MSI Router RG54G3 User Manual

							 
16   
Wireless settings allow you to set the wireless configuration items. 
1.   Network ID (SSID) : Network ID is used for identifying the Wireless LAN (WLAN). Client stations can roam 
freely over this product and other Access Points that have the same Network ID. (The factory setting is 
“ default ”) 
2.   Channel : The radio channel number. The permissible channels depend on the Regulatory Domain.  
The factory setting is as follow:  channel 6 for North America;  channel 7 for European (ETSI);  channel 7 for 
Japan. 
3.   WEP Security : Select the data privacy algorithm you want. Enabling the security can protect your data while it 
is transferred from one station to another. The standardized IEEE 802.11 WEP (128 or 64-bit) is used here. 
4.   WEP Key 1, 2, 3 & 4 : When you enable the 128 or 64 bit WEP key security, please select one WEP key to be 
used and input 26 or 10 hexadecimal (0, 1, 2 …8, 9, A, B …F) digits. 
5.   Pass-phrase Generator: Since hexadecimal characters are not easily 
remembered, this device offers a conversion utility to convert a simple  
word or phrase into hex. 
6.   802.1X Setting  
802.1X  
Check Box was used to switch the function of the 802.1X. When the 802.1X function is enabled, the Wireless user 
must  authenticate  to this router first to use the Network service.  
RADIUS Server 
IP address or the 802.1X server ’s domain-name.  
RADIUS Shared Key 
Key value shared by the RADIUS server and this router. This key value is consistent with the key value in the 
RADIUS server.    
						

							 
17  WPA-PSK
 
1. Select Preshare Key Mode 
If you select HEX,you have to fill in 64 hexadecimal (0, 1, 2 …8, 9, A, B …F) digits 
If ASCII,the length of preshare key is from 8 to 63. 
2. Fill in the key, Ex 145678   
WPA 
Check Box was used to switch the function of the WPA. When the WPA function is enabled, the Wireless user must 
authenticate  to this router first to use the Network service. RADIUS Server 
IP address or the 802.1X server ’s domain-name.  
RADIUS Shared Key 
Key value shared by the RADIUS server and this router. This key value is consistent with the key value in the 
RADIUS server.   
						

							 
18  4.3.3 WDS 
The Wireless Distribution System (WDS) supports peer-to-peer AP communication. Select 
Enable
 to allow Bridge (WDS) mode between routers or  Disable to block communication 
between routers. 
To enable  WDS, set the  Wireless Bridging (WDS)  function to Enable. Enter the Wireless MAC 
address of the router to communicate with in the form of two characters separated by a colon and 
click  Save.   
 
4.3.4 Dynamic DNS 
To host your server on a changing IP address, you have to use dynamic domain name service (DDNS).  
So that anyone wishing to reach your host only needs to know the name of it. Dynamic DNS will map the name of 
your host to your current IP address, which changes each time you connect your Internet service provider.  
Before you enable  Dynamic DNS, you need to register an account on one of these Dynamic DNS servers that we list 
in  provider  field.  
To enable  Dynamic DNS  click the check box next to  Enable in the DDNS  field. 
Next you can enter the appropriate information about your Dynamic DNS Server.  
						

							 
19  You have to define: 
Provider 
Host Name 
Username/E-mail 
Password/Key 
You will get this information when you register an account on a Dynamic DNS server. 
 
 
4.3.5 DHCP Server 
Press  “More>> ” 
The settings of a TCP/IP environment include host IP, Subnet Mask, Gateway, and DNS configurations. It is not easy 
to manually configure all the computers and devices in your network. Fortunately, DHCP Server provides a rather 
simple approach to handle all these settings. This product supports the function of DHCP server. If you enable this 
product ’s DHCP server and configure your computers as  “automatic IP allocation ” mode, then when your computer 
is powered on, it will automatically load the proper TCP/IP settings from this product. The settings of DHCP server 
include the following items: 
  
						

							 
20    
1.   DHCP Server : Choose “Disable ” or  “Enable. ” 
2.   Lease Time:  Define the period of time for the IP address leased.  
3.   IP pool starting Address/ IP pool starting Address : Whenever there is a request, the DHCP 
server will automatically allocate an unused IP address from the IP address pool to the requesting computer. 
You must specify the starting and ending address of the IP address pool. 
4.   Domain Name : Optional, this information will be passed to the client. 
5.   Primary DNS/Secondary DNS : This feature allows you to assign DNS Servers 
6.   Primary WINS/Secondary WINS : This feature allows you to assign WINS Servers 
7.   Gateway : The Gateway Address would be the IP address of an alternate Gateway.  
This function enables you to assign another gateway to your PC, when DHCP server 
offers an IP to your PC. 
 
