LevelOne User Manual WBR-6603 150Mbps Wireless ADSL2+ Modem Router Ver. 1.
Safety FCC WARNING This equipment may generate or use radio frequency energy. Changes or modifications to this equipment may cause harmful interference unless the modifications are expressly approved in the instruction manual. The user could lose the authority to operate this equipment if an unauthorized change or modification is made. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.
General Public License This product incorporates open source code into the software and therefore falls under the guidelines governed by the General Public License (GPL) agreement. Adhering to the GPL requirements, the open source code and open source license for the source code are available for free download at http://global.level1.com.
Table of Content TABLE OF CONTENT ............................................................................................................................................................... 4 1. INTRODUCTION ................................................................................................................................................................ 5 USER MANUAL OVERVIEW ....................................................................................................................
1. Introduction Congratulations on your purchase of LevelOne WBR-6603 150Mbps Wireless ADSL2+ Modem Router. This product is specifically designed for Small Office and Home Office needs. It provides a complete SOHO solution for Internet surfing, and is easy to configure and operate even for nontechnical users. Instructions for installing and configuring this product can be found in this manual.
2. Unpacking and Setup This chapter provides the package contents and setup information for the 150Mbps Wireless ADSL2+ Modem Router. Features Integrates 4-Port 10/100Mbps Fast Ethernet Switch with Auto-MDI/MDIX Compatible with IEEE 802.
3. Hardware Installation Front View 1) Status • A steady blinking light indicates the device is ready 2) ADSL • A solid light indicates the ADSL port is connected. 3) WLAN • A solid light indicates the Wireless LAN is turned on and ready for use. • Off indicates Wireless LAN is turned off. • LED blinks during wireless data transmission. • Steady blinking indicates WPS function is activated and the router is pairing with wireless client.
Rear View 1) Antenna 2dBi fix antenna. 2) LAN Ports (1~4) Connect Ethernet devices such as computers, switches or hubs. 3) DSL Port The DSL port is the connection for the RJ-11 telephone cable to the ADSL terminator connection.
Hardware installation steps Decide where to place your Wireless ADSL Router You can place your Wireless ADSL Router on a desk or other flat surface. For optimal performance, place your Wireless ADSL Router in the center of your office (or your home) in a location that is away from any potential source of interference, such as a metal wall or microwave oven. This location must be close to power and network connection.
4. Check Your Network Settings 1. 2. Please make sure your PC can get IP address automatically so the WBR-6603 can communicate with your PC during configuration. • Select “Control Panel” > “Network Connections”. • Right click the “Local Area Connection” and choose “Properties”. • Select the TCP/IP protocol for your network card. • Click on the Properties button.
5. Getting Start Configuration Wizard Once properly configured, the WBR-6603 150Mbps Wireless ADSL2+ Modem Router will obtain and assign IP address information automatically. Configuration settings can be established through the Web-Based Configuration Menu. Open a web browser (Internet Explorer/Firefox/Safari) and type in the IP Address http://192.168.1.1 Note: If you have changed the default IP Address assigned to the WBR-6603, ensure you enter the correct IP Address.
Setup Wizard will guide you through a basic configuration procedure step by step. Press Next to begin. Step 1: You can change system password in this page, set up your system password.
Step 2: Setup WAN Type of your internet, then press “Next” Step 3: If you choose WAN type of Bridge mode with NATDynamic IP address, Setup the LAN IP, Host Name information, and WAN Mac address, then press “Next” If you choose WAN type of Bridge mode with NATStatic IP address, setup the LAN IP, WAN IP, Gateway, Subnet Mask and DNS information, then press “Next” 13
Step 4: If you choose WAN type of PPP over Ethernet, please fill in PPPoE service information which is provided by your ISP. After setup, press “Next” Step 5: Set up your Wireless settings, you can Enable/Disable wireless, setup, setup your Network SSID information, and configure wireless channel in this page. After setup, press “Next” Set up your wireless security encryption. It is suggest to use WPAPSK/WPA2-PSK to have stronger wireless encryption.
