Instruction/ maintenance manual of the product EIR900 EnGenius
Go to page of 169
EnGenius ® EIR900 Wireless-N Dual Band Media R outer with Security VPN Support V1.0.
T ABLE OF C ONTENTS I T ABLE OF C ONTENTS Product Overview Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Features .
T ABLE OF C ONTENTS II Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Home . . . . . . . . . . . . . . . . . . . . . .
T ABLE OF C ONTENTS III Viewing System Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1 System . . . . . . . . . . . . . . . . . . . . . . .
T ABLE OF C ONTENTS IV Dynamic IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-14 DNS Servers . . . . . . . . . . . . . . . . . . . .
T ABLE OF C ONTENTS V MAC Address Filtering Tabl e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-34 Configuring Wi-Fi Protected Setup . . . . . . . . . . . . . .
T ABLE OF C ONTENTS VI Firewall Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-54 Configure Basic Settings . . . . . . . .
T ABLE OF C ONTENTS VII Configuring a Bitorrent Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-80 Advanced Network Settings . . . . . . . . . . . . . .
T ABLE OF C ONTENTS VIII Upgrading Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-103 Backing Up Settings . . . . . . . . . . . . . . . .
C ONVENTIONS C ONVENTIONS IX Conv entions The following conventions are used to give the user additional informat ion about specific procedure s or content. It is importan t to pay attenti on to these conventions as they provide in formation to prevent damage to equipment or personal injury .
C ONVENTIONS T YPOGRAPHICAL C ONVENTIONS X N/A: Indicates that a component or a proce dure is not applicable to this model. Prerequisite: Indicates a requirement that must be addressed before proceeding with the current function or procedure.
C ONVENTIONS T YPOGRAPHICAL C ONVENTIONS XI Indicates commands lines as entered on the computer . V ariabl es contained within user i nput are shown in angle brackets (< >).
C OPYRIGHT C OPYRIGHT XII Copyright This user guide and its content is copyright of © EnGenius Netw orks, 201 1. All rights reserved. Any redistribution or reproduction in part or in whole in any form is prohibited.
Product Over view.
P RODUCT O VERVIEW P RODUCT O VERVIEW 1-1 1.1 Product Overview The EIR900 combines wired and wireless network access with switching capabilities in a single , af fordable device to help enable employees of small businesse s like yours safely connect to the resources they need to be productive.
P RODUCT O VERVIEW F EATURES 1-2 Sophisticated QoS prioritizes network traf fic for demanding voice, video, and dat a applications. Wi-Fi Protected Setup™ helps make wireless configuration secure and simple Built in Centralized FTP and SAMBA Services EIR900 armed with two USB2.
P RODUCT O VERVIEW P ACK AGE C ONTENTS 1-3 1.2 P ackage Contents ITEM QUANTITY EIR900 1 12V 3.3A Power Adapter 1 Quick Installation Guide 1 CD Manual 1 RJ-45 Ethernet Cable 1 Device S tand 1 T echnica.
P RODUCT O VERVIEW P RODUCT L AYOUT 1-4 1.3 Product Lay out System LED WPS Button WA N P o r t LAN Port s USB Port s Reset Button DC Power Jack Power Switch.
P RODUCT O VERVIEW P RODUCT L AYOUT 1-5 FRONT P ANEL COMPONENT S DESCRIPTION WPS Button WiFi Protected Setup button T o activate WPS, press but ton for at least 5 seconds. System LED Power status LED. Power Switch T urns the router on or off. DC Power Jack Connects the router to a DC power adap ter source.
Installation.
I NSTALLATION S YSTEM R EQUIREMENTS 2-1 2.1 S ystem R e quirements T o install the EIR900, you need the following: Computer (Windows, Linux and MAC OS X Operating Systems) Web Browser (Internet Expl ore r , FireFox, Chrome, Safari) Network Interface Card with an open RJ-4 5 Ethernet Port Wi-Fi Card or USB Wi-Fi Dongle (802.
EnGenius Quick Star t.
E N G ENIUS Q UICK S TART C ONNECTING N ETWORK C ABLES 3-1 3.1 Connecting Network Cables CAUTION! U NPLUG ALL PERIPHERALS AND THE ROUTER ’ S ADAPTER BE FORE ST ARTING WITH THIS PROCEDURE .
E N G ENIUS Q UICK S TART C ONNECTING N ETWORK C ABLES 3-2 2. Plug one end of the Ethernet cable (1) into the W AN port on the back panel of the router .
E N G ENIUS Q UICK S TART C ONNECTING N ETWORK C ABLES 3-3 3. Plug one end of an Ethernet cable (2) into the LAN port on the back panel of the router . Plug the other end of the cable into the Ethernet port of the computer . 4. Click Next to display the login screen.
E N G ENIUS Q UICK S TART G ETTING S TARTED 3-4 3.2 Getting Started Setup Notes When considering the placement of the EIR900 reme mber the followi ng: It must be located close to a DSL or Cable modem.
E N G ENIUS Q UICK S TART A CCESSING THE F IRMWARE FROM A CDROM 3-5 Accessing the Firmware from a CDROM Note: If the instructions do not automatica lly st art, open a file ma nager and browse th e root folder of the CD-ROM. Look for the file named index.
E N G ENIUS Q UICK S TART A CCESSING THE F IRMWARE FROM A W EB B ROWSER 3-6 Accessing the Firmware from a W eb Browser Logging In 1. Open a web browser . 2. Enter 192.168.0.1 in a web browser URL bar to access the default login screen. Note: The default user name is admin and the default password is admin .
Web Configuration.
