MSI RG-54G3 User Manual

MSI RG54G3 Wireless 802.11b/g Broadband Router User Manual

5 2.1.2. Rear Panel Figure 2-2 Rear Panel Port Description PWR Power inlet WAN the port where you will connect your cable (or DSL) modem or Ethe

6 2.2 Procedure for Hardware Installation 2. Decide where to place your Wireless Broadband Router You can place your Wireless Broadband Router on a

7 CCChhhaaapppttteeerrr 333 NNNeeetttwwwooorrrkkk SSSeeettttttiiinnngggsss aaannnddd SSSoooffftttwwwaaarrreee IIInnnssstttaaallllllaaa

8 CCChhhaaapppttteeerrr 444 CCCooonnnfffiiiggguuurrriiinnnggg WWWiiirrreeellleeessssss BBBrrroooaaadddbbbaaannnddd RRRooouuuttteeerrr

9 4.1 Start-up and Log in Activate your browser, and disable the proxy or add the IP address of this product into the exceptions. Then,

10 Setup Wizard - Select WAN Type: For detail settings, please refer to 4.3.1 IP Setting. 4.3 Setup

11 4.3.1 IP Setting – WAN Type, IP Mode Press “Change” This option is primary to enable this product to work properly. The setting items and the we

12 1. LAN IP Address: the local IP address of this device. The computers on your network must use the LAN IP address of your product as their Defaul

13 4. Maximum Transmission Unit (MTU): Most ISP offers MTU value to users. The most common MTU value is 1492. 5. Connection Control:There are 3 mo

14 4.3.1.6 L2TP First,Please check your ISP assigned and Select Static IP Address or Dynamic IP Address. For example:Use Static 1. My IP Address

Hiermit erklärt Micro Star International CO., LTD dass sich dieses Produkt in Übereinstimmung mit den grundlegenden Anforderungen und den andere

15 6. Connection Control:There are 3 modes to select: Connect-on-demand:The device will link up with ISP when the clients send outgoing packets. Aut

16 Wireless settings allow you to set the wireless configuration items. 1. Network ID (SSID): Network ID is used for identifying the Wireless LAN (

17 WPA-PSK 1. Select Preshare Key Mode If you select HEX,you have to fill in 64 hexadecimal (0, 1, 2…8, 9, A, B…F) digits If ASCII,the length of pres

18 4.3.3 WDS The Wireless Distribution System (WDS) supports peer-to-peer AP communication. Select Enable to allow Bridge (WDS) mode between routers

19 You have to define: Provider Host Name Username/E-mail Password/Key You will get this information when you register an account on a Dynamic DNS se

20 1. DHCP Server: Choose “Disable” or “Enable.” 2. Lease Time: Define the period of time for the IP address leased. 3. IP pool starting Address/

21 4.4 Advanced 4.4.1 Basic Setting

22 Discard PING from WAN side When this feature is enabled, any host on the WAN cannot ping this product. SPI Mode When this feature is enabled, the

23 controlling of which wireless client can associate to the wireless LAN. If a client is denied to associate to the wireless LAN, it means the clien

24 MAC address of the client you select to the ID selected in the “ID” Combobox. Previous page and Next Page To make this setup page simple and clea

FCC Caution 1. The device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may no

25 For source or destination IP address, you can define a single IP address (4.3.2.1) or a range of IP addresses (4.3.2.1-4.3.2.254). An empty implie

26 (1.2.3.10-1.2.3.20) They can do everything (block nothing) Others are all blocked. Example 2: (1.2.3.100-1.2.3.119) They can do everything ex

27 Example 1: (192.168.1.100-192.168.1.149) They are allowed to send mail (port 25), receive mail (port 110), and browse Internet (port 80); port

28 Example 2: (192.168.1.100-192.168.1.119) They can do everything except read net news (port 119) and transfer files via FTP (port 21) Others ar

29 4.4.4 Domain Filtering Domain Filter Let you prevent users under this device from accessing specific URLs. Domain Filter Enable Check if you wa

30 Example: In this example: 1. URL include “www.msn.com” will be blocked, and the action will be record in log-file. 2. URL include “www.sina.com”

31 4.4.5 URL Filtering URL Blocking will block LAN computers to connect to pre-defined Websites. The major difference between “Domain filter” and “U

32 In this example: 1. URL include “msn” will be blocked, and the action will be record in log-file. 2. URL include “sina” will be blocked, but the

33 4.4.6 Routing Table Routing Tables allow you to determine which physical interface address to use for outgoing IP data grams. If you have more t

34 Example: Configuration on NAT Router Destination SubnetMask Gateway Hop Enabled 192.168.1.0 255.255.25

Important Safety Precautions Always read and follow these basic safety precautions carefully when handling any piece of electronic component. 1. Keep

35 4.4.7 Schedule Rule You can set the schedule time to decide which service will be turned on or off. Select the “enable” item. Press “Add New Rule

36 After configure Rule 1à Schedule Enable Selected if you want to Enable the Scheduler. Edit To edit the schedule rule. Delete To delete the sc

37 Exanple1: Virtual Server – Apply Rule#1 (ftp time: everyday 14:10 to 16:20) Exanple2: Packet Filter – Apply Rule#1 (ftp time: everyday 14:10 to 1

38 4.4.8 Virtual Server This product’s NAT firewall filters out unrecognized packets to protect your Intranet, so all hosts behind this product are

39 4.4.9 DMZ IP Address of DMZ Host DMZ (DeMilitarized Zone) Host is a host without the protection of firewall. It allows a computer to be exposed

40 4.4.10 Special AP Some applications require multiple connections, like Internet games, Video conferencing, Internet telephony, etc. Because of

