Wireless 11n ADSL Firewall Router User Guide WL-603 3CRWDR300A-73 3CRWDR300B-73 http://www.3Com.com/ Part No.
3Com Corporation 350 Campus Drive, Marlborough, MA USA 01752-3064 Copyright © 2004, 2005, 2006, 2007, 2008, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.
CONTENTS ABOUT THIS GUIDE Naming Convention 7 Conventions 8 Feedback About This User Guide Related Documentation 9 9 INTRODUCING THE ROUTER Wireless 11n ADSL Firewall Router 11 Router Advantages 14 Package Contents 14 Minimum System and Component Requirements Physical Features 15 INSTALLING THE ROUTER Introduction 21 Safety Information 21 Positioning the Router 21 Using the Rubber Feet 22 Wall Mounting 22 Mounting Instructions for Cement Walls Mounting Instructions for Wood Walls 23 Powering Up the Rout
Windows Vista 29 Windows XP 30 Macintosh 30 Disabling PPPoE and PPTP Client Software Disabling Web Proxy 31 31 RUNNING THE SETUP WIZARD Accessing the Router using the 3Com Detect Application Running the 3Com Detect Application 33 Accessing the Setup Wizard 35 Wizard - Change Password 38 Wizard - Time and Time Zone 39 Wizard - Connection Type 40 Wizard - LAN Settings 46 Wizard - Wireless Setting 47 Wizard - Configuration Summary 52 CONFIGURING THE ROUTER Navigating through the Router Configuration Screens
DNS 88 Clone MAC address 89 Firewall 90 SPI 90 Special Applications 94 Virtual Servers 95 DMZ 96 PC Privileges 97 Schedule Rule 99 URL Filter 100 Advanced 101 Security 101 VLAN 104 Static Routes 106 RIP 108 DDNS 110 SNMP 111 Syslog 112 Proxy ARP 113 QoS Settings 114 Traffic Mapping 115 VPN 117 System Tools 124 Restart Router 124 Configuration 124 Upgrade 125 Time Zone 126 Ping 127 Traceroute 128 DNS Lookup 129 Diagnostic 129 Status and Logs 130 Status 130 ADSL Status 131 ATM PVC Status 131 Routing Table 132
Support/Feedback 134 Support 134 Feedback 134 TROUBLESHOOTING Basic Connection Checks 135 Browsing to the Router Configuration Screens 136 Connecting to the Internet 136 Forgotten Password and Reset to Factory Defaults 138 Wireless Networking 139 Recovering from Corrupted Software 140 Power Adapter 141 Frequently Asked Questions 143 IP ADDRESSING The Internet Protocol Suite 145 Managing the Router over the Network 145 IP Addresses and Subnet Masks 145 How does a Device Obtain an IP Address and Subnet Mask
SAFETY INFORMATION END USER SOFTWARE LICENSE AGREEMENT OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS Register Your Product to Gain Service Benefits 160 Solve Problems Online 160 Purchase Extended Warranty and Professional Services Access Software Downloads 161 Contact Us 161 Telephone Technical Support and Repair 161 GLOSSARY REGULATORY NOTICES INDEX 160
ABOUT THIS GUIDE This guide describes how to install and configure the 3Com Wireless 11n ADSL Firewall Router (3CRWDR300A-73, 3CRWDR300B-73). This guide is intended for use by those responsible for installing and setting up network equipment; consequently, it assumes a basic working knowledge of LANs (Local Area Networks) and Internet Routers. This manual covers both Annex A (ADSL over POTS) and Annex B (ADSL over ISDN) Routers.
8 ABOUT THIS GUIDE Conventions Table 1 and Table 2 list conventions that are used throughout this guide. Table 1 Notice Icons Icon Notice Type Description Information note Information that describes important features or instructions. Caution Information that alerts you to potential loss of data or potential damage to an application, system, or device. Warning Information that alerts you to potential personal injury.
Feedback About This User Guide Feedback About This User Guide 9 Your suggestions are very important to us. They will help make our documentation more useful to you. Please e-mail comments about this document to 3Com at: pddtechpubs_comments@3com.com Please include the following information when commenting: ■ Document title ■ Document part number (on the title page) ■ Page number (if appropriate) Example: ■ 3Com Wireless 11n ADSL Firewall Router User Guide ■ Part Number 10016794 Rev.
10 ABOUT THIS GUIDE
1 INTRODUCING THE ROUTER Welcome to the world of networking with 3Com®. In the modern business environment, communication and sharing information is crucial. Computer networks have proved to be one of the fastest modes of communication but, until recently, only large businesses could afford the networking advantage.
12 CHAPTER 1: INTRODUCING THE ROUTER Figure 1 Example Network Without a Router When you use the Router in your network (Figure 2 and Figure 3), it becomes your connection to the Internet. Connections can be made directly to the Router, or to an OfficeConnect Switch or Hub, expanding the number of computers you can have in your network.
Wireless 11n ADSL Firewall Router Figure 3 Example Network Using a Firewall Router (without splitter) 13
14 CHAPTER 1: INTRODUCING THE ROUTER Router Advantages Package Contents The advantages of the Router include: ■ Shared Internet connection for both wired and wireless computers ■ High speed 802.
Minimum System and Component Requirements Minimum System and Component Requirements Physical Features 15 Your Router requires that the computer(s) and components in your network be configured with the following: ■ A computer with an operating system that supports TCP/IP networking protocols (for example Windows 2000/XP,/Vista, Unix, Mac OS 8.5 or higher). ■ An Ethernet 10 Mbps or 10/100 Mbps or 10/100/1000 Mbps NIC for each computer to be connected to the LAN port on your Router. ■ An 802.11b, 802.
16 CHAPTER 1: INTRODUCING THE ROUTER 1 Power LED (Illuminated Logo) White The 3Com logo serves as power OK indicator. This LED will light if the router is receiving power from the power adapter. If it is not lit check the power adapter connections. Refer to Chapter 6 Troubleshooting. 2 Alert LED Amber Fast flash during self test. If self test fails the LED will remain on. Fast flash during software upgrade. Fast flash for software reset to the factory defaults.
Physical Features 17 7 WPS LED Blue WiFi Protected Setup (WPS) is a standard for easy and secure establishment of a wireless network, allowing wireless clients to connect securely to routers and access points. The WPS LED shows the status of the WPS function. It has a number of modes to help monitor the status of clients connecting to the Router using the WPS protocol. The status is shown by three different flashing rates: slow, medium and quick and when light constantly.
18 CHAPTER 1: INTRODUCING THE ROUTER The rear panel (Figure 5) of the Router contains one ADSL port, four LAN ports, one WiFi on/off button, a reset button, one power adapter socket, and one WPS button. Figure 5 Router - Rear Panel 1 Wireless Antennae The antennaes should be placed in a ‘V’ position when initially installed. CAUTION: Do not force the antennae beyond their mechanical stops. Rotating the antennae further may cause damage.
Physical Features 19 4 WiFi On/Off button Use this button to turn on/turn off the wireless function. Press the button for 3 seconds. 5 Reset Button If you want to reset your Router to factory default settings, or cannot access the web management interface (for example, due to a lost password), then you may use this button. Refer to Forgotten Password and Reset to Factory Defaults on page 138 for further details. 6 Power Adapter Socket Only use the power adapter that is supplied with this Router.
20 CHAPTER 1: INTRODUCING THE ROUTER
2 Introduction Safety Information INSTALLING THE ROUTER This chapter will guide you through a basic installation of the Router, including: ■ Connecting the Router to the Internet. ■ Connecting the Router to your network. ■ Setting up your computers for networking with the Router. Please note the following: WARNING: Please read the Safety Information section in Appendix C before you start.
22 CHAPTER 2: INSTALLING THE ROUTER When positioning your Router, ensure: Using the Rubber Feet ■ It is out of direct sunlight and away from sources of heat. ■ Cabling is away from power lines, fluorescent lighting fixtures, and sources of electrical noise such as radios, transmitters and broadband amplifiers. ■ Water or moisture cannot enter the case of the unit. ■ Air flow around the unit and through the vents in the side of the case is not restricted.
Powering Up the Router Mounting Instructions for Wood Walls 23 To wall mount the unit: 1 Make two holes 98 mm (3.9 in.) apart. 2 Fix two suitable screws directly into the wall, leaving their heads 3 mm (0.12 in.) clear of the wall surface. The screws should be at least 20 mm (0.75 in.) long. 3 Remove any connections in the Router and locate it over the screw heads. When in line, gently push the Router on to the wall and move it downwards to secure.