W EB C ONFIGURATION V IEWING THE D ASH B OARD 4-1 4.1 Viewing the Dash Board The main screen, or dashboar d, provides access to t he router ’s main services. Home Setup Wizard Networ k Settings Logout V iew router information and connection st atus S tart the setup wizard.
W EB C ONFIGURATION S ERVICES 4-2 Services The Home , Setup Wizard , Network Settings , Language and Logout links are the main service areas. Home The Home link displays t he dashboard screen. Setup Wizard The Setup Wizard link start s the wizard that auto matically configure s the router .
W EB C ONFIGURATION W EB M EN US O VERVIEW 4-3 4.2 W eb Menus Overview Sys t e m Vi ew and edit settings that affect system functionality . Statu s Display the summary of t he current system status. LAN Configure the wired network. DHCP Configure dynamically allocated IP addresses.
W EB C ONFIGURATION I NTERNET 4-4 Internet Vi ew and edit settings that af fect network connectivity . Statu s Display the summary of the Inte rnet status and type of connection. Dynamic IP Setup a dynamic IP connection to an Internet servic e provider (ISP).
W EB C ONFIGURATION W IRELESS 2.4G 4-5 Wireless 2.4G Vi ew and edit settings for 2.4G wireless network connectivity . Basic Configure the minimum se ttings required to setup a wireless network connection. Advanced Configure the advanced network settings.
W EB C ONFIGURATION W IRELESS 5G 4-6 Wireless 5G Vi ew and edit settings for 5G wireless network connectivity . Basic Configure the minimum se ttings required to setup a wireless network connection. Advanced Configure the advanced network settings.
W EB C ONFIGURATION P ARENTAL C ONTROL 4-7 P arental Control Vi ew and configure settings for parent al control policies. Wiz ard Automatically configure access to the LAN and W AN. We b M on it o r Monitor and filter access to specified URLs.
W EB C ONFIGURATION F IREWALL 4-8 Firewall Vi ew and configure setting s for firewall rule set s. Basic Enable or disable the network firewall. Advanced Configure virtual priva te network (VPN) p ackets. DMZ Redirect p ackets from the W A N port IP address to a partic ular IP address on the LAN.
W EB C ONFIGURATION V IRTUAL P RIVATE N ETWORK 4-9 Virtual Priv ate Network Vi ew and configure setti ngs for VPN tunnelling. Statu s View the st atus of current VPN tunnels. Profile Setting Manually configure VPN tunnels. User Setting Configure users, user ID and passw ord combinations, a nd assign access to specific VPN tunnels.
W EB C ONFIGURATION USB P ORT 4-10 USB P ort Vi ew and configure se ttings for USB ports. File Sharing Enable or disable the file sharing service. File Server Enable and conf igure an FTP server . DNLA Enable and configu re a DNLA media server .
W EB C ONFIGURATION A DVANCED 4-11 Adv anced Vi ew and configure advanced system and network settings. NA T Enable or disable Networ k Address T ranslation (NA T). Port Mapping Re-direct a range of s ervice port numbers to a specified LAN IP address.
W EB C ONFIGURATION T OOLS 4-12 T ools Vi ew and configure system and network tools settings. Admin Configure the administrator p ass word used to login to the router . Tim e Configure the system time on the router . DDNS Map a static domain na me to a dynamic IP address.
Installation Setup Wizard.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-1 5.1 Detecting the Internet Connection T ype Use the Wizard to automa tically detect the type of Internet connection. 1. Click Wizard to start the detecti on process. Note: See Logging In for details on how to view the dashboard.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-2 2. Click Next to continue or Cancel to cancel the wizard..
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-3 3. The Wizard displays a progress bar while detecting the type of Internet connection.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-4 4. If the EIR900 can not det ect the type of Interne t connection, the foll ow ing screen is displayed.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-5 6. Fill in the required information. 7. Click Next to save these settings and continue to the next step; click Rescan to detect the Inter net connection method; click Skip to discard changes and co ntinue to the next step.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-6 8. For the Wireless 2.4G connection, in the SSID text field enter a ro uter name and in the Key text field enter a p assword. WARNING! Select High as the security level to bes t secure the wireless network.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-7 9. For the Wireless 5G connection, in the SSID text field enter a ro uter name and in the Key text field enter a p assword. 10.Click Next to save these settings or click Skip to discard changes and continue to the next step.
I NSTALLATION S ETUP W IZARD D ETECTING THE I NTERNET C ONNECT ION T YPE 5-8 1 1.Review the settings. 12. Click Apply to save the information ente red in the previous steps.
Basic Network Settings.
B ASIC N ETWORK S ETTINGS S YSTEM S ETUP 6-1 6.1 S ystem Setup 6.1.1 Viewing S ystem Status The status p age shows the summary of the current system status includi ng system (hardware/software ve rsion, date/time), Internet connection (W AN), wired network (LAN) and wireless network (WLAN) information.
B ASIC N ETWORK S ETTINGS WAN S ETTINGS 6-2 WA N S e t t i n g s Att ain IP Protocol Displays the IP protocol in use for the EIR900. It can be a dynamic or st atic IP address. IP Address The router ’ s IP ad dress as designated by an ISP provider .
B ASIC N ETWORK S ETTINGS LAN S ETTINGS 6-3 LAN Settings Wireless 2.4G Setting IP Address The router ’ s local IP address. The default LAN IP address is 192.168.0.1 . Subnet Mask The router ’s local subnet mask. DHCP Server: The DHCP setting status (Default: Enabled ).
B ASIC N ETWORK S ETTINGS W IRELESS 5G S ETTIN G 6-4 Wireless 5G Setting Channel The communications ch annel used by all st a- tions, or computing dev ices, on the network. ESSID The ID value of a set of one or more intercon- nected basic service sets (BSSs).
