Planet VR-300 Series, User Manual

Page 1: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 1 Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 Series ...

Page 2: ...accuracies or omissions that may have occurred Information in this User s Manual is subject to change without notice and does not represent a commitment on the part of PLANET PLANET assumes no responsibility for any inaccuracies that may be contained in this User s Manual PLANET makes no commitment to update or keep current the information in this User s Manual and reserves the right to make impro...

Page 3: ...sult of the presence of hazardous substances in electrical and electronic equipment end users of electrical and electronic equipment should understand the meaning of the crossed out wheeled bin symbol Do not dispose of WEEE as unsorted municipal waste and have to collect such WEEE separately Trademarks The PLANET logo is a trademark of PLANET Technology This documentation may refer to numerous har...

Page 4: ...3 1 Requirements 45 3 2 Setting TCP IP on your PC 46 3 3 Planet Smart Discovery Utility 53 Chapter 4 Web based Management 55 4 1 Introduction 55 4 2 Logging in to the VPN Router 55 4 3 Main Web Page 56 4 4 System 58 4 4 1 Setup Wizard 60 4 4 2 Dashboard 66 4 4 3 Status 67 4 4 4 Statistics 68 4 4 5 Connection Status 69 4 4 6 SFP Module Information 69 4 4 7 High Availability 71 4 4 8 RADIUS 72 4 4 9...

Page 5: ... 7 3 PPTP Server 103 4 7 4 L2TP Server 105 4 7 5 SSL VPN 107 4 7 6 VPN Connection 108 4 8 AP Control 109 4 8 1 Preference 110 4 8 2 AP Search 110 4 8 3 AP Management 111 4 8 4 AP Group Management 112 4 8 5 SSID Profile 113 4 8 6 Radio 2 4G Profile 114 4 8 7 Radio 5G Profile 115 4 8 8 Statistics AP Status 116 4 8 9 Statistics Active Clients 116 4 8 10 Map It 117 4 8 11 Upload Map 118 4 9 Power over...

Page 6: ...WiFi Advanced 128 4 10 5 WiFi Statistics 129 4 10 6 Connection Status 129 4 11 Maintenance 130 4 11 1 Administrator 130 4 11 2 Date and Time 131 4 11 3 Saving Restoring Configuration 132 4 11 4 Upgrading Firmware 133 4 11 5 Reboot Reset 133 4 11 6 Diagnostics 134 Appendix A DDNS Application 136 ...

Page 7: ...r VR 300W5 Wi Fi 5 AC1200 Dual Band VPN Security Router VR 300PW5 Wi Fi 5 AC1200 Dual Band VPN Security Router with 4 Port 802 3at PoE VR 300W6A Wi Fi 6 AX2400 2 4GHz 5GHz VPN Security Router VR 300PW6A Wi Fi 6 AX2400 2 4GHz 5GHz VPN Security Router with 4 Port 802 3at PoE VR 300W6 Wi Fi 6 AC1800 Dual Band VPN Security Router VR 300PW6 Wi Fi 6 AC1800 Dual Band VPN Security Router with 4 Port 802 3...

Page 8: ...is demand PLANET has launched the VR 300 series VPN Security Router an all in one appliance that carries several main categories across your network security deployments Cyber security SPI firewall security protection policy auditing Content Filtering VPN Tunnel and MAC IP Filtering AP controller captive portal RADIUS and easy management Setup Wizard DHCP Server and Dashboard Furthermore its Dual ...

Page 9: ...orldwide and contributing to environmental protection the VR 300 series can effectively control the power supply besides its capability of giving high watts power The PoE schedule function helps you to enable or disable PoE power feeding for each PoE port during specified time intervals and it is a powerful function to help SMBs or enterprises save power and budget It also increases security by po...

Page 10: ... privacy for accessing and exchanging most sensitive data built in IPSec VPN function with DES 3DES AES encryption and MD5 SHA 1 SHA 256 SHA 384 SHA 512 authentication and GRE SSL PPTP and L2TP server mechanism The full VPN capability in the VR 300 series makes the connection secure more flexible and more capable Excellent Ability in Threat Defense The VR 300 s built in SPI stateful packet inspect...

Page 11: ...VR 300 series can connect dual IPv4 v6 WANs with up to two different ISPs and supports many popular security features including Content Filtering to block specific URL feature that can automatically resolve the IP address corresponding to all Users network can be easily managed by just typing the URL of the websites like Facebook YouTube and Yahoo The VR 300 series has link redundancy MAC IP filte...

Page 12: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 12 ...

Page 13: ...ration Desktop installation or rack mounting RF Interface Characteristics VR 300W5 and VR 300PW5 Features 2 4GHz 802 11b g n and 5GHz 802 11a n ac concurrent dual band for more efficiency of carrying high load of traffic 2T2R MIMO technology for enhanced throughput and coverage Provides multiple adjustable transmit power control High speed up to 1 2Gbps 300Mbps for 2 4GHz 867Mbps for 5GHz wireless...

Page 14: ...erference between ports PoE management Total PoE power budget control Per port PoE function enable disable PoE port power feeding priority Per PoE port power limitation PD classification detection PD alive check PoE schedule IP Routing Feature Static Route Dynamic Route OSPF Firewall Security Cybersecurity Stateful Packet Inspection SPI firewall Blocks DoS DDoS attack Content Filtering MAC Filteri...

Page 15: ...CP client for WAN Protocols TCP IP UDP ARP IPv4 IPv6 Port forwarding DMZ SNMP DHCP server NTP client MAC address clone DDNS PLANET DDNS PLANET Easy DDNS DynDNS and No IP Cybersecurity Others Setup wizard Dashboard for real time system overview Supported access by HTTP or HTTPS Auto reboot PLANET Smart Discovery utility UNI NMS supported ...

Page 16: ...urity Service Firewall Security Cybersecurity Stateful Packet Inspection SPI DoS DDoS Attack Defense ALG Application Layer Gateway SIP RTSP FTP H 323 TFTP NAT Port forwarding DMZ Host UPnP Content Filtering MAC filtering IP filtering Web filtering Bandwidth Management Outbound load balancing Failover for dual WAN QoS Quality of Service Networking Operation Mode Routing mode Routing Protocol Static...

