Instruction/ maintenance manual of the product WMM-3000R AirLive
Go to page of 99
WMM-3000R MIMO-G W ir eless Br oadband Router User’s Manual A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 1.
Copyright The contents of this publica tion may not be reproduced in a ny part or as a w hole, stored, tran scribed in an information retrieval system, translated in to any lan guage, or tra nsmitted in a ny form or by any m eans, mechanical, magnetic, electronic, op tical , photocopying, manual, or ot herwise, without the prior written permission.
T able of Contents Chapter 1 Introduction Functions and Features ......................................................................... 4 Packing List .......................................................................................... 6 Chapter 2 Hardware Installation .
C C C h h h a a a p p p t t t e e e r r r 1 1 1 I I I n n n t t t r r r o o o d d d u u u c c c t t t i i i o o o n n n Congratulat ions on your purc hase of this outst anding W ireless B roadband Route r . This pro duct is specificall y designed for Small Office and Home Office needs.
z High speed for wireless LAN connection Up to 54Mbps d ata rate by inco rporating Or thogon al Frequency Division Multiplex ing (OFDM). z Roaming Provides seamle ss roaming within the IEEE 80 2.1 1b (1 1M) and IEEE 80 2.1 1g (54M) WLAN infrastructure .
z System time Supported Allow you to synchronize syste m time with network time server . z E-mail Alert Supported The router can send its info by mail. z Dynamic dns Supp orted At present,the router has 3 ddns.dyndns,TZO.co m and dhs.org. z SNMP Supported The router supports basic SNMP function.
C C C h h h a a a p p p t t t e e e r r r 2 2 2 H H H a a a r r r d d d w w w a a a r r r e e e I I I n n n s s s t t t a a a l l l l l l a a a t t t i i i o o o n n n 2.
2.1.2. Rear Panel Figure 2-2 Re ar Panel LED: LED Function Color S tatus Description Power Power indication Green On Power is being applied to this produ ct. S tatus System statu s Green Blinking S tatus is flashed once per second to indicate system is alive.
2.2 Procedur e for Hardwar e Installation 2. Decide where to place your Wir eless Broadband Router Y ou can place your Wireless Broadband Router on a desk or other flat surface, or you c an mount it on a wall.
C C C h h h a a a p p p t t t e e e r r r 3 3 3 N N N e e e t t t w w w o o o r r r k k k S S S e e e t t t t t t i i i n n n g g g s s s a a a n n n d d d S S S o o o f f f t t t w w w a a a r r r e .
C C C h h h a a a p p p t t t e e e r r r 4 4 4 C C C o o o n n n f f f i i i g g g u u u r r r i i i n n n g g g W W W i i i r r r e e e l l l e e e s s s s s s B B B r r r o o o a a a d d d b b b a .
4.1 S tart-up and Log in Activate your browser, and disable the proxy or add the IP addre ss of this product into the exceptions . Then, type this prod uct’ s IP address in the Location (for Netscape) or Address (for IE) field and p ress ENTER. For example: http://192.
4.2 S tatus This option pr ovides the function fo r observing this prod uct’ s working status: A. W AN Port Status. If the W AN port is assigned a dynamic IP , there may appe ar a “ Renew ” or “ Release ” button on the Sidenote column. Y ou can click th is button to renew or release IP manu ally .
4.3 Wiz ard Setup W izard will gu ide you through a basic configuration procedure step by step.Press ”Next >” Setup Wi zard - Select W AN T ype : For detail settings, please refer to 4.
4.4 Basic Setting 4.4.1 Primary Setup – W AN T ype, V irtual Computers Press “Change” A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 15.
This option is primary to enab le this product to work properly . Th e setting items and the web appearance depend on the W AN ty pe. Choose correct W AN type before you start. 1. LAN IP Address : the local IP address of this devi ce. The computers on your network m ust use the LAN IP address of your product as their Default Gateway .
