User manual SITECOM WL-153 WIRELESS BROADBAND ROUTER FM

[. . . ] Wireless Network Broadband Router MiMoXR WL-153 Full manual 1 Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written permission. Trademarks All products, company, brand names are trademarks or registered trademarks of their respective companies. FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio interference in a commercial environment. [. . . ] This can improve security very much. Parameters Description WPA(TKIP) TKIP can change the encryption key frequently to enhance the wireless LAN security. AES can provide high level encryption to enhance the wireless LAN security. WPA2 Mixed This will use TKIP or AES based on the other communication peer automatically. RADIUS Server IP address RADIUS Server Port RADIUS Server Password The IP address of external RADIUS server. The password used by external RADIUS server. Click <Apply> at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 30 6. 4 Access Control This wireless router provides MAC Address Control, which prevents the unauthorized MAC Addresses from accessing your wireless network. Parameters Enable wireless access control Add MAC address into the list Description Enable wireless access control Fill in the "MAC Address" and "Comment" of the wireless station to be added and then click "Add". Then this wireless station will be added into the "Current Access Control List" below. Just click "Clear" and both "MAC Address" and "Comment" fields will be cleared. Remove MAC address from the list If you want to remove some MAC address from the "Current Access Control List ", select the MAC addresses you want to remove in the list and then click "Delete Selected". If you want remove all MAC addresses from the table, just click "Delete All" button. Click <Apply> at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 31 Chapter 7 Firewall Settings The Broadband router provides extensive firewall protection by restricting connection parameters, thus limiting the risk of hacker attack, and defending against a wide array of common Internet attacks. However, for applications that require unrestricted access to the Internet, you can configure a specific client/server as a Demilitarized Zone (DMZ). Note: To enable the Firewall settings select Enable and click Apply 7. 1 DMZ If you have a local client PC that cannot run an Internet application (e. g. Games) properly from behind the NAT firewall, then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet application (e. g. FTP, websites) to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your WAN IP address to a particular LAN client/server. Parameters Enable DMZ Description Enable/disable DMZ Note: If there is a conflict between the Virtual Server and the DMZ setting, then Virtual Server function will have priority over the DMZ function. 32 Public IP Address The IP address of the WAN port or any other Public IP addresses given to you by your ISP Client PC IP Address Input the IP address of a particular host in your LAN that will receive all the packets originally going to the WAN port/Public IP address above Note: You need to give your LAN PC clients a fixed/static IP address for DMZ to work properly. You can now configure other advance sections or start using the router (with the advance settings in place) 7. 2 DoS Attack The Broadband router's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the router can log the events. Parameters Ping of Death Discard Ping From WAN Port Scan Sync Flood Description Protections from Ping of Death attack The router's WAN port will not respond to any Ping requests Protection the router from Port Scan. 33 Click <Apply> at the bottom of the screen to save the above configurations. You can now configure other advance sections or start using the router (with the advance settings in place) 7. 3 Access Control If you want to restrict users from accessing certain Internet applications/services (e. g. [. . . ] This is a convenient and efficient method for routers to route IP packets to their destination. The ISP Gateway Address is an IP address for the Internet router located at the ISP's office. An ISP is a business that provides connectivity to the Internet for individuals and other businesses or organizations. A LAN is a group of computers and devices connected together in a relatively small area (such as a house or an office). [. . . ]