Page 17: ...Humidity 5 95 non condensing Storage Temperature 10 60 degrees C Relative Humidity 5 95 non condensing VR 300P Product Enterprise 4 Port 10 100 1000T 802 3at PoE 1 Port 10 100 1000T VPN Security Router Hardware Specifications Ethernet 5 10 100 1000BASE T RJ45 Ethernet ports including 3 LAN ports Port 1 to Port 3 1 LAN WAN port Port 4 1 WAN port Port 5 USB Port 1 USB 3 0 port for system configurati...

Page 18: ... based Multi VLAN Multicast IGMP Proxy NAT Throughput Max 900Mbps Outbound Load Balancing Supported algorithms Weight Protocol IPv4 IPv6 TCP IP UDP ARP HTTP HTTPS NTP DNS PLANET DDNS PLANET Easy DDNS DHCP PPPoE SNMPv1 v2c v3 Key Features HA High Availability Captive Portal RADIUS Server Client AP Control SD WAN Note The feature will be available via firmware upgrade VPN VPN Function IPSec Remote S...

Page 19: ...series 19 Auto reboot Diagnostics Standards Conformance Regulatory Compliance CE FCC Environment Specifications Operating Temperature 0 50 degrees C Relative Humidity 5 95 non condensing Storage Temperature 10 60 degrees C Relative Humidity 5 95 non condensing ...

Page 20: ...Firewall Security Cybersecurity Stateful Packet Inspection SPI DoS DDoS Attack Defense ALG Application Layer Gateway SIP RTSP FTP H 323 TFTP NAT Port forwarding DMZ Host UPnP Content Filtering MAC filtering IP filtering Web filtering Bandwidth Management Outbound load balancing Failover for dual WAN QoS Quality of Service Networking Operation Mode Routing mode Routing Protocol Static Route Dynamic...

Page 21: ...ge Temperature 10 60 degrees C Relative Humidity 5 95 non condensing VR 300FP Product Enterprise 4 Port 10 100 1000T 802 3at PoE 1 Port 1000X SFP VPN Security Router Hardware Specifications Ethernet 4 10 100 1000BASE T RJ45 Ethernet ports including 1 1000BASE X mini GBIC SFP slot 3 LAN ports Port 1 to Port 3 1 LAN WAN port Port 4 1 WAN port Port 5 USB Port 1 USB 3 0 port for system configuration b...

Page 22: ... based Multi VLAN Multicast IGMP Proxy NAT Throughput Max 900Mbps Outbound Load Balancing Supported algorithms Weight Protocol IPv4 IPv6 TCP IP UDP ARP HTTP HTTPS NTP DNS PLANET DDNS PLANET Easy DDNS DHCP PPPoE SNMPv1 v2c v3 Key Features HA High Availability Captive Portal RADIUS Server Client AP Control SD WAN Note The feature will be available via firmware upgrade VPN VPN Function IPSec Remote S...

Page 23: ...series 23 Auto reboot Diagnostics Standards Conformance Regulatory Compliance CE FCC Environment Specifications Operating Temperature 0 50 degrees C Relative Humidity 5 95 non condensing Storage Temperature 10 60 degrees C Relative Humidity 5 95 non condensing ...

Page 24: ...5 x 43 5 mm Enclosure Metal Wireless Standard IEEE 802 11 b g n 2 4 GHz IEEE 802 11 a n ac 5 GHz Band Mode 2 4G 5G concurrent mode Frequency Range 2 4GHz America FCC 2 412 2 462GHz Europe ETSI 2 412 2 484GHz 5GHz America FCC 5 180 5 240GHz 5 725 5 850GHz Europe ETSI 5 180 5 240GHz Operating Channels 2 4GHz America FCC 1 11 Europe ETSI 1 13 5GHz America FCC Non DFS 36 40 44 48 149 153 157 161 165 D...

Page 25: ...rvice Networking Operation Mode Routing mode Routing Protocol Static Route Dynamic Route RIP OSPF VLAN 802 1q Tag based Port based Multi VLAN Multicast IGMP Proxy NAT Throughput Max 900Mbps Outbound Load Balancing Supported algorithms Weight Protocol IPv4 IPv6 TCP IP UDP ARP HTTP HTTPS NTP DNS PLANET DDNS PLANET Easy DDNS DHCP PPPoE SNMPv1 v2c v3 Key Features HA High Availability Captive Portal RA...

Page 26: ...ts Port 1 to Port 3 1 LAN WAN port Port 4 1 WAN port Port 5 USB Port 1 USB 3 0 port for system configuration backup and restoration Reset Button Reset to factory default Thermal Fan 1 LED Indicators PWR Green Internet Green LAN WAN Green 2 4G Green 5G Green PoE in Use LED Amber Installation Desktop installation or rack mounting Power Requirements 100 240V AC 50 60Hz auto sensing Power Consumption ...

Page 27: ...will vary in different countries according to their regulations Channel Width 802 11ac 20 40 80MHz 802 11n 20 40MHz Data Transmission Rates Transmit 300 Mbps for 2 4 GHz and 867 Mbps for 5 GHz Receive 300 Mbps for 2 4 GHz and 867 Mbps for 5 GHz The estimated transmission distance is based on the theory The actual distance may vary in different environments Transmission Power 20dBm 2 4G frequency b...

Page 28: ...VPN Function IPSec Remote Server Net to Net Host to Net GRE PPTP Server L2TP Server SSL Server Client Open VPN VPN Tunnels Max 60 VPN Throughput Max 60Mbps Encryption Methods DES 3DES AES or AES 128 192 256 encrypting Authentication Methods MD5 SHA 1 SHA 256 SHA 384 SHA 512 authentication algorithm Management Basic Management Interfaces Web browser SNMP v1 v2c PLANET Smart Discovery utility UNI NM...

Page 29: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 29 ...

Page 30: ...11g b n ax 2 4GHz Band Mode 2 4G 5G selectable mode Frequency Range 2 4GHz America FCC 2 412 2 462GHz Europe ETSI 2 412GHz 2 472GHz 5GHz America FCC 5 180 5 240GHz 5 745 5 825GHz Europe ETSI 5 180 5 700GHz Operating Channels 2 4GHz America FCC 1 11 Europe ETSI 1 13 5GHz America FCC Non DFS 36 40 44 48 149 153 157 161 165 DFS 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 Europe ETSI Non D...