41 4.5 Administration 4.5.1 Change Password You can change Password here. We strongly recommend you to change the system password for security rea

42 4.5.2 Firmware Upgrade You can upgrade firmware by clicking Firmware Upgrade button. 4.5.3 Backup Setting You can backup your settings by cli

43 4.5.4 Reset to factory default You can also reset this product to factory default by clicking the Reset to default button. 4.5.5 Reboot You ca

44 Get Date and Time by NTP Protocol Selected if you want to Get Date and Time by NTP Protocol. Time Server Select a NTP time server to consult UTC

Contents Chapter 1 Introduction...1 Functions

45 perform remote administration. If the specified IP address is 0.0.0.0, any host can connect to this product to perform administration task. You ca

46 4.5.9 Diagnostic This is the graphic interface of “Ping” command, you can enter the Domain Name or IP address to ping if it is working. 4.6 Stat

47 4.6.1 System Status This item shows the static data of the router, 4.6.2 System Log You can View system log by clicking the View Log button

48 4.6.3 Log Notification This page support two methods to export system logs to specific destination by means of syslog(UDP) and SMTP(TCP). The ite

49 4.6.4 SNMP Setting In brief, SNMP, the Simple Network Management Protocol, is a protocol designed to give a user the capability to remotely mana

50 AAAppppppeeennndddiiixxx AAA TTTCCCPPP///IIIPPP CCCooonnnfffiiiggguuurrraaatttiiiooonnn fffooorrr WWWiiinnndddooowwwsss 999555///99

51 6. The TCP/IP protocol shall be listed in the Network window. Click OK to complete the install procedure and restart your PC to enable the TCP/I

52 a. Select Obtain an IP address automatically in the IP Address tab. b. Don’t input any value in the Gateway tab.

53 c. Choose Disable DNS in the DNS Configuration tab. B. Configure IP manually a. Select Specify an IP address in the IP Address tab. The defa

54 b. In the Gateway tab, add the IP address of this product (default IP is 192.168.1.254) in the New gateway field and click Add button. c. In

1 CCChhhaaapppttteeerrr 111 IIInnntttrrroooddduuuccctttiiiooonnn Congratulations on your purchase of this outstanding Wireless Broadband Rou

55 AAAppppppeeennndddiiixxx BBB 888000222...111xxx SSSeeettttttiiinnnggg Figure 1: Testing Environment (Use Windows 2000 Radius Server)

56 1.Enable DHCP server. 2.WAN setting: static IP address. 3.LAN IP address: 192.168.1.254/24. 4.Set RADIUS server IP. 5.Set RADIUS server shared key

57 4. We will change EAP type to fit the variable test condition. Figure 2: Enable IEEE 802.1X access control

58 Figure 3: Smart card or certificate properties 4. Windows 2000 RADIUS server Authentication testing: 4.1DUT authenticate PC1 using certificate.

59 Figure 4: Certificate information on PC1 Figure 5: Authenticating

60 Figure 6: Authentication success 4.2DUT authenticate PC2 using PEAP-TLS. 1. PC2 choose the SSID of DUT as the Access Point. 2. Set authenticatio

61 AAAppppppeeennndddiiixxx CCC WWWPPPAAA---PPPSSSKKK aaannnddd WWWPPPAAA Wireless Router: LAN IP: 192.168.123.254 WAN

62 Or Another Configuration: WPA-PSK In fact, it is not necessary for this function to authenticate by Radius Server, the client and wireless Ro

63 3. Add and edit some settings:

64 4. Back to Connection: Then Select “Connect to network” You will see: Method2: 1. First, patch windows XP and have to install “Service package

2 Wireless functions l High speed for wireless LAN connection Up to 54Mbps data rate by incorporating Orthogonal Frequency Division Multiplexing (O

65 Choose “View available Wireless Networks” like below: Advancedà choose “1kk”

66 WPA: For this function, we need the server to authenticate. This function is like 802.1x. The above is our environment: Method 1: 1. The User

67 4. Go to Odyssey Client Manager, choose “Profiles” and Setup Profile name as “1” Login name and passwd are fae1 and fae1. Remember that you g

68 5. Then Choose “certificate” like above.

69 6. Then go to Authentication and first Remove EAP/ TLS and Add EAP/TLS again.

70 7. Go “Network” and Select “1” and ok

71 8. Back to Connection and Select “1kk. If successfully, the wireless client has to authenticate with Radius Server, like below: 9.Result:

72 2. Then Install this certificate and finish. 3. Setting on the router and client: Router:

73 Client: Go to “Network Connection” and select wireless adapter. Choose “View available Wireless Networks” like below: Advancedà choose “1kk” Selec

74 AAAppppppeeennndddiiixxx DDD FFFAAAQQQ aaannnddd TTTrrrooouuubbbllleeessshhhooooootttiiinnnggg Reset to factory Default There are 2

3 Advanced functions l System time Supported Allow you to synchronize system time with network time server. l E-mail Alert Supported The router ca

75 AAAppppppeeennndddiiixxx EEE PPPrrroooddduuucccttt SSSpppeeeccciiifffiiicccaaatttiiiooonnn Hardware and Port Characteristic CPU AMRIS

76 Email Alert VPN Supporting IPSec, PPTP, LT2P Pass-Through Routing Static Route Web-based Upgrade Method Windows Application DDNS Supported UPnP

4 CCChhhaaapppttteeerrr 222 HHHaaarrrdddwwwaaarrreee IIInnnssstttaaallllllaaatttiiiooonnn 2.1 Panel Layout 2.1.1. Front Panel Figur