3Com OfficeConnect Wireless 11g manual

http://www.3com.com/ Part No. DUA0554-T AAA02 Published November 2004 Of ficeConnect ® W ir eless 11g Cable/DSL Router User Guide 3CRWE554G72T 3CRWE554G 72TU[...]

3Com Corporati on 350 Campus Drive Marlborough, M A USA 01752-3064 Copyright © 2 004, 3Com Corporation. Al l rights re served . No part of this documen tatio n may be reproduced in any form or by any means or used to make any derivative work (such as translati on, transformation, or adaptation) without writt en permission fr om 3Com Corporation. 3[...]

C ONTENTS A BOUT T HIS G UIDE Naming Convention 7 Conventions 8 Feedback about this User Gui de 8 Related Documenta tion 9 1 I NTRODUCING THE R OUTER OfficeConn ect Wireless 11g Cable/DSL Router 11 Router Advantages 13 Package Contents 13 Minimum System and Co mponen t Requir ement s 14 Front Panel 14 Rear Panel 16 2 H ARDWAR E I NSTALLATION Introd[...]

W indows 95/98/ME 27 Macintosh 27 Disabling PPPoE and PPTP Client S oftwar e 28 Disabling Web Pr oxy 28 4 R UNNING THE S ETUP W IZARD Accessing the Wizard 29 Password 32 Tim e Z on e 33 W AN S ettings 33 LAN Settings 40 DHCP 40 Wireless Settings 41 Summary 42 5 R OUTER C ONFIGURATION Navigating Thr ough the Router Configu ration Pages 45 Main Menu [...]

Firewall 73 Virtual Servers 73 Special Applications 75 PC Privileges 77 URL Filter 80 Content Filter 83 SPI 84 System T ools 87 Restart 88 Time Zone 88 Configuration 89 Upgrade 90 Advanced 91 Static Route 91 RIP 9 2 Routing T able 94 DDNS 94 Security 96 Status and Logs 98 Status 98 Usage 99 Logs 100 Support/Feedback 100 Support 100 Feedback 101 6 T[...]

A U SING D ISCOVERY Running the Discovery Application 111 Windows Installation (95/98/200 0/Me/NT) 111 B IP A DDR ESSING The Internet Protocol Suite 113 Managing the Router over th e Network 113 IP Addr esses and Subnet Masks 113 How does a Device Obtain an IP Address and Subnet Mask? 115 DHCP Addressing 115 Static Addr essing 115 Auto-IP Addr essi[...]

A BOUT T HIS G UIDE This guide describes how to install and co nfigur e the OfficeConnect Wi r e less 11g Cable/DSL Router (3CR WE554G72T and 3CRWE554G72TU). This guide is intended for use by th ose r e sponsible for installing and setting up network equipment; consequ ently , it assumes a basic working knowledge of LANs (Local Area Networks) and I[...]

8 A BOUT T HIS G UIDE Conventions Ta b l e 1 and Ta b l e 2 list conventions that are used throughout this guide. Feedback about this User Guide Y our suggestions are ve ry important to us. Th ey will help make our documentation more useful to you. Please e-mail co mments about this document to 3Com at: pddtechpubs_comments@3com.com Please include [...]

Conventions 9 Example: ■ OfficeConnect Wireless 11g Cable/DSL Router User Guide ■ Part Number DUA0554-T AAA02 ■ Page 24 Do not use this e-mail address for technical support questions. For information about contacting T e chni cal Support, please refer to the Support and Safety Information sheet. Related Documentation In addition to this guide[...]

10 A BOUT T HIS G UIDE[...]

1 I NTR ODUCING THE R OUTER Welcome to the world of networking with 3Com ® . In the modern business environment, communication a nd sharing information is crucial. Computer networks have proved to be one of the fastest modes of communicatio n but, until r ecently , only large bu sinesses could aff ord the networking advantage. The OfficeConnect ®[...]

12 C HAPTER 1: I NTRODUCING THE R OUTER Figure 1 Example Network Without a Router When you use the Router in your netwo rk ( Figur e 2 ), it becomes your connection to the Internet. Connections can be made directly to the Router , or to an OfficeConnect Switch or Hub, expanding the number of computers you can have in your network. Figure 2 Example [...]

Router Advantages 13 Router Advantages The advanta ges of the Router include: ■ Shared Internet connection for both wired and wireless computers ■ High speed 802.11g wireless networking ■ No need for a dedicated, “alway s on” computer serving as your Internet connection ■ Cross-platform operation for comp atibility with W indows, Unix a[...]

14 C HAPTER 1: I NTRODUCING THE R OUTER Minimum System and Component Requirements Y our Router requires that the computer(s) and components in yo ur network be configured with at least the following: ■ A computer with an operating system that supports TCP/IP networking protocols (for exam ple Windows 95/98/NT/Me/2000 /XP , Unix, Mac OS 8.5 or hig[...]

Front Panel 15 ■ The administrator ha s invoked the Reset to Factory Defaults command, or ■ The system software is in the process of being upgraded In each of these cases, wait un til the Router has completed the current operation and the alert LED is Off. Flashing slowly - The Rout er has completed the Reset to Factory Defaults process, and is[...]

16 C HAPTER 1: I NTRODUCING THE R OUTER 5 Cable/DSL Status LED Green (100 Mb ps link) / yellow (10 Mbps link ) If the LED is on, the link between the Router and the cable or DSL modem is OK. If the LED is flashing, the link is OK and data is being transmitted or received. If the LED is off, nothing is connected, the modem is switched off or there i[...]

Rear Panel 17 correct speed and duplex, and will set itself to MDI or MDIX depending on the device to which they are conn ected and the type of cable used. 10 Four 10/100 LAN ports Using suitable RJ-45 cable, you can connect your Rou ter to a computer , or to any other piece of equipment th at has an Eth ernet connection (for example, a hub or a sw[...]

18 C HAPTER 1: I NTRODUCING THE R OUTER[...]

2 H AR DWARE I NSTALLATION Introduction This chapter will guide you through a basic installation of the Router , including: ■ Connecting the Router to the Inter net. ■ Connecting the Router to your network. ■ Setting up your computers for networking with the Router . Safety Information WAR NIN G: Plea se read the “ Safety Information ” se[...]