Page 31: ...ing MAC filtering IP filtering Web filtering Bandwidth Management Outbound load balancing Failover for dual WAN QoS Quality of Service Networking Operation Mode Routing mode Routing Protocol Static Route Dynamic Route RIP OSPF VLAN 802 1q Tag based Port based Multi VLAN Multicast IGMP Proxy NAT Throughput Max 900Mbps Outbound Load Balancing Supported algorithms Weight Protocol IPv4 IPv6 TCP IP UDP...

Page 32: ...rts including 3 LAN ports Port 1 to Port 3 1 LAN WAN port Port 4 1 WAN port Port 5 USB Port 1 USB 3 0 port for system configuration backup and restoration Reset Button Reset to factory default Thermal Fan 1 LED Indicators PWR Green Internet Green LAN WAN Green 2 4G Green 5G Green PoE in Use LED Amber Installation Desktop installation or rack mounting Power Requirements 100 240V AC 50 60Hz auto sen...

Page 33: ...for 2 4 GHz or 2400 Mbps for 5 GHz Receive 600 Mbps for 2 4 GHz or 2400 Mbps for 5 GHz The estimated transmission distance is based on the theory The actual distance may vary in different environments Transmission Power 11b 23dbm 1 5dbm 11Mbps 11g 20dbm 1 5dbm 54Mbps 11g n 20dBm 1 5dbm MCS7 HT20 17dBm MCS7 HT40 11a 19 5dBm 1 5dbm 54Mbps 11a n 19 5dBm 1 5dbm MCS7 HT20 17dBm MCS7 HT40 11ac HT20 20 1...

Page 34: ...PN VPN Function IPSec Remote Server Net to Net Host to Net GRE PPTP Server L2TP Server SSL Server Client Open VPN VPN Tunnels Max 60 VPN Throughput Max 60Mbps Encryption Methods DES 3DES AES or AES 128 192 256 encrypting Authentication Methods MD5 SHA 1 SHA 256 SHA 384 SHA 512 authentication algorithm Management Basic Management Interfaces Web browser SNMP v1 v2c PLANET Smart Discovery utility UNI...

Page 35: ...ure Metal Wireless Standard IEEE 802 11a n ac ax 5GHz IEEE 802 11g b n ax 2 4GHz Band Mode 2 4G 5G concurrent mode Frequency Range 2 4GHz America FCC 2 412 2 462GHz Europe ETSI 2 412GHz 2 472GHz 5GHz 5 15GHz 5 875GHz Operating Channels 2 4GHz America FCC 1 11 Europe ETSI 1 13 5GHz America FCC Non DFS 36 40 44 48 149 153 157 161 165 DFS 52 56 60 64 100 104 108 112 116 132 136 140 Europe ETSI Non DF...

Page 36: ...323 TFTP NAT Port forwarding DMZ host UPnP Content Filtering MAC filtering IP filtering Web filtering Bandwidth Management Outbound load balancing Failover for dual WAN QoS Quality of Service Networking Operation Mode Routing mode Routing Protocol Static Route Dynamic Route RIP OSPF VLAN 802 1q Tag based Port based Multi VLAN Multicast IGMP Proxy NAT Throughput Max 900Mbps Outbound Load Balancing ...

Page 37: ...ons Ethernet 5 10 100 1000BASE T RJ45 Ethernet ports including 3 LAN ports Port 1 to Port 3 1 LAN WAN port Port 4 1 WAN port Port 5 USB Port 1 USB 3 0 port for system configuration backup and restoration Reset Button Reset to factory default Thermal Fan 1 LED Indicators PWR Green Internet Green LAN WAN Green 2 4G Green 5G Green PoE in Use LED Amber Installation Desktop installation or rack mountin...

Page 38: ...S7 HT20 17dBm MCS7 HT40 11ac HT20 20 1 5dBm MCS8 11ac HT40 17 1 5dBm MCS9 11ac HT80 14 5 1 5dBm MCS9 11ax HT20 20 1 5dBm MCS9 11ax HT40 17 1 5dBm MCS9 11ax HT80 14 5 1 5dBm MCS11 Encryption Security WEP 64 128 bit encryption security WPA WPA2 TKIP AES WPA PSK WPA2 PSK TKIP AES WPA3 PSK TKIP AES 802 1x Authenticator Wireless Advanced Wi Fi Multimedia WMM Auto channel selection Wireless output power...

Page 39: ...ps Encryption Methods DES 3DES AES or AES 128 192 256 encrypting Authentication Methods MD5 SHA 1 SHA 256 SHA 384 SHA 512 authentication algorithm Management Basic Management Interfaces Web browser SNMP v1 v2c PLANET Smart Discovery utility UNI NMS supported Planet CloudViewer APP Secure Management Interfaces SSHv2 TLSv1 2 SNMP v3 System Log System Event Log Others Setup wizard Dashboard System St...

Page 40: ...s Front View VR 300 VR 300F VR 300W5 VR 300W6A VR 300W6 LAN Per 10 100 1000Mbps PoE port Port 1 to Port 4 LED Color Function LNK ACT Green Lights To indicate the port is running at 1000Mbps or 100Mbps or 10Mbps and successfully established Blink To indicate that the router is actively sending or receiving data over that port ...

Page 41: ...r 10Mbps and successfully established Blink To indicate that the router is actively sending or receiving data over that port LED Color Function PWR Green Lights up when the power is on Internet Green Lights up when the router connects to internet successfully 2 4G Green Lights up when 2 4G Wi Fi service is enabled 5G Green Lights up when 5G Wi Fi service is enabled VR 300P VR 300FP VR 300PW5 VR 30...

Page 42: ...t Port 4 and Port 5 LED Color Function LNK ACT Green Lights To indicate the port is running at 1000Mbps or 100Mbps or 10Mbps and successfully established Blink To indicate that the router is actively sending or receiving data over that port LED PWR Green Lights up when the power is on Internet Green Lights up when the router connects to internet successfully Ports 1 5 Green Steady on indicates the...

