EnGenius EVR100 User Manual

Wireless Gigabit VPN Router EVR100 Wireless Gigabit VPN Router V1.0

9 2. Before you Begin This section will guide you through the installation process. Placement of the EVR100 is very important to avoid poor signal r

99 Encryption EVR100 supports DES, 3DES, AES128, AES192, AES256 encryption methods for traffic through the VPN. Authentication EVR100 supports SH

100 Network This page allows you to configure the VPN server and local/remote subnet. Network Security Gateway Type Security Gateway Type sup

101 Advanced This page allows you to configure advanced VPN settings. Advanced NAT Traversal Enabling NAT Traversal allow IPSec traffic from th

102 10.1.2. L2TP over IPSec L2TP over IPSec VPNs enable a business to transport data over the Internet, while still maintaining a high level of sec

103 L2TP L2TP Setting Authentication Select the desired authentication protocol (PAP, CHAP, Auto). Select Auto by default. User Name Enter the use

104 Network Network Server IP Enter the VPN Server IP address. Remote IP Range Assign a range of IP addresses. The assigned IP range should be on

105 11.3. Wizard You can use Wizard to create a VPN profile easily. 1. Click Next button to begin the wizard. 2. Enter the VPN policy name

106 3. You can select [IPSec] or [L2TP over IPSec] in this page then click Next button to next page. If you select [IPSec] then go to step 3.1. If

107 Enter the Security Gateway and remote network. Then click Next button to next page.

108 3.2 L2TP over IPSec Enter the username, password and VPN server IP setting. Then click Next button to next page.

10 2.2. Computer Settings (Windows XP/Windows Vista/Windows 7)  Click Start button and open Control Panel. Windows XP

109 4. Enter the shared key for the VPN connection. 5. Setup successfully, enable this policy immediately. If you don’t want enable this po

110 How to establish a L2TP over IPSec VPN connection on Windows XP 1. Click Start button and open Control Panel. 2. Click [Network Connect

111 3. Select [Connect to the network at my workplace] then click Next button. 4. Select [Virtual Private Network connection] then click Ne

112 5. Enter the [Company Name] then click Next button. 6. Select [Do not dial the initial connection] then click Next button.

113 7. Enter the VPN server IP address then click Next button. 8. Select [Do not use my smart card] then click Next button.

114 9. Click Finish button to complete the wizard. 10. Click Properities button.

115 11. In Security, select [Advanced (custom settings)] then click Settings button. 12. Check [Unencrypted password (PAP)] and [Challenge

116 13. Click [IPSec Settings] then tick [Use pre-shared key for authentication], Enter the Key then click OK button. 14. In Networking, se

117 15. Click Connect button to connect VPN connection. 16. You can see the VPN Connection has been established.

118 How to establish a L2TP over IPSec VPN connection in Windows 7 1. Click Start button and open Control Panel. 2. Click [View Network Sta

11  Windows XP, click [Network Connection]  Windows Vista, click [View Network Status and Tasks] then [Manage Network Connections]

119 3. Click [Connect to a workplace] then [Use my Internet connection (VPN)] 4. Enter the VPN server IP address: [Internet address], [Des

120 5. Enter the correct User name and Password then click the Create button. 6. Click the Close button to close the VPN connection setti

121 7. Click [Change adapter settings] in Step 2, then select VPN Connection and click [Change settings of this connection] 8. Change Type of

122 9. Click the Advanced settings button and select [Use preshared key for authentication] and enter the correct key. Then click OK button.

123 10. Double click the VPN Connection then click the Connect button. 11. You can see the VPN Connection has been established.

124 12. Tools This section allows you to configure some device system settings. 12.1. Admin This page allows you to change the system password and

125 12.2. Time This page allows you to set the system time. Time Time Setup: Select the method you want to set the time. Time Zone: Select the

126 12.3. Dynamic DNS (DDNS) This free service is very useful when combined with the Virtual Server feature. It allows Internet users to connect to

127 12.4. Power This page allows you to Enable or Disable the wireless LAN power saving features.