20 C HAPTER 2: H ARDWARE I NSTALLATION When positioning your Router , ensure: ■ It is out of direct sunlight and away from sour ces of heat. ■ Cabling is away from power lines, fluor escent lighting fixtures, and sources of electrical noise such as radios, transmitters and broadband amplifiers. ■ W ater or moisture cannot enter the case of th[...]

Before you Install your Router 21 When making connections, be careful not to push t he unit up and off the wall. CAUTION: Only wall mount single units, do not wall mount stacked units. Before you Install your Router Before you install and configur e your Router , you need the following additional information. If you do not have this information, co[...]

22 C HAPTER 2: H ARDWARE I NSTALLATION If your ISP allocates fixed or static IP information, you need the following information: If your ISP allocates IP information dynamically over a protocol oth er than PPPoE, you do n ot need any further informatio n. This configuration is typical of cable connections. Powering Up the Router T o power up the Ro[...]

Connecting the Router 23 Figure 5 Connecting the Router T o use your Router to connect to the Inter net through an external cable or DSL modem: 1 Insert one end of th e supplied Ethernet (RJ-45 Category 5) cable into the Cable/DSL port on the rear panel of the Router . 2 Insert the other end of th e cable into the RJ-45 port on your cable or DSL mo[...]

24 C HAPTER 2: H ARDWARE I NSTALLATION T o communicate wir elessly with your Rout er , your wireless NIC should be set as follows: ■ Encryption — none ■ Service Ar ea Name/SSID — 3Com ■ Channel — 11[...]

3 S ETTING U P Y OUR C OMPUTERS The Router has the ability to dynamica lly allocate netw ork addr esses to the computers on your network, usi ng DHCP . However , your computers need to be configured correctly for this to take place. T o change the configuration of your compu ters to a llow this, follow the instructions in this chapter . If your com[...]

26 C HAPTER 3: S ETTING U P Y OUR C OMPUTERS Figure 6 Local Ar ea Properties Scr een 6 Ensure that the opt ions Obtain an IP Address automatically , and Obtain DNS server address automatically are both selected as shown in Figure 7 . Click OK . Figure 7 Internet Protocol (TCP/IP) Properties Scr een 7 Restart your computer .[...]

Obtaining an IP Address Automatically 27 Windows XP If you are using a Windows XP computer , use the following procedure to change your TCP/IP settings: 1 From the Windows Start menu, select Control Panel . 2 Click on Network and Internet Connections . 3 Click on the Network Connections icon. 4 Double click on LAN or High Speed Connection icon. A s[...]

28 C HAPTER 3: S ETTING U P Y OUR C OMPUTERS Disabling PPPoE and PPTP Client Software If you have PPPoE or PP TP client so ftwar e installed on your computer , you will need to disable it. T o do this: 1 From the Windows Start menu, select Settings > Control Panel . 2 Double click on Internet Options. 3 Select the Connectio ns T ab. A screen sim[...]

4 R UNNING THE S ETUP W IZAR D Accessing the Wizard The Router setup program is Web-based, which means that it is accessed through your W eb browser (Netscape Navigator 4.7 or higher , Internet Explorer 5.0 or higher , or Mozilla 1.2.1 or higher). T o use the Setup Wizard: 1 Ensure that you have at least one computer connected to the Router . Refer[...]

30 C HAPTER 4: R UNNING THE S ETUP W IZARD Figure 10 Router Login Scr een 5 If the password is corr ect, the Country Selection screen will appear . Select the country you wish to configure the Router for , then click Apply . ( Figure 11 ) If your purchased your Rou ter in the United States, you do not see this screen, as it is automatic ally set. F[...]

Accessing the Wizard 31 6 When you have selected a c ountry either: ■ The We lco me scr een will appear ( Figur e 12 ). Select the Wizard tab and click Wizar d. or ■ If your Router has not been configur ed before, the W izar d will launch automatically (refer to Figure 13 ). 7 Click Next . 8 Y ou will be guided step by step through a basic setu[...]

32 C HAPTER 4: R UNNING THE S ETUP W IZARD Figure 13 Wizard Screen Password Figure 14 Change Administration Password Scr een When the Change Administration Password screen ( Figure 14 ) appears, type the Old Password , then a n ew passwor d in both the New Password and Confirm Password boxes. 3Com recommends entering a new password when setting up [...]

Accessing the Wizard 33 2. Write the new password down and keep it in a safe place, so that you can change your settings in the future. Click Next to display the Time Zone setup screen ( Figur e 15 ). Time Zone Figure 15 Time Zone Screen Select your time zone from the pull-down menu, check the daylight savings option if requir ed, and then click Ne[...]

34 C HAPTER 4: R UNNING THE S ETUP W IZARD Internet connection mode , have the modem settin g information fr om your ISP re ady . Select an Inter net Addressing mode from the following: ■ PPPoE is requir ed (typica lly DSL users only) see page 34 ■ ISP provides configuration dynamically (via DHCP) see page 35 ■ ISP has pr ovided a static IP a[...]

Accessing the Wizard 35 3 Enter your PPP over Ethernet service name in the PPPoE Service Name text box. Do not enter anything in this box if your ISP does not require a ser vice name. 4 Enter the MTU value supplied by yo ur ISP in the MTU text box. If you r ISP has not supplied an MTU value, leav e this at the default value. The default is 1454. 5 [...]

36 C HAPTER 4: R UNNING THE S ETUP W IZARD Figure 19 Clone MAC Addr ess Screen 3 If your ISP requir es an assi gned MAC addr ess, select Y es, I woul d like to enter a MAC address manually and enter the values for a MAC address if req ui red ( Figure 19 ). If the computer you are now using is the one that was previously connected direct ly to the c[...]

Accessing the Wizard 37 4 Enter your ISP Router addre ss in the Internet (ISP) Gateway Address text box. 5 Enter your primary DNS addr ess in the Primary DNS Address text box. 6 Enter your second ary DNS addr ess in the Seconda r y DN S Address text box. This step is optional. Not all ISPs require a secondary DNS address. 7 Check all of your settin[...]