Step 6: Check all settings is correct, then click “Apply Setting” button. The device will automatically reboot to make the settings effect. Once the user finishes those steps and the router screen displayed as below. It means that the Internet connection is now established.
System Status This option provides the function for observing this product’s working status: WAN Port Status: If the WAN port is assigned a dynamic IP, there may appear a “Renew” or “Release” button on the sidenote column. You can click this button to renew or release IP manually. Wireless Status: You can check your Wireless settings in this column.
6. Advanced Setup To access the Advanced Setup, click on Advanced Setup at the top of the page. Or, for first time installation, choose Advanced Setup and click Enter. Once in the Advanced Setup, you will be presented with the following menu.
Basic Setting These are the basic settings of the unit. Click on the menu on the left to access the respective settings page.
Primary Setup This page lets you change the LAN (Local Area Network) settings on your WBR-6603 150Mbps Wireless ADSL2+ Modem Router and WAN (Wide Area Network) connection. 1. LAN IP Address: The local IP address of this device. The computers on your network must use the LAN IP address of your product as their Default Gateway. You can change it if necessary. 2. WAN Type: WAN connection type of your ISP.
This option is primary to enable this product to work properly. The setting items and the web appearance depend on the WAN type. You can choose a correct one from the following options: A. Ethernet Over ATM (RFC 1483 Bridged) with NAT B. IP over ATM (RFC 1483 Routed). C. PPP over ATM (RFC 2364). D. PPP over Ethernet (RFC 2516). A. Ethernet Over ATM with Static IP Address 1. LAN IP Address: The local IP address of this device.
B. Ethernet Over ATM with Dynamic IP Address 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. Host Name: The name that shown on client list at server side. 3. WAN’s MAC Address: You can manually setup the WAN’s MAC address by clicking the Clone MAC button. 4.
C. IP Over ATM with Static IP Address 1 LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2 WAN IP Address, Subnet Mask, Gateway, Primary and Secondary DNS: Enter the proper settings provided by your ISP. 3 IGMP: If you enable this option, the device would allow IGMP packet pass through.
D. IP Over ATM with Dynamic IP Address 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. Host Name: The name that shown on client list at server side. 3. WAN’s MAC Address: You can manually setup the WAN’s MAC address by clicking the Clone MAC button. 4.
E. PPP Over ATM 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. PPPoA Account , Password, Primary and Secondary DNS: Enter the proper settings provided by your ISP. 3. Maximum Idle Time: the time of no activity to disconnect your PPPoA session. Set it to zero or enable “Autoreconnect” to disable this feature.
F. PPP Over Ethernet 1. PPPoE Account and Password: The account and password your ISP assigned to you. For security, this field appears blank. If you don't want to change the password, leave it blank. 2. Primary and Secondary DNS: Enter the proper settings provided by your ISP. 3. Maximum Idle Time: the amount of time of inactivity before disconnecting your PPPoE session. Set it to zero or enable “Auto-reconnect” to disable this feature. 4.
Virtual Computers (Only for Static and dynamic IP address WAN type) Used when WAN is set as DHCP or Static IP, user can assign a global IP address to a LAN IP Address. Virtual Computer enables you to use the original NAT feature, and allows you to setup the one-to-one mapping of multiple global IP address and local IP address. • Global IP: Enter the global IP address assigned by your ISP. • Local IP: Enter the local IP address of your LAN PC corresponding to the global IP address.
DHCP Server This page allows you to configure the DHCP server on the 150Mbps Wireless ADSL2+ Modem Router For more settings click on More. DHCP Server: To either Disable or Enable DHCP Server.
Wireless Settings Wireless: Enabled by default. Disabling this feature will turn off the wireless function of this unit. Network ID (SSID): Service Set Identifier (SSID) is the name designated for a specific wireless local area network (WLAN). The SSID's factory default setting is LevelOne. The SSID can be easily changed to establish a new wireless network. Note: SSID names may contain up to 32 ASCII characters. Wireless Mode: You can choose the wireless mode to IEEE 802.