Page 43: ...e For compatibility with electrical outlet standard in most areas of the world the device s power supply automatically adjusts to line power in the range of 100 240V AC and 50 60Hz Plug the female end of the power cord firmly into the receptacle on the rear panel of the device and the other end into an electrical outlet and the power will be ready ...

Page 44: ...VPN Router to hub switch A Connect one end of a standard network cable to the LAN port port 1 on the front panel of the VPN router B Connect the other end of the cable to the hub switch The UTP Category 5e 6 network cabling with RJ45 tips is recommended Step 5 Connect your VPN Router to internet A Connect one end of a standard network cable to the WAN port port 5 on the front panel of the VPN rout...

Page 45: ... setting and configure PC s IP address 3 1 Requirements User is able to confirm the following items before configuration 1 Please confirm the network is working properly it is strongly suggested to test your network connection by connecting your computer directly to ISP 2 Suggested operating systems Windows 7 8 10 3 Recommended web browsers IE Firefox Chrome ...

Page 46: ...Please set the IP address of the connected PC as DHCP client and the PC will get IP address automatically from the VPN router Please refer to the following to set the IP address of the connected PC Windows 7 8 If you are using Windows 7 8 please refer to the following 1 Click on the network icon from the right side of the taskbar and then click on Open Network and Sharing Center ...

Page 47: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 47 2 Click Change adapter settings 3 Right click on the Local Area Connection and select Properties ...

Page 48: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 48 4 Select Internet Protocol Version 4 TCP IPv4 and click Properties or directly double click on Internet Protocol Version 4 TCP IPv4 ...

Page 49: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 49 5 Select Use the following IP address and Obtain DNS server address automatically and then click the OK button ...

Page 50: ...PN Security Router VR 300 series 50 Windows 10 If you are using Windows 10 please refer to the following 1 In the search box on the taskbar type View network connections and then select View network connections at the top of the list ...

Page 51: ...VPN Security Router VR 300 series 51 2 Right click on the Local Area Connection and select Properties 3 Select Internet Protocol Version 4 TCP IPv4 and click Properties or directly double click on Internet Protocol Version 4 TCP IPv4 ...

Page 52: ...Enterprise 5 Port 10 100 1000T VPN Security Router VR 300 series 52 4 Select Use the following IP address and Obtain DNS server address automatically and then click the OK button ...

Page 53: ...s are to guide you to running the Planet Smart Discovery Utility 1 Download the Planet Smart Discovery Utility in administrator PC 2 Run this utility as the following screen appears Figure 3 1 6 Planet Smart Discovery Utility Screen If there are two LAN cards or above in the same administrator PC choose a different LAN card by using the Select Adapter tool 3 Press the Refresh button for the curren...

Page 54: ...te All button to take effect The functions of the 3 buttons above are shown below Update Device use current setting on one single device Update Multi use current setting on choose multi devices Update All use current setting on whole devices in the list The same functions mentioned above also can be found in Option tools bar 3 To click the Control Packet Force Broadcast function it allows you to a...

Page 55: ...ace address which is set to http 192 168 1 1 by default The DHCP server of the VPN router is enabled Therefore the LAN PC will get IP from the VPN router If user needs to set IP address of LAN PC manually please set the IP address within the range between 192 168 1 2 and 192 168 1 254 inclusively and assigned the subnet mask of 255 255 255 0 Step 2 The browser prompts you for the login credentials...

Page 56: ...main information in the center Figure 4 Main Web Page Web Panel The web panel displays an image of the device s ports as shown in Figure 4 2 Figure 4 2 Web Panel Object Icon Function PoE Cosumption To indicate the PoE consumption LAN To indicate the LAN with the RJ45 plug in To indicate the PoE is in use VR 300P only To indicate network data is sending or receiving Main Menu Main Menu Web Panel Fu...

Page 57: ...Provides WAN LAN and network configuration of the router Security Provides Firewall and security configuration of the router VPN Provides VPN configuration of the router AP Control Provides AP Control configuration of the router PoE Provides PoE Management configuration of industrial wall mount Gigabit router Wireless Provides wireless configuration of the router Maintenance Provides firmware upgr...

Page 58: ...nitor system Figure 4 5 System Menu Object Description Wizard The Wizard will guide the user to configuring the router easily and quickly Dashboard The overview of system information includes connection port and system status System Status Display the status of the system device information LAN and WAN System Service Display the status of the system secured service and server service Statistics Di...

Page 59: ...tus of an SFP module via the SFP Module Information page VR 300F and VR 300FP only High Availability Enable Disable High Availability on routers RADIUS Enable Disable RADIUS on routers Captive Portal Enable Disable Captive Portal on routers SNMP Display SNMP system information NMS Enable Disable NMS on routers Remote Syslog Enable Captive Portal on routers Event Log Display Event Log information ...

Page 60: ... in different operation modes According to the operation mode you switch to please follow the instructions below to configure the router via Setup Wizard as shown in Figure 4 6 Figure 4 6 Setup Wizard Step 1 Account Modification Set up the Username and Password for the Account Modification Step 2 LAN Interface Set up the IP Address and Subnet Mask for the LAN interface as shown in Figure 4 7 ...

Page 61: ...check the box Start IP Address By default the start IP address is 192 168 1 100 Please do not set it to the same IP address of the router Maximum DHCP Users By default the maximum DHCP users are 101 which means the router will provide DHCP client with IP address from 192 168 1 100 to 192 168 1 200 when the start IP address is 192 168 1 100 Next Press this button to the next step Cancel Press this ...

Page 62: ... your ISP Each IP address entered in the fields must be in the appropriate IP form which are four octets separated by a dot x x x x The router will not accept the IP address if it is not in this format The setup is shown in Figure 4 10 Figure 4 10 WAN Interface Setup Static IP Setup Object Description IP Address Enter the IP address assigned by your ISP Netmask Enter the Netmask assigned by your I...

Page 63: ...to undo any changes made locally and revert to previously saved values Mode 2 DHCP Client Select DHCP Client to obtain IP Address information automatically from your ISP The setup is shown in Figure 4 11 Figure 4 11 WAN Interface Setup DHCP Setup Step 4 Security Setting Set up the Security Settings as shown in Figure 4 12 Figure 4 12 Setup Wizard Security Setting Object Description ...