24 CHAPTER 2: INSTALLING THE ROUTER Figure 6 Connecting the Router (with splitter) Figure 7 Connecting the Router (without splitter) 1 Run the provided telephone cable from the wall jack providing ADSL service to the ADSL port on your Router. When inserting an ADSL RJ-11(Annex A) or RJ-45 (Annex B) plug, be sure the tab on the plug clicks into position to ensure that it is properly seated. If you are using splitterless ADSL service, add low-pass filters between the ADSL wall jack and your telephones.
Connecting the Router 25 2 Then: ■ If you are using a full-rate (G.dmt) connection, your service provider will attach the outside ADSL line to a data/voice splitter. In this case you can connect your phones and computer directly to the splitter as shown below (Figure 8): or ■ If you are using a splitterless (G.lite) connection, then your service provider will attach the outside ADSL line directly to your phone system.
26 CHAPTER 2: INSTALLING THE ROUTER Figure 9 Installing without a splitter Plain Old Telephone System (POTS) Voice Residential Connection Point [Network Interface Device (NID)] Filter Voice & Data Voice & Data ADSL Router Data or Ethernet switch You have now completed the hardware installation of your Router. Next you need to set up your computers so that they can make use of the Router to communicate with the Internet.
3 SETTING UP YOUR COMPUTERS The Router has the ability to dynamically allocate network addresses to the computers on your network, using DHCP. However, your computers need to be configured correctly for this to take place. To change the configuration of your computers to allow this, follow the instructions in this chapter.
28 CHAPTER 3: SETTING UP YOUR COMPUTERS Figure 10 Local Area Properties Screen 6 Ensure that the options Obtain an IP address automatically, and Obtain DNS server address automatically are both selected as shown in Figure 11. Click OK. Figure 11 Internet Protocol (TCP/IP) Properties Screen 7 Restart your computer.
Obtaining an IP Address Automatically 29 Windows Vista 1 From the Windows Start Menu, select Settings > Network. 2 Click on Organize. Select Properties. 3 Click on Manage network > Connections. 4 Double click Local Area Connection. Select Properties and click continue. 5 A screen similar to Figure 12 should appear. Select Internet Protocol Version 6,Version 4 (TCP/IPv6,v4) and click on Properties.
30 CHAPTER 3: SETTING UP YOUR COMPUTERS Windows XP 1 From the Windows Start Menu, select Control Panel. 2 Click on Network and Internet Connections. 3 Click on the Network Connections icon. 4 Double click on LAN or High Speed Connection icon. A screen titled Local Area Connection Status will appear. 5 Select Internet Protocol TCP/IP and click on Properties. 6 Ensure that the options Obtain an IP address automatically, and Obtain DNS servers automatically are both selected. Click OK.
Disabling PPPoE and PPTP Client Software Disabling PPPoE and PPTP Client Software 31 If you have PPPoE client software installed on your computer, you will need to disable it. To do this: 1 From the Windows Start Menu, select Settings > Control Panel. 2 Double click on Internet Options. 3 Select the Connections Tab. A screen similar to Figure 14 should be displayed. 4 Select the Never dial a connection option.
32 CHAPTER 3: SETTING UP YOUR COMPUTERS
4 Accessing the Router using the 3Com Detect Application RUNNING THE SETUP WIZARD The 3Com Detect application works by automatically locating your Router, establishing what IP address it is using and then launching your default web browser to connect directly to it. The application will only locate your Router if it is on the same subnet as the PC on which the application is running. It will not be able to locate your Router if there is another router between your PC and the Router.
34 CHAPTER 4: RUNNING THE SETUP WIZARD Figure 15 3Com Detect Application If the computer has multiple network adapters, select the adapter that connects the computer to the network or the Router, click Next. You will then be offered the choice of searching the same subnet that your PC is on for a connected Router (default), or specifying an IP range. Note that specifying a large range may take some time for the search to complete (see Figure 16 and Figure 17).
Accessing the Setup Wizard 35 Figure 18 Router List Screen Accessing the Setup Wizard The Router setup program is Web-based, which means that it is accessed through your Web browser (Netscape Navigator 4.7 or higher, Internet Explorer 6.0 or higher, or Mozilla 1.2.1 or higher, or Apple’s Safari). To use the Setup Wizard: 1 Ensure that you have at least one computer connected to the Router. Refer to Chapter 2 for details on how to do this. 2 Launch your Web browser on the computer.
36 CHAPTER 4: RUNNING THE SETUP WIZARD 4 To log in as an administrator, enter the password (the default password is admin) in the System Password field and click Log in (see Figure 20). Figure 20 Router Login Screen 5 When you have logged in, ■ if you are logging in for the first time, the Country Selection screen will appear (see Figure 21). Please select the country form the drop-down menu, and click Apply. 1.
Accessing the Setup Wizard 37 The Wizard will then launch automatically (refer to Figure 24). You will be guided step by step through a basic setup procedure. ■ if the Router has been configured previously, the Welcome screen will appear (Figure 22). There are three tabs: Notice Board, Password and Wizard. Figure 22 Welcome Screen ■ Go to the Notice Board tab to see the current software information. To view the Web help, click the Help button.
38 CHAPTER 4: RUNNING THE SETUP WIZARD Figure 23 Password Screen 1 To change the current password, enter the password in the Current Password field. 2 Enter the new password in the New Password field, and enter it again in the Confirm New Password field. 3 Enter the time period in Login Timeout to set a maximum period of time for which the login session is maintained during inactivity (default: 10 minutes). Then click Apply.
Accessing the Setup Wizard Wizard - Time and Time Zone 39 The Time and Time Zone screen allows you to set up the time for the Router. Figure 25 Time and Time Zone Screen 1 Select the correct base date and time. 2 If you want to automatically synchronize the Router with a public time server, check the Enable box in the Using Time Server (NTP) field. 3 Select the time zone in the Set Time Zone drop-down menu. 4 Enter the time in the Synchronization Interval field.
40 CHAPTER 4: RUNNING THE SETUP WIZARD Wizard - Connection Type The Connection Type screen allows you to set up the Router for the type of Internet connection you have. Before setting up your connection type, have your account information from your ISP ready.
Accessing the Setup Wizard 41 PPPoE PPPoE is often used for DSL connection. To set up the Router for use with a PPPoE (PPP over Ethernet) connection, use the following procedure: Figure 27 PPPoE Screen 1 Enter your user name in the Username field. 2 Enter your password in the Password field. 3 Re-type your password in the Retype Password field. 4 Enter your VPI and VCI information in the VPI/VCI fields. 5 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu.
42 CHAPTER 4: RUNNING THE SETUP WIZARD PPPoA To set up the Router for use with a PPP over ATM (PPPoA) connection, use the following procedure: Figure 28 PPPoA Screen 1 Enter your user name in the Username field. 2 Enter your password in the Password field. 3 Re-type your password in the Retype Password field. 4 Enter your VPI and VCI information in the VPI/VCI fields. 5 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu.
Accessing the Setup Wizard 43 Bridge Mode (for a single PC) Selecting the Bridge mode sets the device into 1483 bridging mode in which the device connects LANs and WAN together. It operates as a Data Link Layer device that acts to limit the traffic between two network segments by filtering the data between them based on the hardware address.
44 CHAPTER 4: RUNNING THE SETUP WIZARD Routing Mode over ATM The Routing Mode over ATM uses fixed/static IP addresses, which are provided by your ISP, to connect to the Internet. Obtain the information on this screen from your ISP. Figure 30 Routing mode over ATM Screen 1 Enter your Internet IP address in the WAN IP field. 2 Enter the subnet mask in the Subnet Mask field. 3 Enter the default gateway IP address in the Default Gateway field. 4 Enter the DNS address in the DNS field.
Accessing the Setup Wizard 45 Dynamic/Fixed IP in 1483 Bridge Mode (For Multiple PCs) For bridge mode to work, you need to assign an IP address to the Router. You can either configure the Router to obtain an IP address automatically from a DHCP server or assign a fixed or static IP address to it. Figure 31 Dynamic/Fixed IP for Bridge Mode Screen ■ To obtain an IP address automatically from a DHCP server: check the Get WAN IP By DCHP checkbox, and then click Next.