B ASIC N ETWORK S ETTINGS C ONFIGURING LAN 6-5 6.1.2 Configuring LAN Configure the wired networ k settings in the LAN section. Th e router ’s IP is defined in the IP Address field. The default set- ting of the DHCP server is se t to enabled so that network clients can be aut omatically assigned a virtual IP addresses.
B ASIC N ETWORK S ETTINGS DHCP S ERVER 6-6 DHCP Server The DHCP server assigns IP addre sses to the devices on the LAN. DHCP Server Enable or disable the DHCP server (Default: Enabled ). Lease T ime Configure the amount of time each allocated IP address can by used by a client.
B ASIC N ETWORK S ETTINGS DNS S ERVER 6-7 DNS Server The domain name system (DNS) server tran slates a domain or website name into a uniform resource locato r (URL), or Inter- net address. There are four options to choos e from: From ISP , Us er-Defined, DNS Relay or None.
B ASIC N ETWORK S ETTINGS C ONFIGURING DHCP 6-8 6.1.3 Configuring DHCP Vi ew active dynamically allocated IP (DHCP) addresses and co nfigure and view static DHCP IP addresses. DHCP Client T able WARNING! Do not modify the settings in this section without a thorough underst anding of the parameters.
B ASIC N ETWORK S ETTINGS E NABLE S TATIC DHCP IP 6-9 Enable Static DHCP IP Current Static DHCP T able Click Enable Static DHCP IP to add more st atic DHCP IP addresses. Click Reset to return the t able to it s previous state. Active static DHCP addresses are listed al ong with the asso- ciated MAC addresses.
B ASIC N ETWORK S ETTINGS C ONFIGURING L OGGING 6-10 6.1.4 Configuring Logging The logging service records and displays import ant system inform ation and activity on the netw ork. The event s are stored in a memory buf fer with older data overwritte n by newer when the buf fer is full.
B ASIC N ETWORK S ETTINGS M ONITORING B ANDWIDTH U SAGE 6-11 6.1.5 Monitoring Bandwidth Usage Vi ew bandwidth usage fo r LAN and WLAN traf fic. Displays the bandwid th usag e for the WLAN and LAN net- works.
B ASIC N ETWORK S ETTINGS C ONFIGURING L ANGUAGES 6-12 6.1.6 Configuring Languages The router supports multiple languages for using the graphical user interface (GUI).
B ASIC N ETWORK S ETTINGS C ONFIGURING WAN S ETTINGS 6-13 6.2 Configuring W AN Settings 6.2.1 View W AN Status The W AN Settings, or Internet S tatus, p age shows a summary of the current Internet connection informati on. This section is also shown on the System S tatus page.
B ASIC N ETWORK S ETTINGS C ONFIGURING D YNAMIC IP 6-14 6.2.2 Configuring Dynamic IP Dynamic IP addressing assigns a dif ferent IP address each time a device connect s to an ISP service provider . The service is most commonly used by ISP cable providers.
B ASIC N ETWORK S ETTINGS DNS S ERVERS 6-15 DNS Servers The DNS server translates a domain or w ebsite name into a uniform resource loca tor (URL), or Interne t address.
B ASIC N ETWORK S ETTINGS C ONFIGURING S TATIC IP 6-16 6.2.3 Configuring Static IP Setting a static IP address allows an ad ministrator to set a specifi c IP address for the router and guarantees that it can not be assigned a dif ferent address. Static IP IP Address The router ’s W AN IP address.
B ASIC N ETWORK S ETTINGS C ONFIGURING PPP O E 6-17 6.2.4 Configuring PPP oE Point-to-Point Protocol over Ethernet (PPP oE) is used mainly by ISPs that provide DSL modems to connect to the Internet. Login Enter the username assigned by an ISP . Password Enter the p assword assigned by an ISP .
B ASIC N ETWORK S ETTINGS C ONFIGURING PPP O E 6-18 Ty p e Configure the connection type between the router and the ISP . Choose between Keep Connection , Automatic Connection or Manual Connection . Idle T imeout Configure the maximum idle time (1 to 1,000 minutes) allowed for an inactive connection.
B ASIC N ETWORK S ETTINGS C ONFIGURING PPTP 6-19 6.2.5 Configuring PPTP The point-to-point tunnelling protocol (PPTP) is used in association with virtual pr ivate networks (VPNs). There a two part s to a PPTP connection: the W AN interf ace settings and the PPTP settings.
B ASIC N ETWORK S ETTINGS S TATIC IP A DDRESS 6-20 Static IP Address W AN Interface T ype Select Static IP Address to assign a specific IP address for t he router . My IP Address Enter the custom IP address. My Subnet Mask Enter the custom subnet mask.
B ASIC N ETWORK S ETTINGS PPTP S ETTINGS 6-21 PPTP Settings User Name Enter the username assigned by your ISP . Password: Enter the p assword assigned by your ISP . Service IP Address: Enter the PPTP se rver IP address provided by your ISP .
B ASIC N ETWORK S ETTINGS W IRELESS 2.4G LAN S ETUP 6-22 6.3 Wireless 2.4G LAN Setup 6.3.1 Configuring Basic Settings Radio Enable or disable the wireless radio. If the wire- less radio is disabled, wire less access points are not available. Mode Select the wireless operating mode for the router .
B ASIC N ETWORK S ETTINGS A CCESS P OINT M ODE 6-23 Access P oint Mode Configure the wireless settings of the router in access point mode. Band: Select a wireless standar d for the network from the following options: 2.4 GHz (B) 2.4 GHz (G) 2.
