Edimax BR-6218Mg, User Manual

Page 1: ...B BR R 6 62 21 18 8M Mg g M MI IM MO O W Wi ir re el le es ss s B Br ro oa ad db ba an nd d R Ro ou ut te er r User s Manual 0 ...

Page 2: ... Settings 13 1 1 Dynamic IP 14 1 2 Static IP Address 15 1 3 PPPoE 15 1 4 PPTP 16 1 5 L2TP 18 Chapter 2 19 General Settings 19 2 1 System 20 2 1 1 Time Zone 20 2 1 2 Password Settings 21 2 1 3 Remote Management 22 2 2 WAN 23 2 2 1 Static IP 23 2 2 2 DHCP 23 2 2 3 PPPoE PPP over Ethernet 23 2 2 4 PPTP 24 2 2 5 L2TP 24 2 2 6 DDNS 24 2 3 LAN 25 2 4 Wireless 26 2 4 1 Basic Settings 26 2 4 2 Advanced Se...

Page 3: ... NAT 39 2 6 1 Virtual Server 40 2 6 2 Special Applications 41 2 6 3 ALG Settings 43 2 6 4 UPnP Settings 43 2 6 5 Static Routing 44 2 7 Firewall 45 2 7 1 Access Control List 46 2 7 2 URL Filter 48 2 7 3 Anti DoS Denial of Service 49 2 7 4 DMZ 50 Chapter 3 51 Status 51 3 1 Status and Information 52 3 2 Logs 52 3 2 1 System Log 52 3 2 2 ACL Log 53 3 2 3 URL Filter Log 53 3 2 4 DoS Log 53 3 2 5 New Co...

Page 4: ...Provides IEEE 802 11g b MIMO wireless LAN access point Support DHCP Server Client for easy setup Support advance features such as Special Applications DMZ Virtual Servers Access Control Firewall Allow you to monitor the router s status such as DHCP Client Log System Log Security Log and Device Connection Status Easy to use Web based GUI for configuration and management purposes Remote Management a...

Page 5: ...n allows you to do one of two things 1 If problems occur with your router press the router s reset button with a pencil tip for less than 5 seconds and the router will re boot itself keeping your original configurations 2 If problems persist or you experience extreme problems or you forgot your password press the reset button for longer than 5 seconds and the router will reset itself to the factor...

Page 6: ... port is Activity ACT ON LAN port 100Mbps is connected LAN 10 100M Port 1 4 Off LAN port 10Mbps is connected ON LAN is connected Off No LAN connection LAN LNK ACT Port 1 4 Flashing LAN port is Activity ACT ON Wireless LAN has been activated Off Wireless LAN is disabled WLAN G Flashing Wireless LAN is Activity ACT Setup Diagram Figure 1 2 below shows a typical setup for a Local Area Network LAN Fig...

Page 7: ...o configure your PC to obtain an IP address automatically for 2a Windows 95 98 Me 2b Windows XP 2c Windows 2000 and 2d Windows NT 2a Windows 95 98 Me 1 Click the Start button and select Settings then click Control Panel The Control Panel window will appear 2 Double click Network icon The Network window will appear 3 Check your list of Network Components If TCP IP is not installed click the Add but...

Page 8: ...on The Local Area Connection window will appear 3 Check your list of Network Components You should see Internet Protocol TCP IP on your list Select it and click the Properties button 4 In the Internet Protocol TCP IP Properties window select Obtain an IP address automatically and Obtain DNS server address automatically as shown on the following screen 5 Click OK to confirm the setting Your PC will...

Page 9: ...ponents You should see Internet Protocol TCP IP on your list Select it and click the Properties button 5 In the Internet Protocol TCP IP Properties window select Obtain an IP address automatically and Obtain DNS server address automatically as shown on the following screen 6 Click OK to confirm the setting Your PC will now obtain an IP address automatically from your Broadband Router s DHCP server...