Channel: The radio channel number. The permissible channels depend on the Regulatory Domain. The default is AUTO which means the WBR-6603 will find the least used channel to avoid interference. Note: Channel range depends on your regional regulations. Please see specifications for Channel details. Schedule Rule: You can Enable / Disable wireless by schedule rule, and setup the Schedule rules numbers you want to apply in list. For further setting please see “page 61” Schedule Rule.
Enter PIN number of Wireless Adapter It is also possible to use the PIN number you have set on the wireless adapter. Set the adapter as Enrollee and enter the PIN you want. Enter the enrollee’s (computer’s wireless adapter) PIN number and then click the “Trigger” button to initiate WPS.
Push Button Method Select the “Software Button” mode and click the “Trigger” button. An alternative is to press the WPS button at the front of the router for 1 second, until the WLAN light starts flashing. This indicates that WPS is activated. Then press and hold the WPS button on your wireless client for 1 second. If your device has no physical WPS push button, then you can push the software button in the utility.
WDS (Wireless Distribution System) WDS operation as defined by the IEEE802.11 standard has been made available. Using WDS it is possible to wirelessly connect Access Points, and in doing so extend a wired infrastructure to locations where cabling is not possible or inefficient to implement. For maximum compatibility, it is recommended that WDS be set up using only the same models, in this case, WBR-6603. Also note that the standard only supports WEP encryption.
Security: Security - You may select from three levels of encryption to secure your wireless network: No Encryption, WEP, 802.1x RADIUS, WPA-PSK, WPA, WPA2-PSK (AES), WPA2 (AES), WPA-PSK / WPA2-PSK and WPA1 / WPA2. LevelOne recommends WPA2-PSK (AES) for simple and secure wireless encryption. After configuring the wireless security settings on the WBR-6603, you will also need to configure the same settings on your wireless adapter before you attempt a wireless connection.
802.1X To use this security feature, you will need to have a RADIUS server on your network to authenticate access. Please type in the details for your RADIUS server. RADIUS Server IP Please enter your RADIUS server IP Address. Radius port You can change RADIUS server port by manually. RADIUS Shared Key Key value shared by the RADIUS server and this router. This key value is consistent with the key value in the RADIUS server.
WPA-PSK This security is more secure compared to WEP. Select which type of encryption to use (either TKIP or AES) and then enter the key in the Passphrase field. The field needs to be between 8 and 63 characters long and can be any combination of letters and numbers if ASCII setting is used.
WPA, WPA2(AES) WPA1/WPA2 Similar to 802.1X security but with TKIP or AES Encryption. You will need a RADIUS server for authentication. Please enter the details of your RADIUS server. RADIUS Server • IP address or the RADIUS server’s IP address. • Port number of the RADIUS Server • Enter the RADIUS Shared Key Key value shared by the RADIUS server and this router. This key value is consistent with the key value in the RADIUS server.
WPA-PSK, WPA2-PSK(AES), WPA / WPA2-PSK This security is more secure compared to WEP. It will use either TKIP or AES for enhanced security. Please enter the key in the Passphrase field. The field can be between 8 and 63 characters long and can be any combination of letters and numbers under ASCII format. Wireless Client List: You can use this function to see the devices connected to the WBR-6603 through the wireless network.
Change Password This page allows you to change the WBR-6603 Web Configuration password. Please type in the old password (factory default password is admin) and then type in the new password. If you change the password, make sure you use the new password next time you login the web configuration page. Click Save to save the settings and Undo to cancel.
Forwarding Rules This page allows you to configure the port forwarding management of the WBR-6603. Use the menu on the left to access the setting pages. The port forwarding feature is required because the ADSL Router’s NAT (Network Address Translation) will block incoming traffic from the Internet to the LAN if the specific port mapping is not set up in the NAT table.
Virtual Server A virtual server is defined as a Service Port, and all requests to this port will be redirected to the computer specified by the Server IP. Virtual Server can work with Scheduling Rules, and give user more flexibility on Access control. For Detail, please refer to Scheduling Rule (Advanced Setting > Schedule Rule). For example, if you have an FTP server (port 21) at 192.168.1.2, a Web server (port 80) at 192.168.1.3, and a VPN server at 192.168.1.