B ASIC N ETWORK S ETTINGS W IREL ESS D ISTRIBU TION S YSTEM M ODE 6-24 Wireless Distribution System Mode Configure the router ’s wire less settings in WDS mode. Channel When auto channel is disabled, select a channel to assign to the wireless network.
B ASIC N ETWORK S ETTINGS W IREL ESS D ISTRIBU TION S YSTEM M ODE 6-25 WDS Security Settings Screen Select the type of WDS encryption ( Disable , WEP or WPA Pre-Shared Key ) for the wireless network. Wired Equivalent Priv acy (WEP) Key Length Select between 64-bit and 128-encryption.
B ASIC N ETWORK S ETTINGS W IREL ESS D ISTRIBU TION S YSTEM M ODE 6-26 Wi-Fi Protected Access (WP A) Pre-Shared K ey WP A T ype Select the type of WP A.
B ASIC N ETWORK S ETTINGS C ONFIGURING A DVANCED S ETTINGS 6-27 6.3.2 Configuring Adv anced Settings Advanced settings parameters avai lable on the router . WARNING! Incorrectly changing these setti ngs may cause the device to stop functioning. Do not modi fy the settings in this section without a thorough under st anding of the p arameters.
B ASIC N ETWORK S ETTINGS C ONFIGURING A DVANCED S ETTINGS 6-28 N Dat a Rate Select the N data rate. This is the rate in which the EIR900 will transmit dat a packet s to wireless N compatible devices. Channel Bandwid th Select the channel bandwid th.
B ASIC N ETWORK S ETTINGS C ONFIGURING S ECURITY 6-29 6.3.3 Configuring Security Enable security options on the wirel ess network to prevent intrusions to systems on the wireless network. SSID Selection Select the wirele ss network group to change the wireless security settings for .
B ASIC N ETWORK S ETTINGS E NCRYPTION T YPE 6-30 Encryption T ype Wired Equiv alent Priv acy (WEP) Authentication T ype Select the type of authentication. Open System Wireless st ations can associate with the EIR900 without WEP encryption Shared Key Devices must prov ide the corresponding WEP key(s) when connec ting to the EIR900.
B ASIC N ETWORK S ETTINGS E NCRYPTION : W I -F I P ROTECTED A CCESS (WPA) P RE -S HARED K EY 6-31 Encryption: Wi-Fi Protected Access (WP A) Pre-Shared K ey WP A T ype Select the type of WP A. WP A T emporal Key Inte grity Protocol (TKIP) Gen- erates a 128-bit key for each packet.
B ASIC N ETWORK S ETTINGS E NCRYPTION : WPA RADIUS 6-32 Encryption: WP A RADIUS Use a RADIUS server to authenticate wireless stations and provide a session key to encrypt dat a during communications. WP A T ype Select the type of Wireless Protected Access (WP A).
B ASIC N ETWORK S ETTINGS C ONFIGURING F ILTER 6-33 6.3.4 Configuring Filter When Enable Wireless Access Control is selected, only wireless client s with MAC addresses listed in the table are allowed to connect to the wireless network.
B ASIC N ETWORK S ETTINGS MAC A DDRESS F ILTERING T ABLE 6-34 MAC Address Filtering T able No. The sequence num ber of the device. Description The description of the device. MAC Address The MAC address of the device. Select Indicates the device(s) that can have actions per- formed on them.
B ASIC N ETWORK S ETTINGS C ONFIGURING W I -F I P ROTECTED S ETUP 6-35 6.3.5 Configuring Wi-Fi Protected Setup Wi-Fi protected setup (WPS) is an easy way to allow wireless c lients to connect to the EIR9 00. Automate the connection between the device and the EI R900 using a button or a PIN.
B ASIC N ETWORK S ETTINGS C ONF IGURING C LIENT L IST 6-36 6.3.6 Configuring Client List Vi ew the 2.4G wireless devices cu rrently connected to the EIR900. Interface The type of network connected to the device. MAC Address The MAC address of device connected to network.
B ASIC N ETWORK S ETTINGS W IRELESS LAN 5G S ETUP 6-37 6.4 Wireless LAN 5G Setup 6.4.1 Configuring Basic Settings Radio Enable or disable the wireless radio. If the wire- less radio is disabled, wire less access points are not available. Mode Select the wireless operating mode for the router .
B ASIC N ETWORK S ETTINGS A CCESS P OINT M ODE 6-38 Access P oint Mode Configure the wireless settings of the router in access point mode. Band: Select a wireless standar d for the network from the following options: 5 GHz (802.1 1 a) 5 GHz (802.
B ASIC N ETWORK S ETTINGS W IREL ESS D ISTRIBU TION S YSTEM M ODE 6-39 Wireless Distribution System Mode Configure the wireless settings of the router in WDS mode. Channel Select a channel to as sign to the wireless net- work. MAC Address [#] Enter the MAC address(es) for the wireless access point(s) th at are p art of the WDS.
B ASIC N ETWORK S ETTINGS W IREL ESS D ISTRIBU TION S YSTEM M ODE 6-40 WDS Security Settings Screen Select the type of WDS encryption ( Disable , WEP or WPA Pre-Shared Key ) for the wireless network. Wired Equivalent Priv acy (WEP) Key Length Select between 64-bit and 128-encryption.
B ASIC N ETWORK S ETTINGS W IREL ESS D ISTRIBU TION S YSTEM M ODE 6-41 Wi-Fi Protected Access (WP A) Pre-Shared K ey WP A T ype Select the type of WP A.
B ASIC N ETWORK S ETTINGS C ONFIGURING A DVANCED S ETTINGS 6-42 6.4.2 Configuring Adv anced Settings Advanced settings parameters avai lable on the router . WARNING! Incorrectly changing these setti ngs may cause the device to stop functioning. Do not modi fy the settings in this section without a thorough under st anding of the p arameters.