4.4.1.3 Dynam ic IP Address wi th Road Runner Session Manageme nt.(e.g. T elstra BigPond) 1. LAN IP Address is th e IP address of this pro duct. It must be the default g ateway of your computers. 2. WAN Type is Dynam ic IP Address. If th e WAN type is not correct, change it! 3.
2. Server IP Address: the IP a ddress of the PPTP server . 3. PPTP Account and Passwo rd: the account a nd password you r ISP assigned to y ou. If you don' t want to change the pass word, keep it empty . 3. Con nection ID: optional . Input the c o nnectio n ID if your ISP requires it.
4.4.1.6 L 2TP First,Please check your ISP assigned and Select St atic IP Ad dress or Dynamic IP Add ress. For example:Use S tatic 1. My I P Address and My Subnet M ask: the privat e IP addr ess and subnet mask your ISP assigned to you. 2. Server IP Address: the IP a ddress of the PPTP server .
4.4.1.7 V irtual Computers(O nly for S tatic and dynamic IP address W an type) V irtual Computer en ables you to use the original NA T feature, and allows you to setup the one-to-one mapping of multiple global IP address and local IP addr ess.
• Global IP: Ent er the global IP address assigned by your ISP . • Local IP: Enter the local IP addr ess of your LAN PC corresponding to th e global IP address.
This function enables you to assign another gateway to your PC, when DHCP server offers an IP to your PC. 4.4.3 W ireless Setting, 80 2.1X setting and WDS W ireless settings allow you to set the wireless configuration items. 1. Wir eless : The user ca n enable or disalbe wireless function.
5. WEP Key 1, 2, 3 & 4 : When you enable t he 128 or 64 bit WEP key security , please select one WEP key to be used and input 2 6 or 10 hexadecimal (0, 1, 2…8, 9, A, B…F) digits.
If you select HEX,you have to fill in 64 hexadecimal (0, 1, 2…8, 9, A, B…F) digits If ASCII,t he length of pres hare key is from 8 to 63. 2. Fill in the key, Ex 12345678 WP A Check Box wa s used to switch the function of the WP A.
WP A2-PSK(AES) 1. Select Pre-share Key Mode If you select HEX, you have to fill in 64 hex adecimal (0, 1, 2…8, 9, A, B…F) digits If ASCII, the length of Pre-sh are key is from 8 to 63.
WP A2(AES) Check Box was used to switch the function of the WP A. When the WP A function is enabled, the Wireless user must authen ticate to this router first to us e the Network service. RADIUS Server IP addre ss or the 802.1X server ’s domain-name.
WP A-PSK /WP A2-PSK The router will detect automatically which Secu rity type(Wpa-psk version 1 or 2) the client uses to encrypt. 1. Select Pre-share Key Mode If you select HEX, you have to fill in 64 hex adecimal (0, 1, 2…8, 9, A, B…F) digits If ASCII, the length of Pre-sh are key is from 8 to 63.
WP A/WP A2 Check Box was used to switch the function of the WP A. When the WP A function is enabled, the Wireless user must authen ticate to this router first to us e the Network service. RADIUS Server The router will detect automatically which Secu rity type(Wpa-psk version 1 or 2) the client uses to encrypt.
WDS(Wir eless Distribution System) WDS operati on as defined bythe IEEE802.11 sta ndard has been m ade available. Usi ng WDS it is pos sible to wirelessly connect Access Points, an d in doing so extend a wired infrastructure to locations where ca bling is not possible or inefficient to im plement.
4.5 Port Forwarding 4.5.1 V irtual Server A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 30.
This product’ s NA T firewall filters out unrecognized pack ets to protect yo ur Intranet, so all hosts behind this product are invisible to the outside world. If you wish, y ou can make so me of them accessible by enabling the V irtual Server Mappi ng.