Page 64: ...n the Internet There are two normal attack ways which hackers like to use Ping of Death and Smurf attack The default configuration is disabled Block WAN Ping Enable the function to allow the Ping access from the Internet network The default configuration is disabled Remote Management Enable the function to allow the web server access of the router from the Internet network The default configuratio...

Page 65: ...Port 10 100 1000T VPN Security Router VR 300 series 65 Figure 4 13 Setup Wizard Setup Completed Object Description Finish Press this button to save and apply changes Previous Press this button for the previous step ...

Page 66: ...wn in Figure 4 14 Figure 4 14 Dashboard WAN LAN Connection Status Object Description The status means WAN is connected to Internet and LAN is connected The status means WAN is disconnected to Internet and LAN is connected The status means WAN is connected to Internet and LAN is disconnected Port Status Object Description Ethernet port is in use Ethernet port is not in use USB port is in use ...

Page 67: ...ss Status Object Description Wireless is in use Wireless is not in use System Information Object Description CPU Display the CPU loading Memory Display the memory usage PoE Budget Display the PoE Budget usage PoE model only 4 4 3 Status This page displays system information as shown in Figure 4 15 ...

Page 68: ...00T VPN Security Router VR 300 series 68 Figure 4 15 Status 4 4 4 Statistics This page displays the number of packets that pass through the router on the WAN and LAN The statistics are shown in Figure 4 16 Figure 4 16 Statistics ...

Page 69: ...ply voltage in real time The SFP Module Information page is shown in Figure 4 18 Figure 4 18 SFP Module Information Object Description Type Display the type of current SFP module the possible types are 1000BASE SX 1000BASE LX Speed Display the speed of current SFP module the speed value or description is obtained from the SFP module Different vendors SFP modules might show different speed informat...

Page 70: ...ule Voltage V SFP DDM Module Only Display the voltage of current SFP DDM module the voltage value is gotten from the SFP DDM module Current mA SFP DDM Module Only Display the ampere of current SFP DDM module the ampere value is gotten from the SFP DDM module TX power dBm SFP DDM Module Only Display the TX power of current SFP DDM module the TX power value is gotten from the SFP DDM module RX power...

Page 71: ...rdware and software that make the system available despite failures The page will show the High Availability configuration The High Availability page is shown in Figure 4 19 Figure 4 19 High Availability Object Description High Availability Disable or enable the High Availability function The default configuration is disabled Username Create the username for the HA Password Create the password for...

Page 72: ...ADIUS Server The RADIUS client page is shown in Figure 4 21 Figure 4 21 RADIUS Client Object Description RADIUS Disable or enable the RADIUS function The default configuration is disabled Server Port UDP port number for authentication Object Description Name Describe client s name Client IP address Describe client s IP address Secret Key The RADIUS server and client share a secret key that is used...

Page 73: ...tion page that forcibly redirects users who connect to the public network before accessing the Internet The Captive portal page is shown in Figure 4 22 Figure 4 22 Captive portal Object Description Captive portal Disable or enable the Captive portal function The default configuration is disabled Interface Choose subnet interface LAN Subnet 1 LAN Subnet 2 LAN Subnet 3 LAN Subnet 4 Authentication Ty...

Page 74: ...ead Write Community Allows entering characters for SNMP Read Write Community of the router System Name Allows entering characters for system name of the router System Location Allows entering characters for system location of the router System Contact Allows entering characters for system contact of the router Apply Settings Press this button to save and apply changes Cancel Changes Press this but...

Page 75: ...ewer is a free networking service just for PLANET products This service provides simplified network monitoring and real time network status Working with PLANET CloudViewer app user can easily check network status device information port and PoE status from Internet Any other services are not included NMS Configuration screens in Figure 4 24 appear Figure 4 24 NMS Configuration Page The NMS Control...

Page 76: ...er Internet screens in Figure 4 26 appear Figure 4 26 CloudViewer Server Internet Configuration Page Object Description Email The email registered on CloudViewer Server Password The password of your CloudViewer account Connection Status Indicates the status of connecting CloudViewer Server ...

Page 77: ... Description WAN Allows setting WAN interface WAN Advanced Allows setting WAN Advanced settings LAN Allows setting LAN interface Multi Subnet Allows setting Multi Subnet1 Subnet4 interface VLAN Disable or enable the VLAN function The default configuration is disabled UPnP Disable or enable the UPnP function The default configuration is disabled Routing Allows setting Route RIP Disable or enable th...

Page 78: ...able or enable the OSPF function The default configuration is disabled IGMP Disable or enable the IGMP function The default configuration is disabled IPv6 Allows setting IPv6 WAN interface DHCP Allows setting DHCP Server DDNS Allows setting DDNS and PLANET DDNS MAC Address Clone Allows setting WAN MAC Address Clone ...

Page 79: ...ccess Type for the Internet and fill out the correct parameters from your local ISP in the fields which appear below Static Select Static IP Address if all the Internet ports IP information is provided to you by your ISP Internet Service Provider You will need to enter the IP address Netmask Gateway and DNS Server provided to you by your ISP Each IP address entered in the fields must be in the app...

Page 80: ...from your ISP WAN IP whether obtained automatically or specified manually should NOT be on the same IP net segment as the LAN IP otherwise the router will not work properly In case of emergency press the hardware based Reset button 4 5 2 WAN Advanced This page is used to configure the advanced parameters for Internet area network which connects to the WAN port of your router as shown in Figure 4 2...

Page 81: ...g link up The recommended value is 8 default Detect Link Down Threshold Set the times for detecting link down The recommended value is 3 default Custom Detect Host The host is used to check whether the internet connection is alive or not 4 5 3 LAN Setup This page is used to configure the parameters for local area network which connects to the LAN port of your router as shown in Figure 4 30 Here yo...

Page 82: ...rise 5 Port 10 100 1000T VPN Security Router VR 300 series 82 4 5 4 Multi Subnet 4 5 5 Routing Please refer to the following sections for the details as shown in Figures 4 31 and 32 Figure 4 31 Routing table ...