B ASIC N ETWORK S ETTINGS C ONFIGURING A DVANCED S ETTINGS 6-43 Dat a Rate: Select the dat a rate. Th is is the rate in which the EIR900 will transmit data p ackets to wireless devices. N Dat a Rate Select the N data rate. This is the rate in which the EIR900 will transmit dat a packet s to wireless N compatible devices.
B ASIC N ETWORK S ETTINGS C ONFIGURING S ECURITY 6-44 6.4.3 Configuring Security Enable security options on the wirel ess network to prevent intrusions to systems on the wireless network. SSID Selection Select the wirele ss network group to change the wireless security settings for .
B ASIC N ETWORK S ETTINGS E NCRYPTION T YPE 6-45 Encryption T ype Wired Equiv alent Priv acy (WEP) Authentication T ype Select the type of authentication. Open System Wireless st ations can associate with the EIR900 without WEP encryption Shared Key Devices must prov ide the corresponding WEP key [up to 4] when connecting to the EIR900.
B ASIC N ETWORK S ETTINGS E NCRYPTION : W I -F I P ROTECTED A CCESS (WPA) P RE -S HARED K EY 6-46 Encryption: Wi-Fi Protected Access (WP A) Pre-Shared K ey WP A T ype Select the type of WP A. WP A T emporal Key Inte grity Protocol (TKIP) Gen- erates a 128-bit key for each packet.
B ASIC N ETWORK S ETTINGS E NCRYPTION : WPA RADIUS 6-47 Encryption: WP A RADIUS Use a RADIUS server to authenticate wireless stations and provide a session key to encrypt dat a during communications. WP A T ype Select the type of Wireless Protected Access (WP A).
B ASIC N ETWORK S ETTINGS C ONFIGURING F ILTERS 6-48 6.4.4 Configuring Filters When Enable Wireless Access Control is selected, only wireless client s with MAC addresses listed in the table are allowed to connect to the wireless network.
B ASIC N ETWORK S ETTINGS MAC A DDRESS F ILTERING T ABLE 6-49 MAC Address Filtering T able No. The sequence num ber of the device. Description The description of the device. MAC Address The MAC address of the device. Select Indicates the device(s) that can have actions per- formed on them.
B ASIC N ETWORK S ETTINGS C ONFIGURING W I -F I P ROTECTED S ETUP 6-50 6.4.5 Configuring Wi-Fi Protected Setup Wi-Fi protected setup (WPS) is an easy way to allow wireless c lients to connect to the EIR9 00. Automate the connection between the device and the EI R900 using a button or a PIN.
B ASIC N ETWORK S ETTINGS C ONF IGURING C LIENT L IST 6-51 6.4.6 Configuring Client List Vi ew the 5G wireless devices c urrently connect ed to the EIR900. Interface The type of network connected to the device. MAC Address The MAC address of device connected to network.
B ASIC N ETWORK S ETTINGS P ARENTAL C ONTROL S ETUP 6-52 6.5 P arental Control Setup 6.5.1 Configuring the Wizard Parental Control is a feat ure that allows p arents to filter out and control the In ternet access. By addi ng keywords, the p arent al control engine checks web content and ma kes sure it does not contain specified co ntent.
B ASIC N ETWORK S ETTINGS C ONFIGURING THE W EB M ONITOR 6-53 6.5.2 Configuring the W eb Monitor Monitor URLs that are acce ssed by PCs on the LAN. Block Block or unblock a specified URL. Tim e The time that a specified URL was accessed. URL The URL that was accessed.
B ASIC N ETWORK S ETTINGS F IREWALL S ETUP 6-54 6.6 Firew all Setup 6.6.1 Configure Basic Settings The EIR900 firewall automatically detect s an d blocks Denial of Service (DoS) att a cks. URL blocking, packet filteri ng and stateful p acket inspection (SPI) are also supported.
B ASIC N ETWORK S ETTINGS C ONFIGURING A DVANCED S ETTINGS 6-55 6.6.2 Configuring Adv anced Settings The router supports VPN p ass-th rough which allows virtual pri vate networking (VPN) packet s to pass through the firewall. VPN Pass-through Click Select to allow VPN p ackets to pass through the firewall.
B ASIC N ETWORK S ETTINGS C ONFIGURING D EMILITARIZED Z ONE 6-56 6.6.3 Configuring Demilitarized Z one Configuring a device on the LAN as a demilitarized zone (DMZ) host allows unrestrict ed two-way Internet ac cess for Internet applications, such as onlin e video games, to run from behind the NA T firewall.
B ASIC N ETWORK S ETTINGS C ONFIGURING D ENIAL OF S ERVICE 6-57 6.6.4 Configuring Denial of Service T o enable blocking of denial of se rvice (D oS) attacks, select the DoS option in the Firewall section. DoS attacks can flood the internet connection with the contin uous transmission of dat a.
B ASIC N ETWORK S ETTINGS C ONFIGURING A CC ESS C ONTROL L ISTS 6-58 6.6.5 Configuring Access Control Lists Parental Control is a feat ure that allows p arents to filter out and control the In ternet access. By addi ng keywords, the p arent al control engine checks web content and ma kes sure it does not contain specified co ntent.
B ASIC N ETWORK S ETTINGS C ONFIGURING A CC ESS C ONTROL L ISTS 6-59 Policy Name The name of the policy rule. Filtering T ype The type of policy filter: MAC address or IP address. Member Lis t A list of devices that are members on the net- work.
