SMC Networks Router SMCWBR14-N User Manual

							18 
Wireless Networking technology enables ubiquitous communication  
WPA-Enterprise  
This option works with a RADIUS Server to authenticate wireless clients. Wireless clients 
should have established the necessary credentials before attempting to authenticate to the 
Server through this Gateway. Furthermore, it may be necessary to configure the RADIUS 
Server to allow this Gateway to authenticate users.   
Authentication Timeout: Amount of time before a client will be required to re-authenticate.   
RADIUS Server IP Address: The IP address of the authentication server.   
RADIUS Server Port: The port number used to connect to the authentication server.   
RADIUS Server Shared Secret: A pass-phrase that must match with the authentication 
server.  
MAC Address Authentication: If this is selected, the user must connect from the same 
computer whenever logging into the wireless network.   
Advanced:  
Optional Backup RADIUS Server   
This option enables configuration of an optional second RADIUS server. A second 
RADIUS server can be used as backup for the primary RADIUS server. The second 
RADIUS server is consulted only when the primary server is not available or not 
responding. The fields Second RADIUS Server IP Address, RADIUS Server Port, 
Second RADIUS server Shared Secret, Second MAC Address Authentication provide 
the corresponding parameters for the second RADIUS Server.    
						

							19 
Basic_Network Settings 
Use this section to configure the internal network settings of your router. The IP Address that is 
configured here is the IP Address that you use to access the Web-based management interface. If 
you change the IP Address here, you may need to adjust your PC’s network settings to access the 
network again. 
                     
 
 
 
 
  
						

							20 
 
Router Settings   
These are the settings of the LAN (Local Area Network) interface for the router. The routers 
local network (LAN) settings are configured based on the IP Address and Subnet Mask 
assigned in this section. The IP address is also used to access this Web-based management 
interface. It is recommended that you use the default settings if you do not have an existing 
network.  
IP Address   
The IP address of your router on the local area network. Your local area network settings 
are based on the address assigned here. For example, 192.168.2.1.   
Subnet Mask   
The subnet mask of your router on the local area network.   
Local Domain Name   
This entry is optional. Enter a domain name for the local network. The routers DHCP 
server will give this domain name to the computers on the wireless LAN. So, for example, 
if you enter mynetwork.net here, and you have a wireless laptop with a name of chris, 
that laptop will be known as chris.mynetwork.net. Note, however, if the routers settings 
specify DHCP (Dynamic) Address, and the routers DHCP server assigns a domain 
name to the AP, that domain name will override any name you enter here.   
DNS Relay   
When DNS Relay is enabled, the router plays the role of a DNS server. DNS requests 
sent to the router are forwarded to the ISPs DNS server. This provides a constant DNS 
address that LAN computers can use, even when the router obtains a different DNS 
server address from the ISP upon re-establishing the WAN connection. You should 
disable DNS relay if you implement a LAN-side DNS server as a virtual server.   
RIP (Routing Information Protocol)   
Used to broadcast routing information among routers.   
Enable RIP   
Enable RIP if required by the ISP, if the LAN has multiple routers, or if the LAN has 
auto-IP devices.   
RIP Operating mode   
This router supports both version 2 and version 1 of the RIP specification.   
V1. Use if none of the routers supports Version 2.   
V2 Broadcast. Use if some routers are capable of Version 2, but some are only capable 
of Version 1. 
V2 Multicast. Use if this is the only router on the LAN or if all the routers support Version 
2. 
Router Metric   
The additional cost of routing a packet through this router. The normal value for a simple 
network is 1. This metric is added to routes learned from other routers; it is not added to 
static or system routes.    
						

							21 
Act as default router   
Make this router the preferred destination for packets that are not otherwise destined.   
Allow RIP updates from WAN   
For security, disable this option unless required by the ISP.   
RIP Password   
RIP Version 2 supports the use of a password to limit access to routers through the RIP 
protocol. If the ISP or other LAN router requires a RIP password, enter the password here.   
DHCP Server Settings   
DHCP stands for Dynamic Host Configuration Protocol. The DHCP section is where you 
configure the built-in DHCP Server to assign IP addresses to the computers and other devices 
on your local area network (LAN).   
Enable DHCP Server   
Once your router is properly configured and this option is enabled, the DHCP Server will 
manage the IP addresses and other network configuration information for computers and 
other devices connected to your Local Area Network. There is no need for you to do this 
yourself.  
The computers (and other devices) connected to your LAN also need to have their TCP/IP 
configuration set to DHCP or Obtain an IP address automatically.   
When you set Enable DHCP Server, the following options are displayed.   
DHCP IP Address Range   
These two IP values (from and to) define a range of IP addresses that the DHCP Server 
uses when assigning addresses to computers and devices on your Local Area Network. 
Any addresses that are outside of this range are not managed by the DHCP Server; these 
could, therefore, be used for manually configured devices or devices that cannot use 
DHCP to obtain network address details automatically.   
It is possible for a computer or device that is manually configured to have an address that 
does reside within this range. In this case the address should be reserved (see Sta t i c  
DHCP Client below), so that the DHCP Server knows that this specific address can only 
be used by a specific computer or device.   
Your router, by default, has a static IP address of 192.168.2.1. This means that addresses 
192.168.2.2 to 192.168.2.254 can be made available for allocation by the DHCP Server.   
Example:  
Your router uses 192.168.2.1 for the IP address. Youve assigned a computer that you 
want to designate as a Web server with a static IP address of 192.168.2.3. Youve 
assigned another computer that you want to designate as an FTP server with a static IP 
address of 192.168.2.4. Therefore the starting IP address for your DHCP IP address 
range needs to be 192.168.2.5 or greater.   
Example:  
Suppose you configure the DHCP Server to manage addresses From: 192.168.2.100 
To: 192.168.2.199. This means that 192.168.2.3 to 192.168.2.99 and 192.168.2.200 to 
192.168.2.254 are NOT managed by the DHCP Server. Computers or devices that use 
addresses from these ranges are to be manually configured. Suppose you have a web  
						

