Installation and User’s Manual PENTAGRAM Cerberus Wi-Fi Lite (P 6381-0) The latest versions of manual, drivers and applications are available on www.pentagram.
NOTE! Any information and technical data are subject to change without prior notification and/or indication in this manual. © 2007 PENTAGRAM All rights reserved; copying and reproduction is strictly forbidden.
Cerberus Wi-Fi Lite (P6381-0) INDEX INTRODUCTION ................................................................................................. 5 FEATURES..................................................................................................... 5 PACKAGE CONTENTS................................................................................... 5 PRODUCT OVERVIEW ....................................................................................... 6 IMPORTANT NOTES .........................
Cerberus Wi-Fi Lite (P6381-0) Introduction Thank you for choosing the Cerberus Wi-Fi Lite (P6381-0). With the Wireless-G Router, you can share one Internet connection among multiple computers and extend wireless connectivity to mobile users easily and securely. With its compact design, the Wireless-G Router is easy to set up and configure with the embedded web-based configuration screens. Features • • • • • • • IEEE 802.11g and 802.11b Wireless LAN Access.
Cerberus Wi-Fi Lite (P6381-0) Product Overview Important Notes • • • • • • Do not use the router in high humidity or high temperatures. Do not use the same power source for the router as other equipment. Do not open or repair the case yourself. If the router is too hot, turn off the power immediately and have it repaired at a qualified service center. Avoid using this product and all accessories outdoors. Place the router on a stable surface. Only use the power adapter that comes with the package.
Cerberus Wi-Fi Lite (P6381-0) Back Panel Label 1-4 (RJ-45) WAN (RJ-45) RESET PWR Used for... Connecting to computers/devices using the Ethernet cable Connecting to a cable/DSL modem using the Ethernet cable Resetting the device. Connecting with supplied power adapter (9V 0,8A) Default Settings Before changing configuration familiarize yourself with these default settings. IP Address 192.168.1.254 Subnet Mask 255. 255. 255.
Cerberus Wi-Fi Lite (P6381-0) Resetting router • • Turn router on and wait about 2 minutes for router initialization. Hold the RESET button until the LEDs all turn Off, turn On and then turn Off. The router performs configuration factory reset and the router reboots. You can then access the router from the web GUI. Connecting Cerberus to Computer.
Cerberus Wi-Fi Lite (P6381-0) Windows Vista Note: Network configuration require administrator privileges. When User Account Control window pops up, either click Continue (Administrator user) or select Administrator user and enter valid password (Standard user). 1. Click Start → Control Panel. 2. Click View network status and tasks. 3. Click View connection. 4. On General tab, Click the Properties button. 5. On General tab, select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
Cerberus Wi-Fi Lite (P6381-0) 6. On General tab, select Obtain an IP address automatically and Obtain DNS server address automatically. 7. Click OK to save settings and close Internet Protocol Version 4 (TCP/IPv4) Properties window.
Cerberus Wi-Fi Lite (P6381-0) Windows 2000/XP 1. Click Start → Settings → Control Panel. Double-click the Network Connections icon (2000/XP Classic view) or click Network and Internet Connections icon and then Network Connections icon (XP Default view). 2. Double-click the Local Area Connection icon. 3. On General tab, Click the Properties button. 4. On General tab, select Internet Protocol (TCP/IP) and click Properties. 5.
Cerberus Wi-Fi Lite (P6381-0) Windows 95/98/Me 1. Click Start → Settings → Control Panel. Double-click the Network icon. 2. On Configuration tab, select TCP/IP for appropriate network adapter and click Properties. 3. On IP Address tab, select Obtain an IP address automatically. 4. On DNS Configuration tab, select Disable DNS 5. Click OK to save settings and close TCP/IP Properties window.
Cerberus Wi-Fi Lite (P6381-0) Configure router via web browser Cerberus Wi-Fi Lite (P6381-0) router can be configured via web browser, which is usually integrated with operating system. Router offers clear and simple interface. Login 1. 2. Launch the Web browser In address bar enter the default IP address: http://192.168.1.254 3.