B ASIC N ETWORK S ETTINGS C ONFIGURING A CC ESS C ONTROL L ISTS 6-60 Enable URL Filter Enable or disable URL filters. Enable Application Filters Enable or disable application filters. Enable Web Access Log Enable or dis- able the web access log.
B ASIC N ETWORK S ETTINGS V IRTUAL P RIVATE N ETWOR K S ETUP 6-61 6.7 Virtual Priv ate Network Setup A Virtual Private Network (VPN) provides a secure connection between two remote locations or tw o users over the Internet. It provides authentication to securely encr ypt data communicated between the two re mote end points.
B ASIC N ETWORK S ETTINGS V IEWING S TATUS 6-62 T ransmit Packets The number of p ackets transmitted. Received Packet s The number of packet s received. Uptime The amount of time the VPN has been active. Select Indicates the device(s) that can have actions per- formed on them.
B ASIC N ETWORK S ETTINGS C ONFIGURING A VPN T UNNEL P ROFILE 6-63 6.7.2 Configuring a VPN T unnel Profile Manually configure a VPN tunnel profile. PPTP Click Add to begin creating a new VPN tunnel profile. On the General tab, enter the followi ng information: Name The name of the VPN tunnel profile.
B ASIC N ETWORK S ETTINGS PPTP 6-64 On the PPTP tab, enter the fol lowing information: Authentication There are three authentication algo- rithms: Select CHAP , P AP , or MSCHAP_V2. A vailable Users/Member Displays crea ted users from the User Settings available to connect to PPTP server .
B ASIC N ETWORK S ETTINGS PPTP 6-65 On the Network tab, enter the following information: VPN Server IP Setting Server IP Enter an IP address whic h is dif ferent from the router ’s LAN IP address. For example: the default LAN IP of the EIR900 is 192.
B ASIC N ETWORK S ETTINGS IPS EC 6-66 IPSec On the General tab, enter the followi ng information: Name The name of the VPN tunnel profile. Connection T ype The type of network connection. Authentication T ype The type of authentication. Shared Key The ID of the shared key .
B ASIC N ETWORK S ETTINGS IPS EC 6-67 On the SA tab, enter the fol lowing information: IKE (Phase 1) Proposal Exchange The exchange type: Ma in Mode or Agressive Mode.
B ASIC N ETWORK S ETTINGS IPS EC 6-68 On the Network t ab, enter the fo llowing information: Security Gateway T ype The type of se curity gateway: IP address or domain name. Security Gateway The security gateway ID Local Network Local Address Y our router ’s LAN IP address.
B ASIC N ETWORK S ETTINGS C ONFIGURING A U SER P ROFILE 6-69 6.7.3 Configuring a User Profile T o manually setup a VPN t unnel, create a user prof ile and then a VPN profile. Creating a User Profile Name Enter the name to connec t to an PPTP VPN tun- nel.
B ASIC N ETWORK S ETTINGS U SING THE V IRTU AL P RIVATE N ETWORK W IZARD 6-70 6.7.4 Using the Virtual Priv ate Network Wizard The virtual private network (VPN ) wizard guides the ad ministrator through setting up a VPN over four dif ferent connection methods.
B ASIC N ETWORK S ETTINGS U SING THE V IRTU AL P RIVATE N ETWORK W IZARD 6-71 Click Back to return to t he previous step; Click Next to continue with the setup; Click Cancel to stop the setup. Ste p 2 Select the type of VPN co nnection method to setup.
B ASIC N ETWORK S ETTINGS IPS EC 6-72 IPSec Ste p 3 Client to Site T o setup a T elwork or home to of fice con- nection. Site to Site T o setup a VPN co nnection between two dedicated VPN servers. Click Back to return to t he previous step. Click Next to continue with the setup.
B ASIC N ETWORK S ETTINGS IPS EC 6-73 Ste p 4 Security Gateway T ype The type of the security gateway: IP Address or Domain Name . Security Gateway The IP address or domain name of the security gateway . Remote Address The remote IP address for the VPN tunnel.
B ASIC N ETWORK S ETTINGS IPS EC 6-74 If the setup is successful, the following screen is displayed. T o enable the VPN policy immedi ately , click the check box. Click Back to return to t he previous step. Click Apply to save the sett ings and continue.
B ASIC N ETWORK S ETTINGS PPTP 6-75 PPTP User Name Enter the user name used to connect to the PPTP server . Password: Enter the p assword us ed to connect to the PPTP server . VPN Server IP Settings Server IP: Enter an IP address whic h is dif ferent from the router ’s LAN IP address.
B ASIC N ETWORK S ETTINGS PPTP 6-76 If the setup is successful, the following screen is displayed. T o enable the VPN policy immedi ately , click the check box. Click Back to return to t he previous step. Click Apply to save the sett ings and continue.
B ASIC N ETWORK S ETTINGS USB P ORT S ETUP 6-77 6.8 USB P ort Setup The USB Port feature allows the router to be used as a file s erver , DLNA media server , Bitorren t server or a vi rtual USB port on a local device.
B ASIC N ETWORK S ETTINGS C ONFIGURING A F ILE S ERVER 6-78 6.8.2 Configuring a File Server User can use FTP server to share USB storage's files in the networks. Port Number The port number of the FTP service. Login T imeout The number of seconds to try to login before indicating a failure.
B ASIC N ETWORK S ETTINGS C ONFIGURING A DNLA M EDIA S ERVER 6-79 6.8.3 Configuring a DNLA Media Server A Digital Living Network Alliance (DNLA) media server allows user sharing multi media files on l ocal networks. Enable DNLA Media Server Enable or disable the DNLA media service.