4.5.2 Special AP Some applications require multiple connection s, like Internet games, V ideo conf erencing, Internet telephony , etc. Because of the firewall function, these applicatio ns cannot work wi th a pure NA T router . The Special Applications feature allows some of these applications to work with this produ ct.
4.5.3 Miscellaneous Items IP Addre ss of DMZ Host DMZ (DeMilitarized Zone) Host is a host without the protec tio n of firewall. It allows a computer to be exposed to unrestrict ed 2-way comm unication for Internet games, V ideo conferenc ing, Internet tele phony and other special applications.
4.6 Security Settings A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 34.
4.6.1 Packet Filter Packet Filter enables you to co ntrol what packets are allowed to pass the router . Outbound filter applies on all outbound p ackets. However , Inbou nd filter applies on p acket s that destined to V irtual Servers or DMZ host only .
For source or destination port, you can define a single port (8 0) or a range of ports (1000 -1999). Add prefix "T" or "U" to speci fy TCP or UDP protocol. For exam ple, T80, U 53, U2000-2999. No prefix indicat es both TCP and UDP are defin ed.
Others are all blocked. Example 2: (1.2.3.10 0-1.2.3.1 19) They can do everything except read net news ( port 1 19) and tra nsfer files via FTP (port 21) Others are all allowed. After Inbound Pa cket Filter setting is configured , click the save button.
(192.168.1 .100-192.168 .1.149) They are allowed to send mail (port 25), receive mail (po rt 1 10), and browse Internet (port 80); port 53 (DNS) is necessary to resolve the domain name. (192.168.1 .10-192.168.1.20) They can do everything (block no thing) Others are all blocked.
Example 2: (192.168.1. 100-192.168.1. 1 19) They can do everything exc ept read net news (port 1 19) and transfer fi les via FTP (port 21) Others are allowed After Outbound Packet Filter setting is configured, click the save button.
4.6.2 Domain Filter Domain Filter Let you prevent users under this de vice from accessing specific URLs. Domain Filter Enable Check if you want to enable Domain Filter . Log DNS Query Check if you want to log the a ction wh en someone accesses the specific URLs.
Example: In this example: 1. URL include “www .msn.com” will be blocked, and the action will be record in log-file. 2. URL includ e “www .sina.com” will not be blocked, bu t the action will be record in log-file. 3. URL includ e “www .google.
4.6.3 URL Blocking URL Blocking will block LAN computers to connect to pre-defined W ebsites. The major difference between “Domain filter” and “URL Bl ocking” is Domain filter require user to input suffix (like .com or .org, etc), while URL Blo cking require user to input a keyword on ly .
In this example: 1. URL include “msn” will be blocked, and the action will be record in log-file. 2. URL include “sina” will be blocked, but the action will be record in log-file 3. URL include “cnnsi” will not be blocked, but the action will be record in log-file.
4.6.4 MAC Address Contr ol MAC Address Control allows you to assi gn different access right for dif ferent users and to assign a specific IP address to a certain MAC address. MAC Address Control Check “Enable” to enable the “MAC Address Contro l”.
allow or de ny the clients, wh ose MAC addresses are not in the "Control table", to associate to the wireless LAN. Control table "Control tabl e" is the table at the bott om of the "MAC Addr ess Control" page. Each row of this table indicates the MA C address and the e xpected IP addre ss mapping of a client.
Previous page and Next Page T o make this setup page si mple and clear , we have divide d the “Control ta ble” into several page s. Y ou can use t hese buttons to navi gate to dif ferent pages.
Example: In this scenario, there are three clients listed in the Cont rol Table. Cl ients 1 and 2 ar e wireless, and clie nt 3 is wired. 1.The "MAC Address Control" f unction is enabled.
6.Clients 1 and 2 are allowed to associate to th e wirele ss LAN, but a wireless client with a MAC address not specified in the Control tab le is denied to associate to the wireless LAN. Client 3 is a wired client and so is not affected by Association control.
port address, ACK, SEQ numb er and so on. And the rout er will check every incoming packet to detect if this packet is valid. DoS Attack Detection When this feature is enabled, the router will detect and log the DoS attack comes from the Internet.