Cerberus Wi-Fi Lite (P6381-0) Navigation Buttons Next>> – Click Next>> to proceed in a series of screens. <
Cerberus Wi-Fi Lite (P6381-0) Setup Wizard You can use the Setup Wizard to configure NTP (Network Time Protocol), LAN, WAN and wireless port settings. The main Setup Wizard screen displays every time you access the Wireless-G Router. Or, click Setup Wizard in the navigation panel. Click Next>> to continue.
Cerberus Wi-Fi Lite (P6381-0) Setup Wizard: Operation Mode You can setup different modes to LAN and WLAN interface for NAT and bridging function. Gateway – In this mode, the device is supposed to connect to internet via ADSL/Cable Modem. The NAT is enabled and PCs in four LAN ports share the same IP to ISP through WAN port. The connection type can be setup in WAN page by using PPPOE, DHCP client, PPTP client or static IP.
Cerberus Wi-Fi Lite (P6381-0) Setup Wizard: Time Zone Settings Configure NTP (Network Time Protocol) in the first Setup Wizard screen. NTP allows the Wireless-G Router to automatically update system date and time from a time server. Enable NTP client update – Select this option to set the Wireless-G Router as an NTP client to automatically update the system date and time from a time server on the network. Then set the fields below. Clear this check box to disable this feature.
Cerberus Wi-Fi Lite (P6381-0) Setup Wizard: LAN Interface Setup Configure the IP address and subnet mask of the LAN interface on the Wireless-G Router in the second Setup Wizard screen. IP Address – This field displays the router’s current LAN IP address, which is used to access WebGUI. To change the setting, specify a new IP address for the LAN interface. Enter the IP address in dotted decimal notation. For example, 192.168.1.254. Subnet Mask – This field displays the current subnet mask.
Cerberus Wi-Fi Lite (P6381-0) Setup Wizard: WAN Interface Setup Configure Internet access settings in the third Setup Wizard screen. This screen varies depending on the connection type you select. Configure the fields in this screen with the information provided by your ISP. • WAN Interface Setup: DHCP Client If your ISP does not give you any IP address and/or user name and password information, select DHCP Client in the WAN Access Type field.
Cerberus Wi-Fi Lite (P6381-0) • WAN Access Setup: Static IP If your ISP provide you with a static WAN IP address without user name or password information, select Static IP in the WAN Access Setup field. Set the network information with the information provided by your ISP. IP Address – Enter the WAN IP address (in dotted decimal notation) as provided by your ISP. For example. 10.10.10.1. Subnet Mask – Enter the subnet mask (in dotted decimal notation) for the WAN IP address. For example. 255.255.255.0.
Cerberus Wi-Fi Lite (P6381-0) • WAN Interface Setup: PPPoE If your ISP provides you with a user name and password, then most likely you are using a PPPoE connection. Select PPPoE in the WAN Access Type field. User Name – Enter the account user name as provided by the ISP. The user name is case-sensitive. Password – Enter the password associated with the user name above. The password is case-sensitive. Cancel – Click Cancel to start configuring the Setup Wizard again.
Cerberus Wi-Fi Lite (P6381-0) • WAN Interface Setup: PPTP PPTP is mostly available in European countries. If your ISP provides you a fixed WAN IP address, user name and password, then you are probably using PPTP connection type. Select PPTP in the WAN Access Type field. IP Address – Enter the WAN IP address (in dotted decimal notation) as provided by your ISP. For example. 10.10.10.1. Subnet Mask – Enter the subnet mask (in dotted decimal notation) for the WAN IP address. For example. 255.255.255.0.
Cerberus Wi-Fi Lite (P6381-0) • Setup Wizard: Wireless Basic Settings Configure basic wireless LAN and wireless security settings in the fourth Setup Wizard screen. Band – If your wireless network contains only IEEE 802.11b devices, select 802.1 B. If your wireless network contains only IEEE 802.11g devices, select 802.1 G. If your wireless network contains both IEEE 802.11b and IEEE 802.11g devices, select 802.1 B/G.
Cerberus Wi-Fi Lite (P6381-0) Note: If you have changed the LAN IP address, you must use the new IP address to access the WebGUI again. • Testing Your Connection You have completed the wizard screens. To test your Internet connection, open a web browser on any connected computer and enter any web site address (such as http://www.pentagram.eu). Operation Mode You can setup different modes to LAN and WLAN interface for NAT and bridging function.