38 C HAPTER 4: R UNNING THE S ETUP W IZARD 6 Select an idle time from the Maximum I dle Time drop-down list. This is the amount of time without Internet activity that you want to allow before the Router ends the PPTP session. 7 Check all of your settings, and then click Next . Figure 22 displays. Figure 22 PPTP IP Settings 8 IP settings must be use[...]

Accessing the Wizard 39 L2TP Mode Figure 23 L2TP Mode Scr een T o set up the Router for use with an L2TP connection, use the following procedur e: 1 Enter your L2TP se rver address in the L2TP Ser ver Address text box. 2 Enter your L2TP user name in the L2TP Use r Name text box. 3 Enter your L2TP password in the L2TP Password text box. 4 Enter your[...]

40 C HAPTER 4: R UNNING THE S ETUP W IZARD LAN Settings Figure 24 LAN IP Addr ess Screen This screen displays a suggested LAN IP address and subnet mask of the Router . It also allows you to cha nge the IP addr ess and subnet mask. DHCP The Router con tains a Dynamic Host Configuration (DHCP) server that can automatically configure the TCP/IP setti[...]

Accessing the Wizard 41 Wireless Settings Figure 26 Wireless Configuration Scr een This screen displays the Channel and Service Area Name. It also allows you to change these settings. There ar e a maximum of 14 channels, the number available to you is dependen t on the country you reside in. Selecting Clear Channel Select fr om the Channel drop-dow[...]

42 C HAPTER 4: R UNNING THE S ETUP W IZARD channel you select as this may be usef ul if you experience problems with your clients. Summary Figure 27 Configuration Summary Scr een When you complete the Setup W izard, a configuration summary will display . 3Com recommends that you verify the con figuration in formation of the Router and then print th[...]

Accessing the Wizard 43 Figure 28 Wizard Completed Screen If you have made changes to the LAN Setting s or wir eless configuration options, you may need to reconfigur e the computer you are using in order to make contact with the Router again. Y our Router is now configured and re ady for use. For information on improving your W ireless network sec[...]

44 C HAPTER 4: R UNNING THE S ETUP W IZARD[...]

5 R OUTER C ONFIGURATION Navigating Through the Router Configuration Pages This chapter describes all the scr eens available through the Router configuration pages, and is provided as a r eference. T o get to the configuration pages, browse to the Router by entering the URL in the location bar of your browser . The default URL is http://192.168.1.1[...]

46 C HAPTER 5: R OUTER C ONFIGURATION ■ Advanced — allows you to monitor and configure the Router’ s advanced features, including RIP , DDNS and Security . ■ Status and Logs — displays the current status and activity logs of the Router . ■ Support/Feedback — contains a comp rehensive online help system and allows you to provide 3Com w[...]

Welcome Screen 47 The Notice Board is used to display configuration war ning messages. For example, you would be warned if yo u had disabled wir eless networking or wireless encryption. Password Figure 30 Passwor d Screen Changing the Administration Passwor d Y ou can change the password to prevent unauthorized access to the Administration System. [...]

48 C HAPTER 5: R OUTER C ONFIGURATION Wizard Figure 31 Wizard Screen Click WIZARD... to launch the configuration wizard. Refer to Chapter 4 for information on how to run the wizard. LAN Settings The LAN Settings menu provides the following optio ns: Unit Configuration Figure 32 Unit Configuration Scr een[...]

LAN Settings 49 The LAN Settings scr een is used t o specify the LAN IP address of your Router , and to configure the DHCP server . 1 Select Unit Configuration and the n specify the Router IP Ad dress and Subnet Mask in the LAN Settings section. The default IP address of the Router is 192.1 68.1.1. 2 If you want to use the Router as a DHCP Server ,[...]

50 C HAPTER 5: R OUTER C ONFIGURATION ■ IP address — The Internet Protocol (IP) address issued to the client machine. ■ Host Name — The client machin e’ s host name, if configured. ■ MAC Address — The Media Access Contro l (MAC) address of the client’ s network card. ■ Client T ype — Whether the client is connected to the Router[...]

Wireless Settings 51 Figure 34 DHCP Fixed Mapping Setup Scr e en Y ou only need to create Fixed Mappings fo r devices that need a specific IP address. For devices that do no t need a specific IP address, the Route r will automatically allocate addresses. T o add a Fixed Mapping: 1 Enter the IP Addr ess that you want to r eserve in the IP Address fo[...]

52 C HAPTER 5: R OUTER C ONFIGURATION Configuration Figure 35 Configuration Scr een Enable Wireless Networking Use this check box to enable or disabl e the wireless section of your LAN. When disabled, no wir eless PCs can gain access to either the Internet or other PCs on your Wired or W ire less LAN th r ough this Router . Channel Selection Select[...]

Wireless Settings 53 Service Area Name/SSID This allows you to name yo ur W ir eless network. The Service Area Name/SSID field will accept any alphanum eric string and has a maximum length of 32 characters. Y our W ir eless computers must be configured with exactly the same name or you will not establish a connection. The Service Ar ea Name may als[...]

54 C HAPTER 5: R OUTER C ONFIGURATION Nitro Mo de The presence of an 11b device in yo ur network can adversely affect the performance of an 11g device, such as the Router . Nitro Mode ensures that the effects of an 11b device ar e minimized. 3Com recommends that you enable Nitro Mode if you have one or mo r e 11b devices in your network. Check the [...]

Wireless Settings 55 The pre-shar ed key is used to start the dialog between the Rout er and the client. During this dialog, a new key is agreed, making it more difficult to eavesdrop on wir eless networks encrypted using WP A, than those encrypted using WEP . ■ T o use a RADIUS Server to authenticate each user before they join the network, refer[...]

56 C HAPTER 5: R OUTER C ONFIGURATION 6 Select the Modify button to save the changes and return to the Encr yption scre en, or select Close to exit without saving the chang es. 7 If r equir ed, re peat steps 2 to 6 for a Se condary RADIUS Server . 8 Click Apply to generate the key . Using Manual Pre-Shared Key Figure 37 WP A Encryption Screen - Man[...]