4.7.1 System T ime Get Date and Time by NTP Protocol Selected if you want to Get Date and T ime by NTP Protocol. Time Server Select a NTP time server to consult UTC time Time Z one Select a time zone where this device locates. Set Date and T ime manually Selected if you want to Set Date and T ime manua lly .
4.7.2 System Log This page s upport two m ethods to export sy stem logs to spe cific destination by means of syslog( UDP) and SMTP(TCP). The items you have to setup includin g: IP Address for Syslog Host IP of destination where syslogs will be sen t to.
4.7.3 Dynamic DNS To host your s erver on a changin g IP address, you ha ve to use dynami c domain name service (DDNS). So that anyone wishing to reach your host only needs to know the name of it. Dynamic DNS will map the name of your host to your current IP addr ess, which changes each time you c onnect your Internet service provider.
Username/E-mail Password/Key You will get this information whe n you regi ster an account on a Dynam ic DNS server. Example: After Dynamic DNS setting is configured, click the save button.
4.7.4 SNMP Setting In brief, SNMP , the Simple Network Management Protocol, is a protocol designed to give a user the capability to remotely manage a computer netwo rk by polling and setting terminal values and monito ring network events. Enable SNMP Y ou must check either Local or Remote or both to enab le SNMP function.
4.7.5 Routing Routing T a bles allow you to determine whi ch physical interface ad dres s to use for outgoing IP data gra ms. If you have more than one routers and subn ets, you will need to enab le routing table to allow packets to find proper routing path and allow dif ferent subn ets to communicate with each other .
Example: Configurati on on NA T Ro uter Destination SubnetMask Gateway Hop Enabled 192.168.1.0 255.255.25 5.0 192.168 .1.216 1 ˇ 192.168.0.0 255.255.25 5.0 192.168 .1.103 1 ˇ So if, for example, the client3 wanted to send an IP data gram to 192.168.
4.7.6 Schedule Rule Y ou can set the schedule time to decide which service will be turn ed on or off. Select the “enab le” item. Press “Add New Rule” A i r L i v e W M M - 3 0 0 0 R U s e r .
Y ou can write a rule name and set w hich day and what ti me to schedule from “Start T ime” to “End T ime”. The following example conf igure “ftp ti me” as everyday 14:10 to 16:20 After c .
Schedule Enable Selected if you want to Enable the Schedu ler . Edit T o edit the schedule rule. Delete T o delete the schedule rule, an d the rule# o f the rule s behind th e deleted one will decrease one automatically .
4.8 Maintenance A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 60.
4.8.1 Chan ge Password Y ou can change Password here. W e strong ly recommend y ou to change th e system password f or security reason. A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 61.
4.8.2 Sys tem Log Y ou can V iew system log by clicking the Vi e w L o g bu tton A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 62.
4.8.3 Firmwar e Upgrade Y ou can up grade firmware by clicking Firmware Upgrade button. 4.8.4 Backup Setting Y ou can backup your settings by clicking the Backup Setting butt on and save it as a bin file. Once you want t o restore these settings, please c lick Firmware Upgrade button and use the bin fi le you saved.
Y ou can also reset this product to factory default by clicking the Reset to default button. 4.8.6 Reboo t Y ou can als o reboot this product by clicking the Reboot button.
MAC Address for W a ke-on-LAN W ake-on -LAN is a technology that enables you to power up a networked device remotely . In orde r to enjoy this feature, the ta rget device m ust be W ake-on-LAN enabled and you have to know the M AC address of thi s device, say 00-1 1-22-33-44-5 5.
A A A p p p p p p e e e n n n d d d i i i x x x A A A T T T C C C P P P / / / I I I P P P C C C o o o n n n f f f i i i g g g u u u r r r a a a t t t i i i o o o n n n f f f o o o r r r W W W i i i n n n d d d o o o w w w s s s 9 9 9 5 5 5 / / / 9 9 9 8 8 8 This section i ntroduces you h ow to install TC P/IP protocol int o your personal computer .