 
 
 
 
 
 
 
  
						

							 
21  4.4 Advanced  
 
 
4.4.1 Basic Setting   
  
						

							 
22  Discard PING from WAN side 
When this feature is enabled, any host on the WAN cannot ping this product.  
SPI Mode 
When this feature is enabled, the router will record the packet information pass through the router like IP address, 
port address, ACK, SEQ number and so on. And the router will check every incoming packet to detect if this packet 
is valid.  
DoS Attack Detection 
When this feature is enabled, the router will detect and log the DoS attack comes from the Internet. Currently, the 
router can detect the following DoS attack: SYN Attack, WinNuke, Port Scan, Ping of Death, Land Attack etc.  
 
4.4.2 MAC Address Control 
 
MAC Address Control allows you to assign different access right for different users and to assign a specific IP 
address to a certain MAC address. 
MAC Address Control  Check “Enable ” to enable the  “MAC Address Control ”. All of the settings in this page 
will take effect only when  “Enable ” is checked. 
Connection control  Check Connection control to enable the controlling of which wired and wireless 
clients can connect to this device. If a client is denied to connect to this device, it 
means the client cant access to the Internet either. Choose allow or deny to allow 
or deny the clients, whose MAC addresses are not in the Control table (please see 
below), to connect to this device. 
Association control  Check Association control to enable the  
						

							 
23  controlling of which wireless client can 
associate to the wireless LAN. If a client is 
denied to associate to the wireless LAN, it 
means the client cant send or receive any data 
via this device. Choose allow or deny to 
allow or deny the clients, whose MAC 
addresses are not in the Control table, to 
associate to the wireless LAN. 
Control table   
Control table is the table at the bottom of the MAC Address Control page. Each 
row of this table indicates the MAC address and the expected IP address mapping of a 
client. There are four columns in this table: 
  MAC Address  MAC address indicates a specific client.  IP Address 
Expected IP address of the corresponding 
client. Keep it empty if you dont care its IP 
address.  C 
When 
Connection control  is checked, 
check  C will allow the corresponding client 
to connect to this device.  A 
When 
Association control  is checked, 
check  A will allow the corresponding client 
to associate to the wireless LAN.   
In this page, we provide the following Combobox and button to help you to input the MAC address. 
 
You can select a specific client in the  “DHCP clients ” Combobox, and then click on the  “Copy to ” button to copy the  
						

							 
24  MAC address of the client you select to the ID selected in the 
“ID ” Combobox. 
 
Previous page and Next Page  To make this setup page simple and clear, we have divided the  “Control table ” 
into several pages. You can use these buttons to navigate to different pages. 
 
4.4.3 Packet Filtering   
Packet Filter enables you to control what packets are allowed to pass the router. Outbound filter applies on all 
outbound packets. However, Inbound filter applies on packets that destined to Virtual Servers or DMZ host only. You 
can select one of the two filtering policies:  
1.  Allow all to pass except those match the specified rules  
2.   Deny all to pass except those match the specified rules 
You can specify 8 rules for each direction: inbound or outbound. For each rule, you can define the following:   ·  Source IP address  
·   Source port address  
·   Destination IP address  
·   Destination port address  
·   Protocol: TCP or UDP or both.  
·   Use Rule#  
						

							 
25  For source or destination IP address, you can define a single IP address (4.3.2.1) or a range of IP addresses 
(4.3.2.1-4.3.2.254). An empty implies all IP addresses.  
For source or destination port, you can define a single port (80) or a range of ports (1000-1999). Add prefix T or 
U to specify TCP or UDP protocol. For example, T80, U53, U2000-2999. No prefix indicates both TCP and UDP 
are defined. An empty implies all port addresses. 
Packet Filter can work with  Scheduling Rules , and give user 
more flexibility on Access control. For Detail, please refer to  Scheduling Rule. 
Each rule can be enabled or disabled individually. 
Inbound Filter:  
To enable  Inbound Packet Filter  click the check box next to  Enable in the Inbound Packet Filter  field. 
Suppose you have SMTP Server (25), POP Server (110), Web Server (80), FTP Server (21), and News Server (119) 
defined in Virtual Server or DMZ Host. 
Example 1:  
   
 
(1.2.3.100-1.2.3.149) They are allow to send mail (port 25), receive mail (port 110), and browse the Internet (port 
80)