Sitecom WLR-4002B - User Manual

WLR-4002B

Summary

Key Features

Package Contents

Cautions

Usage Cautions

Advises against modifying the router and specifies operating temperature limits.

Power

Details power requirements, connection safety, and cleaning precautions.

Repair

Instructs users to seek professional repair and avoid self-servicing.

Disposing of the Router

Provides guidance on proper disposal methods for the router.

Others

Covers other precautions like avoiding liquids, impacts, and magnetic fields.

Product Layout

Description

Explains the purpose of each port on the router.

Backlabel

LED Definition

Network + System Requirements

WLR-4002 B Placement

Setup LAN, WAN

PC Network Adapter setup

Windows XP

Provides specific instructions for setting up the network adapter on Windows XP.

The router supports [DHCP] function, please select both [Obtain an IP address automatically] and [Obtain DNS server address automatically].

Bringing up the WLR-4002 B

Initial Setup WLR-4002 B

LOGIN procedure

Details the steps to log in to the router's web interface.

Type user name and password (default username is ‘admin’, the password can be found on the back of he router).

LAN settings

IP address 192.168.0.1. It is the router’s LAN IP address (Your LAN clients default gateway IP address).

Specifies the default LAN IP address of the router and its role as a gateway.

IP Subnet Mask 255.255.255.0 Specify a Subnet Mask for your LAN segment.

Explains the purpose and value of the IP subnet mask for the LAN.

DHCP Server Enabled by default. You can enable or disable the DHCP server. When DHCP is disabled no ip-addresses are assigned to clients and you have to use static ip-addresses. When DHCP server is enabled your computers will be assigned an ip-address automatically until the lease time expires.

Explains the DHCP server functionality, enabling/disabling, and IP address assignment.

Note: default IP range is 192.168.0.100 ~ 192.168.0.200. If you want your PC(s) to have a static;fixed IP address, then you’ll have to choose an IP address outside this IP address Pool

Device Status

Internet Status

DHCP Client Status

Configuration Wizard

Wireless Settings

Wireless Function

Enables or disables the wireless functionality of the router.

Basic Settings

Mode

Allows selection between AP or WDS mode for wireless operation.

Band

Sets the wireless band to 802.11b, 802.11g, or B+G mode.

Enable SSID #

Option to enable multiple SSIDs for network segmentation.

SSID

Sets the network name (SSID) broadcasted by the wireless signal.

Channel

Configures the wireless channel for optimal performance, with an auto option.

Advanced Settings

Security

SSID Selection

Selects the SSID for which security settings will be applied.

Disable

Enable 802.1 x Auth

WEP

Key Length

Allows selection of WEP key length (64-bit or 128-bit) for security.

Key Format

Sets the format for WEP keys (ASCII or Hexadecimal).

Key1 - Key4

Instructions for entering WEP keys for data encryption.

WPA Pre-shared Key

WPA-Radius

ACL

Enable wireless access control

Activates the MAC address filtering feature.

Adding an address into the list

Instructions for adding MAC addresses to the access control list.

Remove an address from the list

Procedures for removing MAC addresses from the access control list.

WPS

WPS via PIN code

Explains how to use a PIN code for WPS connection setup.

WPS

WPS via Push Button

Explains how to initiate WPS connection using the push button.

WPS via PIN

Describes entering a PIN code to initiate the WPS process.

Firewall Settings

Note: To enable the Firewall settings select Enable and click Apply

Instruction to enable firewall functionality by selecting 'Enable' and clicking 'Apply'.

DMZ

Enable DMZ

Option to enable or disable the DMZ host functionality.

Public IP Address

Specifies the public IP address for DMZ configuration.

Client PC IP Address

Enters the IP address of the LAN client to be placed in the DMZ.

Denial of Service (DoS)

Ping of Death

Provides protection against Ping of Death attacks.

Discard Ping From WAN

Prevents the router's WAN port from responding to Ping requests.

Port Scan

Protects the router against port scanning attempts.

Sync Flood

Offers protection against Sync Flood attacks.

Access

Deny

Allow

Filter client PCs by IP

Add PC

Remove PC

URL block

Enable URL Blocking

Add URL Keyword

Remove URL Keyword

Advanced Settings

Network Address Translation (NAT)

Configures NAT for multiple users to access the internet via a single IP address.

Port Forwarding

Enable Port Forwarding

Port Range

Add Port Forwarding

Virtual Server

Enable Virtual Server

Private IP

Private Port

Type

Special Applications

Enable Trigger Port

Trigger Port

Trigger Type

Public Port

Public Type

Application Layer Gateway

UPnP

UPnP Feature

QoS

Enable;Disable QoS

Add a QoS rule into the table

Remove QoS rules from the table

VPN

Status

Displays the connection status of VPN tunnels.

Using the Wizard to Configure the WLR-4002 B for a PPTP VPN tunnel.

User Name

Password

Server IP

Remote IP Range

Using the Wizard to Configure the WLR-4002 B for L2 TP over IPSec VPN tunnel.

