2.
98
IV-1-1-2. Windows Vista 1. 2. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. Click “View Network Status and Tasks”, then click “Manage Network Connections”. Right-click “Local Area Network”, then select “Properties”. The “Local Area Connection Properties” window will then appear, select “Internet Protocol Version 4 (TCP / IPv4)”, and then click “Properties”.
100
IV-1-1-3. Windows 7 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. 2. Under “Network and Internet” click “View network status and tasks”. 3. Click “Local Area Connection”.
4. Click “Properties”. 5. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
6. Select “Obtain an IP address automatically” and “Obtain DNS server address automatically” should be selected.
IV-1-1-4. Windows 8 1. From the Windows 8 Start screen, you need to switch to desktop mode. Move your curser to the bottom left of the screen and click. 2. In desktop mode, click the File Explorer icon in the bottom left of the screen, as shown below.
3. 4. Right click “Network” and then select “Properties”. In the window that opens, select “Change adapter settings” from the left side.
5. Choose your connection and right click, then select “Properties”. 6. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”. 7. Select “Obtain an IP address automatically” and “Obtain DNS server address automatically” should be selected.
107
IV-1-1-5. Mac OS 1. 2. Have your Macintosh computer operate as usual, and click on “System Preferences”. In System Preferences, click on “Network”. 3. Click on “Wi-Fi” in the left panel and then click “Advanced” in the lower right corner. 4. Select “TCP/IP” from the top menu and “Using DHCP” in the drop down menu labeled “Configure IPv4” should be selected.
109
IV-1-2. How to modify the IP address of your computer Please follow the instructions appropriate for your operating system. In the following examples we use the IP address 192.168.2.10 though you can use any IP address in the range 192.168.2.x (x = 3 – 254) in order to access iQ Setup/browser based configuration interface. Please make a note of your static IP before you change it. IV-1-2-1. Windows XP 1.
Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.2.1 Click ‘OK’ when finished.
IV-1-2-2. Windows Vista 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. Click “View Network Status and Tasks”, then click “Manage Network Connections”. Right-click “Local Area Network”, then select “Properties”. The “Local Area Connection Properties” window will then appear, select “Internet Protocol Version 4 (TCP / IPv4)”, and then click “Properties”. 2.
IV-1-2-3. Windows 7 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. 2. Under “Network and Internet” click “View network status and tasks”.
3.Click “Local Area Connection”. 4. Click “Properties”.
5.Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”. 6. Select “Use the following IP address” and “Use the following DNS server addresses”, then input the following values: Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.2.1 Click ‘OK’ when finished.
IV-1-2-4. Windows 8 1. From the Windows 8 Start screen, you need to switch to desktop mode. Move your curser to the bottom left of the screen and click. 2. In desktop mode, click the File Explorer icon in the bottom left of the screen, as shown below.
3. 4. Right click “Network” and then select “Properties”. In the window that opens, select “Change adapter settings” from the left side.
5. Choose your connection and right click, then select “Properties”.
6. 7. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”. Select “Use the following IP address” and “Use the following DNS server addresses”, then input the following values: Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.2.1 Click ‘OK’ when finished.
IV-1-2-5. Mac 1. 2. Have your Macintosh computer operate as usual, and click on “System Preferences” In System Preferences, click on “Network”. 3. Click on “Wi-Fi” in the left panel and then click “Advanced” in the lower right corner. 4. Select “TCP/IP” from the top menu and select “Manually” from the drop down menu labeled “Configure IPv4”, then click “OK”.
Your existing static IP address will be displayed in the “IP address” field before you replace it. Please make a note of this IP address, subnet mask, default gateway and DNS server addresses. 5. 6. In the “IPv4 Address” and “Subnet Mask” field enter IP address 192.168.2.10 and subnet mask 255.255.255.0. Click on “OK”. Click “Apply” to save the changes.
122
IV-1-3. How to Find Your Network Security Key To find your network security key, please follow the instructions appropriate for your operating system. If you are using Windows XP or earlier, please contact your ISP or router manufacturer to find your network security key. IV-1-3-1. Windows 7 & Vista 1. Open “Control Panel” and click on “Network and Internet” in the top menu. 2. Click on “View network status and tasks” which is under the heading “Network and Sharing Center”.
3. 4. Click on “Manage wireless networks” in the left menu. You should see the profile of your Wi-Fi network in the list. Right click on your Wi-Fi network and then click on “Properties”. 5.Click on the “Security” tab, and then check the box labeled “Show characters”. This will show your network security key. Click the “Cancel” button to close the window.
IV-1-3-2. Mac 1. Open a new Finder window, and select “Applications” from the menu on the left side. Open the folder labeled “Utilities” and then open the application “Keychain Access”. 2. Select “Passwords” from the sub-menu labeled “Category” on the left side, as shown below. Then search the list in the main panel for the SSID of your network. In this example, the SSID is “EdimaxWireless” – though your SSID will be unique to your network.
3. Double click the SSID of your network and you will see the following window.
4. Check the box labeled “Show password” and you will be asked to enter your administrative password, which you use to log into your Mac. Enter your password and click “Allow”. Your network security password will now be displayed in the field next to the box labeled “Show password”. In the example below, the network security password is “edimax1234”. Please make a note of your network security password.