Wireless Settings 57 Using Pre-Shar ed Passphrase Figure 38 WP A Encryption Screen - Pre-Shar ed Pa ssphrase T o set up Pr e-Shared Passphrase as the WP A T ype: 1 Select Pre-Shared Passphrase fr om the WP A T ype drop-down box. The screen shown in Figure 38 displays. 2 Enter a phrase of between 8 and 63 characters in length in the Passphrase field[...]

58 C HAPTER 5: R OUTER C ONFIGURATION Encryption Keys Figure 39 128 bit Encryption Keys Scr een - WEP configuration Figure 40 40 bit/64 bit Encryption Keys Scr ee n - WEP Configuration A Key is a hexadecimal (0-9, A-F) num ber used to encrypt and decrypt the data. There can be up to 4 keys and each key can b e as long as 26 digits. The Router also [...]

Wireless Settings 59 on your wireless adapters also suppo rting this featur e. Differ ent manufacturers have developed dif feren t ways of converting plain text and so interoperability is not gua ranteed. If you are experiencing difficulty , the Manual Hex Key meth od is supported by most vendors. T o se t up WEP encryption: 1 Select 128 bit encryp[...]

60 C HAPTER 5: R OUTER C ONFIGURATION 3 Select the Active T ransmit Key , which is the key the Router uses when it transmits. Y ou can change the selected key periodically to increase the security of your network. Some wireless adapters have only one key availa ble on their WEP configuration page. If this is the case ensure it is the same as Key 1 [...]

Wireless Settings 61 Authorized Wireless PCs Figure 42 Connection Contr ol Detail Screen T o cr eate a list of W ireless computers that can access the Router: 1 Select the MAC addr esses of the Wi r eless PC(s) for which you want to allow access. T o select multiple MAC addresses, hold down the Ctrl key while clicking on the addresses. The drop dow[...]

62 C HAPTER 5: R OUTER C ONFIGURATION Modifying a MAC Address T o modify a MAC address fr om the Connection Co ntr ol screen: 1 Click on the MAC address to be modified. An example list is shown in Figur e 43 . 2 Modify the MAC address. 3 Press Apply to accept the chang es. Figure 43 MAC Addr ess T able Click Close to discard all changes. Deleting a[...]

Wireless Settings 63 The W ir eless Client List provides de tails on the devices that are connected to the W ir eless LAN. The list is only crea ted when W ir eless Networking is enabled. For each device that is c onnected to the Wi r e less LAN, the MAC address and Connection Speed of that device is displayed. As you connect more devices to the Wi[...]

64 C HAPTER 5: R OUTER C ONFIGURATION Profile Figure 46 Profile Scr een Some 3Com W ir eless Network Adapters allow you to import Wireless configurations via a ‘profile’. The R outer can generate a pr of ile so that you do not need to configure your Wireless PCs manually . The profile contains three items as follows: ■ Service Area Name/SSID [...]

Internet Settings 65 can be copied on to anot her PC a nd imported into the 3Com W ir eless Network Adapter . For instructions on how to import a pr ofile, refer to the User Guide that accompanies your 3Com Wi reless Network Adapter(s). If, once the pr ofile is imported, the Wireless Network Adapter cannot connect to the Router , check that the ada[...]

66 C HAPTER 5: R OUTER C ONFIGURATION When you install the Router , you will not need to use the PPPoE software on your PC. 4 PPTP (DSL or Cable) PPTP is only used by some Europe an providers. If the installation instructions that accompany your mode m ask you to setup a dialu p connection using a PPTP VPN tunnel then select this option. T o config[...]

Internet Settings 67 Static IP Address Figure 47 Connection Parameters Scr een - Static IP T o setup the Router for use with a Static IP addr ess connection: 1 Select Static IP Addres s (to be specified manually) in the IP Allocation Mode field ( Figure 47 ). 2 Enter your IP Addr ess in the IP Ad dress text box. This information, along with the res[...]

68 C HAPTER 5: R OUTER C ONFIGURATION Dynamic IP Address Figure 48 Connection Parameters Scr een - Dynamic IP If this mode is selected, your IP Address, Subnet Mask, and DNS Addr ess will be obtained automatically from yo ur ISP . They ar e not displayed on this screen, but may be viewed on the Status scr een (click on Status and Logs on the left h[...]

Internet Settings 69 ■ Use this PC’ s MAC a ddress - This field is automatically filled in with the MAC address of the PC you ar e using to configure the Router . Y ou should use this address only if you wer e previously using this computer to connect directly to your modem. ■ Enter a new MAC ad dress manually - Use this option if you want to[...]

70 C HAPTER 5: R OUTER C ONFIGURATION 4 Enter your PP P over Etherne t user name in the PPPoE User Name text bo x. 5 Enter a passwor d in the PPPoE Password text box. 6 Enter your PPP over Ethernet service name in the PPPoE Service Name text box. Not all ISPs requir e a PPPoE serv ice name. Only enter a se rvice name if your ISP r equires this. 7 E[...]

Internet Settings 71 T o setup the Router for use with a PPTP connection, use the following procedur e: 1 Select PPTP (used by some European providers) in the IP Allocation Mode field. ( Figure 50 ) 2 Enter your PPTP server addr ess in the PPTP Ser ver Address text box (this is typically the address of your mo dem). 3 Enter your PP TP user name in [...]

72 C HAPTER 5: R OUTER C ONFIGURATION L2TP Figure 51 L2TP Setup Scr een Check with your ISP to make sure they support L2TP . T o set up the Router for use with an L2TP connection, use the following procedur e: 1 Select L2TP (used b y some European providers) in the IP Allocation Mode field. 2 Enter your L2TP se rver address in the L2TP Ser ver Addr[...]

Firewall 73 ■ Check the Get IP by DHCP check box if you want to obtain the IP information from a DHCP Server on the network. With this check box enabled, you can click Release to release the W AN IP Address for the Router , or click Renew to renew the curr ent W AN IP Address, using DHCP . ■ Fill in the Initial IP Address, Initial Subnet Mask a[...]