Special AP Some applications require multiple connections, like Internet games, Video conferencing, Internet telephony, etc. Because of the firewall function, these applications cannot work with the WBR-6603. The Special Applications feature allows some of these applications to work with this product. If this fails to make an application work, try setting that computer as the DMZ host instead. Please refer to Forwarding Rules > Miscellaneous section. 1.
Miscellaneous - IP Address of DMZ Host DMZ (Demilitarized Zone) Host is a host without the protection of firewall. It allows a computer to be exposed to unrestricted 2-way communication for Internet games, Video conferencing, Internet telephony and other special applications. To enable DMZ, enter the IP address of the PC and tick on Enable.
Security Settings This section allows you to configure the security management of the unit. Click on the menu on the left to access the respective setting page.
Packet Filter Packet Filters allows you to control what packets are allowed to pass through the WBR-6603. The Outbound Filter applies to all outbound packets and the Inbound Filter only applies to packets that are destined to Virtual Servers or the DMZ Host only. To enable the Outbound Filter, tick the Enable tick box. There are two types of filtering policies: 1. Allow all to pass except those match the specified rules 2.
For source or destination IP address, you can define a single IP address (192.168.1.1) or a range of IP addresses (192.168.1.100 – 192.168.1.200). An empty implies all IP addresses. For source or destination port, you can define a single port (80) or a range of ports (1000-1999). You also need to add prefix "T" or "U" to specify TCP or UDP protocol, for example T80, U53, U20002999. No prefix indicates both TCP and UDP are defined. An empty implies all port addresses.
Example 2: (1.2.3.100-1.2.3.199) Remote hosts can do everything except read net news (port 199) and transfer files via FTP (port 21) behind Router Server. Others are all allowed. After Inbound Packet Filter setting is configured, click the save button.
Outbound Filter: To enable Outbound Packet Filter click the check box next to Enable in the Outbound Packet Filter field. Example 1: (192.168.1.100-192.168.1.149) Located hosts are only allowed to send mail (port 25), receive mail (port 110), and browse Internet (port 80); port 53 (DNS) is necessary to resolve the domain name. (192.168.1.10-192.168.1.20) Located hosts can do everything (block nothing) Others are all blocked.
Example 2: (192.168.1.100 and 192.168.1.119) Located Hosts can do everything except read net news (port 119) and transfer files via FTP (port 21) Others are allowed. After Outbound Packet Filter setting is configured, click the save button.
Domain Filter The Domain Filter enables you to prevent users from accessing specific domain addresses (web sites). To enable Domain Filter, make sure to tick the Enable tick box. • Log DNS Query: Check if you want to log the action when someone accesses the specific URLs. • Privilege IP Addresses Range: Setting a range of hosts and privilege these hosts to access the internet without any restrictions. • Domain Suffix: A suffix of URL to be restricted; For example, ".com", "xxx.com".
URL Blocking URL Blocking will block LAN computers from connecting to a pre-defined Web Site. The major difference between Domain Filter and URL Blocking is that Domain Filter requires the user to input suffixes (etc: xxx.com, ttt.net) while URL Blocking only requires user to input a keyword. In other words, Domain filter can block specific website, while URL Blocking can block hundreds of websites by simply a keyword. To enable URL Blocking, make sure to tick Enable.
MAC Control MAC Address Control allows you to assign different access right for different users and to assign a specific IP address to a certain MAC address. To enable MAC Address Control, make sure to tick on Enable. All of the settings in this page will take effect only when “Enable” is checked. There are two types of control method available: • Connection Control: To control which wired and wireless clients can connect to this device.
MAC Address MAC address indicates a specific client. IP Address Expected IP address of the corresponding client. Keep it empty if you don't care its IP address. C When "Connection control" is checked, check "C" will allow the corresponding client to connect to this device. A When "Association control" is checked, check "A" will allow the corresponding client to associate to the wireless LAN. In this page, we provide the following Combo box and button to help you to input the MAC address.