IV-1-4. How to Find Your Router’s IP Address To find your router’s IP address, please follow the instructions appropriate for your operating system. IV-1-4-1. Windows XP, Vista & 7 1. Go to “Start”, select “Run” and type “cmd”, then press Enter or click “OK”.
2. A new window will open, type “ipconfig” and press Enter. 3. Your router’s IP address will be displayed next to “Default Gateway”.
IV-1-4-2. Windows 8 1. From the Windows 8 Start screen, move your curser to the top right corner of the screen to display the Charms bar. 2. Click “Search” and enter “cmd” into the search bar. Click the “Command Prompt” app which be displayed on the left side.
3. A new window will open, type “ipconfig” and press Enter.
4.Your router’s IP address will be displayed next to “Default Gateway”.
IV-1-4-3. Mac 1. Launch “System Preferences” and click on “Network”. 2. If you are using an Ethernet cable to connect to your network, your router’s IP address will be displayed next to “Router”. 3. If you are using Wi-Fi, click “Wi-Fi” in the left panel, and then “Advanced” in the bottom right corner.
4. Click the “TCP/IP” tab and your router’s IP address will be displayed next to “Router”.
IV-2. Connecting to a Wi-Fi network For help connecting to your device’s Edimax.Setup SSID for initial setup, or to connect to your device’s new Wi-Fi network (SSID) after setup is complete, follow the guide below: Below is an example of how to connect using Windows Vista – the process may vary slightly for other versions of Windows. 1. Click the network icon ( “Connect to a network”. 2. Search for the SSID of your RG21S/RA21S and then click “Connect”.
3. After correctly entering your password, you will be successfully connected to the RG21S/RA21S’s wireless network.
IV. FAQs 1. How do I setup a VPN server?(router mode only) a. A VPN server can be used for remote access to your network as well as for additional security & privacy. Login to http://edimax.setup and go to Internet VPN Server to setup the server. A VPN client such as OpenVPN is required on your network device to access the VPN remotely. 2. I can’t access the Internet. a. Ensure that all cables are connected properly. Try a different Ethernet cable. b.
Router Login Enter this URL in a web browser to run iQ Setup or configure advanced settings. You must be connected to the device by Wi-Fi or Ethernet cable. Username/Password This is the default username and password to access the browser based configuration interface when you go to the “Router Login” URL (above). Wi-Fi Network This is the default Wi-Fi network name for the Name device. Search for this name (SSID) and connect to it in order to access the “Router Login” URL (above).
5. I forgot my password. a. Reset the router to its factory default settings and use the default username admin and default password 1234. Default settings are displayed on the product label on the back of the device, as shown above. 6. Do the blue WAN port and yellow LAN ports work the same when the device is in different modes? No, the WAN and LAN ports have slightly different functions depending on the operating mode of the device. a.
V. Glossary Default Gateway (Wireless bridge): Every non-access point IP device needs to configure a default gateway’s IP address. When the device sends out an IP packet, if the destination is not on the same network, the device has to send the packet to its default gateway, which will then send it out towards the destination. DHCP: Dynamic Host Configuration Protocol. This protocol automatically gives every computer on your home network an IP address.
A network mask is also a 32-bit binary pattern, and consists of consecutive leading 1’s followed by consecutive trailing 0’s, such as 11111111.11111111.11111111.00000000. Therefore sometimes a network mask can also be described simply as “x” number of leading 1’s. When both are represented side by side in their binary forms, all bits in the IP address that correspond to 1’s in the network mask become part of the IP network address, and the remaining bits correspond to the host ID.
Port: Network Clients (LAN PC) uses port numbers to distinguish one network application/protocol over another. Below is a list of common applications and protocol/port numbers: Application Protocol Port Number Telnet TCP 23 FTP TCP 21 SMTP TCP 25 POP3 TCP 110 H.
Web-based management Graphical User Interface (GUI): Many devices support a graphical user interface that is based on the web browser. This means the user can use the familiar Netscape or Microsoft Internet Explorer to Control/configure or monitor the device being managed.
COPYRIGHT Copyright Edimax Technology Co., Ltd. all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission from Edimax Technology Co., Ltd. Edimax Technology Co., Ltd.
VI. Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
version of this device is also authorized for use in EFTA member states: Iceland, Liechtenstein, Norway, and Switzerland.
EU Declaration of Conformity English: Français: Čeština: Polski: Română: Русский: Magyar: Türkçe: Українська: Slovenčina: Deutsch: Español: Italiano: Nederlands: Português: Norsk: Svenska: Dansk: Suomi: This equipment is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC, 2009/125/EC. Cet équipement est conforme aux exigences essentielles et autres dispositions de la directive 1999/5/CE, 2009/125/CE.
Declaration of Conformity We, Edimax Technology Co., Ltd., declare under our sole responsibility, that the equipment described below complies with the requirements of the European R&TTE directives 1999/5/EC, directive 2011/65/EC (RoHS) and directive 2009/125/EC (ErP). Equipment: Home Wi-Fi Roaming Router/Access Point Model No.: RG21S/RA21S The following European standards for essential requirements have been followed: Directives 1999/5/EC Spectrum : EMC : Safety (LVD) : ETSI EN 300 328 V1.9.
149