46 CHAPTER 4: RUNNING THE SETUP WIZARD Wizard - LAN Settings The LAN Settings screen allows you to set the default IP address and DHCP client IP range for the Router. Figure 32 The LAN Settings Screen 1 To change the Router’s default IP address, enter the new IP address in the IP Address field, and then enter the subnet mask in the Subnet Mask field. 2 Check the Enable DHCP Server box to enable the DHCP function.
Accessing the Setup Wizard Wizard - Wireless Setting 47 The Wireless Settings screen allows you to set up the SSID and radio channel used for the wireless connection. Figure 33 Wireless Setting Screen 1 Select the channel you want to use from the Channel drop-down menu. 2 Specify the SSID to be used by your wireless network in the SSID field. If there are other wireless networks in your area, you should give your wireless network an unique name.
48 CHAPTER 4: RUNNING THE SETUP WIZARD Figure 34 Security Mode Screen 64-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be setup on your Router and wireless client devices to use WEP. Figure 35 64-bit WEP Screen To enable 64-bit WEP: 1 You can enter the 64-bit WEP key manually. Enter the WEP key as 5 pairs of hex digits (0-9, A-F). Or you can generate the 64-bit WEP key automatically.
Accessing the Setup Wizard 49 2 Click Next. Note that all four WEP keys on each device of the same wireless network must be identical. 128-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be set up on your Router and wireless client devices to use WEP. Figure 36 128-bit WEP To enable 128-bit WEP: 1 You can enter the 128-bit WEP key manually, enter your WEP key as 13 pairs of hex digits (0-9, A-F).
50 CHAPTER 4: RUNNING THE SETUP WIZARD WPA-PSK (no server) WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. If your network does not have a RADIUS server. Select the no server option. Note that in home and very small office deployments, PSK is typically used. Figure 37 WPA-PSK no server Screen 1 Select WPA-PSK (no server) from the WPA drop-down menu. 2 Select WPA mode from the drop-down menu, three modes are supported: WPA, WPA2, and Mixed mode.
Accessing the Setup Wizard 51 WPA with Radius Server WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. This function requires that a RADIUS server is running on the network. Figure 38 WPA with Radius Server Screen 1 Select WPA with RADIUS server from the Security Mode drop-down menu. 2 Select WPA mode from the drop-down menu, three modes are supported: WPA, WPA2, and Mixed mode.
52 CHAPTER 4: RUNNING THE SETUP WIZARD Wizard Configuration Summary When you have completed the Setup Wizard, a configuration summary will appear. Verify the configuration information of the Router and then click Apply to save your settings. 3Com recommends that you print out this page for your records. Figure 39 Configuration Summary Screen Your Router is now configured and ready for use. See Chapter 5 for a further detailed description of the Router configuration.
5 CONFIGURING THE ROUTER Navigating through the Router Configuration Screens This chapter describes all the screens available through the Router configuration screens, and is provided as a reference. To get to the configuration screens, enter the Router’s default IP in the location bar of your browser. The default IP is http://192.168.1.1. However, if you changed the Router LAN IP address during initial configuration, use the new IP address instead.
54 CHAPTER 5: CONFIGURING THE ROUTER LAN Settings Your Router is equipped with a DHCP server that will automatically assign IP addresses to each computer on your network. The factory default settings for the DHCP server will work with most applications. If you need to make changes to the settings, you can do so. The LAN settings screen allows you to: ■ Change the default IP address of the Router. The default IP is 192.168.1.1 ■ Change the Subnet Mask. The default setting is 255.255.255.
LAN Settings 55 1 Enter the Router’s IP Address and Subnet Mask in the appropriate fields. The default IP address is 192.168.1.1. 2 If you want to use the Router as a DHCP Server, check Enable in the DHCP Server field. 3 Enter the IP address range in the IP Pool Start Address and IP Pool End Address fields. 4 Specify the DHCP Lease time by selecting the required value from the Lease Time drop-down menu. The lease time is the length of time the DHCP server will reserve the IP address for each computer.
56 CHAPTER 5: CONFIGURING THE ROUTER ■ Host Name — The client machine’s host name, if configured. ■ MAC Address — The Media Access Control (MAC) address of the client’s network card. ■ Client Type — Whether the client is connected to the Router by wired or wireless connection. ■ Check the Fix checkbox to permanently fix the IP address. ■ Click Release to release the displayed IP address. ■ Click Add to allocate an IP address to a MAC address.
Wireless Settings Wireless Settings 57 The Wireless Settings screens allow you to configure the settings for the wireless connections. You can enable or disable the wireless connection for your LAN. When disabled, no wireless PCs can gain access to either the Internet or other PCs on your wired or wireless LAN through this Router.
58 CHAPTER 5: CONFIGURING THE ROUTER Configuration The Wireless Configuration Screen allows you to turn on/ turn off the wireless function, and set up basic wireless settings. You can also enable/disable the Wireless function using the WiFi on/off button at the back of the Router. Figure 44 Wireless Configuration Screen To enable the wireless function: 1 Check Enable Wireless Networking checkbox. 2 Select the wireless channel you want to use from the Channel drop-down menu.
Wireless Settings 59 6 Select whether your Router will operate in 11b mode only, 11g mode only, 11n mode only, or mixed mode from the Wireless Mode drop-down menu. If your network contains 11b, 11g, and 11n clients, select the mixed mode. If your network contains just one type of clients only, select 11b only, or 11g only, or 11n only, depending on your wireless network environment.
60 CHAPTER 5: CONFIGURING THE ROUTER Encryption This feature prevents any non-authorized party from reading or changing your data over the wireless network. Figure 45 Encryption Screen Select the wireless security mode that you want to use from the drop-down menu, and click Apply.
Wireless Settings 61 64-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be setup on your Router and wireless client devices to use WEP. Note that 3Com recommends using WPA/WPA2 to secure your wireless connection. Figure 46 64-bit WEP Screen To setup 64-bit WEP: 1 You can enter the 64-bit WEP key manually: ■ enter the WEP key as 5 pairs of hex digits (0-9, A-F).
62 CHAPTER 5: CONFIGURING THE ROUTER 128-bit WEP WEP is the basic mechanism to transmit your data securely over the wireless network. Matching encryption keys must be set up on your Router and wireless client devices to use WEP. Note that 3Com recommends using WPA/WPA2 to secure your wireless connection. Figure 47 128-bit WEP Screen To setup 128-bit WEP: 1 You can enter the 128-bit WEP key manually: ■ enter your WEP key as 13 pairs of hex digits (0-9, A-F).
Wireless Settings 63 WPA-PSK (no server) WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. If your network does not have a RADIUS server. Select the no server option. For home network or very small business networking environment, PSK is typically used. Figure 48 WPA-PSK (no server) Screen 1 Select WPA-PSK (no server) from the WPA drop-down menu. 2 Select WPA mode from the drop-down menu, three modes are supported: WPA, WPA2, and Mixed mode.
64 CHAPTER 5: CONFIGURING THE ROUTER WPA (with RADIUS Server) WPA (Wi-Fi Protected Access) provides dynamic key changes and constitutes the best security solution. This function requires that a RADIUS server is running on the network. Figure 49 WPA (with RADIUS Server) Screen 1 Select WPA with RADIUS server from the Security Mode drop-down menu. 2 Select WPA mode from the drop-down menu, three modes are supported: WPA, WPA2, and Mixed mode.
Wireless Settings WPS 65 Wi-Fi Protected Setup (WPS) integrates the new WLAN clients into your wireless network easily. You can enable this function by entering the PIN code via the web UI page or by pressing the WPS button on the rear side of the device. Figure 50 WPS Screen Two methods to setup the WPS, you can choose either one of the following method. Note that if you choose to use the PBC mode, then it would be no need to enter the PIN code of the wireless NIC on this screen.
66 CHAPTER 5: CONFIGURING THE ROUTER ■ WPS-PBC 1 Press the WPS button located on the rear of the Router. Note that this setup process will only be active for 2 minutes. Follow the instruction of your WLAN NIC to set up the WPS. The WPS LED shows the status of the WPS function. It has a number of modes to help monitor the status of clients connecting to the Router using the WPS protocol. The status is shown by three different flashing rates: slow, medium and quick and when light constantly.
Wireless Settings Connection Control 67 This feature is used to filter the clients based on their MAC addresses. Using this function, you can limit the access right of the wireless clients to this Router. Check the Enable MAC Address Filtering checkbox, the Connection Control screen will appear.