							22 
server computer that has a manually configured address of 192.168.2.100. Because 
this falls within the managed range be sure to create a reservation for this address 
and match it to the relevant computer (see Static DHCP Client below).   
DHCP Lease Time   
The amount of time that a computer may have an IP address before it is required to renew 
the lease. The lease functions just as a lease on an apartment would. The initial lease 
designates the amount of time before the lease expires. If the tenant wishes to retain the 
address when the lease is expired then a new lease is established. If the lease expires 
and the address is no longer needed than another tenant may use the address.   
Always Broadcast   
If all the computers on the LAN successfully obtain their IP addresses from the routers 
DHCP server as expected, this option can remain disabled. However, if one of the 
computers on the LAN fails to obtain an IP address from the routers DHCP server, it may 
have an old DHCP client that incorrectly turns off the broadcast flag of DHCP packets. 
Enabling this option will cause the router to always broadcast its responses to all clients, 
thereby working around the problem, at the cost of increased broadcast traffic on the LAN.   
Add/Edit DHCP Reservation   
This option lets you reserve IP addresses, and assign the same IP address to the network 
device with the specified MAC address any time it requests an IP address. This is almost the 
same as when a device has a static IP address except that the device must still request an IP 
address from the router. The router will provide the device the same IP address every time. 
DHCP Reservations are helpful for server computers on the local network that are hosting 
applications such as Web and FTP. Servers on your network should either use a static IP 
address or use this option.   
Computer Name   
You can assign a name for each computer that is given a reserved IP address. This may 
help you keep track of which computers are assigned this way. Example: Game Server.  
IP Address:   
The LAN address that you want to reserve.   
MAC Address   
To input the MAC address of your system, enter it in manually or connect to the routers 
Web-Management interface from the system and click the Copy Your PC’s MAC 
Address button.   
A MAC address is usually located on a sticker on the bottom of a network device. The 
MAC address is comprised of twelve digits. Each pair of hexadecimal digits are usually 
separated by dashes or colons such as 00-0D-88-11-22-33 or 00:0D:88:11:22:33. If your 
network device is a computer and the network card is already located inside the computer, 
you can connect to the router from the computer and click the Copy Your PC’s MAC 
Address button to enter the MAC address.   
As an alternative, you can locate a MAC address in a specific operating system by 
following the steps below:   
 
  
						

							23 
 
Windows 98 
Windows Me   Go to the Start menu, select Run, type in winipcfg, and hit Enter. A 
popup window will be displayed. Select the appropriate adapter from the 
pull-down menu and you will see the Adapter Address. This is the MAC 
address of the device.   
Windows 2000 
Windows XP   Go to your Start menu, select Programs, select Accessories, and select 
Command Prompt. At the command prompt type ipconfig /all and hit 
Enter. The physical address displayed for the adapter connecting to the 
router is the MAC address.   
Mac OS X    Go to the Apple Menu, select System Preferences, select Network, and 
select the Ethernet Adapter connecting to the router. Select the Ethernet 
button and the Ethernet ID will be listed. This is the same as the MAC 
address.  
 
DHCP Reservations List   
This shows clients that you have specified to have reserved DHCP addresses. An entry can be 
changed by clicking the Edit icon, or deleted by clicking the Delete icon. When you click the 
Edit icon, the item is highlighted, and the Edit DHCP Reservation section is activated for 
editing.  
Number of Dynamic DHCP Clients   
In this section you can see what LAN devices are currently leasing IP addresses.   
Revoke  
The Revoke option is available for the situation in which the lease table becomes full or 
nearly full, you need to recover space in the table for new entries, and you know that 
some of the currently allocated leases are no longer needed. Clicking Revoke cancels the 
lease for a specific LAN device and frees an entry in the lease table. Do this only if the 
device no longer needs the leased IP address, because, for example, it has been 
removed from the network.   
Reserve  
The Reserve option converts this dynamic IP allocation into a DHCP Reservation and 
adds the corresponding entry to the DHCP Reservations List.   
 