B ASIC N ETWORK S ETTINGS C ONFIGURING A B ITORRENT S ERVER 6-80 6.8.4 Configuring a Bitorrent Server V uze Offline Downloader Automa tically transfer downloads to connected USB storage by contin uing them in the background when your computer is asleep or of flin e.
B ASIC N ETWORK S ETTINGS C ONFIGURING A B ITORRENT S ERVER 6-81 Down The amount of dat a received from other users in Kb. Ratio The ratio of the amount of dat a shared and received. Statu s Indicates the current status of the torrent: Downloading, Paused or S topped.
B ASIC N ETWORK S ETTINGS A DVANCED N ETWORK S ETTINGS 6-82 6.9 Adv anced Network Settings 6.9.1 NA T Setup Network address translation (NA T) allows user s on the LAN to access the Internet th rough a single Public IP Address or mul- tiple Public IP Addresses.
B ASIC N ETWORK S ETTINGS P ORT M APPING S ETUP 6-83 6.9.2 P ort Mapping Setup Port Mapping allows you to redirect a p articular range of serv ice port numbers from the W AN to a particular LAN IP address. Enable Port Mapping Click Enable Port Mapping to activate port mapping.
B ASIC N ETWORK S ETTINGS P ORT M APPING S ETUP 6-84 Current Port Mapping T able Displays a list of mapped port ranges in use on the network. No. The sequence number of the mapped port range. Description Notes or details about the mapped port range.
B ASIC N ETWORK S ETTINGS P ORT F ORWARDING S ETUP 6-85 6.9.3 P ort F orwarding Setup Port forwarding enables multiple server applications on a LAN to serve clients on a W AN ov er a single W AN IP address.
B ASIC N ETWORK S ETTINGS P ORT F ORWARDING S ETUP 6-86 Current Port Forwardi ng T able The table of current port forwarding configurations. Click Delete Selected to remove select ed devices from the list. Click Delete All to remove all devices form the list.
B ASIC N ETWORK S ETTINGS P ORT T RIGGERING S ETUP 6-87 6.9.4 P ort T riggering Setup Some applications, such as on line games, videoconferen cing and V oIP telepho ny , require multiple p orts for inbou nd and out- bound traffic.
B ASIC N ETWORK S ETTINGS P ORT T RIGGERING S ETUP 6-88 T rigger T ype Select the protocol to use for port triggering from the following: TCP , UDP or Both . Public Port Enter the inbound port (s) for the application in the following form at: 2300-2400 or 47624.
B ASIC N ETWORK S ETTINGS A PPLIC ATION L AYER G ATEWAY S ETUP 6-89 6.9.5 Application Lay er Gateway Setup The ALG (Application Layer Gate way) serves as a window be tween correspondent ap plicati on processes so that they may exchange information on an open environment.
B ASIC N ETWORK S ETTINGS U NIVERSAL P LUG AND P LAY S ETUP 6-90 6.9.6 Universal Plug and Pla y Setup UPnP helps internet devices, such as gami ng and videoconferencing, to access the network and co nnect to oth er registered UPnP devices. Click Enable or Disable to activate or deactivate UPnP .
B ASIC N ETWORK S ETTINGS I NTERNET G ROUP M ULT ICAST P ROTO COL S ETUP 6-91 6.9.7 Internet Group Multicast Protocol Setup Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establ ish me mbership in a multicast group. Click Enable or Disable to activate or deactivate IGMP .
B ASIC N ETWORK S ETTINGS Q UALITY OF S ERVICE S ETUP 6-92 6.9.8 Quality of Service Setup QoS can prioritize bandwid th us e such as video streaming, online gaming, V oIP telephony and videoconferencing to ensure stable and ef ficient network performance.
B ASIC N ETWORK S ETTINGS P RIORITY Q UEUE 6-93 Priority Queue Set network resource usage based on specific protocols or port ranges. Incoming packets are processed based on the proto- cols’ position within the queue. Unlimited Priority Queue Local IP Address Enter the local IP address of a device on the network.
B ASIC N ETWORK S ETTINGS B ANDWIDTH A LLOCATION 6-94 Bandwidth Allocation Set network resource usage, for inbound and outbound traf fic, ba sed on local IP and port ranges. Ty p e Select Download or Upload to specific the direc- tion of packet traf fic.
B ASIC N ETWORK S ETTINGS B ANDWIDTH A LLOCATION 6-95 Click Apply to save the settings or Cancel to discard changes..
B ASIC N ETWORK S ETTINGS R OUTING S ETUP 6-96 6.9.9 R outing Setup T ypically static routing does not need to be setup because t he EIR900 has adequate r outing information aft er it has been con- figured for Internet access. S tatic routing is only necessary if the router is connected to network under a dif ferent subnets.
B ASIC N ETWORK S ETTINGS NAT E NABLED 6-97 NA T Enabled If the router is connected with a network under the dif ferent subnet, the routing setup al lows the network connection within two dif ferent subnets. Enable S t atic Routing Click Enable Static Rout- ing to activate the feature.
B ASIC N ETWORK S ETTINGS W AKE ON LAN S ETUP 6-98 6.9.10 W ake on LAN Setup W ake on LAN setup (WOL) allows the administra tor to activate a computer over the network. Enable WOL over W AN Click Enable WOL over WAN to activate the feature. Server Port Enter the server port of the device to activate.
B ASIC N ETWORK S ETTINGS T OOLS S ETUP 6-99 6.10 T ools Setup 6.10.1 Configuring the Administr ator Account Change the router ’s system p assword as well as setup a device to remotely configure the settings. Old Password: Enter the existing administrator p ass- word.