68 CHAPTER 5: CONFIGURING THE ROUTER Client List You can view the list of all wireless clients that are connected to the Router. Figure 52 Client List Screen Click Refresh to update the list. WMM Wireless Multimedia (WMM) mode, which supports devices that meet the 802.11E QBSS standard. WMM uses traffic priority based on the four ACs; Voice, Video, Best Effort, and Background. The higher the AC priority, the higher the probability that data is transmitted.
Wireless Settings 69 Access Categories – WMM defines four access categories (ACs): voice, video, best effort, and background. These categories correspond to traffic priority levels and are mapped to IEEE 802.1D priority tags. The direct mapping of the four ACs to 802.1D priorities is specifically intended to facilitate inter operability with other wired network QoS policies.
70 CHAPTER 5: CONFIGURING THE ROUTER CWMin (Minimum Contention Window) – The initial upper limit of the random backoff wait time before wireless medium access can be attempted. The initial wait time is a random value between zero and the CWMin value. Specify the CWMin value in the range 0-15 microseconds. Note that the CWMin value must be equal or less than the CWMax value. TXOP Limit (Transmit Opportunity Limit) – The maximum time an AC transmit queue has access to the wireless medium.
Wireless Settings WDS 71 The Router supports WDS (Wireless Distribution System). WDS enables one or more Access Points to rebroadcast received signals to extend range and reach, though this can affect the overall throughput of data. Note that WDS implementation can vary from product to product. Hence there is no guarantee that different products will interoperate. In addition, the security settings for WDS links should be the same as the one set up for your wireless clients.
72 CHAPTER 5: CONFIGURING THE ROUTER Figure 55 Add WDS screen On the add WDS screen, enter the MAC address of the access point, up to 4 APs can be added to the AP MAC Address table, and click Apply. Here is an example of how to setup two units of 3Com Router over WDS. Note that when setting up two units of 3Com Router, you should disable the DHCP function on one of the units. Setting of the first Router: ■ Set the LAN IP setting, make sure the DHCP function is enabled on this Router.
Wireless Settings 73 Figure 56 First Router Add WDS Screen Access the Web UI of the second Router, repeat the above steps to add the first Router to the WDS table (see Figure 57).
74 CHAPTER 5: CONFIGURING THE ROUTER Advanced The Advanced screen allows you to configure detailed settings for your wireless connection. Please note that you should not change this settings unless you are an expert user. There are six parameters that you can configure: Figure 58 Wireless Advanced Setting Screen ■ Beacon Interval: this represents the amount of time between beacon transmissions.
Wireless Settings ■ 75 AP Isolation Mode: AP Isolation is a function to prevent wireless clients connected with the device from communicating with one another. When enabled, this creates a separate virtual network for your wireless network, each of your wireless client will be in its own virtual network and will not be able to communicate with each other. You may want to utilize this feature if you have many guests that frequently connect to your wireless network.
76 CHAPTER 5: CONFIGURING THE ROUTER Internet Settings ATM PVC You can configure the settings for your WAN port connection. This feature is used to configure the parameters for your Internet connection. The information necessary to complete these screens should be obtained from your ISP. Check with your ISP first to find out what type of connection you should choose.
Internet Settings 77 Disable Selecting this option means that you do not want your Router to connect to the Internet. Figure 60 Disable Internet Connection Screen PPPoE PPP over Ethernet, provides routing for multiple PCs, this mode is often used for the DSL connection. To configure this function correctly, you should obtain the information from your ISP.
78 CHAPTER 5: CONFIGURING THE ROUTER 1 Select PPPoE from the protocol drop-down menu. 2 Enter the IP address and Subnet mask information. 3 Enter the user name assigned to you by your ISP in the Username field. And enter the password assigned to you by your ISP in the Password field. Re-enter your password in the Confirm Password field. 4 Select always connected, auto, or manual from the Connect type drop-down menu. If you have a flat rate service charge for Internet connection, select always connected.
Internet Settings 79 12 QoS Class: select CBR, UBR or VBR. ■ ■ ■ CBR (constant bit rate): the CBR service class is intended for real-time applications, for example, those requiring tightly constrained delay and delay variation, such as voice and video applications. The consistent availability of a fixed quantity of bandwidth is considered appropriate for CBR service. VBR (variable bit rate): QoS class defined by the ATM Forum for ATM networks.
80 CHAPTER 5: CONFIGURING THE ROUTER PPPoA PPP over ATM, this is a popular choice among European DSL providers. To configure this function correctly, you should obtain the information from your ISP. Figure 62 PPPoA Settings Screen 1 Select PPPoA from the protocol drop-down menu. 2 IP assigned by ISP, if select Yes, then no need to enter the IP address and Subnet mask information. If select No, then enter the IP address and Subnet mask information.
Internet Settings 81 7 IPCP is used by PPP protocol to get one IP address from the PPP server. IPCP subnet function allows you to obtain a subnet (IP address and netmask), rather than an IP address. Check this box to enable the function. 8 IPCP Subnet Populate DHCP Server: enable this function to allow the Router to automatically apply the subnet from IPCP subnet to DHCP server. Then LAN clients can get the public IP address assigned by ISP, rather than a private IP address of the local LAN.
82 CHAPTER 5: CONFIGURING THE ROUTER Bridge Mode If your ISP limits access to the Internet to specific computers, this means that traffic to/from these computers only will be forwarded. In this case, Bridge Mode is used to connect to the ISP. The ISP will generally give one Internet account and limit only one computer to access the Internet. Check with your ISP to determine if this mode is used for your Internet connection.
Internet Settings ■ ■ 83 VBR (variable bit rate): QoS class defined by the ATM Forum for ATM networks. VBR is subdivided into a real time (RT) class and non-real time (NRT) class. VBR (RT) is used for connections in which there is a fixed timing relationship between samples. VBR (NRT) is used for connections in which there is no fixed timing relationship between samples, but that still need a guaranteed QoS. Compare with ABR, CBR, and UBR.
84 CHAPTER 5: CONFIGURING THE ROUTER Routing Mode over ATM RFC1483/2684 routed encapsulation in routing mode, it carries IP datagrams directly over ATM. DHCP client function can also be enabled to obtain an IP address dynamically. Figure 64 Routing Mode over ATM Screen 1 Select Routing mode over ATM from the protocol drop-down menu. 2 Enter IP address, Subnet mask, and Default gateway information. 3 If your ISP provides DNS information, check the DNS Automatic from ISP box.
Internet Settings 85 9 QoS Class: select CBR, UBR or VBR. ■ ■ ■ CBR (constant bit rate): the CBR service class is intended for real-time applications, for example, those requiring tightly constrained delay and delay variation, such as voice and video applications. The consistent availability of a fixed quantity of bandwidth is considered appropriate for CBR service. VBR (variable bit rate): QoS class defined by the ATM Forum for ATM networks.
86 CHAPTER 5: CONFIGURING THE ROUTER Dynamic/Fixed IP in 1483 Bridge Mode Dynamic/Fixed IP in 1483 Bridge Mode uses the same encapsulation as 1483 Bridging but with bridging function disabled. DHCP client function can also be enabled to obtain an IP address dynamically. Figure 65 Dynamic/Fixed IP in 1483 Bridge Mode Screen 1 Select Dynamic/Fixed IP in 1483 Bridge Mode from the protocol drop-down menu. 2 Enter your IP address, subnet mask, and default gateway information.
Internet Settings 87 6 If your ISP uses DHCP to automatically assign IP addresses, check the DHCP Client checkbox. 7 Check the Add Default Route checkbox to set this PVC as the default route, this is used when you configure more than one PVC for the Router. 8 Enter the VPI/VCI values. Or you can click Auto Search to automatically find out this information. 9 Select the Encapsulation, VC MUX or LLC. This information should be provided to you by your ISP. 10 QoS Class: select CBR, UBR or VBR.
88 CHAPTER 5: CONFIGURING THE ROUTER DNS Domain Name Service (or Server) is an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.com might translate to 198.105.232.14.
Internet Settings Clone MAC address 89 To configure the hostname and Clone MAC Address information for your Router, select Internet Settings, then go to the Clone MAC address tab. The Hostname and MAC Address screen displays. Figure 67 Hostname and Clone MAC Address Screen 1 Some ISPs require a host name. If your ISP has this requirement, enter the host name in the Host Name field.
