Zonet ZSR1104WE User Manual

1 User’s Manual Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an informat

10CCChhhaaapppttteeerrr 444 CCCooonnnfffiiiggguuurrriiinnnggg WWWiiirrreeellleeessssss BBBrrroooaaadddbbbaaannnddd RRRooouuuttteeerrr

11 4.1 Start-up and Log in Activate your browser, and disable the proxy or add the IP address of this product into the exceptions. Then, type this

12 4.2 Status This option provides the function for observing this product’s working status: A. WAN Port Status. If the WAN port is assigned a

134.3 Wizard Setup Wizard will guide you through a basic configuration procedure step by step.Press ”Next >” Setup Wizard - Select WAN Type:

144.4 Basic Setting 4.4.1 Primary Setup – WAN Type, Virtual Computers

15 Press “Change” This option is primary to enable this product to work properly. The setting items and the web appearance depend on the WAN type. C

162. Renew IP Forever: this feature enables this product to renew your IP address automatically when the lease time is expiring-- even when the syst

17enable Auto-reconnect to disable this feature. If Auto-reconnect is enabled, this product will connect to ISP automatically, after system is rest

18 Virtual Computer enables you to use the original NAT feature, and allows you to setup the one-to-one mapping of multiple global IP address and loc

19requesting computer. You must specify the starting and ending address of the IP address pool. 4. Domain Name: Optional, this information will be p

2Table of Contents Chapter 1 Introduction... 3 Functions and Features

20channel 7 for Japan. 3. WEP Security: Select the data privacy algorithm you want. Enabling the security can protect your data while it is transfer

21WPA-PSK 1. Select Preshare Key Mode 2. Fill in the key, Ex 12345678

22WPA Check Box was used to switch the function of the WPA. When the WPA function is enabled, the Wireless user must authenticate to this router firs

23 4.4.4 Change Password You can change Password here. We strongly recommend you to change the system password for security reason.

24 4.5 Forwarding Rules 4.5.1 Virtual Server

25 This product’s NAT firewall filters out unrecognized packets to protect your Intranet, so all hosts behind this product are invisible to the outsi

26 4.5.2 Special AP Some applications require multiple connections, like Internet games, Video conferencing, Internet telephony, etc. Because of t

27 4.5.3 Miscellaneous Items IP Address of DMZ Host DMZ (DeMilitarized Zone) Host is a host without the protection of firewall. It allows a comput

28 4.6 Security Settings

29 4.6.1 Packet Filter Packet Filter enables you to control what packets are allowed to pass the router. Outbound filter applies on all outbound p

3CCChhhaaapppttteeerrr 111 IIInnntttrrroooddduuuccctttiiiooonnn Congratulations on your purchase of this outstanding Wireless Broadband Rout

30addresses (4.3.2.1-4.3.2.254). An empty implies all IP addresses. For source or destination port, you can define a single port (80) or a range of

31 (1.2.3.10-1.2.3.20) They can do everything (block nothing) Others are all blocked. Example 2: (1.2.3.100-1.2.3.119) They can do everything e

32 Example 1: (192.168.123.100-192.168.123.149) They are allowed to send mail (port 25), receive mail (port 110), and browse Internet (port 80); p

33 Example 2: (192.168.123.100-192.168.123.119) They can do everything except read net news (port 119) and transfer files via FTP (port 21) Other

34 4.6.2 Domain Filter Domain Filter Let you prevent users under this device from accessing specific URLs. Domain Filter Enable Check if you wan

35Example: In this example: 1. URL include “www.msn.com” will be blocked, and the action will be record in log-file. 2. URL include “www.sina.com” w

364.6.3 URL Blocking URL Blocking will block LAN computers to connect to pre-defined Websites. The major difference between “Domain filter” and “URL

37 In this example: 1. URL include “msn” will be blocked, and the action will be record in log-file. 2. URL include “sina” will be blocked, but the a

38 4.6.4 MAC Address Control MAC Address Control allows you to assign different access right for different users and to assign a specific IP addres

39associate to the wireless LAN. Control table "Control table" is the table at the bottom of the "MAC Address Control" page. Eac

4 High speed for wireless LAN connection Up to 54Mbps data rate by incorporating Orthogonal Frequency Division Multiplexing (OFDM).  Roaming Provid

40 4.6.5 Miscellaneous Items Remote Administrator Host/Port In general, only Intranet user can browse the built-in web pages to perform administra

41 4.7 Advanced Settings

424.7.1 System Time Get Date and Time by NTP Protocol Selected if you want to Get Date and Time by NTP Protocol. Time Server Select a NTP time s

434.7.2 System Log This page support two methods to export system logs to specific destination by means of syslog(UDP) and SMTP(TCP). The items you

444.7.3 Dynamic DNS To host your server on a changing IP address, you have to use dynamic domain name service (DDNS). So that anyone wishing to r

45Password/Key You will get this information when you register an account on a Dynamic DNS server. Example: After Dynamic DNS setting is configured,

464.7.4 SNMP Setting In brief, SNMP, the Simple Network Management Protocol, is a protocol designed to give a user the capability to remotely manag

474.7.5 Routing Table Routing Tables allow you to determine which physical interface address to use for outgoing IP data grams. If you have more th