128 12.5. Diagnosis This page allows you determine if the WIRELESS ROUTER device has an active Internet connection. Diagnosis Address to Ping: En

12  Right click on [Local Area Connection] and select [Properties].  Check “Client for Microsoft Networks”, “File and Printer Sharin

129 12.6. Firmware The firmware (software) in the WIRELESS ROUTER device can be upgraded using your Web Browser. To perform the Firmware Upgrade:

130 12.7. Back-up Back-up Restore to factory default: Restores the device to factory default settings. Backup Settings: Save the current configu

131 12.8. Reset In some circumstances it may be required to force the device to reboot.

132 Appendix A – FCC Interference Statement Federal Communication Commission Interference Statement This equipment has been tested and found to co

133 IMPORTANT NOTE: FCC Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontr

134 Appendix B – IC Interference Statement Industry Canada statement: This device complies with RSS-210 of the Industry Canada Rules. Operation is

13  Select “Internet Protocol (TCP/IP)” and click [Properties]  Select “Obtain an IP Address automatically” and “Obtain DNS server ad

14 2.3. Hardware Installation 1. Place the unit in an appropriate location after conducting a site survey. 2. Plug one end of the Ethernet cable int

15 3. Configuring your Router This section will show you how to configure the device using the web-based configuration interface. Please use your wi

16 4. Setup Wizard 1. Open a web browser (Internet Explorer/Firefox/Safari) and enter the IP Address http://192.168.0.1 Note: If you have changed t

17 3. You will see the following webpage if login successfully.

18 4. Click Wizard to enter the Setup Wizard. Then click Next to begin the wizard.

1 1. Introduction...

19 5. Select the Operation Mode. Please ensure you have the proper cables connected as described in the Hardware Installation section.

20 AP Router Mode a) The device will search for the correct Internet settings automatically. b) The most appropriate WAN type will be determ

21 c) There are many WAN service types available. Please obtain the correct settings from your Internet Service Provider (ISP). Static IP

22 Dynamic IP Address The IP Address is allocated automatically. However some ISP’s will also recognize the MAC address and will reject connections

23 PPP over Ethernet ISP requires an account username and password. PPP over Ethernet Username Username assigned to you by the ISP Password Pass

24 Point-to-Point Tunneling Protocol (PPTP) PPTP is used by some ISPs.

25 PPTP WAN Interface Settings WAN Interface Type Select whether the ISP is set to Static IP or Dynamic IP address. Hostname This is optional. Onl

26 Layer-2 Tunneling Protocol (L2TP) L2TP is used by some ISPs.

27 L2TP WAN Interface Settings WAN Interface Type Select whether the ISP is set to Static IP or Dynamic IP address. Hostname This is optional. Onl

28 d) Setup the level of wireless security to be used. EnGenius recommends the Highest level of security to be used. Note: 802.11n wireless speeds

2 7. Internet...

29 e) Check the settings are correct, and then click Reboot to apply the settings.

30 5. VPN Wizard Using VPN Wizard, you can establish VPN connection easily. Please refer to 11.3.

31 6. System 6.1. Status This page will display status of the device. Status Model Description of this device. Mode The device is currently in wh

32 WAN Settings Attain IP Protocol Method used to connect to the Internet IP address The WAN IP Address of the device. Subnet Mask The WAN Subne

33 LAN Settings IP address The LAN IP Address of the device. Subnet Mask The LAN Subnet Mask of the device. DHCP Server Whether the DHCP server

34 WLAN Settings Channel The wireless channel in use. ESSID The SSID (Network Name) of the wireless network. (up to 4 SSIDs are supported)

35 6.2. LAN This page allows you to modify the device’s LAN settings.

36 LAN IP IP address The LAN IP Address of this device. IP Subnet Mask The LAN Subnet Mask of this device. 802.1d Spanning Tree When Enabled, t

37 DHCP Server DHCP Server The DHCP Server automatically allocates IP addresses to your LAN device. Lease Time The duration of the DHCP server a

38 Two DNS servers can be assigned for use by your LAN device. There are four modes available. DNS Servers From ISP The DNS server IP address is

3 9.5. MAC Filter...

39 6.3. DHCP This page shows the status of the DHCP server and also allows you to control how the IP addresses are allocated.