90 CHAPTER 5: CONFIGURING THE ROUTER Firewall This section is for configuration settings of the Router’s firewall function. Your Router is equipped with a firewall that will protect your network from a wide array of common hacker attacks including Ping of Death (PoD) and Denial of Service (DoS) attacks. You can turn the firewall function off if needed.
Firewall 91 To enable the firewall function: 1 Select the level of protection (High, Medium, or Low) that you desire from the Firewall level drop-down menu. 2 Click Apply. ■ For low and medium levels of firewall protection, refer to Figure 69. For low level of firewall protection, the DoS and SPI functions are both off. For medium level of firewall protection, DoS is on, but SPI is off. ■ For high level of firewall protection, refer to Figure 70.
92 CHAPTER 5: CONFIGURING THE ROUTER Figure 70 High Level Firewall Protection Screen If you select high level of protection, you would have an option to configure additional parameters for the firewall. ■ Fragmentation half-open wait - Configures the number of seconds that a packet state structure remains active. When the timeout value expires, the Router drops the un-assembled packet, freeing that structure for use by another packet.
Firewall 93 ■ Total incomplete TCP/UDP sessions HIGH - Defines the rate of new unestablished sessions that will cause the software to start deleting half-open sessions. ■ Total incomplete TCP/UDP sessions LOW - Defines the rate of new unestablished sessions that will cause the software to stop deleting half-open sessions. ■ Incomplete TCP/UDP sessions (per min) HIGH - Maximum number of allowed incomplete TCP/UDP sessions per minute.
94 CHAPTER 5: CONFIGURING THE ROUTER Special Applications Special Applications (port triggering) let you choose specific ports to be open for specific applications to work properly with the Network Address Translation (NAT) feature of the Router. Figure 71 Special Applications Screen A list of popular applications has been included to choose from. Select the application from the Popular Applications drop-down menu.
Firewall Virtual Servers 95 The Virtual servers feature allows you to route external (Internet) calls for services such as a web server (port 80), FTP server (Port 21), or other applications through your Router to your internal network. Since your internal computers are protected by a firewall, machines from the Internet cannot get to them because they cannot be 'seen'.
96 CHAPTER 5: CONFIGURING THE ROUTER 3 Specify the public port that will be seen by clients on the Internet, and the LAN port which the traffic will be routed to. 4 You can enable or disable each Virtual Server entry by checking or unchecking the appropriate Enabled checkbox. 5 Click Apply to save the changes for each Virtual Server entry.
Firewall 97 address is not known, or if more than one PC on the Internet will need to access the DMZ PC, then set the Public IP Address to 0.0.0.0. In the default setting, (line 1) refer to Figure 73, Public IP address is set to 0.0.0.0 and it is automatically transformed by default WAN IP. We only allow one DMZ server to be accessed by public IPs (Many to 1 NAT).
98 CHAPTER 5: CONFIGURING THE ROUTER To edit or delete specific existing filtering rules, click on Edit or Delete for the appropriate filtering rule. Figure 75 PC Privileges Add PC Screen 1 Enter a description in the Client PC Description field, and the IP address or IP address range into the Client PC IP Address fields. 2 To bypass the URL Filter, check the corresponding Bypass checkbox. If you check this option, then the Web sites and keywords defined in this screen will not be filtered out.
Firewall Schedule Rule 99 The Router can be configured to restrict access to the Internet, email or other network services at specific days and times. Define the time in this screen, and define the rules in the PC Privileges screen (see page 97). Figure 76 Schedule Rule Screen 1 Click Add Rule to add a schedule rule (refer to Figure 77). Figure 77 Add Schedule Rule Screen 2 Enter a name and comment for the schedule rule in the Name and Comment fields.
100 CHAPTER 5: CONFIGURING THE ROUTER URL Filter To configure the URL filter feature, use the table on the URL Filter screen to specify the Web sites (www.somesite.com) and/or keywords you want to filter on your network. For example, entering a keyword of xxx would block/allow access to any URL that contains the string xxx. Figure 78 URL Filter Screen 1 Check the Enable URL Filtering Function checkbox. The rule table will appear. 2 Enter the URL address or keywords in the URL/Keyword field.
Advanced Advanced 101 The Advanced section allows you to set additional parameter details for the Router. You can configure: Security ■ Security ■ VLAN ■ Static Routes ■ RIP ■ DDNS ■ SNMP ■ Syslog ■ Proxy Arp ■ QoS Settings Use the Security screen to set the advanced security settings for the Router.
102 CHAPTER 5: CONFIGURING THE ROUTER ■ NAT — (Network Address Translation), NAT is the method by which the Router shares the single IP address assigned by your ISP with the computers on your network. This function should only be disabled by advanced users, and if your ISP assigns you multiple IP addresses or you need NAT disabled for an advanced system configuration. If you have a single IP address and you turn NAT off, the computers on your network will not be able to access the Internet.
Advanced 103 ■ MSS Clamping — You might not be able to browse some Web sites or to send email messages that contain attachments from an Internet Connection Sharing client computer if your outbound connection is through a Windows XP-based Internet Connection Sharing host computer that uses Point-to-Point Protocol over Ethernet (PPPoE).
104 CHAPTER 5: CONFIGURING THE ROUTER VLAN A VLAN is a flexible group of devices that can be located anywhere in a network, but they communicate as if they are on the same physical segment. With VLANs, you can segment your network without being restricted by physical connections - a drawback of traditional network design.
Advanced 105 Figure 80 VLAN Screen Click Add VLAN to create a new entry (see Figure 81). Figure 81 VLAN Profile Screen ■ Enter a description for your VLAN in the Description field. ■ Enter the IP Address and subnet mask in the corresponding fields. ■ Select to set the NAT Domain as public or private. ■ IGMP Snooping: enabling it will turn on the feature that allows an Ethernet switch to “listen in” on the IGMP conversation between hosts and routers.
106 CHAPTER 5: CONFIGURING THE ROUTER Static Routes You can configure static routes in this screen. You can setup a static route that will get all traffic with destination to business network to go through VPN tunnel and the rest outside of the VPN tunnel. Figure 82 Static Routes Screen To add a static route entry to the table, click Add (see Figure 83). To change an existing entry, click Edit. To delete an entry, click Delete.
Advanced 107 ■ Gateway — the Router used to route data to the network specified by the network address. ■ Interface — select the interface. Note that you should only configure either the Gateway information or select the Interface. After you have finished making changes to the table, click Apply. Here is an example of setting up a static route. ■ IP address of your PC: 10.1.4.52 ■ Subnet mask: 255.255.252.0 ■ Default Gateway: 10.1.4.254 ■ Network Address: 10.1.4.
108 CHAPTER 5: CONFIGURING THE ROUTER RIP RIP (Routing Information Protocol) - RIP allows the network administrator to set up routing information on one RIP-enabled device (this Router), and send that information to all RIP-enabled devices on the network. Figure 85 RIP Parameter Screen You can set up RIP independently on both LAN and WAN interfaces. 1 Check the Enable RIP checkbox. 2 Check the Enable Auto summary checkbox.
Advanced 109 5 Use the Poison Reverse drop-down menu to enable or disable Poison Reverse on the Router. Enabling Poison Reverse on your Router allows it to indicate to other RIP-enabled devices that they have both routes that point to each other, preventing data loops. 6 Use the Authentication Required field to choose the mode of authentication: ■ None — Switches off authentication on the specified interface.
110 CHAPTER 5: CONFIGURING THE ROUTER DDNS The Router provides a list of dynamic DNS providers for you to choose from. Dynamic Domain Name Server (DDNS) enables you to map a static domain name to a dynamic IP address. This function allows you to create a hostname that points to your dynamic IP or static IP address or URL. Before you set up DDNS, you must obtain an account, password or key and static domain name from your DDNS provider. The Router supports five DDNS providers: ■ DynDNS.org ■ TZO.
Advanced SNMP 111 SNMP (Simple Network Management Protocol) allows remote management of your Router by a PC that has an SNMP management agent installed. Check the Enable SNMP box, the table will appear. Figure 87 SNMP Screen Enter the System Contact, System Name, and System Location information. To Configure SNMP Community: 1 In the Community column, enter the name of the SNMP communication channel.
112 CHAPTER 5: CONFIGURING THE ROUTER You can configure the Router to send status messages to the SNMP management agent if a problem occurs on the network. To configure SNMP traps: 1 In the IP Address field, enter the IP address of the PC to which you want your Router to send status messages. 2 In the Community field, enter the name of the SNMP communication channel to which you want your Router to send status messages.