Miscellaneous This page allows you to change various miscellaneous security settings. Remote Administrator Host/Port: In general, only intranet user can browse the built-in web configuration pages to perform administration task. This feature enables you to perform administration task from the Internet. If this feature is enabled, only the specified IP address can perform remote administration. If the specified IP address is 0.0.0.0, any host can connect to this product to perform administration task.
Advanced Settings These pages allow you to configure the more advanced settings on the unit.
System Time This page allows you to set the time settings of the WBR-6603. There are three ways to set up the System Time of the WBR-6603. 1. Get Date and Time by NTP Protocol: Selected if you want to get the Date and Time from an NTP server. A Time Server and time zone is required. Once entered, click Sync Now to sync the time with the Time Server. 2. Set Date and Time using PC’s Date and Time: Set the Date and Time using the settings from your computer. 3.
System Log The WBR-6603 supports both Syslog (using UDP packets) and E-Mail alert. It support two methods to export system logs to specific destination by means of syslog (UDP) and Email (TCP). The items you have to setup including: Syslog setting: For Syslog, you will need to enter the IP address of the host computer that will be receiving the syslog messages and tick on Enable. E-mail alert: For E-Mail alert, you will need to define the following: • E-Mail Alert: Tick Enable to enable this feature.
Dynamic DNS Dynamic DNS is a feature that allows users to set up a static domain name even when they have a dynamic internet IP address. So even if your IP address changes every time you connect to your ISP, the IP address can be mapped to a host name so that anyone who wants to connect to the WBR6603, or any services behind the router from the internet can just use the Dynamic DNS hostname instead of the IP address which might change.
SNMP Setting SNMP (Simple Network Management Protocol) is designed to give users the ability to remotely manage a computer or network device. To enable SNMP, please set the following: • Enable SNMP: You must check either Local or Remote or both to enable SNMP function. If Local is checked, this unit will respond to requests from LAN. If Remote is checked, the unit will respond to requests from WAN. • Get Community: Set the community of public. This will act as a password.
Routing When you have more than one WBR-6603, or router with different subnets on the network, you will need to enable this function to allow the different subnets to communicate with each other. There are two types of routing supported by the WBR-6603. • Dynamic Routing: This method uses Routing Information Protocol (RIP) to enable the devices to determine the best route for each packet based on the number of hops between the source and destination. Tick the Enable box to enable Dynamic Routing.
Destination Subnet Mask Gateway Hop Enabled 192.168.1.0 255.255.255.0 192.168.123.216 1 192.168.0.0 255.255.255.0 192.168.123.103 1 So if, for example, Client3 wants to send an IP data packet to 192.168.0.2, it would use the above table to determine that it had to go via 192.168.123.103 (Router 2) And if it sends Packets to 192.168.1.11 will go via 192.168.123.216 (Router 1) Each rule can be enabled or disabled individually.
Schedule Rule This feature allows you to define the time schedule of Virtual Server and Packet Filter rules. To enable Scheduling, tick Enable and click Save. Then create new rules by pressing the Add New Rule button. Enter the Rule’s Name and set the Start and End Times for each day. Then click Save to save the new rule. Once defined, you can use it for Wireless setting, Virtual Server, Packet/Domain Filters, and URL Blocking by entering the rule number in the “Schedule Rule#” fields.
When you set up the schedule rule, it will have rules in rule table as following: Schedule Enable Selected if you want to enable the Schedule. Edit To edit the schedule rule. Delete To delete the schedule rule, and the rule# of the rules behind the deleted one will decrease one automatically.
Toolbox This section has some basic tools to maintain the WBR-6603 systems.
View Log You can View system log by clicking the View Log button.
Firmware Upgrade This page allows you to perform updates to the firmware of the WBR-6603. To use, click Browse and locate the firmware image file, then click Upgrade. Note: Please connect to the WBR-6603 using a wired LAN connection as if the connection breaks during the update, it will render the unit unworkable. Also disable any anti-virus or firewall program before beginning the update. Backup Setting You can backup your settings by clicking the Backup Setting button and save it as a bin file.