40 The DHCP Client Table shows the LAN clients that have been allocated an IP address from the DHCP Server . DHCP Client Table IP address The LAN

41 You can also manually specify the IP address that will be allocated to a LAN client by associating the IP address with its MAC address. Type the

42 6.4. Schedule This page allows you to setup the schedule times that the Firewall and Power Saving features will be activated / deactivated. Cli

43 Schedule Schedule Description Assign a name to the schedule. Service The service provides for the schedule. Days Define the Days to activate

44 6.5. Log This page displays the system log of the device. When powered down or rebooted, the log will be cleared. Log Save Save the log to a fi

45 6.6. Language This page allows you to change the Language of the User Interface.

46 7. Internet The Internet section allows you to manually set the WAN type connection and its related settings. 7.1. Status This page shows the cur

47 7.2. Dynamic IP Address The IP Address is allocated automatically. However some ISP’s will also recognize the MAC address and will reject connect

48 Dynamic IP Address Hostname This is optional. Only required if specified by ISP MAC address The MAC Address that is used to connect to the ISP

4 12.2. Time...

49 7.3. Static IP Address If your ISP Provider has assigned you a fixed IP address, enter the assigned IP address, Subnet mask, Default Gateway IP a

50 7.4. PPP over Ethernet ISP requires an account username and password.

51 PPP over Ethernet (PPPoE) Username Username assigned to you by the ISP Password Password for this username. Service You can assign a name for

52 7.5. Point-to-Point Tunneling Protocol (PPTP) PPTP is used by some ISPs.

53 Point-to-Point Tunneling Protocol (PPTP) WAN Interface Type Select whether the ISP is set to Static IP or will allocate Dynamic IP address. Host

54 7.6. Layer-2 Tunneling Protocol (L2TP) L2TP is used by some ISPs.

55 Layer-2 Tunneling Protocol (L2TP) WAN Interface Type Select whether the ISP is set to Static IP or will allocate Dynamic IP address. Hostname T

56 8. Wireless The Wireless section allows you to configure the Wireless settings. 8.1. Basic This page shows the current status of the device’s Wir

57 Basic Radio Enable or Disable the device’s wireless signal. Mode Select between Access Point or Wireless Distribution System (WDS) modes. Band

58 Wireless Distribution System (WDS) Using WDS to connect Access Point wirelessly, and in doing so extend a wired infrastructure to locations wher

5 Revision History Version Date Notes 1.0 2011/01/11 First Release

59 8.2. Advanced This page allows you to configure wireless advance settings. It is recommended the default settings are used unless the user has ex

60 Advanced Fragment Threshold Specifies the size of the packet per fragment. This function can reduce the chance of packet collision. However when

61 8.3. Security This page allows you to set the wireless security settings. Security SSID Selection Select the SSID that the security settings w

62 Encryption The encryption method to be applied. You can choose from WEP, WPA pre-shared key or WPA RADIUS. • Disabled - no data encryption is u

63 802.1x Authentication RADIUS Server IP Address The IP Address of the RADIUS Server RADIUS Server port The port number of the RADIUS Server. RAD

64 WEP Encryption: WEP Encryption Authentication Type Please ensure that your wireless clients use the same authentication type. Key type ASCII:

65 WPA Pre-Shared Key Encryption: WPA Pre-Shared Key Encryption Authentication Type Please ensure that your wireless clients use the same authentic

66 WPA RADIUS Encryption: WPA RADIUS Encryption WPA type Select the WPA encryption you would like. Please ensure that your wireless clients use the

67 8.4. Filter This page allows you to create filters to control which wireless clients can connect to this device by only allowing the MAC addresse

68 Wireless Filter Enable Wireless Access Control Tick the box to Enable Wireless Access Control. When Enabled, only wireless clients on the Filte

6 1. Introduction 1.1. Package Contents • EnGenius WIRELESS GIGABIT VPN ROUTER • AC Adapter • RJ-45 Ethernet LAN Cable • CD-ROM with User Manual

69 8.5. Wi-Fi Protected Setup (WPS) WPS feature is following the Wi-Fi Alliance WPS standard and it eases the set up of security-enabled Wi-Fi netwo

70 Wi-Fi Protected Setup (WPS) WPS Tick to Enable the WPS feature. WPS Button Tick to Enable the WPS push button. Wi-Fi Protected Setup Information

71 Initializing WPS Feature There are two methods to initialize the WPS feature: Push Button and Pin code methods. 1. WPS Push Button Method Push

72 2. Pin Code Method Note the Pin code of your WIRELESS ROUTER device. Please use this Pin code to initialize the WPS process from the wireless c

73 8.6. Client List This page shows the wireless clients that are connected to the WIRELESS ROUTER device.