Page 10: ...ay need your Windows CD to complete the installation 5 After you install TCP IP go back to the Network window Select TCP IP from the list of Network Protocols and then click the Properties button 6 Check each of the tabs and verify the following settings IP Address Select Obtain an IP address from a DHCP server DNS Let all fields are blank WINS Let all fields are blank Routing Let all fields are b...

Page 11: ...e DHCP servers off To disable the Broadband router s DHCP server see chapter 2 LAN Port 4 Once your PC has obtained an IP address from your router enter the default IP address 192 168 2 1 broadband router s IP address into your PC s web browser and press enter 5 The login screen below will appear Enter the User Name and Password and then click OK to login Note By default the user name is admin and...

Page 12: ...clude Configuration tools Firmware upgrade and Reset Configuration tools allow you to Backup save Restore or Restore to Factory Default configuration for your Broadband router The Firmware upgrade tool allows you to upgrade your Broadband router s firmware The RESET tool allows you to reset your Broadband router 7 Click on Quick Setup Wizard see chapter 1 to start configuring settings required by ...

Page 13: ...en below Step 1 Time Zone The Time Zone allows your router to base its time on the settings configured here this will affect functions such as Log entries and Firewall settings Parameter Description Time Zone Select the time zone of the country you are currently in The router will set its time based on your selection NTP Server You can manually assign three time server addresses here Time Here sho...

Page 14: ...tion Dynamic IP Your ISP will automatically give you an IP address Static IP Address Your ISP has given you an IP address already PPPoE Your ISP requires you to use a Point to Point Protocol over Ethernet PPPoE connection PPTP Your ISP requires you to use a Point to Point Tunneling Protocol PPTP connection L2TP Your ISP requires you to use a Layer Two Tunneling Protocol L2TP connection Click on on...

Page 15: ... address is the PC s MAC address that your ISP had originally connected your Internet connection to Type in this MAC address in this section or use the Clone MAC Address button to replace the WAN MAC address with the MAC address of that PC you have to be using that PC for the Clone MAC Address button to work To find out the PC s MAC address see Appendix A see Glossary for an explanation on MAC add...

Page 16: ... 0 Default Gateway This is the ISP s IP address gateway DNS This is the ISP s DNS server IP address Click OK when you have finished the configuration above Congratulations You have completed the configuration for the Fixed IP x DSL connection You can start using the router now if you wish to use some of the advance features supported by this router see chapter 2 3 4 1 3 PPPoE Select PPPoE if your ...

Page 17: ...acket that requested Internet access If unchecked gateway dials this session immediately after system powered up Silent Timeout If specified a non zero value gateway disconnects this session after specified idle time Auto Reconnect If checked gateway redials this session if session previously terminated by ISP Auth Type Select PAP or CHAP for the authentication type requested by your ISP Click OK ...

Page 18: ...PTP connection MTU This is optional You can specify the maximum size of your transmission packet to the Internet Leave it as it is if you to not wish to set a maximum packet size Silent Timeout If specified a non zero value gateway disconnects this session after specified idle time Dial On Demand If checked gateway won t dial this session until received a packet that requested Internet access If u...

Page 19: ...our ISP for the PPTP connection Sometimes called a Connection ID Password Enter the Password provided by your ISP for the PPTP connection MTU This is optional You can specify the maximum size of your transmission packet to the Internet Leave it as it is if you to not wish to set a maximum packet size Silent Timeout If specified a non zero value gateway disconnects this session after specified idle...

Page 20: ...allows you to set the Broadband router s system Time Zone Password and Remote Management Administrator WAN This section allows you to select the connection method in order to establish a connection with your ISP same as the Quick Setup Wizard section LAN You can specify the LAN segment s IP address subnet Mask enable disable DHCP and select an IP range for your LAN Wireless You can setup the wirel...