Cerberus Wi-Fi Lite (P6381-0) LAN Interface Setup The LAN (Local Area Network) is the network connected to a LAN port on the Wireless-G Router. To configure LAN interface settings, click LAN Settings in the navigation panel. IP Address – This field displays the router’s current LAN IP address, which is used to access WebGUI. To change the setting, specify a new IP address for the LAN interface. Enter the IP address in dotted decimal notation. For example, 192.168.1.254.
Cerberus Wi-Fi Lite (P6381-0) WAN Interface Setup Configure advanced WAN interface settings in the WAN Interface Setup screen. This screen varies depending on the connection type you select. The following list describes the new fields in this screen. For other field descriptions, refer to Setup Wizard: WAN Interface Setup section of this manual. MTU Size – MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for Internet transmission.
Cerberus Wi-Fi Lite (P6381-0) Enable PPTP Pass through on VPN Connection – PPTP (Point-to-Point Tunneling Protocol) allows you to establish VPN sessions to a Windows computer (such as Windows XP). Select this option to allow PPTP tunnel to pass through the Wireless-G Router. Enable L2TP Pass through on VPN Connection – L2TP (Layer 2 Tunneling Protocol) allows you to establish a secure connection on the MAC layer. Select this option to allow L2TP tunnel to pass through the Wireless-G Router.
Cerberus Wi-Fi Lite (P6381-0) Wireless Wireless: Wireless Basic Settings Click Wireless > Wireless Basic Settings. Configure basic wireless settings in this screen. Disable Wireless LAN Interface – Select this option to deactivate wireless capability on the Wireless-G Router. No wireless connection is allowed. Band – If your wireless network contains only IEEE 802.11b devices, select 802.1 B. If your wireless network contains only IEEE 802.11g devices, select 802.1 G.
Cerberus Wi-Fi Lite (P6381-0) Regulation Domain – Select the name of your regulation domain. Channel Number – A channel is the operating frequency in which a wireless device transmits data. The number of channels you can select varies depending on the regulation domain you select. Select a channel number the Wireless-G Router is to use for wireless communication. To reduce interference, select a channel number that is further away from what the nearest wireless device/network uses.
Cerberus Wi-Fi Lite (P6381-0) Encrypt – This field displays whether security is activated on the wireless network/device. Note: If communication to a wireless network is encrypted, you must first configure the same wireless security settings and then connect to that wireless network. Signal – This field displays the signal strength to the wireless network/device. Refresh – Click Refresh to update this screen. Connect – Click Connect to establish a connection to the select wireless network.
Cerberus Wi-Fi Lite (P6381-0) Wireless: Wireless Advanced Settings Click Wireless > Advanced Wireless Settings to display the configuration screen. The default wireless settings in this screen work in most wireless network environment. Authentication Type – IEEE 802.11b defines a basic authentication security using WEP (Wireless Equivalent Protocol) keys. • Select Open System if you don’t want to use a WEP key for authentication.
Cerberus Wi-Fi Lite (P6381-0) Preamble Type – A preamble is used to synchronize transmission timing. • Select Long Preamble if there is interference in your wireless network or you are not sure about the preamble settings on other wireless devices. All IEEE 802.11b devices support long preamble. • Select Short Preamble if all wireless devices support this mode. Short preamble reduces transmission overhead.
Cerberus Wi-Fi Lite (P6381-0) Wireless: Security Configure security for the wireless interface in the Wireless Security Setup screen. The Wireless-G Router supports four wireless security options: WEP, WPA, WPA2, WPA2 Mixed. These options offer different security levels for wireless communication. Note: It is recommended that you use the highest security option to protect your wireless communication. Click Wireless > Security to display the configuration screen.
Cerberus Wi-Fi Lite (P6381-0) • Wireless: Security: WEP WEP (Wired Equivalent Privacy) uses a key to encrypt and decrypt traffic transmitted wirelessly. WEP keeps wireless communication private. Note: Both the Wireless-G Router and the connected wireless device(s) must use the same WEP key for communication. WEP does not provide user authentication. You can enable IEEE 802.1x on the WirelessG Router to authenticate a user before wireless access is allowed.