74 C HAPTER 5: R OUTER C ONFIGURATION feature should be used only if the Virtual Serve r or Special Applications options do not provide the level of ac cess needed for certain applications. T o configur e one of your computers as a DMZ host, enter the last digit(s) of the IP address of the computer in the IP Address of DMZ Host text box, and then c[...]

Firewall 75 Figure 54 Custom Setup Scr een Click Add to return to the V irtual Ser ver Settings screen. 4 Click Apply to save the settings. The port numbers are specified usin g a comma-separated list, with hyphens to denote port number rang es. So for example, en tering 2, 3, 5-7 would cause ports 2, 3, 5, 6, and 7 to be activa ted. Special Applic[...]

76 C HAPTER 5: R OUTER C ONFIGURATION trigger port and inco ming port(s), wher e traffic on the trigger port tells the firewall to open the incoming ports. Each defi ned Special App lication only supports a single computer user , and up to 10 Special Applications ca n be defined. Any incoming port s opened by a Special Applic ation trigger will be [...]

Firewall 77 Figure 57 Other Applications Setup S creen Click Add to save your settings. 3 Click Add in the Special Applicati on Settings screen ( Figur e 56 ), to save the configuration. Only one computer on your network can use the special application at any one time. PC Privileges Figure 58 PC Privileges Scr een Select PC Privileges to display th[...]

78 C HAPTER 5: R OUTER C ONFIGURATION T o use access contr ol for all computers: 1 Click PCs access authorized services only . 2 Select All PCs to set up the access rights for all computers connected to the Router . The screen shown in Figure 59 displays. Figure 59 All PCs Setup Scr een 3 If requir ed, check the Bypass URL Filter check box to overr[...]

Firewall 79 schedule, check the appropriate check box for each day you want to allow access, and enter th e permitted access times for each day in 24-hour clock format. For example, to allow access Monday through Friday between 9 am and 5 pm, check the chec k boxes for Mon , Tu e , Wed , Thu and Fri , and enter 09:00 and 17:00 in the text boxes nex[...]

80 C HAPTER 5: R OUTER C ONFIGURATION allow access, and enter the per mitted access times in 24-hour clock format. For example, to allow access Monday through Friday between 9 am and 5 pm, check the chec k boxes for Mon , Tu e , Wed , Thu and Fri , and enter 09:00 and 17:00 in the text boxes next to each of these days. 8 Click Add to save the setti[...]

Firewall 81 T o filter a specific site, enter the UR L for that site. For example, to stop your users from br o wsing a site called www.badsite.com , enter www.badsite.com or badsite.com in one of the fields. If badsite.com has multip le sub-domains, such as this.badsite.com and that.badsite.com then you can either: ■ Block them individually by e[...]

82 C HAPTER 5: R OUTER C ONFIGURATION Figure 62 URL Filter Scr een showing Allow List T o allow a specific site, enter the UR L for that site. For example, to let your users browse a site called www.goodsite.com , enter www.goodsite.com or goodsite.com in one of the fields. If goodsite.com has multiple sub-do mains, such as this.goodsite.com and th[...]

Firewall 83 The Router filters all traffic from domains that have been blocked using the URL filter . If you need to access an external mail ser ver , F TP server or other named device outside your network, you must list it in one of the allow fields. Y ou can filter up to 30 keywords and URLs. Computers that should not be subject to URL filterin g[...]

84 C HAPTER 5: R OUTER C ONFIGURATION T o activate Content Filtering: 1 Select Firewall from the main menu, then select the Content Filter tab. The Content Filter screen displays ( Figure 63 ). Figure 63 Content Filter Screen 2 Make sure the Enable Content Filter check box is chec ked. 3 Select the Content Filter Server that you requir e from the d[...]

Firewall 85 1 Select Firewall from the main menu, then select the SPI tab to display the SPI screen ( Figure 64 and Figure 65 ): Figure 64 SPI Scr een - upper section Figure 65 SPI Scr een - lower section Intrusion Detection Featur e The Intrusion Detection fe atur e limits ac cess for incoming traffic at the W AN ports. 2 Check the Enable SPI and [...]

86 C HAPTER 5: R OUTER C ONFIGURATION 3 If requir ed, check the En able RIP defect check box. This feature stops unacknowledged packets from accu mulating in the input queue. Stateful Packet Inspection 4 The Stateful Packet Insp ection section displays a list of traffic types. If you leave the check box for a traf fic type blan k, this t raff ic ty[...]

System Tools 87 DoS Detect Criteria 15 In the T otal incomplete TCP/UDP sessions HIGH text box, enter the number of unestablished sessions that will cause the software to start deleting half-open session s. The default is 300. 16 In the T otal incomplete TCP/UDP sessions LOW text box, enter the number of unestablished sessions that must be reached [...]

88 C HAPTER 5: R OUTER C ONFIGURATION Restart Figure 66 Restart Scr een If your Router is not operating correctly , you can choose to restart the Router by selecting Restar t the Router , simulating the effect of power cycling the unit. No configuration information will be lost but the log files will be erased. This function may be of use if you ar[...]

System Tools 89 Choose the time zone that is closest to your actual location . The time zone setting is used by the system clock when displaying the correct time in the log files. If you use Daylight saving tick the Enable Day Light savings box, and then click Apply ( Figure 67 ). The Router reads the correct time fr om NTP ser vers on the Internet[...]

90 C HAPTER 5: R OUTER C ONFIGURATION Restore Configuration Data If you want t o r einstate the configuration settings previously saved to a file, press Browse to locate the backup file on your computer , and then click RESTORE to copy the data into the Router's memory . The password will remain unchanged. Reset to Factory Default If you want [...]

Advanced 91 The upgrade procedure can take up to two minutes, and is complete when the Alert LED has stopped flashing and is permanently off. Make sure that you do not interrupt pow er to the Router during t he upgrade procedur e; if you do, the software may be corrupted and th e Router may not start up properly afterwar ds. If the Alert LED comes [...]