Page 21: ...your selection Password Settings Allows you to select a password in order to access the web based management website Remote Management You can specify a Host IP address that can perform remote management functions Select one of the above three system settings selections and proceed to the manual s relevant sub section 2 1 1 Time Zone The Time Zone allows your router to reference or base its time o...

Page 22: ...b based management By default there is no password So please assign a password to the Administrator as soon as possible and store it in a safe place Passwords can contain 0 to 12 alphanumeric characters and are case sensitive Parameter Description Account Enter your account name to login to your Broadband router Password Enter your password Confirmed Password Enter your password again for verifica...

Page 23: ...fields All the Internet IPs that inside this range can manage this router from WAN side Port To avoid conflict of virtual server at port 80 user can specify a different port in Remote Management Port for WAN side access Ping from WAN side Ping from WAN side is turned on by default and could be turned off if the Enable checkbox is unchecked Click Apply at the bottom of the screen to save the above ...

Page 24: ...y a DDNS server that you wish to use and configure the user name and password provided by you DDNS service provider Once you have made a selection click More Configuration at the bottom of the screen and proceed to the manual s relevant sub section 2 2 1 Static IP Select Static IP address if your ISP has given you a specific IP address for you to use Your ISP should provide all the information req...

Page 25: ...dynamic IP address You must get an account password and your static domain name from the DDNS service providers This router supports DynDNS TZO and other common DDNS service providers Parameter Description Service Type Select a DDNS service provider or select Disabled to disable DDNS function Username The account that your DDNS service provider assigned to you Password The password you set for the...

Page 26: ...fault gateway IP Address Pool You can select a particular IP address range for your DHCP server to issue IP addresses to your LAN Clients WINS Server You can specify the WINS server to assign to DHCP clients Provide Real DNS Server When check this box DHCP server will provide WAN DNS server to DHCP clients Otherwise DHCP server will provide itself as the DNS server Domain from upper DHCP Enable th...

Page 27: ...twork adaptor connect to your Intranet It supports WEP and WPA2 encryption to enhance the security of your wireless network 2 4 1 Basic Settings You can set parameters that are used for the wireless stations to connect to this router The parameters include Mode ESSID Channel Number and Associated Client AP Mode setting Page 26 ...

Page 28: ...AP Bridge Point to Point mode setting page AP Bridge Point to Multi Point mode setting page 27 ...

Page 29: ... to Multi Point mode or AP Bridge WDS mode You have to enter the MAC addresses of other access points that join the bridging work Set Security Click the Set Security button then a WDS Security Settings will pop up You can set the security parameters used to bridge access points together here when your AP is in AP Bridge modes You can refer to section 4 3 Security Settings for how to set the parame...

Page 30: ...SSID every wireless station located within the coverage of this access point can discover this access point easily If you are building a public wireless network enabling this feature is recommended Disabling Broadcast ESSID can provide better security CTS Protect It is recommended to enable the protection mechanism This mechanism can decrease the rate of data collision between 802 11b and 802 11g ...

Page 31: ...he throughput will be lower Authentication When using shared key user must input 10 hexadecimal digits for WEP64 and 26 digits for WEP128 All the four WEP keys are set identical Key The WEP keys are used to encrypt data transmitted in the wireless network Fill the text box by following the rules 64 bit WEP input 10 digit Hex values in the A F a f and 0 9 range as the encryption keys 128 bit WEP in...

Page 32: ...figure other advance sections or start using the router with the advance settings in place 2 4 3 3 802 1x WEP Static key IEEE 802 1x is an authentication protocol Every user must use a valid account to login to this Access Point before accessing the wireless LAN The authentication is processed by a RADIUS server This mode also uses WEP to encrypt the data during communication For the WEP settings ...

Page 33: ...he encryption key frequently to enhance the wireless LAN security WPA2 AES This use CCMP protocol to change encryption key frequently AES can provide high level encryption to enhance the wireless LAN security Key Setting The Pre shared key is used to authenticate and encrypt data transmitted in the wireless network Fill the text box by following the rules below At least 8 characters pass phrase as...