Cerberus Wi-Fi Lite (P6381-0) Wireless: Security: WEP: Set WEP Key Click Set WEP Key to display the configuration screen as shown. Key Length – Select the encryption key length. Choices are 64-bit and 128-bit. Select 128-bit for higher security. Key Format – Specify how you want to enter the keys. Select Hex to enter hexadecimal format (that starts with 0x). Select ASCII to enter alphanumerical characters (a-z, A-Z, 09) for the keys.
Cerberus Wi-Fi Lite (P6381-0) • Wireless: Security: WPA/ WPA2/ WPA2 Mix WPA (WiFi Protected Access) is a subset of IEEE802.11i and provides better data encryption over WEP and optional authentication. WPA2 (WiFi Protected Access 2), also known as IEEE 802.11i, has improved data encryption and user authentication compared to WPA. For AES, WPA2 uses a 256-bit block data encryption. Encryption – Select WPA, WPA2 or WPA2 Mix (for both WPA and WPA2). Use 802.
Cerberus Wi-Fi Lite (P6381-0) Wireless: Wireless Access Control Use the Wireless Access Control to set the Wireless-G Router to allow or block wireless access based on a computer’s MAC address. This allows you to restrict wireless access and increase security. Click Wireless > Wireless Access Control to display the configuration screen as shown. Wireless Access Control Mode – Set the access control action to apply on the specified computer(s).
Cerberus Wi-Fi Lite (P6381-0) Example: Allow Wireless Access on a Computer The following figure shows an example where the Wireless-G Router allows wireless access from a computer with the MAC address of 00:02:3f:63:78:a1. All other computers are not allowed to access the Wireless-G Router over the wireless interface. Wireless: WDS (Wireless Distributed System) The WDS screen is applicable when you set the Wireless-G Router to operate in WDS mode in the Wireless Basic Settings screen.
Cerberus Wi-Fi Lite (P6381-0) Set Security – Click Set Security to display a screen to configure WDS security settings. Current WDS AP List – This table displays the list of wireless APs participating in this WDS. MAC Address – This field displays the MAC address of the wireless AP in this WDS. Comment – This field displays the description for this setting. Select – Select this option to delete the wireless AP. Delete Selected – Click Delete Selected to delete the selected wireless AP(s).
Cerberus Wi-Fi Lite (P6381-0) Firewall Firewall: IP Filtering Use the IP Filtering screen to limit Internet access on computers based on the IP addresses and protocol types. This is useful to restrict Internet access usage and providing network security. Click Firewall > IP Filtering to display the configuration screen as shown. Enable IP Filtering – Select this option to activate this feature. Local IP Address – Enter the IP address of a computer on which you want to restrict access.
Cerberus Wi-Fi Lite (P6381-0) Example: Restricting Internet Access on a Computer This following example sets the Wireless-G Router to block Internet access from the computer with an IP address of 192.168.1.120. Firewall: Port Filtering The Port Filtering feature allows you to restrict Internet access based on the application protocol and port number(s). You can control Internet access usage (for example, block peerto-peer applications) and increase network security.
Cerberus Wi-Fi Lite (P6381-0) MAC Address – This field displays the MAC address of the computer to which this MAC filter applies. Comment – This field displays the description for this port filter. Select – Select this option to delete the port filter. Delete Selected – Click Delete Selected to delete the selected port filter(s). When you click this button, a Selected warning screen displays. Click OK to continue. Delete All – Click Delete All to remove all port filter(s).
Cerberus Wi-Fi Lite (P6381-0) MAC Address – Enter the MAC address of a computer on which you want to restrict access. For example, 0023f6378a1. Comment – Enter a description for this MAC filtering rule. Apply Changes – Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect. Reset – Click Reset to undo the changes. Current Filter Table – This table displays the current MAC filter settings on the Wireless-G Router.
Cerberus Wi-Fi Lite (P6381-0) Firewall: URL Filtering URL Filtering allows you to restrict access based on the web site address. Click Firewall > URL Filtering to display the configuration screen. Enable URL Filtering – Select this option to activate this feature. URL Address – Enter the web site address to which you want to restrict access. For example, http://xxx.com. Apply Changes – Click Apply Changes to save the changes. The Wireless-G Router will reboot to make the changes take effect.