92 C HAPTER 5: R OUTER C ONFIGURATION ■ Gateway - the gateway used to route data to the netwo rk specified by the network address. RIP The Router supports the Routing In formation Pr oto col (RIP). RIP allows you to set up routing information on one RIP enabled device, and have that routing information r eplicated to all RIP enabled devices on th[...]

Advanced 93 Check the Enable RIP Mode check box to configure RIP on the Router . The screen shown in Figur e 72 displays Figure 72 Enable RIP Mode scr een The screen displays RIP information for the LAN interface and W AN interface. T o set up or change the in formation for one or both in terfaces: 1 Select one of Disable , Enable or Silent from th[...]

94 C HAPTER 5: R OUTER C ONFIGURATION Routing T able Select the Routing tab le tab to display r outing information used by the Router . The information is disp layed in the format shown in Figure 73 Figure 73 Routing T able scr een DDNS Dynamic Domain Name Server (DDNS) enables you to map a static domain name to a dynamic IP addr ess. The Router su[...]

Advanced 95 T o set up DDNS: 1 Select Advanc ed fr om the main menu, the n select the DDNS tab. The DDNS scr een displays ( Figure 74 ). Figure 74 DDNS screen 2 Select a DDNS Service provider from the dr op-down list. This can be either TZO.com or DynDNS.org . TZO.com If you select TZO.com: 1 In the Domain Name text box, enter the domain name. 2 In[...]

96 C HAPTER 5: R OUTER C ONFIGURATION 4 In the Refresh Time box, enter how often you want the service to automatically refresh, in days. The default is three days. 5 Click Apply to make this service active. Security Select Security to displa y the Security scr een ( Figure 75 ). Figure 75 Security Scr een The Internet connects millions of co mputer[...]

Advanced 97 3Com recommends that you leave this feature disabled for maximum security . ■ Allow PING from the Internet - PING is a utility , which is used to determine whether a device is active at the specified IP address. PING is normally used to test the physical connection b etween two devices, to ensur e that everythi ng is working corr ectl[...]

98 C HAPTER 5: R OUTER C ONFIGURATION address of the Router . Y ou may then login using the administration password. Y our Internet IP address can be fo und at the bottom of the screen. See Figur e 75 . Status and Logs Selecting Status and Logs fr om the main menu displays the Status, Usage , and Logs screens in your Web br owser window . Status Th[...]

Status and Logs 99 Figure 77 Status Scr een - lower section Usage Usage displays an appr oximate count of the traffic since the Router was last reset. ( Figure 78 ) The counts are approximate and shou ld be used as a guide only . Contact your ISP for accurate logging information. Figure 78 Usage Scr een[...]

100 C HAPTER 5: R OUTER C ONFIGURATION Logs Logs will allow you to view both the normal events, and security threats logged by the Router . Figure 79 Logs Scr een Y ou may be asked to refer to the information on the Status and Logs screens if you contact your supplier for technical suppor t. Support/Feedback Selecting Support/Feedback from the main[...]

Support/Feedback 101 Selecting the Support option on the main menu displays the support links screen, which contains a list of Internet links that provide information and support concer ning the Router ( Figure 80 ). Feedback Figure 81 Feedback Scr een Selecting the Feedback option displays the Feedback screen and all ows you to provide feedback to[...]

102 C HAPTER 5: R OUTER C ONFIGURATION[...]

6 T R OUBLESHOOTING Basic Connection Checks ■ Check that the Router is connected to your computers and to the cable/DSL modem, and that all th e equipment is powered on. Check that the LAN Status and Cable/DSL Status LEDs on the Router are illuminated, and that any corresponding LEDs on the cable/DSL modem and the NIC ar e also illuminated. ■ E[...]

104 C HAPTER 6: T ROUBLESHOOTING Connections tab and click on the LAN Settings button at the bottom. Make sure that the Proxy Server option is unchecked. ■ If you cannot b r owse t o the Router , use the winipcfg utility in Wi ndows 95/98/ME to verify that your computer has received the correct addr ess infor mation fr om the Router . Fr om the S[...]

Forgotten Password and Reset to Factory Defaults 105 Forgotten Password and Reset to Factory Defaults If you can browse to the Router configuration screen but cannot log on because you do not know or have forgotten the password, follow the steps below to r eset the Router to it’ s factory default configuration. CAUTION: All your configuration cha[...]

106 C HAPTER 6: T ROUBLESHOOTING ■ If you have a wired and a wir eles s NIC in the same computer , ensure that the wir ed NIC is disabled. ■ Check the status of the Router W ireless LED, it should be lit if wir e less is enabled and will flash when ther e is wireless activity . If not lit go to “ W ir eless Settings ” on page 51 and enable [...]

Power LED or Power Adapter OK LED Not Lit 107 ■ Speed of connect ion: The 802.11b and 802.11g standards will automatically choose the best spee d depending on the q uality of your connection. As the signal quality weakens then the speed falls back to a lower speed. The speeds supported by 802.11g are 54 Mbps, 48 Mbps, 36 Mbps, 24 Mbps, 18 Mbps, 1[...]

108 C HAPTER 6: T ROUBLESHOOTING Alter natively , quote the part number for your region: Ta b l e 3 Power Adapter Part Numbers Alert LED The Alert LED will flash when the Rou ter unit is first power ed up while the system software checks the hardware for pr oper operation. Once the Router has started normal operation, the Alert LED will go out. ■[...]

Frequently Asked Questions 10 9 address is set to 192.168.1.1. Follow the instructions below to upload a new copy of the system software to a Router unit in this state. Ensure that one of your computers has a copy of the new software image file stored on its har d disk or available on CD-ROM. The latest software is available on 3Com’ s Web site a[...]

110 C HAPTER 6: T ROUBLESHOOTING How many computers on the LAN does the Router sup port? A maximum of 253 computers on the LAN are supported. How many wireless clients does the Cable/DSL Router support? A maximum of 128 wir eless clients are supported. There ar e only 4 LAN ports on the Router . How are additional computers connected? Y ou can expa[...]