Page 83: ...n IP address ranges that remote device will accept Object Description Type There are two types Host and Net When the Net type is selected user does not need to input the Gateway Destination The network or host IP address desired to access Net Mask The subnet mask of destination IP Gateway The gateway is the router or host s IP address to which packet was sent It must be the same network segment wi...

Page 84: ... type either by using DHCP or Static IPv6 Address Enter the WAN IPv6 address Subnet Prefix Length Enter the subnet prefix length Default Gateway Enter the default gateway of the WAN port 4 5 7 DHCP The DHCP service allows you to control the IP address configuration of all your network devices When a client host or other device such as networked printer etc joins your network it will automatically ...

Page 85: ...sers are 101 meaning the router will provide DHCP client with IP address from 192 168 1 100 to 192 168 1 200 when the start IP address is 192 168 1 100 Set DNS By default it is set as Automatically and the DNS server is the router s LAN IP address If user needs to use specific DNS server please set it as Manually and then input a specific DNS server Primary Secondary DNS Server Input a specific DN...

Page 86: ...es two types of DDNS services One is PLANET DDNS and the other is PLANET Easy DDNS as shown in Figure 4 35 PLANET DDNS For example you ve just installed a PLANET IP camera with dynamic IP like 210 66 155 93 in the network You can name this device as Mycam1 and register a domain as Mycam1 planetddns com at PLANET DDNS http www planetddns com Thus you don t need to memorize the exact IP address but ...

Page 87: ...ervice Note that please first register with the DDNS service and set up the domain name of your choice to begin using it Easy DDNS When the PLANET DDNS service is activated user is able to select to enable or disable Easy DDNS When this function is enabled DDNS hostname will appear automatically User doesn t go to http www planetddns com to apply for a new account User Name The user name is used t...

Page 88: ...4 5 9 MAC Address Clone Clone or change the MAC address of the WAN interface The setup is shown in Figure 4 36 Figure 4 36 MAC Address Clone Object Description Clone WAN MAC Set the function as enable or disable MAC Address Input a MAC Address such as A8 F7 E0 00 06 62 ...

Page 89: ... refer to the following sections for the details Figure 4 37 Security menu Object Description Firewall Allows setting DoS Denial of Service protection as enable MAC Filtering Allows setting MAC Filtering IP Filtering Allows setting IP Filtering Web Filtering Allows setting Web Filtering Port Range Forwarding Allows setting Port Forwarding QoS Allows setting Qos DMZ Allows setting DMZ ...

Page 90: ...PI Firewall The SPI Firewall prevents attack and improper access to network resources The default configuration is enabled Block SYN Flood SYN Flood is a popular attack way DoS and DDoS are TCP protocols Hackers like using this method to make a fake connection that involves the CPU memory and so on The default configuration is enabled Block FIN Flood If the function is enabled when the number of t...

Page 91: ...attack The default configuration is disabled IP TearDrop If the function is enabled the router will block Teardrop attack that is targeting on TCP IP fragmentation reassembly codes Ping Of Death If the function is enabled the router will block Ping of Death attack that aims to disrupt a targeted machine by sending a packet larger than the maximum allowable size causing the target machine to freeze...

Page 92: ...n the function is enabled the router will block traffic of the MAC address on the list Interface Select the function works on LAN WAN or both If you want to block a LAN device s MAC address please select LAN vice versa MAC Address Input a MAC address you want to control such as A8 F7 E0 00 06 62 Add When you input a MAC address please click the Add button to add it into the list Remove If you want...

Page 93: ...dress of the web site you wish to block Figure 4 40 IP Filtering Object Description IP Filtering Set the function as enable or disable Add IP Filtering Rule Go to the Add Filtering Rule page to add a new rule Figure 4 41 IP Filter Rule Setting Object Description Enable Set the rule as enable or disable Source IP Address Input the IP address of LAN user such as PC or laptop which you want to contro...

Page 94: ...ock Leave it as blank if you want to block all ports of the web site Protocol Select the protocol type TCP UDP or all If you are unsure please leave it to the default all protocol 4 6 4 Web Filtering Web filtering is used to deny LAN users from accessing the internet as shown in Figure 4 42 Block those URLs which contain keywords listed below Figure 4 42 Web Filtering Object Description Web Filter...

Page 95: ...network services to a specific machine behind the NAT firewall as shown in Figure 4 44 These settings are only necessary if you wish to host some sort of server like a web server or mail server on the private local network behind your Router s NAT firewall Figure 4 44 Port Forwarding Object Description Port Forwarding Set the function as enable or disable Add Port Forwarding Rule Go to the Add Por...

Page 96: ...want to control For TCP and UDP Services enter the beginning of the range of port numbers used by the service If the service uses a single port number enter it in both the start and finish fields 4 6 6 DMZ A Demilitarized Zone is used to provide Internet services without sacrificing unauthorized access to its local private network as shown in Figure 4 46 Typically the DMZ host contains devices acc...

Page 97: ...es and users conveniently providing the enterprise with an encrypted network communication method By allowing the enterprise to utilize the Internet as a means of transferring data across the network it forms one of the most effective and secure options for enterprises to adopt in comparison to other methods The Maintenance menu provides the following features for managing the system as Figure 4 4...

Page 98: ... IPSec is a standardized protocol it is compatible to most vendors that implement IPSec It allows users to have an encrypted network session by standard IKE Internet Key Exchange We strongly encourage you to use IPSec only if you need to because of interoperability purposes When IPSec lifetime is specified the device can randomly refresh and identify forged IKE s during the IPSec lifetime This pag...

Page 99: ...le Check the box to enable the function Tunnel Name Enter any words for recognition Interface This is only available for host to host connections and specifies to which interface the host is connecting 1 WAN 1 2 WAN 2 Local Network The local subnet in CIDR notation For instance 192 168 1 0 Local Netmask The netmask of this router ...

Page 100: ...n Type 1 Main 2 Aggressive ISAKMP It provides the way to create the SA between two PCs The SA can access the encoding between two PCs and the IT administrator can assign to which key size or Preshare Key and algorithm to use The SA comes in many connection ways 1 AES All using a 128 bit 192 bit and 256 bit key AES is a commonly seen and adopted nowadays 2 3DES Triple DES is a block cipher formed f...