Cerberus Wi-Fi Lite (P6381-0) VPN Settings A VPN (Virtual Private Network) allows you to set up a secure connection over the Internet to a remote location without the cost of a leased line. With VPN, data is encrypted before sending over the Internet to the remote site. This technique of secure communication is known as tunneling. The Wireless-G Router supports IPSec (Internet Protocol Security) VPN. IPSec VPN secures data transferred over the IP layer.
Cerberus Wi-Fi Lite (P6381-0) Remote Address – This field displays the IP address and subnet mask of the remote VPN location. Remote Gateway – This field displays the IP address of the remote VPN gateway. Status – This field displays whether this VPN tunnel is up (Connected) or not (Disconnected). Edit – Click Edit to configure the selected VPN tunnel. Delete – Click Delete to remove the selected VPN tunnel. Refresh – Click Refresh to update this screen.
Cerberus Wi-Fi Lite (P6381-0) Remote Secure Gateway – Enter the IP address of the remote VPN gateway with which the Wireless-G Router sets up a VPN connection. Remote IP Address/ Network – Enter the destination IP address of the remote host/network. For example, 192.168.1.10. Remote Subnet Mask – Enter the subnet mask for the remote host/network. For example, 255.255.255.0. Local/Peer ID – Configure the fields below to set the ID type and content to identify the local and remote VPN endpoints.
Cerberus Wi-Fi Lite (P6381-0) Back – Click Back to return to the main VPN setup screen. Help – Click Help to display on-line help information in a pop-up screen. Advanced VPN Settings for IKE To configure phase 1 and phase 2 IKE security settings for a VPN rule, click Advanced in the Edit screen. There are two phases for an IKE negotiation before a VPN tunnel is established. During phase 1 negotiation, two VPN devices exchange security parameters (such as the authentication and encryption algorithms, etc.
Cerberus Wi-Fi Lite (P6381-0) Phase 2 – Set the fields for phase 2 negotiation. Active Protocol – The Wireless-G Router uses ESP (Encapsulating Security Payload) to maintain an SA. Encryption Algorithm – Specify the encryption algorithm for this VPN rule. Choices are 3DES and AES128 (faster). Select NULL to set up phase 2 tunnel (for key exchange) without encryption. Authentication Algorithm – Specify the encryption algorithm for this VPN rule. Choices are MD5 and SHA1 (more secure).
Cerberus Wi-Fi Lite (P6381-0) Advanced Advanced: Port Forwarding Use the Port Forwarding screen to forward service requests to the computer(s) behind the Wireless-G Router. This allows you to set up web servers, FTP servers or special applications that require Internet access (such as video conferencing or online gaming). Click Advanced > Port Forwarding to display the configuration screen as shown. Enable Port Forwarding – Select this option to activate this feature.
Cerberus Wi-Fi Lite (P6381-0) Help – Click Help to display on-line help information in a pop-up screen. Example: Forwarding HTTP Requests This section shows you how to configure the Port Forwarding screen to forward HTTP (or web) requests. In this example, you want to set the Wireless-G Router to forward all service requests on port 80 to a server computer with a fixed IP address of 192.168.1.10.
Cerberus Wi-Fi Lite (P6381-0) Advanced: Dynamic DNS You can configure Dynamic Domain Name System (DDNS) settings on the Wireless-G Router. DDNS allows you to assign fixed domain name to a dynamic IP address. This is useful when you wan to set up a web sever, FTP server or other publicly accessible servers on your computer. Before you enable and use DDNS, you must sign up for DDNS service with a service provider (such as http://www.dyndns.org).
Cerberus Wi-Fi Lite (P6381-0) Management Management: Status View current device status in the Wireless-G Router Status screen. Click Management > Status. System Uptime – This field displays the time that elapsed since the Wireless-G Router last reboots. Firmware Version – This field displays the current firmware version number. Wireless Configuration Mode – This field displays the wireless operating mode on the Wireless-G Router.