A U SING D ISCOVERY Running the Discovery Application 3Com provides a user friendly Disc overy application for detecting the Router on the n etwork. Windows Installation (95/98/2000/Me/NT) 1 Insert the Router CD-ROM in the CD-ROM drive on your computer . A menu will appear; select Router Discover y . Discovery will find the Router even if it is unc[...]

112 A PPENDIX A: U SING D ISCOVERY Figure 83 Discover ed Router Screen 3 Figur e 84 shows an example Discovered Devices screen. Highlight the Cable/DSL Router by clicking on it, and press Next . Figure 84 Discovery Finish Scr een 4 Click on Finish to la unch a web br owser and displa y the login page for the Router .[...]

B IP A DDR ESSING The Internet Protocol Suite The Internet protocol suite cons ists o f a well-defined set of communicat ions pro tocols and se vera l standard application pr otocols. T ransmission Control Protocol/Interne t Pr otocol (TCP/IP) is probably the most widely known and is a combination of two of the protocols (IP and TCP) working togeth[...]

114 A PPENDIX B: IP A DDRESSING For your network to work correctly , all devices on the network must have: ■ The same sub-network ad dr e ss. ■ The same subnet mask. The only value that will be different is the specific host device number . This value must always be unique. An example IP address is ‘192.168. 100.8’. However , the size of th[...]

How does a Device Obtain an IP Addr ess and Subnet Mask? 115 This type of IP Address operates on a subnet mask of ‘255.255.0.0’. See Ta b l e 5 for an example about how a network (only four computers repr esented) and a Router might be configured. Ta b l e 5 IP Addressing and Subnet Masking How does a Device Obtain an IP Address and Subnet Mask[...]

116 A PPENDIX B: IP A DDRESSING an IP address at random fr o m th e industry standard subnet of 169.254.x.x (with a s ubnet mask of 255.255.0.0). If two devices allocate themselves the same address, the c onflict is detected and one of the devices allocates itse lf a new address. Automatic IP addressing support was intr oduced by Microsoft in the W[...]

C T ECHNICAL S PECIFICATIONS This section lis ts the technical sp ecifications for the OfficeConnect Wireless 11g Cabl e/DSL Router . Wireless 11g Cable/DSL Router Interfaces Cable/DSL modem connection — 10Mbps/100Mbp s dual speed Ethernet port (10BASE-T/100BASE-TX) LAN connection — four 10Mbp s/100Mbps dual speed Ethernet port s (10BASE-T/100B[...]

118 A PPENDIX C: T ECHNICAL S PECIFICATIONS Encryption: 40/64 bit WEP , 128 bit WEP , WP A Maximum clients: 128 O/P Power 18dBm Operating T emperatur e 0 °C to 40 °C (32 °F to 105 °F) Power 7V A, 23.9 BThU/hr Humidity 0% to 90% (non-condensing) humidity Dimensions ■ Wi dth = 220 mm (8.7 in.) ■ Depth = 135 mm (5.3 in.) ■ Height = 24 mm (1 [...]

119 systems. RSS-210 Environmental: EN 60068 (IEC 68) *See “ FCC Statement ” on pag e 140 for conditions of operatio n. System Requirements Operating Systems The Router will support the fo llowing Operating Systems: ■ Wi ndows 95/98 ■ Wind ows NT 4.0 ■ Wi ndows ME ■ Wi ndows 2000 ■ Wi ndows XP ■ Mac OS 8.5 or higher ■ Unix Etherne[...]

120 A PPENDIX C: T ECHNICAL S PECIFICATIONS[...]

D S AFETY I NFORMATION Important Safety Information WAR NIN G : Warnings contain dire ctions that you m ust follow for you r personal safety . Follow all directions carefu lly . Y ou must read the following safety information carefully before you install or remove the unit: WAR NIN G : The Rout er generates and uses radio frequency (rf) energy . In[...]

122 A PPENDIX D: S AFETY I NF ORMATION WAR NIN G : Disconnect the power adapter before movin g the unit. WARNING: RJ-45 ports. These are shielded RJ-45 data sockets. They cannot be used as telephone so ckets. Only conn ect RJ-45 data connectors to these sockets. Wichtige Sicherheitshinweise VORSICHT : Warnhinweise enthalten Anweisungen, die Sie zu [...]

123 VORSICHT : Es sind keine von dem Benutzer zu ersetzende od er zu wartende T eile in dem Gerät vorhanden. Wenn Sie ein Problem mit dem Router haben, das nicht mittels der Fehleranalyse in dieser Anleitung behoben werden kann, setz en Sie sich mit Ihrem Lieferante n in V erbindung. VORSICHT : V or dem Ausbau des Gerä ts das Netzadapterkabel her[...]

124 A PPENDIX D: S AFETY I NF ORMATION A VERTISSEMENT : L ’appareil fonctionne à une tension extrêmement basse de sécurité qui est conforme à la norme CEI 60950 . Ces conditions ne sont maintenues que si l'équipement auquel il est raccordé fonctionne dans les mêmes conditions. A VERTISSEMENT : Il n’y a pas de parties remplaceables [...]

E E ND U SER S OFTWAR E L ICENSE A GR EEMENT IMPOR T ANT : READ BEFORE INST ALLING THE SOF TW ARE 3Com END USER SOF TW A RE LICENSE AGREEMENT YOU SHOULD CAREFULLY READ THE FOLLOWING TE RMS AND CO NDITIONS BEFORE DOWNLOADING, INSTALLING AND USING THIS PRODUCT, THE USE OF WHICH IS LICENSED BY 3COM CORPORATIO N (ì3COMî) TO ITS CUSTOMERS FOR THEI R U[...]

126 A PPENDIX E: E ND U SER S OFTW ARE L ICENSE A GR EEMENT 3Com and its suppliers. You agree to hold such trade secrets in conf idence. You further acknowledge and agree that o wnership of , and title to, the Software and Documentation and all subsequent copies thereof regardless of the form or media are held by 3Com and its suppliers . UNITED STA[...]