Advanced Proxy ARP 113 Proxy ARP is the technique in which one host, usually a Router, answers ARP requests intended for another machine. By “faking” its identity, the Router accepts responsibility for routing packets to the “real” or intended destination. This heightens the security for your network. Figure 89 Proxy ARP Screen 1 Check the Enable ProxyARP box. 2 Enter the corresponding IP address in the IP Address From and IP Address To fields. 3 Click Apply.
114 CHAPTER 5: CONFIGURING THE ROUTER QoS Settings The QoS (Quality of Service) function allows you to differentiate your network traffic and provide it with high-priority forwarding service. The bandwidth gap between LAN and WAN may significantly degrade the performance of critical network applications, such as VoIP, gaming, and VPN. This QoS function allows you to classify traffic of applications and provides them with differentiated services (Diffserv).
Advanced Traffic Mapping 115 Up to 16 rules can be defined to classify your network traffic into Diffserv forwarding groups and outgoing connections. Figure 91 Traffic Mapping Screen Click Add, the Edit Traffic Class screen will appear. Figure 92 Edit Traffic Class Screen 1 Define the Rule name. 2 Select the traffic type from drop-down menu. 3 Select the forwarding group from the Map to Forwarding Group drop-down menu. 4 Select the value from the Remark DSCP as drop-down menu.
116 CHAPTER 5: CONFIGURING THE ROUTER Figure 93 Detailed Edit Traffic Class Screen Enter the information, then click Apply to make the settings to take effect.
VPN VPN 117 The Router has a Virtual Private Network (VPN) feature that provides a secure link between remote users and the corporate network by establishing an authenticated and encrypted tunnel for passing secure data over the Internet. The Router supports three modes of VPN operation: ■ IPSec (IP Security) — provides IP network-layer encryption. IPSec can support large encryption networks (such as the Internet) by using digital certificates for device authentication.
118 CHAPTER 5: CONFIGURING THE ROUTER Figure 94 VPN Screen 1 Check the Enable IPSec box, configuration details screen appears. Figure 95 Enable IPSec Screen 2 Enter the Local ID Name of your VPN. (the default is 3ComVPN) 3 Click Add to create a new entry, see Figure 96.
VPN 119 Figure 96 Add New VPN Tunnel Configuration Screen On the VPN Tunnel Parameter screen, 1 Set the VPN Tunnel Type to IPSec. 2 Enter a descriptive name for the tunnel in the Tunnel Name field. 3 Remote VPN Gateway - select IP address, and then enter the IP address in the IP Address/Host Name field. If you select ANY, then it would be no need to enter the IP address, as any remote server can be used. 4 At the Remote Party ID drop-down list, select either IP_IPV4_ADDR or ID_USER_FQDN.
120 CHAPTER 5: CONFIGURING THE ROUTER 5 Select the Local Party ID, and then enter the ID, Network Address and Subnet Mask of the Local Secure Group. The network address of the local secure group is usually the network address of the local network. 6 From the Key Management drop-down menu, select either IKE Main Mode or IKE Aggressive Mode. 7 SA (Security Association) attribute - select the option to use for SA attribute. 8 In the Pre-shared Key field, enter the password for the connection.
VPN 121 Check the Enable L2TP box, configuration details screen appears, see Figure 97. Figure 97 Enable L2TP Screen 1 Enter the Pre-shared Key for L2TP Server over IPSec Setting. 2 Define the IP Address Pool for L2TP clients, enter the start/end address. 3 Click Add to create a new entry, see Figure 98.
122 CHAPTER 5: CONFIGURING THE ROUTER 1 Set the Tunnel Type to L2TP over IPSec. 2 Enter a descriptive name for the tunnel in the Tunnel Name field. 3 Enter the User name and Password. 4 Enter the Idle Timeout value. 5 Set the L2TP Type Setting to L2TP Server, or L2TP Client. ■ ■ if you set the type as L2TP Client, then set the Local Type Setting to Network or Host, then enter the Remote Server IP. Check the Auto reconnect box, if you want to auto-reconnect after disconnection.
VPN 123 Figure 100 Add new PPTP VPN Tunnel Screen 1 Set the Tunnel Type to PPTP. 2 Enter a descriptive name for the tunnel in the Tunnel Name field. 3 Enter the User name and Password. 4 Enter the Idle Timeout value. 5 Set the PPTP Type Setting to PPTP Server, or PPTP Client. ■ ■ if you set the type as PPTP Client, then set the Local Type Setting to Network or Host, then enter the Remote Server IP. Check the Auto reconnect box, if you want to auto-reconnect after disconnection.
124 CHAPTER 5: CONFIGURING THE ROUTER System Tools Restart Router These screens allow you to manage different parameters of the Router and perform certain administrative functions. Sometimes it may be necessary to restart (or reboot) the Router. Restarting the Router from this screen will not delete any of your configuration settings. Click the Restart the Router button to restart the Router.
System Tools Upgrade 125 ■ Backup Configuration — You can save your current configuration by clicking the Backup button. Saving your configuration will allow you to restore it later if your settings are lost or changed. It is recommended that you backup your current configuration before performing a firmware update. ■ Restore Configuration Data — The Restore Settings option will allow you to restore a previously saved configuration.
126 CHAPTER 5: CONFIGURING THE ROUTER Time Zone You can set the time settings for the Router on this screen. Figure 104 Time Zone Screen The Router keeps time by connecting to a Network Time Protocol (NTP) server. This allows the Router to synchronize the system clock to the Internet. The synchronized clock in the Router is used to record the security log and control client filtering. Select the time zone that you reside in.
System Tools Ping 127 The ping tool is used to test if the network is working properly. Figure 105 Ping Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field, and click Ping. 2 Select from the Number of times to Ping drop-down menu. 3 The Router keeps a log of the ping test, click Clear Log to delete the records.
128 CHAPTER 5: CONFIGURING THE ROUTER Traceroute Traceroute is the program that shows you the route over the network between two systems, listing all the intermediate routers a connection must pass through to get to its destination. It can help you determine why your connections to a given server might be poor, and can often help you figure out where exactly the problem is.
System Tools DNS Lookup 129 DNS Lookup is the process of resolving an IP address (i.e. 192.168.11.137) to a host name (i.e. xxxcompany.net). Figure 107 DNS Lookup Screen 1 Enter the IP address or domain name in the IP Address or Domain Name field, and click DNS lookup. 2 The Router keeps a log of the DNS lookup test, click Clear Log to delete the records.
130 CHAPTER 5: CONFIGURING THE ROUTER Status and Logs Status You can use the Status Screen to view version numbers for your Router’s software and hardware and check the status of connections to Internet, LAN and WLAN interfaces. This screen shows Router status and statistics. ■ Release - use this button to release the current IP. ■ Renew - use this button to obtain a new IP.
Status and Logs ADSL Status This screen shows ADSL modem status and statistics. Figure 110 ADSL Status Screen ATM PVC Status This screen shows ATM PVC status and statistics. ■ Click Disconnect to disconnect from your ISP. ■ Click Connect to make a connection with your ISP.
132 CHAPTER 5: CONFIGURING THE ROUTER Routing Table This screen displays details for the default routing used by your Router and any routing created using Static Routing or RIP. Figure 112 Routing Table Screen Logs This screen shows any attempts that have been made to gain access to your network as well as the system activities. Figure 113 Logs Screen ■ Click Help to view the help file. ■ Click Save to save the log to the hard disk as a text file.
Status and Logs Traffic Statistics 133 This screen shows the traffic statistics. Use the Refresh button to update the information. Note that the current implementation only shows traffic statistics per forwarding group. Hence if QoS is not enabled, this screen will always show zero values.
134 CHAPTER 5: CONFIGURING THE ROUTER Support/Feedback Support You can use the Support/Feedback screen to obtain support and help, and also provide feedback to 3Com. Figure 115 Support Screen This screen shows support information. Feedback To provide feedback to 3Com, please click Provide Feedback, and this will connect you to the 3Com Web site. Figure 116 Feedback Screen This screen shows feedback information.
6 Basic Connection Checks TROUBLESHOOTING The Router has been designed to aid you when detecting and solving possible problems with your network. These problems are rarely serious; the cause is usually a disconnected or damaged cable, or incorrect configuration. If this section does not solve your problem, contact your supplier for information on what to do next. Perform these actions first: ■ Ensure all network equipment is powered on.