 
 
 
 
  
						

							24 
Advanced 
The Advanced tab provides the following configuration options: Virtual Server, Special Applications, 
Gaming, StreamEngine, Routing, Access Control, WEB Filter, MAC Address Filter, Firewall, 
Inbound Filter, Advanced Wireless and Advanced Network.   
Advanced_Virtual Server 
The Virtual Server option gives Internet users access to services on your LAN. This feature is useful 
for hosting online services such as FTP, Web, or game servers. For each Virtual Server, you define a 
public port on your router for redirection to an internal LAN IP Address and LAN port.   
 
 
  
						

							25 
Example:  
You are hosting a Web Server on a PC that has LAN IP Address of 192.168.2.50 and your ISP 
is blocking Port 80.   
1.  Name the Virtual Server (for example: Web Server)  
2.  Enter the IP Address of the machine on your LAN (for example: 192.168.2.50  
3.  Enter the Private Port as [80]   
4.  Enter the Public Port as [8888]   
5.  Select the Protocol (for example TCP).  
6.  Ensure the schedule is set to Always  
7. Click Save to add the settings to the Virtual Servers List   
8.  Repeat these steps for each Virtual Server Rule you wish to add. After the list is 
complete, click Save Settings at the top of the page.   
With this Virtual Server entry, all Internet traffic on Port 8888 will be redirected to your internal 
web server on port 80 at IP Address 192.168.2.50.   
 
Virtual Server Parameters   
Name  
Assign a meaningful name to the virtual server, for example Web Server. Several 
well-known types of virtual server are available from the Application Name drop-down 
list. Selecting one of these entries fills some of the remaining parameters with standard 
values for that type of server.   
IP Address   
The IP address of the system on your internal network that will provide the virtual service, 
for example 192.168.2.50. You can select a computer from the list of DHCP clients in the 
Computer Name drop-down menu, or you can manually enter the IP address of the 
server computer.   
Protocol  
Select the protocol used by the service. The common choices -- UDP, TCP, and both UDP 
and TCP -- can be selected from the drop-down menu. To specify any other protocol, 
select Other from the list, then enter the corresponding protocol number ( as assigned 
by the IANA) in the Protocol box.   
Private Port   
The port that will be used on your internal network.   
Public Port   
The port that will be accessed from the Internet.   
Inbound Filter   
Select a filter that controls access as needed for this virtual server. If you do not see the 
filter you need in the list of filters, go to the Advanced → Inbound Filter screen and create  
						

							26 
a new filter.   
Schedule  
Select a schedule for when the service will be enabled. If you do not see the schedule you 
need in the list of schedules, go to the Tools → Schedules screen and create a new 
schedule.  
Add/Edit Virtual Server   
In this section you can add an entry to the Virtual Servers List below or edit an existing entry.   
Enable  
Entries in the list can be either active (enabled) or inactive (disabled).   
Save  
Saves the new or edited virtual server entry in the following list. When finished updating 
the virtual server entries, you must still click the Save Settings button at the top of the 
page to make the changes effective and permanent.   
Virtual Servers List   
The section shows the currently defined virtual servers. A Virtual Server can be changed by 
clicking the Edit icon, or deleted by clicking the Delete icon. When you click the Edit icon, the 
item is highlighted, and the Edit Virtual Server section is activated for editing.   
 
You might have trouble accessing a virtual server using its public identity (WAN-side 
IP-address of the gateway or its dynamic DNS name) from a machine on the LAN. Your 
requests may not be looped back or you may be redirected to the Forbidden page.   
This will happen if you have an Access Control Rule configured for this LAN machine.   
The requests from the LAN machine will not be looped back if Internet access is blocked at the time of 
access. To work around this problem, access the LAN machine using its LAN-side identity.   
Requests may be redirected to the Forbidden page if web access for the LAN machine is restricted 
by an Access Control Rule. Add the WAN-side identity (WAN-side IP-address of the router or its 
dynamic DNS name) on the Advanced → Web Filter screen to work around this problem.   
 
 
  
						

							27 
Advanced_Special Applications 
An application rule is used to open single or multiple ports on your router when the router senses data 
sent to the Internet on a trigger port or port range. An application rule applies to all computers on 
your internal network.   
 
 
Parameters for an Application Rule   
Example:  
You need to configure your router to allow a software application running on any computer 
on your network to connect to a web-based server or another user on the Internet.   
Name  
Enter a name for the Special Application Rule, for example Game App, which will help 
you identify the rule in the future. Alternatively, you can select from the Application list of 
common applications.   
Application