6. The TCP/IP protocol sh all be listed in the Network window . Click OK to complete the install p rocedure and restart your PC to enable the TCP/IP protocol. A.2 Set TCP/IP Pr otocol for W orking with NA T Router 1. Click St a r t button a nd choose Settings , t hen click Control Panel .
a. Select Obtain an IP address aut omatically in the IP Address tab. b. Don’t input any value in the Gateway tab. A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 68.
c. Choose Disable DNS in the DNS Configuration tab. B. Configure IP manually a. Select Specify an IP address in the IP Add ress tab. The default IP address of this product is 192.168.1.254. So p lease use 192.168.1.xxx (xxx is between 1 a nd 253) for IP Address field an d 255.
b. In the Gateway tab, add the IP address of this product (default IP is 192.168.1 .254) in the New gateway field a nd click Add button. c. In the DNS Configuration tab, add th e DNS valu es which are provided by the ISP into DNS Server Search Order field and click Add button.
A A A p p p p p p e e e n n n d d d i i i x x x B B B 8 8 8 0 0 0 2 2 2 . . . 1 1 1 x x x S S S e e e t t t t t t i i i n n n g g g Figure 1: T esting E nvironment (Use Win dows 2000 Radiu s Server) 1 Equipment Details PC1: Microsoft Windows XP Profession al without Service Pack 1.
5.Set RADIU S serv er shar ed key . 6.Configure WEP key and 802.1X setting. The following test will use the inbuilt 802.1 X a uthentication method such as ,E AP_TLS, PEAP_CHAPv2(W indows XP with SP1 only), and PEAP_ TLS(W indows XP with SP1 only) using the Smart Card or other Certificate of the W indows XP Professional.
Figure 2: Enable IEEE 802.1X access control A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 73.
Figure 3: Sm art card or certificate properties 4. W indows 2000 RADIUS server Authenticati on testing: 4.1DUT aut henticate PC1 using certificate. (P C2 follows the same test procedures.) 1. Download and install the certificate on PC1. (Fig 4) 2. PC1 choose the SSID of DUT as the Access Point.
Figure 4: Certificate in formation on PC1 Figure 5: Authenticating Figure 6: Authentication success 4.2 DUT authenticate PC2 using PEAP-TLS. 1. PC2 choose the SSID of DUT as the Access Point. 2. Set authentication type of wireless client and RADIUS server both to PEAP_TLS.
and end the authentication procedure. 6. T erminate the test steps when PC2 ge t dynamic IP and PING remot e host successfully . Support T ype: The r out er supports the types of 802.1x Authentica tion: PEAP-CHAPv 2 and PEAP-TLS. Note. 1.PC1 is on W indows XP platform without Service Pack 1.
Or Anothe r Confi guration: W PA-PSK In fact, it is not necessary for this function to authen ticate by Radius Se rver, the client an d wireless Route r authenticate by them selves. Method1: 1. Go to the Web manager of Wirel ess Router to confi gure, like below: 2.
3. Add and e dit some settings: A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 78.
4. Back to C onnection: Then Select “Connect to network” Y ou will see: Method2: 1. First, patc h windows XP and have to instal l “Service package 1” Patch: http://www .microsoft.com/downloads/d etails.aspx?di splaylang=en &FamilyID=5039 ef4a-61e0-4c44-94f0-c25 c9de0ace9 2.
Choose “V iew available W ireless Networks” like below: Advanced Æ choose “123kk” A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 80.
WP A: For this function, we need the server to authenticate. This function is like 802 .1x. The above i s our environment : Method 1: 1. The UserA or UserB have t o get certificate fr om Radius, first. http://192.16 8.122.1/certsrv account : fae1 passwd : fae1 2.