136 CHAPTER 6: TROUBLESHOOTING Browsing to the Router Configuration Screens Connecting to the Internet If you have connected your Router and computers together but cannot browse to the Router configuration screens, check the following: ■ Confirm that the physical connection between your computer and the Router is OK, and that the LAN Status LEDs on the Router and network adapter are illuminated.
Connecting to the Internet ■ 137 If the ADSL Sync LED is off or flashes but does not go to a steady on state, please go through the following steps before contacting 3Com support. 1 Your ISP may have upgraded their DSLAM equipment: Verify your 3Com Router has the latest software/firmware available installed. Upgrades are found at http://www.3Com.
138 CHAPTER 6: TROUBLESHOOTING ■ Ensure that you have entered the correct information into the Router configuration screens as required by your Internet Service Provider. Use the Internet Settings screen to verify this.
Wireless Networking Wireless Networking 139 ■ Ensure that you have an 802.11b or 802.11g or 802.11n wireless adapter for each wireless computer, and that it is correctly installed and configured. Verify that each wireless computer has either Windows 98 or higher or MAC OS 8.5 or higher. ■ Verify that your wireless computers are configured to work in Infrastructure mode and not Ad Hoc mode. The Router contains an access point that is designed to operate in Infrastructure mode.
140 CHAPTER 6: TROUBLESHOOTING unsure try relocating both the wireless computers and the Router to establish whether this problem exists. Recovering from Corrupted Software ■ Most wireless computer adapters will scan the channels for the wireless Router. If a wireless computer has not located the Router then try initiating a search manually if the client software supports this feature or manually set the channel on your wireless computer to correspond to the Router channel number.
Power Adapter 141 4 Using the Web browser on the computer, enter the following URL in the location bar: http://192.168.1.1. This will connect you to the Recovery utility in the Router. 5 Follow the on-screen instructions. Enter the path and file name of the software image file. 6 When the upload has completed, the Router will restart, run the self-test and, if successful, resume normal operation.
142 CHAPTER 6: TROUBLESHOOTING For reference, the part number for the power adapter supplied for your region is: 3Com Number Region 3C15VHUS US and Canada 3C15VHUK UK 3C15VHME Europe and Middle East 3C15VHAA Australasia (except Japan and Korea) 3C15VHSA South Africa 3C15VHRA Argentina
Frequently Asked Questions Frequently Asked Questions 143 How do I reset the Router to Factory Defaults? See Forgotten Password and Reset to Factory Defaults on page 138. How many computers on the LAN does the Router support? Up to a maximum number of 253 total users on the LAN are supported. Please note that the maximum number of users supported will be vary depending on the amount of traffic that each user generates.
144 CHAPTER 6: TROUBLESHOOTING
A IP ADDRESSING The Internet Protocol Suite The Internet Protocol suite consists of a well-defined set of communications protocols and several standard application protocols. Transmission Control Protocol/Internet Protocol (TCP/IP) is probably the most widely known and is a combination of two of the protocols (IP and TCP) working together.
146 APPENDIX A: IP ADDRESSING For your network to work correctly, all devices on the network must have: ■ The same sub-network address. ■ The same subnet mask. The only value that will be different is the specific host device number. This value must always be unique. An example IP address is ‘192.168.100.8’. However, the size of the network determines the structure of this IP address. In using the Router, you will probably only encounter two types of IP address and subnet mask structures.
How does a Device Obtain an IP Address and Subnet Mask? 147 This type of IP Address operates on a subnet mask of ‘255.255.0.0’. See Table 4 for an example about how a network (only four computers represented) and a Router might be configured. Table 4 IP Addressing and Subnet Masking How does a Device Obtain an IP Address and Subnet Mask? DHCP Addressing Device IP Address Subnet Mask PC 1 192.168.100.8 255.255.0.0 PC 2 192.168.201.30 255.255.0.0 PC 3 192.168.113.155 255.255.0.0 PC 4 192.
148 APPENDIX A: IP ADDRESSING Auto-IP Addressing Network devices use automatic IP addressing if they are configured to acquire an address using DHCP but are unable to contact a DHCP server. Automatic IP addressing is a scheme where devices allocate themselves an IP address at random from the industry standard subnet of 169.254.x.x (with a subnet mask of 255.255.0.0). If two devices allocate themselves the same address, the conflict is detected and one of the devices allocates itself a new address.
B TECHNICAL SPECIFICATIONS This section lists the technical specifications for the 3Com Wireless 11n ADSL Firewall Router. 3Com Wireless 11n Cable/DSL Firewall Router Interfaces ADSL connection LAN connection — four 10 Mbps/100 Mbps dual speed Ethernet ports (10BASE-T/100BASE-TX) Antenna Two external Dipole antennas for TX/RX function and the gain value is 2 dBi. One internal PIFA antenna for RX function only and the gain value is 2 dBi. WLAN Interfaces IEEE draft 802.
150 APPENDIX B: TECHNICAL SPECIFICATIONS Standard IEEE 802.11g, Direct Sequence Spread Spectrum (DSSS) Transmission rate: 54 Mbps, automatic fallback to 48, 36, 24, 18, 12, or 6 Mbps Maximum channels: 13 Range up to 304.8 m (1000 ft) Sensitivity: 6, 12, 18, 24, 36, 48 Mbps: -85 dBm; 54 Mbps -66 dBm typical Modulation: CCK, BPSK, QPSK, OFDM Encryption: 40/64 bit WEP, 128 bit WEP, WPA/WPA2 Maximum clients: 128 E.I.R.P: 17 dBm Standard IEEE 802.
3Com Wireless 11n Cable/DSL Firewall Router Standards Functional: ISO 8802/3 IEEE 802.3 IEEE 802.11b, 802.11g Safety: EN 60950-1: 2001 UL 60950-1 IEC 60950-1: 2001 EMC: FCC Part15 B EN 55022 EN 55024 EN 61000 EN 301 489-1 ICES-003 Radio FCC Part 15 C RSS-210 EN 300 328 Environmental: EN 60068 (IEC 68) Telcom FCC Part68 *See Regulatory Notices for conditions of operation.
152 APPENDIX B: TECHNICAL SPECIFICATIONS Ethernet Performance Cable Specifications The Router complies to the IEEE 802.3i, u and x specifications. The Router supports the following cable types and maximum lengths: ■ Category 5 (Fast Ethernet or Dual Speed Ethernet) Twisted Pair — shielded and unshielded cable types. ■ Maximum cable length of 100 m (327.86 ft).
C SAFETY INFORMATION Important Safety Information WARNING: Warnings contain directions that you must follow for your personal safety. Follow all directions carefully. You must read the following safety information carefully before you install or remove the unit: WARNING: The Router generates and uses radio frequency (rf) energy. In some environments, the use of rf energy is not permitted. The user should seek local advice on whether or not rf energy is permitted within the area of intended use.
154 APPENDIX C: SAFETY INFORMATION WARNING: RJ-45 ports. These are shielded RJ-45 data sockets. They cannot be used as telephone sockets. Only connect RJ-45 data connectors to these sockets. Wichtige Sicherheitshinweise VORSICHT: Warnhinweise enthalten Anweisungen, die Sie zu Ihrer eigenen Sicherheit befolgen müssen. Alle Anweisungen sind sorgfältig zu befolgen.
155 VORSICHT: Es sind keine von dem Benutzer zu ersetzende oder zu wartende Teile in dem Gerät vorhanden. Wenn Sie ein Problem mit dem Router haben, das nicht mittels der Fehleranalyse in dieser Anleitung behoben werden kann, setzen Sie sich mit Ihrem Lieferanten in Verbindung. VORSICHT: Vor dem Ausbau des Geräts das Netzadapterkabel herausziehen. VORSICHT: RJ-45-Anschlüsse. Dies sind abgeschirmte RJ-45-Datenbuchsen. Sie können nicht als Telefonanschlußbuchsen verwendet werden.
156 APPENDIX C: SAFETY INFORMATION conditions ne sont maintenues que si l'équipement auquel il est raccordé fonctionne dans les mêmes conditions. AVERTISSEMENT: Il n’y a pas de parties remplaceables par les utilisateurs ou entretenues par les utilisateurs à l’intérieur du moyeu. Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des problèmes dans ce guide, contacter votre fournisseur.