48Example: Configuration on NAT Router Destination SubnetMask Gateway Hop Enabled 192.168.1.0 255.255.255

494.7.6 Schedule Rule You can set the schedule time to decide which service will be turned on or off. Select the “enable” item. Press “Add New Rul

5 Advanced functions  System time Supported Allow you to synchronize system time with network time server.  E-mail Alert Supported The router can

50 You can write a rule name and set which day and what time to schedule from “Start Time” to “End Time”. The following example configure “ftp time”

51 After configure Rule 1 Schedule Enable Selected if you want to Enable the Scheduler. Edit To edit the schedule rule. Delete To delete the

52 Exanple1: Virtual Server – Apply Rule#1 (ftp time: everyday 14:10 to 16:20) Exanple2: Packet Filter – Apply Rule#1 (ftp time: everyday 14:10 to

534.8 Toolbox

54 4.8.1 System Log You can View system log by clicking the View Log button

554.8.2 Firmware Upgrade You can upgrade firmware by clicking Firmware Upgrade button.

56 4.8.3 Backup Setting You can backup your settings by clicking the Backup Setting button and save it as a bin file. Once you want to restore the

57 4.8.6 Miscellaneous Items MAC Address for Wake-on-LAN Wake-on-LAN is a technology that enables you to power up a networked device remotely. In

58AAAppppppeeennndddiiixxx AAA TTTCCCPPP///IIIPPP CCCooonnnfffiiiggguuurrraaatttiiiooonnn fffooorrr WWWiiinnndddooowwwsss 999555///999

59 6. The TCP/IP protocol shall be listed in the Network window. Click OK to complete the install procedure and restart your PC to enable the TCP/IP

6CCChhhaaapppttteeerrr 222 HHHaaarrrdddwwwaaarrreee IIInnnssstttaaallllllaaatttiiiooonnn 2.1 Panel Layout 2.1.1. Front Panel Figure 2

60 a. Select Obtain an IP address automatically in the IP Address tab. b. Don’t input any value in the Gateway tab.

61c. Choose Disable DNS in the DNS Configuration tab. B. Configure IP manually a. Select Specify an IP address in the IP Address tab. The default

62 b. In the Gateway tab, add the IP address of this product (default IP is 192.168.123.254) in the New gateway field and click Add button. c. In

63AAAppppppeeennndddiiixxx BBB 888000222...111xxx SSSeeettttttiiinnnggg Figure 1: Testing Environment (Use Windows 2000 Radius Server) 1

641.Enable DHCP server. 2.WAN setting: static IP address. 3.LAN IP address: 192.168.123.254/24. 4.Set RADIUS server IP. 5.Set RADIUS server shared ke

65 4. We will change EAP type to fit the variable test condition. Figure 2: Enable IEEE 802.1X access control

66 Figure 3: Smart card or certificate properties 4. Windows 2000 RADIUS server Authentication testing: 4.1DUT authenticate PC1 using certificate.

67 Figure 4: Certificate information on PC1 Figure 5: Authenticating

68 Figure 6: Authentication success 4.2DUT authenticate PC2 using PEAP-TLS. 1. PC2 choose the SSID of DUT as the Access Point. 2. Set authenticati

69 AAAppppppeeennndddiiixxx CCC WWWPPPAAA---PPPSSSKKK aaannnddd WWWPPPAAA Wireless Router: LAN IP: 192.168.123.254 WAN I

72.1.2. Rear Panel Figure 2-2 Rear Panel Ports: Port Description PWR Power inlet WAN the port where you will connect your cable (or DSL) modem or Et

70 Or Another Configuration: WPA-PSK In fact, it is not necessary for this function to authenticate by Radius Server, the client and wireless Rou

71 3. Add and edit some settings:

724. Back to Connection: Then Select “Connect to network” You will see: Method2: 1. First, patch windows XP and have to install “Service package

73Choose “View available Wireless Networks” like below: Advanced choose “123kk”

74WPA: For this function, we need the server to authenticate. This function is like 802.1x. The above is our environment: Method 1: 1. The UserA

75 4. Go to Odyssey Client Manager, choose “Profiles” and Setup Profile name as “1” Login name and passwd are fae1 and fae1. Remember that you ge

765. Then Choose “certificate” like above.

77 6. Then go to Authentication and first Remove EAP/ TLS and Add EAP/TLS again.

78 7. Go “Network” and Select “1” and ok

79 8. Back to Connection and Select “123kk. If successfully, the wireless client has to authenticate with Radius Server, like below: 9.Result:

82.2 Procedure for Hardware Installation 2. Decide where to place your Wireless Broadband Router You can place your Wireless Broadband Router on

80 2. Then Install this certificate and finish. 3. Setting on the router and client: Router:

81Client: Go to “Network Connection” and select wireless adapter. Choose “View available Wireless Networks” like below: Advanced choose “123kk” Sele

82 AAAppppppeeennndddiiixxx DDD FFFAAAQQQ aaannnddd TTTrrrooouuubbbllleeessshhhooooootttiiinnnggg Reset to factory Default There are

9CCChhhaaapppttteeerrr 333 NNNeeetttwwwooorrrkkk SSSeeettttttiiinnngggsss aaannnddd SSSoooffftttwwwaaarrreee IIInnnssstttaaallllllaaat