Page 34: ...tion key frequently to enhance the wireless LAN security WPA2 AES This use CCMP protocol to change encryption key frequently AES can provide high level encryption to enhance the wireless LAN security RADIUS Server IP address The IP address of external RADIUS server RADIUS Server Port The service port of the external RADIUS server RADIUS Server Password The password used by external RADIUS server C...

Page 35: ... If you find any issues before adding it and want to retype again Just click Reset and both MAC Address and Comment fields will be cleared Remove MAC address from list If you want to remove some MAC address from the Access Control List select the MAC addresses you want to remove in the list and then click Delete Selected If you want remove all MAC addresses from the table just click Delete All but...

Page 36: ...lication based QoS user can specify a destination port number and associate it with a egress priority High or Low For example in Fig 35 if user config port 7297 with high priority then user would experience better service quality for such flows Parameter Description Port based QoS User can differentiate packet priority by L4 port number or by physical Ethernet port number Rate Policing QoS User ca...

Page 37: ...pply total rate limit to any port from 128Kbps to 32Mbps or at Full rate 100Mbps Flow control can also be enabled disabled on per port basis Parameter Description Enable QoS by Application Enable application based QoS Protocol Specific Port Set the priority of the specified protocol name or port number to higher or lower priority Enable QoS by device port Enable Port based QoS Click Apply at the b...

Page 38: ...IP Address Specify the IP Address that you want to limit the transmit receive rate IP Mask If you want to limit a subnet you can specify the subnet mask here Protocol Specify the protocol you want to monitor it can be TCP UDP or IP only Start End Port Specify the port ranges that you want to monitor To classify all TCP or UDP packets within same IP address mask regardless of port number as same ra...

Page 39: ... all the connections with the same Queue ID into one rule and these connections share the same bandwidth in this rule Src Dst If you want to monitor the source IP of the packets please select src IP Otherwise please select dst IP IP Address Specify the IP Address that you want to limit the transmit receive rate IP Mask If you want to limit a subnet you can specify the subnet mask here Protocol Spe...

Page 40: ...require multiple connections such as Internet games video conferencing Internet telephony and others In this section you can configure the router to support these types of applications ALG Setting You can select special applications that need Application Layer Gateway to support here UPnP Setting It allows to Enable or Disable UPnP feature here After you enable the UPnP feature all client systems ...

Page 41: ... Public Port number packet will be sent to Note You need to give your LAN PC clients a fixed static IP address for Virtual Server to work properly Server Port Range This is the port number of the above Private IP host that the below Public Port number will be changed to when the packet enters your LAN to the LAN Server Client IP Protocol Select the port number protocol type TCP UDP Click Apply at ...

Page 42: ...ome applications require multiple connections such as Internet games video conferencing Internet telephony and others In this section you can configure the router to support multiple connections for these types of applications 41 ...

Page 43: ...ions You can now configure other advance sections or start using the router with the advance settings in place Example Special Applications If you need to run applications that require multiple connections then specify the port outbound normally associated with that application in the Trigger Port field Then select the protocol type TCP or UDP and enter the public ports associated with the trigger...

Page 44: ...rectly pass though the NAT gateway Click Apply at the bottom of the screen to save the above configurations You can now configure other advance sections or start using the router with the advance settings in place 2 6 4 UPnP Settings With UPnP all PCs in you Intranet will discover this router automatically So you do not have to do any configuration for your PC and can access the Internet through t...

Page 45: ... Static Routing This router provides Static Routing function when NAT is disabled With Static Routing the router can forward packets according to your routing rules The IP sharing function will not work any more in Static Routing mode Note The DMZ function of firewall will not work if static routing is enabled Parameter Description Route The network address of destination LAN Route Mask The subnet...