Page 101: ...SHA2 Either 256 384 or 512 can be chosen 5 MD5 Algorithm MD5 processes a variably long message into a fixed length output of 128 bits ESP Keylife You can specify how long ESP packets are valid Perfect Forward Secrecy PFS Set the function as enable or disable 4 7 2 GRE This section assists you in setting the GRE Tunnel as shown in Figure 4 50 Figure 4 50 GRE Object Description GRE Tunnel Set the fu...

Page 102: ...host connections and specifies to which interface the host is connecting 1 LAN 2 WAN 1 3 WAN 2 Peer WAN IP Address Input the IP address of the remote host For instance 210 66 1 10 Peer Netmask The remote subnet in CIDR notation For instance 210 66 1 0 24 Peer Tunnel IP Address Input the Tunnel IP address of remote host Local Tunnel IP Address Input the Tunnel IP address of remote host Local Netmas...

Page 103: ...Site to Site VPN where the channel can have equally good results from different methods with IPSec The PPTP server is shown in Figure 4 52 Figure 4 52 PPTP server Object Description PPTP Server Set the function as enable or disable Broadcast Enter any words for recognition Force MPPE Encryption Set the encryption as enable or disable CHAP Set the authentication as enable or disable MSCHAP Set the ...

Page 104: ...the PPTP server it will assign the WINS server IP address to client Server IP Address Input the IP address of the PPTP Server For instance 192 168 10 1 Clients IP Address Start End When the VPN connection is established the VPN client will get IP address from the VPN Server Please set the range of IP Address For instance the start IP address is 192 168 10 10 the end IP address is 192 168 10 100 Us...

Page 105: ...t Description L2TP Server Set the function as enable or disable Server IP Address Input the IP address of the L2TP Server For instance 192 168 50 1 Clients IP Address Start End When the VPN connection is established the VPN client will get IP address from the VPN Server Please set the range of IP Address For instance the start IP address is 192 168 50 100 the end IP address is 192 168 50 200 ...

Page 106: ...ion of SHA It has improved the shortcomings of SHA By producing summary hash values it can achieve an algorithm up to 160 bits 4 SHA2 Either 256 384 or 512 can be chosen 5 MD5 Algorithm MD5 processes a variably long message into a fixed length output of 128 bits 6 DH Group Either 1 2 5 14 15 16 17 or 18 can be chosen IKE SA Lifetime You can specify how long IKE packets are valid ESP It offers AES ...

Page 107: ...r UDP Virtual Network Device Set the Virtual Network Device as TUN or TAP Interface User is able to select the interface for SSL service using VPN Network The VPN subnet in CIDR notation For instance 192 168 20 0 Network Mask The netmask of the VPN Encryption Cipher There are four encryption types None AES 128 CBC AES 192 CBC or AES 256 CBC Hash Algorithm There are five types of Hash Algorithm Non...

Page 108: ...R 300 series 108 4 7 6 VPN Connection This page shows the VPN connection status as shown in Figure 4 55 Figure 4 55 VPN Connection Status Object Description VPN Connection Status Click the IPSec GRE SSL VPN bookmark to check the current connection status ...

Page 109: ...munity AP Search Search APs in the same domain AP Management Config APs IP Address Subnet Mask SSID and Radio Profiles AP Group Management Grouping same model AP SSID Profile Setup SSID Profile Radio 2 4G Profile Setup Radio 2 4G Profiles Radio 5G Profile Setup Radio 5G Profiles Statistics AP Status Show the status of managed APs Statistics Active Clients Show the status of active clients Map It E...

Page 110: ...y or Reset Noted Device of FCC and device of ETIS cannot be shown at the same time 4 8 2 AP Search On this page you can add new APs in your AP Control System Step as follows Step 1 Press the Search button to discover PLANET devices Step 2 Waiting for few time Choose which AP you want to add Step 3 Press the Apply button to finish addition Note When use AP Search The APs IP Address must be same as ...

Page 111: ...Status Object Description Connection status online offline Wi Fi disabled In progress action in progress Finished Successful action finished and successful Failed action failed Action Object Description Setting edit setting and allocate profile to AP Link link to the AP s web page Firmware Update Upgrade AP s firmware Reboot Reboot the AP Delete Delete the AP from the control list LED Control Cont...

Page 112: ...p 4 8 4 AP Group Management On the AP Group Management page you can create AP group and control one or more AP groups Action Object Description Add new group Click it to add an AP group Delete selected item Click it to delete the selected AP group Create Group 1 Select AP Model No you want to Add 2 Type AP Group Name and AP Group Description 3 Select AP you want to add in group member setting area...

Page 113: ...ink action is not allowed for multiple APs or AP group 4 8 5 SSID Profile On the SSID profile configuration page enter the value that you preferred and then click Apply to save the profile Action Object Description Add new profile Click it to add a new profile Delete selected item Click it to delete the selected profile Edit Click it to edit the profile Delete Click it to delete the single profile...

Page 114: ... Add new profile Click it to add a new profile Delete selected item Click it to delete the selected profile Edit Click it to edit the profile Delete Click it to delete the single profile Notes 1 Strongly suggest you to keep the values as default except the fields like Channel Network Mode Channel Bandwidth Tx Power IAPP and Tx Rx to prevent any unexpected error or impact on the performance 2 WMM C...

Page 115: ...Add new profile Click it to add a new profile Delete selected item Click it to delete the selected profile Edit Click it to edit the profile Delete Click it to delete the single profile Notes 1 Strongly suggest you to keep the values as default except the fields like Channel Network Mode Channel Bandwidth Tx Power IAPP and Tx Rx to prevent any unexpected error or impact on the performance 2 WMM Ca...

Page 116: ...d next to the magnifier icon The keyword should be in any context that belongs to the fields of this page 4 8 9 Statistics Active Clients On this page you can observe the statuses of all associated clients including traffic statistics transmission speed and RSSI signal strength Filter You can filter the search result by entering the keywords in the field next to the magnifier icon The keywords inc...