4. Go to Odys sey Client Man ager , choose “Profiles” a nd Setup Profile name as “1” Login nam e and passwd are fae1 a nd fae1. Remember that you get certificate from Radius in Step1.
5. Then Choose “cer tificate” like above. 6. Then go to Authentication and first Remove E AP/ TLS and Add E AP/TLS again. A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 83.
7. Go “Network” and Select “1” and ok A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 84.
8. Back to Connection and Select “123kk. If successfully , the wireless client has to authenticate with Radius Server , like below: 9.Result: Method 2: 1.
2. Then Install this certificate and finish. 3. Setting o n the router and cli ent: Router: Client: Go to “Network Connection” and select wireless ada pter .
Then, if the wireless client wants to associate, it has to request to authenticate. A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 87.
A A A p p p p p p e e e n n n d d d i i i x x x D D D W W W D D D S S S S S S e e e t t t t t t i i i n n n g g g How to setup and work: First, check the Wlan-mac address of AP1,AP2 and AP3.
If the Settings are ok,the client1 and client2 can get ip from dhcp server of AP1.Then Client1 and Client2 can get information ea ch other . AP1 Setting: AP1 ÅÆ AP2(Remote Mac: 00-50-18- 00-0f-fd) A.
AP2 Setting: AP2 ÅÆ AP1(Remote Mac: 00-50-18- 00-0f-fe) AP3 Setting AP3 ÅÆ AP1(Remote Mac: 00-50-18- 00-0f-fe) A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 90.
A i r L i v e W M M - 3 0 0 0 R U s e r ’ s M a n u a l 91.
A A A p p p p p p e e e n n n d d d i i i x x x E E E F F F A A A Q Q Q a a a n n n d d d T T T r r r o o o u u u b b b l l l e e e s s s h h h o o o o o o t t t i i i n n n g g g What can I do when I have some trouble at the first time? 1.
Whatever I setup, the pc can not get ip. Pl ease check S tatus Led and refer to the Q2: 2.Why can I not connect the router even if the cable is plugged in Lan port and the led is light? A: First, please check S tatus Le d. If the device is normal, t he led will blink per second.
about 8 times, the RESTORE process is completed. However , if LED flashes 2 times, repeat. 2. Restore directly when the router power on First, push the RESET button about 5 second s (Status will start flashing about 5 times), remove the finger . The RESTORE process is completed.
St e p 3 : Please use the exe-file of fw and click as below: Then click” Upgrade” if necessary , please input password ”admin” .The n reset to default and refer to Q1 Ho w to connect Router . However , if those methods can not make the router norma l, please send the unit to the sel ler to check, th anks.
6.When I use S tatic IP Address to r oam Internet, I can access or ping global IP 202.93.91.218, But I can not access the site that inputs domain name, for example http://espn.com ? A: Please check the dns configuration of S tatic IP Address. Please refer to the information of ISP and assign one or two in dns item.
How do I connect router by using wireless? 1.How to start to use wir eless? A: First, make sure that you already installed wireless client device in your computer .
If successfully , the computer will show and get ip fr om router: 2.When I use AES encryption of WP A-PSK to connect even if I input the correct pre-shar e key? A: First, you must check if the d river of wireless clie nt supports AES encryption .
3.When I use wir eless to connect the router , but I find the signal is very low even if I am close to the ro uter? A: Please check if the wireless client is normal, first.
An important point after buying a device AirLive WMM-3000R (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought AirLive WMM-3000R yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data AirLive WMM-3000R - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, AirLive WMM-3000R you will learn all the available features of the product, as well as information on its operation. The information that you get AirLive WMM-3000R will certainly help you make a decision on the purchase.
If you already are a holder of AirLive WMM-3000R, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime AirLive WMM-3000R.
However, one of the most important roles played by the user manual is to help in solving problems with AirLive WMM-3000R. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device AirLive WMM-3000R along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