74 8.7. Policy This page allows you to configure the access policies for each SSID (wireless network). Policy WAN Connection Allow wireless client

75 9. Firewall The Firewall section allows you to set the access control and Firewall settings. 9.1. Enable This page allows you to Enable / Disable

76 9.2. Advanced You can choose whether to allow VPN (Virtual Private Network) packets to pass through the Firewall.

77 9.3. DMZ If enabled this feature, allows the DMZ computer on your LAN to be exposed to all users on the Internet. • This allows almost any appli

78 9.4. Denial of Service (DoS) Denial of Service (Denial of Service) is a type of Internet attack that sends a high amount of data to you with the

7 1.3. Introduction EVR100 is a 2T2R Wireless 11N Gigabit VPN Router that delivers up to 6x faster speeds and 3x extended coverage than 802.11g devi

79 9.5. MAC Filter You can choose whether to Deny or only Allow those computers listed in the MAC Filtering table to access the Internet. MAC Filte

80 9.6. IP Filter You can choose whether to Deny or only Allow, computer with those IP Addresses from accessing certain Ports. This can be used to c

81 IP Filter Enable IP filtering Tick this box to Enable the IP filtering feature. Deny all clients with IP addresses listed below to access the net

82 9.7. URL Filter You can deny access to certain websites by blocking keywords in the URL web address. For example, “gamer” has been added to the U

83 10. Advanced The Advanced section allows you to configure the Advanced settings of the router. 10.1. Network Address Translation (NAT) This pag

84 10.2. Port Mapping Port Mapping allows you to redirect a particular range of ports to a computer on your LAN network. This helps you host server

85 10.3. Port Forwarding Port Forwarding allows you to redirect a particular public port to a computer on your LAN network. This helps you host ser

86 10.4. Port Trigger If you use Internet applications which use non-standard connections or port numbers, you may find that they do not function c

87 10.5. Application Layer Gateway (ALG) Certain applications may require the use of ALG feature to function correctly. If you use any of the appli

88 10.6. Universal Plug and Play (UPnP) The UPnP function allows automatic discovery and configuration of UPnP enabled devices on your network. It

8 1.4. LED Overview LED Lights Icon Description Wireless LAN Color – Blue Lights when Wireless signal is activated. Blinks when Wireless data tran

89 10.7. Quality of Service (QoS) QoS allows you to control the priority that the data is transmitted over the Internet, or to reserve a specific a

90 Priority Queue Method Bandwidth priority is set to either High or Low. The transmissions in the High queue will be processed first. Unlimi

91 Bandwidth Allocation Method You can set the maximum amount of bandwidth a certain protocol will use at one time. Or you can set a minimum amount

92 10.8. Routing If your WIRELESS ROUTER device is connected a network with different subnets, then this feature will allow the different subnets t

93 Destination Subnet Mask Gateway Hop Interface 192.168.11.0 255.255.255.0 192.168.0.216 1 LAN 192.168.10.0 255.255.255.0 192.168.0.10

94 11. VPN A Virtual Private Network (VPN) provides a secure connection between two or more computers or protected networks over the public Interne

95 11.2. Profile Setting This page allows you to Enable, Add, Edit and Delete VPN profiles. Profile Setting Enable Tick the box to Enable the VPN

96 10.1.1. IPSec IPSec (Internet Protocol Security) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and en

97 General Name Enter a name for your VPN policy. Connection Type Supports IPSec and L2TP over IPSec methods to establish VPN connection. Authentic

98 SA (Security Association) A Security Association (SA) is the establishment of shared security attributes between two network entities to support