Page 117: ... and adjust the actual deployment by reference to its real transmission power and channel allocation 1 Click Scale to start to reset the map scale 2 Press the set button to draw a line on the map Fill its physical distance in the blank and press Set or Cancel For example in the graph below set the door width to 0 8 m Note You need to upload map image first before managed APs to the actual position...

Page 118: ...se 5 Port 10 100 1000T VPN Security Router VR 300 series 118 4 8 11 Upload Map On this page the system allows you to upload your floor map to the system Note The system allows user to upload up to 10 floor maps ...

Page 119: ... PoE Configuration Allows to centralize management PoE power for PDs PoE Status Displays the current PoE usage PoE Schedule Allows centralizing management PoE power for providing schedule PD Alive Check Allows centralizing management PoE power for checking PDs alive 4 9 1 PoE Configuration This section allows the user to inspect and configure the current PoE configuration setting ...

Page 120: ...are three levels of power priority named Low High and Critical The priority is used in case the total power consumption is over the total power budget In this case the port with the lowest priority will be turned off and power for the port of higher priority will be offered Device Class Displays the class of the PD attached to the port as established by the classification process Class 0 is the de...

Page 121: ...llows the user to define PoE schedule and scheduled power recycling Please press Add New Rule button to start setting PoE Schedule function You have to set PoE schedule to profile and then go back to PoE Port Configuration and select Schedule mode from per port PoE Mode option to enable you to indicate which schedule profile could be applied to the PoE port ...

Page 122: ... by disabling it End Min Allows user to set what minute PoE function does by disabling it Reboot Enable Allows user to enable or disable the whole PoE port reboot by PoE reboot schedule Please note that if you want PoE schedule and PoE reboot schedule to work at the same time please use this function and don t use Reboot Only function This function offers administrator to reboot PoE device at an i...

Page 123: ...ode Allows user to enable or disable per port PD Alive Check function By default all ports are disabled Remote PD IP Address This column allows user to set PoE device IP address for system making ping to the PoE device Please note that the PD s IP address must be set to the same network segment with the PoE Switch Interval Time 10 300s This column allows user to set how long system should issue a ...

Page 124: ...boot Time 30 180s This column allows user to set the PoE device rebooting time as there are so many kinds of PoE devices on the market and they have a different rebooting time The PD Alive check is not a defining standard so the PoE device on the market doesn t report reboot done information to the PoE Switch Thus user has to make sure how long the PD will take to finish booting and then set the t...

Page 125: ...stem Object Description 2 4G WiFi Allow to configure 2 4G WiFi 5G WiFi Allow to configure 5G WiFi MAC ACL Allow configure MAC ACL WiFi Advanced Allow to configure advanced setting of WiFi WiFi Statistics Display the statistics of WiFi traffic Connection Status Display the connection status 4 10 1 2 4G WiFi This page allows the user to define 2 4G WiFi ...

Page 126: ...the wireless encryption The default is Open WiFi Multimedia Enable Disable WMM Wi Fi Multimedia function 4 10 2 5G WiFi This page allows the user to define 5G WiFi Object Description Wireless Status Allows user to enable or disable 5G WiFi Wireless Name SSID It is the wireless network name The default 5G SSID is PLANET_5G Hide SSID Allows user to enable or disable SSID Bandwidth Select the operati...

Page 127: ...s the user to define MAC ACL Object Description Active Allows the devices to pass in the rule Device Name Set an allowed device name MAC Address Set an allowed device MAC address Add Press the Add button to add end device that is scanned from wireless network and mark them Scan Connect to client list ...

Page 128: ...reshold The coverage threshold is to limit the weak signal of clients occupying session The default is 90dBm 5G Coverage Threshold The coverage threshold is to limit the weak signal of clients occupying session The default is 90dBm 2 4G TX Power The range of transmit power is Max 100 Efficient 75 Enhanced 50 Standard 25 or Min 15 In case of shortening the distance and the coverage of the wireless ...

Page 129: ...6 Connection Status This page shows the host names and MAC address of all the clients in your network Object Description Name Display the host name of connected clients MAC Address Display the MAC address of connected clients Signal Display the connected signal of connected clients Connected Time Display the connected time of connected clients ...

Page 130: ...ocal or USB sticker Restore the router s configuration from local or USB sticker Firmware Upgrade Upgrade the firmware from local or USB storage Reboot Reset Reboot or reset the system Auto Reboot Allows setting auto reboot schedule Diagnostics Allows you to issue ICMP PING packets to troubleshoot IP 4 11 1 Administrator To ensure the router s security is secure you will be asked for your password...

Page 131: ...and Time This section assists you in setting the system time of the router You are able to either select to set the time and date manually or automatically obtain the GMT time from Internet as shown in Figure 4 49 Object Description Current Time Show the current time User is able to set time and date manually Time Zone Select Select the time zone of the country you are currently in The router will...

Page 132: ... 11 3 Saving Restoring Configuration This page shows the status of the configuration You may save the setting file to either USB storage or PC and load the setting file from USB storage or PC as Figure 4 50 is shown below Save Setting to PC Object Description Configuration Export Press the button to save setting file to PC Configuration Import Press the button to select the setting file and then p...

Page 133: ...storage Unmount Before removing the USB storage from the router please press the button first 4 11 4 Upgrading Firmware This page provides the firmware upgrade of the route Object Description Choose File Press the button to select the firmware Upgrade Press the button to upgrade firmware to system 4 11 5 Reboot Reset This page enables the device to be rebooted from a remote location Once the Reboo...

Page 134: ...and then press the button to keep the current network profiles and reset all other configurations to factory defaults 4 11 6 Diagnostics The page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues After you press Ping ICMP packets are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The Page refreshes automatically until respo...

Page 135: ...terface of the router Target Host The destination IP Address or domain Number of Packets Set the number of packets that will be transmitted the maximum is 100 Ping The time of ping Be sure the target IP address is within the same network subnet of the router or you have to set up the correct gateway IP address ...

Page 136: ...S Application Configuring PLANET DDNS steps Step 1 Visit DDNS provider s web site and register an account if you do not have one yet For example register an account at http planetddns com Step 2 Enable DDNS option through accessing web page of the device Step 3 Input all DDNS settings ...