Miscellaneous MAC Address for Wake-on-LAN Wake-on-LAN is a technology that enables you to power up a networked device remotely. In order to enjoy this feature, the target device must be Wake-on-LAN enabled and you have to know the MAC address of this device, say 00-11-22-33-44-55. Clicking "Wake up" button will make the router to send the wake-up frame to the target device immediately. Domain Name or IP Address for Test Allow you to configure an IP, and ping the device.
Appendix A 802.1x Setting Figure 1: Testing Environment (Use Windows 2000 Radius Server) Equipment Details PC1: Microsoft Windows XP Professional without Service Pack 1 and LevelOne Wireless PCI Card PC2: Microsoft Windows XP Professional with Service Pack 1a or later and LevelOne Wireless PCI Card. Authentication Server: Windows 2000 RADIUS server with Service Pack 3 and HotFix Q313664. Note.
DUT and Windows 2000 Radius Server Setup Setup Windows 2000 RADIUS Server We have to change authentication method to MD5_Challenge or using smart card or other certificate on RADIUS server according to the test condition. Setup DUT 1. Enable the 802.1X (check the “Enable checkbox“). 2. Enter the RADIUS server IP. 3. Enter the shared key. (The key shared by the RADIUS server and DUT). 4. We will change 802.1X encryption key length to fit the variable test condition. Setup Network adapter on PC 1.
Windows 2000 RADIUS server Authentication testing: DUT authenticate PC1 using certificate. (PC2 follows the same test procedures.) 1. Download and install the certificate on PC1. (Fig 4) 2. PC1 chooses the SSID of DUT as the Access Point. 3. Set authentication type of wireless client and RADIUS server both to EAP_TLS. 4. Disable the wireless connection and enable again. 5. The DUT will send the user's certificate to the RADIUS server, and then send the message of authentication result to PC1. (Fig 5) 6.
Figure 6: Authentication success DUT authenticate PC2 using PEAP-TLS. 1. PC2 chooses the SSID of DUT as the Access Point. 2. Set authentication type of wireless client and RADIUS server both to PEAP_TLS. 3. Disable the wireless connection and enable again. 4. The DUT will send the user's certificate to the RADIUS server, and then send the message of authentication result to PC2. 5. Windows XP will prompt that the authentication process is success or fail and end the authentication procedure. 6.
Appendix B FAQ and Troubleshooting This chapter covers some common problems that may be encountered while using the Wireless ADSL Router and some possible solutions to them. If you follow the suggested steps and the Wireless ADSL Router still does not function properly, contact your dealer for further advice. What can I do when I have some trouble at the first time? 1.
2. Why can’t I connect the router even if the cable is plugged in LAN port and the LED is light? A: First, please check Status LED. If the device is normal, the LED will blink once per second. If not, please check the blinking Status LED as shown: Status LED stays constantly on or off: The system is frozen. Suggest powering off and on the router. If this symptom continues to occur, please reset to default settings or upgrade to the latest firmware and try again.
How do I connect router by using wireless? 1. How to start to use wireless? A: First, make sure that you already installed wireless client device in your computer. Then check the configuration of wireless router.
Then click and will see the AP list that wireless client can be accessed: If the client cannot find your wireless router, please refresh network list again. Choose the one that you will want to connect and connect: If successfully, the computer will show something similar.
2. How can I use AES encryption of WPA-PSK to connect? A: First, you must check if the driver of wireless client supports AES encryption. Please refer to the below: If SSID is default and click “Properties” to check if the driver of wireless client supports AES encryption. 3. When I use wireless to connect the router, but I find the signal is very low even if I am close to the router? A: Please check if the wireless client is normal, first.
Technical Specifications General Model WBR-6603 150Mbps Wireless ADSL2+ Modem Router Data Transfer Rate 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54Mbps Max physical rate up to 150 Mbps in 802.11n mode Transmit Power 802.11b: 17±2dBm 802.11g: 14±2dBm 802.11n: 14±2dBm Frequency Range America/ FCC: 2.412~2.462GHz (11 Channels) Europe/ ETSI: 2.412~2.