B ASIC N ETWORK S ETTINGS C ONFIGURING THE R OUTER ’ S T IME 6-100 6.10.2 Configuring the R outer ’ s Time Change the system time of the EIR900 and setup automatic update s through a network time protocol server (NTP). Tim e S e tu p Select how the router obtains the current time.
B ASIC N ETWORK S ETTINGS C ONFIGURING D YNAMIC D OMAIN N AME S ERVICE 6-101 6.10.3 Configuring Dynamic Domain Name Service Dynamic domain name service (D DNS) allows the administrator to map a static domain name to a dy namic IP address.
B ASIC N ETWORK S ETTINGS D IAGNOSING A N ETWORK C ONNECTION 6-102 6.10.4 Diagnosing a Network Connection The diagnosis feature allow the administrator to verify that another device is av ailable on the networ k and is accepting request packet s. If the ping result returns alive , it means a device is on li ne.
B ASIC N ETWORK S ETTINGS U PGRADING F IRMWARE 6-103 6.10.5 Upgr ading Firmw are Firmware is system software that operates and allows th e administrator to inte ract with the router . WARNING! Upgrading firmware through a wireless connection is not recommended.
B ASIC N ETWORK S ETTINGS B ACKING U P S ETTINGS 6-104 6.10.6 Backing Up Settings S tore multiple settings versions by saving the settings to a configuration file on the device. Restore to factory default Click Reset to restore the EIR900 to factory defaults.
B ASIC N ETWORK S ETTINGS R EBOOTING THE D EVICE 6-105 6.10.7 R e booting the Device This feature allows the adminis trator to reboot the router in the event of a system hang up.
A PPENDIX A F EDERAL C OMMUNICATION C OMMISSION I NTERFERENCE S TATEMENT A-1 Appendix A F ederal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules.
A PPENDIX A F EDERAL C OMMUNICATION C OMMISSION I NTERFERENCE S TATEMENT A-2 This transmitter must not be co-located or operating in conjunction with any ot her antenna or transmitter . R adiation Exposure Statement This equipment complies with FCC radiatio n exposure l imits set forth for an uncont rolled environment.
A PPENDIX B I NDUSTRY C AN ADA S TATEMENT B-1 Appendix B Industry Canada Statement This device complies with RSS-210 of th e Industry Canada Rules. O peration is subject to the fo llowing two conditio.
A PPENDIX B I NDUSTRY C AN ADA S TATEMENT B-2 Déclar ation d'exposition aux r adiations This device has been designed to operat e with a dipole antenna have a maximum gain of [2] dB. An tenna having a higher gain is strictly prohibited per regulations of Industry Canada.
A PPENDIX B I NDUSTRY C AN ADA S TATEMENT B-3 sance isotrope rayonnée équivale nte (p.i.r .e.) ne dépasse p as l'intensité néces saire à l'établissement d'une communication satisfaisante.
A PPENDIX C E UROPEAN (CE) D ECLARATION OF C ONFORMITY C-1 Appendix C European (CE) Declar ation of Conformity This product has been te sted in accordance too, and complies with the Low V oltage Directive (73/23/EEC) and EMC Directive (89/336/EEC). The product has be en marked with the CE Mark to illustrate its compliance.
A PPENDIX D L INK L AYERS D-1 Appendix D Link Lay ers There are diff erent ways of con necting your personal computer (PC) or mobile computing device to the Intern et. Here are four of the most common ways and how to connect to the Internet using them.
A PPENDIX D P OINT - TO -P OINT P ROTOCOL OVER E THERNET (PPP O E) D-2 P oint-to-P oint Protocol ov er Ethernet (PPP oE) Point-to-Point Protocol over Ethernet (P PPoE): T o set up a PPPoE connection, enter the Usernam e, Password, and Service (name) of the internet conne ction provided by your ISP .
A PPENDIX D L AYER 2 T UNNELING P ROTOCOL (L2TP) D-3 Lay er 2 T unneling Protocol (L2TP) T o set up an L2TP connection, enter the type of W AN connection (S tatic IP or DHCP). Af ter , depending on the type of W AN, follow the instructions of DHCP or S tatic IP to fill out the corresp onding information.
A PPENDIX E W ORLD W IDE T ECHNICAL S UPPORT E-1 Appendix E W orldWide T echnical Support REGION / COUNTRY OF PUR CHASE SERVICE CEN TRE SERVICE INFORMATION Canada CANADA web site www .
A PPENDIX E W ORLD W IDE T ECHNICAL S UPPORT E-2 contact numbers T oll-Free: (+ 1) 888-735-7888 ext.518 Local: (+1) 714-432-8668 hours of operation Monday - Friday 8:00 AM to 5:30 PM PST (GMT -8) Mexico, Central and South America MIAMI, USA web site www .
A PPENDIX E W ORLD W IDE T ECHNICAL S UPPORT E-3 Singapore, Cambodia, Indonesia, Malaysia, Thailand, Philippines, Vi etnam China, Hong Kong, Korea, India South Africa Europe Oceania SINGAPORE web site www .engeniustech.com.sg email techsupport@enge niustech.
A PPENDIX E W ORLD W IDE T ECHNICAL S UPPORT E-4 email technology@senao.com Note: * Service hours are based on the local time of the service center . * Please visit the regional website for th e customer service latest information.
An important point after buying a device EnGenius EIR900 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought EnGenius EIR900 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data EnGenius EIR900 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, EnGenius EIR900 you will learn all the available features of the product, as well as information on its operation. The information that you get EnGenius EIR900 will certainly help you make a decision on the purchase.
If you already are a holder of EnGenius EIR900, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime EnGenius EIR900.
However, one of the most important roles played by the user manual is to help in solving problems with EnGenius EIR900. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device EnGenius EIR900 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