Page 46: ...nable and click Apply Parameter Description Access Control List Access Control List allows you to specify which hosts users can or cannot have access to certain Internet applications URL Filter URL Filter allows you to specify which URLs can t be accessed by users Anti DoS The Broadband router s firewall can block common hacker attacks and can log the attack activities DMZ Host The DMZ Host functi...

Page 47: ...tention to the Egress source IP port direction group The source IP address of an LAN to WAN packet will be already changed to gateway s public IP address That means if you created a system wise egress rule please specifying the Gateway WAN IP address as the source IP Type Specify the traffic type here You can pick TCP for TCP traffic UDP for UDP traffic or IP for all kind of IP traffic Port Specif...

Page 48: ...ample Access Control In the example below LAN client A can only access websites that use Port 80 However LAN client B is able to access websites and any other service that uses ports between 80 and 999 47 ...

Page 49: ...URL String Pattern You can enter the full URL address or the keyword of the web site you want to block Source IP Range You can specify a range of LAN PCs that apply to the URL filter feature Enable URL Blocking Check the check box to Enable URL Blocking You can now configure other advance sections or start using the router with the advance settings in place 48 ...

Page 50: ...P ICMP flooding threshold per host Offending host would be blocked for 120 seconds default if Source IP Blocking is enabled Whole system FlowCnt Control System wide Flow Count Control for TCP UDP or both protocols Per source IP FlowCnt Control SYN FIN UDP ICMP Flow Count Control per host Offending host would be blocked for 120 seconds default if Source IP Blocking is enabled TcpUdpPortScan Port sc...

Page 51: ...ervices going to your WAN IP address to a particular LAN client server Parameter Description Enable DMZ Enable disable DMZ Note If there is a conflict between the Virtual Server and the DMZ setting then Virtual Server function will have priority over the DMZ function DMZ Host Input the IP address of a particular host in your LAN that will receive all the packets originally going to the WAN port Pu...

Page 52: ...e version numbers any illegal attempts to access your network and information on all DHCP client PCs currently connected to your network Parameter Description Status and Information Shows the router s system information Logs This router supports five types of Log messages System Log ACL Log URL filter DoS Log and New connection Log Select one of the above five Status selections and proceed to the ...

Page 53: ... Information You can see the router s system information such as the router s System Information LAN Information WAN Information and Wireless Information 3 2 Logs This router supports five types of Log messages System Log ACL Log URL filter DoS Log and New connection Log You can Enable or Disable each of these Logs 3 2 1 System Log 52 ...

Page 54: ...3 2 2 ACL Log 3 2 3 URL Filter Log 3 2 4 DoS Log 3 2 5 New Connection Log 53 ...

Page 55: ...page You can also use the Browse button to find the firmware file on your PC Factory Default You can use the Factory Defaults tool to force the Broadband router to perform a power reset and restore the original factory settings System Restart In the event that the system stops responding correctly or in some way stops functioning you can perform a reset Your settings will not be changed To perform...

Page 56: ...en the Command Prompt program 2 Type Ipconfig all and enter Your PC s IP address is the one entitled IP address 192 168 1 77 The router s IP address is the one entitled Default Gateway 192 168 1 254 Your PC s MAC Address is the one entitled Physical Address 00 50 FC FE 02 DB 55 ...

Page 57: ...sts of 2 portions the IP network address and the host identifier The IP address is a 32 bit binary pattern which can be represented as four cascaded decimal numbers separated by aaa aaa aaa aaa where each aaa can be anything from 000 to 255 or as four cascaded binary numbers separated by bbbbbbbb bbbbbbbb bbbbbbbb bbbbbbbb where each b can either be 0 or 1 A network mask is also a 32 bit binary pa...

Page 58: ... with each other based on such a protocol the interpretation of their behavior is well defined and can be made objectively without confusion or misunderstanding Router A router is an intelligent network device that forwards packets between different networks based on network layer address information such as IP addresses Subnet Mask A subnet mask which may be a part of the TCP IP information provi...