F ISP I NFORMATION Information Regarding Popular ISPs WAN Types Characteristics Popular ISPs Dynamic IP (Clone MAC) Cable modem ISP, non-ho stname based. Need to clone the MAC address in the Advanced tab of the Internet Settings page. MediaOne, RoadRunner, Optimum Online, Time Warner, Charter, Adelphia, Metrocast. Dynamic IP (Hostname) Cable ISP, R[...]

128 A PPENDIX F: ISP I NFORMATION *Bell includes Bell Advantage, Bell Canada, Bell South, PacBell and Southwester n Bell. Static (DSL) DSL Modem, always on. Need to enter ALL IP information from ISP in the Static IP address section of the Internet Settings page. CableSpeed, Cnet, Direct Link, Drizzle, DSL Extreme, E arthlink Wireless, Fast Point, F[...]

G LOSSARY 802.11b The IEEE specification for wireless Ethe rnet which allows speeds of up to 11 Mbps. The standard pr ovides for 1, 2, 5.5 and 11 Mbps dat a rates. The rates will switch automatically depending on range and environment. 802.11g The IEEE specification for wireless Ethe rnet which allows speeds of up to 54 Mbps. The standard pr ovides[...]

130 G LOSSARY configure to use the best common speed. The or der of prefer ence (best first) is: 100BASE-TX full duplex, 1 00BASE-TX half duplex, 10BASE-T full duplex, and 10BASE-T half duplex. Auto -negotiation is defined in the IEEE 802.3 standard for Ether net and is an oper ation that takes place in a few milliseconds. Bandwidth The information[...]

G LOSSARY 131 95 and Windows 98 will call the server to obtain the addr ess. W indows 98 will allocate itself an address if no DHCP server can be found. DNS Server Address DNS stands for Domain Name Syst em, whi ch allows Inter net host computers to have a domain name (s uch as 3com.com) and one or mo re IP addresses (such as 192.34.45.8). A DNS se[...]

132 G LOSSARY Router A device that acts as a central hub by connecting to each computer's network interface card and managing the data traffic between the local network and the Inter net. Half Duplex A system that allows packets to transmitted and received, but not at the same time. Contra st with full duplex. Hub A device that regenerates LAN[...]

G LOSSARY 133 ISP Inter net Service Provider . An ISP is a business that provides connectivity to the Inter net for individuals and other businesses or organ izations. LAN Local Area Network. A network of end stations (such as PCs, printers, servers) and network devices (hubs a nd switches) that co ver a relati vely small geographic ar ea (usually [...]

134 G LOSSARY PPTP Po int-to-Point T unneling Protocol is a method of secure data transmission between two remote sites over the internet. RIP Routing Information Protocol. RIP a llows an administrator to set up ro uting informa tion on one RIP enable d device, and have that rout ing information r eplicated to all RIP enabled devices on the network[...]

G LOSSARY 135 TCP/IP T r ansmission Contr ol Protocol/Inter net Pr otocol. This is the name for two of the most well-know n pr otocols developed fo r the inter connection of networks. Originally a UNIX standard, TCP/IP is now supported on almost all platforms, an d is the prot ocol of the Internet. TCP r elates to the content of the data travelling[...]

136 G LOSSARY Wi-Fi Wireless Fidelity . This is the certification granted by WECA to products that meet their intero perability criteria. (see also 802.11b, WECA) Wire less Client The term used to describe a deskt op or mobile PC that is wirelessly connected to your wireless network Wirel ess LAN Service Area Another term for ESSID (Extended Servic[...]

I NDEX 137 I NDEX A Access Rights 79 Addresses IP 113 Administration Password 32, 47 Advanced 91 DDNS 94 RIP 92 routing table 94 security 96 static route 91 Automatic Addressing 115 C Cable Specifications 119 Channels 139 Clone MAC address 68 Configuration backup 89 res tor e 9 0 Connection Policy 86 content filtering 83 Conventions notice icons, A[...]

138 I NDEX wirele ss 14 Nitro Mode 54 P Passwor d 29, 47 PC Privileges 77 PING 97 PPPoE 21, 28, 34, 65, 69 PPTP 21, 66, 70 Profile 64 R Remote Administration 97 Reset to Factory Defaults 90, 105 Restart 88 RIP 92 setting up 92 routing table 94 S Safety Information 19 security advanced settings 96 remote adm inistration 97 Setup W izar d 29, 48 Spec[...]

R EGULATORY N OTICES FOR THE W IR ELESS 11 G C ABLE /DSL R OUTER Channels Use of the W ir eless 11g Cable/DSL Router is only authorized for the channels approved by each country . For proper installation, login to the management interface and select your country from the drop down list. Ta b l e 5 below details the channels permitted by the local r[...]

140 FCC Statement This equipment has been tested and f oun d to comply with the limits for a Class B digital device, pursuant to Part 15 of t he FCC Rules, and the Canadian Department of Communicati ons Equipment Standards entitled, “Digital Apparatus,” ICES-003. Th ese limits are designed to provide reasonable pr otection against harm ful inte[...]

141 Information to the User If this equipment does cause interfere nce to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interfer ence by one or more of the following measur es: ■ Reorient the receiving antenna. ■ Relocate the equipm ent with r espect to t[...]

142 Exposure to Radio Fr equency Radiation: The radiated output power of the 3Com OfficeConnect Wireless 11g Cabl e/DSL Router is far below the FCC radio frequency exposur e limits. Nevertheless, the 3Com Of ficeConnec t Wi r e less 11g Cable/DSL Router shall be used in such manner that the potential for human co ntact during normal operation is mi[...]

143 Potential RF Interference (Canada) CAUTION : T o prevent radio interference to the licensed ser vice, this device is intended to be operated indoo rs and away from windows to provide maximum shielding. Equipment (or it's transmit antenna) that is installed outdoors is subject to licensing. Industry Canada - Class B This digital apparatu s [...]

144[...]

[...]

3Com Corporation, Corporate Headquarters, 350 Campus Drive, Marlborough, MA USA 01752-3064. T o learn more about 3Com products and services, visit our World Wide Web site at www .3com.com All specifications are subject to change without notice. Copyright © 2004 3Com Corporation. All rights reserved. 3Com and OfficeConnect are r egistered trademark[...]