Cerberus Wi-Fi Lite (P6381-0) Default Gateway – This field displays the IP address of the gateway device. DHCP Server – This field displays whether DHCP server is activated on the Wireless-G Router. MAC Address – This field displays MAC address of the LAN Interface. WAN Configuration Attained IP Protocol – This field displays the IP addressing type on the WAN interface. IP Address – This field displays the WAN IP address.
Cerberus Wi-Fi Lite (P6381-0) Time Expired(s) – This field displays the time(s) the DHCP client is allowed to use the IP address. After the time expires, the DHCP client must obtain a new IP address from the Wireless-G Router again. Refresh – Click Refresh to update this table. Help – Click Help to display on-line help information in a pop-up screen. Management: Time Zone Settings You can set the system time on the Wireless-G Router using the following methods: • manually.
Cerberus Wi-Fi Lite (P6381-0) Management: Password The default administrative login name is root and the default password is 1234. It is recommended you change the default login password after the first login. User Name – The default user name is root. Specify a new user name. Enter a name between 1 to 30 alphanumerical characters. If you don’t want to change the default user name, enter root. Note: The user name is case sensitive. If you leave this field blank, login authentication will be disabled.
Cerberus Wi-Fi Lite (P6381-0) Management: Firmware Upgrade The firmware on the Wireless-G Router is upgraded through the WebGUI. Follow the steps below. Note: Make sure you upgrade the correct firmware to the device. Upgrading a wrong firmware to the device may render it useless. 1. 2. 3. 4. Download the latest firmware version from the product web site. In the WebGUI, click Management > Firmware Upgrade to display the screen as shown.
Cerberus Wi-Fi Lite (P6381-0) Management: Remote Management By default, the Wireless-G Router blocks WebGUI access from the WAN port for management. You can set the Wireless-G Router to allow easy remote management. 1. Click Management > Remote Management. 2. Select the Enable Web Server Access on WAN option. 3. Click Apply Changes to restart the Wireless-G Router to make the changes take effect.
Cerberus Wi-Fi Lite (P6381-0) • Save/Restore Settings: Save Current Configuration You can back up the device configuration information to a file on your computer. This is recommended after you have complete settings on the Wireless-G Router and that it is fully operable for your network. Follow the steps below to back up a copy of the device configuration. 1. In the WebGUI, click Management > Save/Restore Settings. 2. Click Save.... 3. A File Download screen displays as shown. Click Save. 4.
Cerberus Wi-Fi Lite (P6381-0) • Save/Restore Settings: Restore Configuration You can use the Save/Restore Settings screen to restore the device settings to a previous backup configuration. Note: Restoring settings erases all current configuration on the Wireless-G Router. Do NOT turn off the device during the file transfer process. Doing so may render your device useless. 1. In the WebGUI, click Management > Save/Restore Settings. 2.
Cerberus Wi-Fi Lite (P6381-0) Management: System Restart Use the System Restart screen to reboot the Wireless-G Router without disconnecting the power source. Follow the steps below to restart the Wireless-G Router through the WebGUI. 1. Click Management > System Restart to display the screen as shown. 2. Click Apply Changes. Note: Restarting the device erases all unsaved changes. 3. The screen displays as shown. Click OK. 4.
Cerberus Wi-Fi Lite (P6381-0) Event Log Use the Event Log screen to view logs and set log settings. By default, the Wireless-G Router records logs of all management and traffic activities. You can use the logs to monitor network traffic or troubleshooting. Enable Log – Select this option to activate system logging. System all – Select this option to record all log types. Wireless – Select this option to record wireless related logs.
Cerberus Wi-Fi Lite (P6381-0) Troubleshooting If the router is not function properly, first check this session for simple troubleshooting before contacting your Internet service provider (ISP) for support. Using LEDs to Diagnose Problems The LEDs are useful aides for finding possible problem causes. Power LED The POWER LED on the front panel does not light up.: 1. Make sure that the power adaptor is connected to the router and plugged in to an appropriate power source.
Cerberus Wi-Fi Lite (P6381-0) Problems with the Login Username and Password I forgot my login username and/or password: 1. The default username is “root”. The default password is “1234”. The Password and Username fields are case-sensitive. Make sure that you enter the correct password and username using the proper casing; 2.