D END USER SOFTWARE LICENSE AGREEMENT 3Com Corporation END USER SOFTWARE LICENSE AGREEMENT YOU SHOULD CAREFULLY READ THE FOLLOWING TERMS AND CONDITIONS BEFORE DOWNLOADING, INSTALLING AND USING THIS PRODUCT, THE USE OF WHICH IS LICENSED BY 3COM CORPORATION ("3COM") TO ITS CUSTOMERS FOR THEIR USE ONLY AS SET FORTH BELOW. DOWNLOADING, INSTALLING OR OTHERWISE USING ANY PART OF THE SOFTWARE OR DOCUMENTATION INDICATES THAT YOU ACCEPT THESE TERMS AND CONDITIONS.
158 APPENDIX D: END USER SOFTWARE LICENSE AGREEMENT TRADE SECRETS; TITLE: You acknowledge and agree that the structure, sequence and organization of the Software are the valuable trade secrets of 3Com and its suppliers. You agree to hold such trade secrets in confidence. You further acknowledge and agree that ownership of, and title to, the Software and Documentation and all subsequent copies thereof regardless of the form or media are held by 3Com and its suppliers.
159
E OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS 3Com offers product registration, case management, and repair services through eSupport.3com.com. You must have a user name and password to access these services, which are described in this appendix. Register Your Product to Gain Service Benefits To take advantage of warranty and other service benefits, you must first register your product at: http://eSupport.3com.
Access Software Downloads 161 Contact your authorized 3Com reseller or 3Com for additional product and support information. See the table of access numbers later in this appendix. Access Software Downloads You are entitled to bug fix / maintenance releases for the version of software that you initially purchased with your 3Com product. To obtain access to this software, you need to register your product and then use the Serial Number as your login. Restricted Software is available at: http://eSupport.
162 APPENDIX E: OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS To send a product directly to 3Com for repair, you must first obtain a return materials authorization number (RMA). Products sent to 3Com without authorization numbers clearly marked on the outside of the package will be returned to the sender unopened, at the sender’s expense. If your product is registered and under warranty, you can obtain an RMA number online at http://eSupport.3com.com/. First-time users must apply for a user name and password.
Contact Us Country Telephone Number Country 163 Telephone Number You can also obtain support in this region using this URL: http://emea.3com.com/support/email.html You can also obtain non-urgent support in this region at these email addresses: Technical support and general requests: customer_support@3com.com Return material authorization: warranty_repair@3com.com Contract requests: emea_contract@3com.
164 APPENDIX E: OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS
GLOSSARY 802.11b The IEEE specification for wireless Ethernet which allows speeds of up to 11 Mbps. The standard provides for 1, 2, 5.5 and 11 Mbps data rates. The rates will switch automatically depending on range and environment. 802.11g The IEEE specification for wireless Ethernet which allows speeds of up to 54 Mbps. The standard provides for 6, 12, 24, 36, 48 and 54 Mbps data rates. The rates will switch automatically depending on range and environment. 802.
166 GLOSSARY Ad Hoc mode Ad Hoc mode is a configuration supported by most wireless clients. It is used to connect a peer to peer network together without the use of an access point. It offers lower performance than infrastructure mode, which is the mode the router uses. (see Infrastructure mode.) Auto-negotiation Some devices in the range support auto-negotiation. Auto-negotiation is where two devices sharing a link, automatically configure to use the best common speed.
GLOSSARY 167 DHCP Dynamic Host Configuration Protocol. This protocol automatically assigns an IP address for every computer on your network. Windows 95, Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Vista contain software that assigns IP addresses to workstations on a network. These assignments are made by the DHCP server software that runs on Windows operating systems.
168 GLOSSARY Full Duplex A system that allows packets to be transmitted and received at the same time and, in effect, doubles the potential throughput of a link. Half Duplex A system that allows packets to transmitted and received, but not at the same time. Contrast with full duplex. Hub A device that regenerates LAN traffic so that the transmission distance of that signal can be extended.
GLOSSARY 169 IPSec IP Security. Provides IP network-layer encryption. IPSec can support large encryption networks (such as the Internet) by using digital certificates for device authentication. When setting up an IPSec connection between two devices, make sure that they support the same encryption method. ISP Internet Service Provider. An ISP is a business that provides connectivity to the Internet for individuals and other businesses or organizations. LAN Local Area Network.
170 GLOSSARY PPPoE Point-to-Point Protocol over Ethernet. Point-to-Point Protocol is a method of data transmission originally created for dial-up connections; PPPoE is for Ethernet connections. PPTP Point-to-Point Tunneling Protocol is a method of secure data transmission between two remote sites over the Internet. RJ-45 A standard connector used to connect Ethernet networks. The “RJ” stands for “registered jack”.
GLOSSARY TCP/IP 171 Transmission Control Protocol/Internet Protocol. This is the name for two of the most well-known protocols developed for the interconnection of networks. Originally a UNIX standard, TCP/IP is now supported on almost all platforms, and is the protocol of the Internet. TCP relates to the content of the data travelling through a network — ensuring that the information sent arrives in one piece when it reaches its destination.
172 GLOSSARY Wireless Client Wireless LAN Service Area Wizard WLAN WPA The term used to describe a desktop or mobile PC that is wirelessly connected to your wireless network. Another term for ESSID (Extended Service Set Identifier). A Windows application that automates a procedure such as installation or configuration. Wireless Local Area Network. A WLAN is a group of computers and devices connected together by wireless in a relatively small area (such as a house or office). Wi-Fi Protected Access.
173 REGULATORY NOTICES For 3Com Wireless 11n ADSL Firewall Router GENERAL STATEMENTS The 3Com Wireless 11n ADSL Firewall Router (WL-603) must be installed and used in strict accordance with the manufacturer's instructions as described in the user documentation that comes with the product. This product contains encryption. It is unlawful to export out of the U.S. without obtaining a U.S. Export License. This product does not contain any user serviceable components.
174 The correction of interference caused by such unauthorized modification, substitution or attachment will be the responsibility of the user. Changes or modifications not expressly approved by 3Com could void the user's authority to operate this equipment. FCC PART68 STATEMENT This equipment complies with Part 68 of the FCC rules and the requirements adopted by the ACTA.
175 INDUSTRY CANADA - RF COMPLIANCE This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: 1) this device may not cause interference and, 2) this device must accept any interference, including interference that may cause undesired operation of the device.
176 Česky [Czech] 3Com Coporation tímto prohlašuje, ze tento RLAN device je ve shodě se základními pozadavky a dalšími příslušnými ustanoveními směrnice 1999/5/ES. Dansk [Danish] Undertegnede 3Com Corporation erklærer herved, at følgende udstyr RLAN device overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.
177 Malti [Maltese] Hawnhekk, 3Com Corporation, jiddikjara li dan RLAN device jikkonforma mal-htigijiet essenzjali u ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC. Magyar [Hungarian] Alulírott, 3Com Corporation nyilatkozom, hogy a RLAN device megfelel a vonatkozó alapvetõ követelményeknek és az 1999/5/EC irányelv egyéb elõírásainak.
178
INDEX 128-bit WEP 46 128-bit WEP Screen 46 1483 Bridge Mode 55 64-bit WEP Screen 47 DNS Screen 55 DSL mode 29 Dynamic Domain Server (DDNS) Screen 70 Dynamic IP Address 34 Dynamic/Fixed IP for Bridge Mode Screen 35, 55 DYNDNS 70 A E Access Control Screen 62 Add PC Screen 63 Add Schedule Rule Screen 65 Addresses IP 85 Admin Password Screen 75 ADSL Status Screen 77 Advanced Screen 68 Automatic Addressing 87 Editing DHCP Clients List Screen 42 Encryption Screen 44 Encryption, disabling 45 Numbers B Back
180 INDEX configuring 56 MAC Address Filtering Screen 66 mode 30 N NAT (Network Address Translation) 68 NAT-T (NAT Traversal) 68 Network addresses 85 Networking wireless 81 NIC wireless 14 P Password 27, 75 Poison Reverse 58 PPPoA 31 PPPoA Screen 31 PPPoA Settings Screen 52 PPPoE 26, 30, 31 PPPoE Screen 30 PPPoE Settings Screen 51 R Remote Admin 68 Reset to Factory Default Screen 73 Reset to Factory Defaults 80 Restart Router Screen 73 RFC 1483 Bridged Mode 32, 53 RFC 1483 Routed Mode 34 RIP (Routing I