Shared Key

Configuring a Microsoft Windows 7 VPN Client

Internet Address Enter the WLR-4002 B WAN IP address. Destination name Enter a name for the VPN client.

User name Enter the username used to log onto the VPN tunnel. Password Enter the password used to log onto the VPN tunnel.

Go to the Security tab and configure the following settings: Under the Type of VPN, select the Protocol that has been set in the WLR 4002 B, Point to point tunneling protocol(PPTP) or Layer 2 Tunneling Protocol with IPsec (L2 TP-IPSec). Check unencrypted password (PAP). Check Challenge Handshake Authentication Protocol (PPTP). Check Microsoft CHAP Version 2 (MS-CHAP v2).

Configuring a Microsoft Windows XP VPN Client

Enter the Hostname, this should be the WLR-4002 B WAN IP address and click Next to continue.

Configure the following settings: Under Data encryption, select Optional encryption (connect even if no encryption) Check Unencrypted password (PAP) Check Challenge Handshake Authentication Protocol (SPAP) Uncheck Microsoft CHAP (MS-CHAP) Check Microsoft CHAP Version 2 (MS-CHAP v2) Click OK to continue.

If the VPN Type of the tunnel you have set up in the WLR-4002 B is L2 TP over IPSec You have also entered a Shared key in the WLR-4002 B(see step 7 of chapter Using the Wizard to Configure the WLR-4002 B for L2 TP over IPSec for reference). Click on IPSec Settings…

Check Use pre-shared key for authentication. Key, Enter the shared key you have entered in the WLR-4002 B.

Configuring a MacOS VPN Client

Under the VPN Type dropdown, select the option that corresponds to the VPN Type you have configured in the WLR-4002 B. Enter a name for this profile (this name is for reference purpose only)

Server address Enter the WAN IP address of the WLR-4002 B. Account Name Enter the name used to log onto the VPN tunnel (this must be one of the users you have set in the VPN user table of the WLR-4002 B)

Password Enter the password that belongs to the Account name which you have entered in step 6 of this Guide. Shared Key If the VPN Type of the VPN tunnel you have set up in the WLR-4002 B is L2 TP over IPSec You have also entered a Shared key in the WLR-4002 B(see step 7 of chapter Using the Wizard to Configure the WLR-4002 B for L2 TP over IPSec for reference) Enter the same key in this field.

Select the checkbox Send all traffic over VPN connection. Click OK to continue.

Configuring a VPN client on iOS

Select the VPN Type that corresponds to the VPN Type you have configured in the WLR-4002 B. Complete the following fields: Description Enter a name for your VPN connection, this name is for reference purposes only. Server Enter the WLR-4002 B WAN IP address Account Enter Enter the name used to log onto the VPN tunnel(this must be one of the users you have set in the VPN user table of the WLR-4002 B) Password Enter the Password used to log onto the VPN tunnel. Secret(L2 TP only) If the VPN Type of the VPN tunnel you have set up in the WLR-4002 B is L2 TP over IPSec You have also entered a Shared key in the WLR-4002 B(see step 7 of chapter Using the Wizard to Configure the WLR-4002 B for L2 TP over IPSec for reference) Enter the same key in this field.

Configuring a VPN client on Android

Select the VPN Type that corresponds to the VPN Type you have configured in the WLR-4002 B. Complete the following fields: Description Enter a name for your VPN connection, this name is for reference purposes only. Server Enter the WLR-4002 B WAN IP address Account Enter the name used to log onto the VPN tunnel (this must be one of the users you have set in the VPN user table of the WLR-4002 B) Password Enter the Password used to log onto the VPN tunnel. Secret(L2 TP only) If the VPN Type of the VPN tunnel you have set up in the WLR-4002 B is L2 TP over IPSec You have also entered a Shared key in the WLR-4002 B(see step 7 of chapter Using the Wizard to Configure the WLR-4002 B for L2 TP over IPSec for reference) Enter the same key in this field.

Profile Setting

Add

Edit

Add Users to an existing Profile

Select the Profile for which you wish to modify user settings and click on Edit. Then Click on the protocol name you selected to edit.

PPTP

PPTP

Details PPTP-specific authentication and encryption settings.

L2 TP

L2 TP

Details L2TP-specific authentication settings.

IPSec

Local ID Type

Local ID

Peer ID Type

Peer ID

SA (Security Association)

IKE (Phase 1) Proposal Exchange

IPSec (Phase 2) Proposal

Protocol

Encryption

Authentication

Perfect Forward Secrecy

DH Group

Life Time

Security Gateway Type

Security Gateway

Local Network

Remote Network

Advanced

Nat Traversal

Dead Peer Detection

L2 TP over IPSec

General

Name

Connection Type

Authentication Type

Selects the pre-shared key method for authentication.

Shared Key

Enters the shared key for L2TP over IPSec authentication.

Confirm

L2 TP;PPTP

Details L2TP/PPTP authentication settings.

Network

User Setting

Add a user

Current VPN user table

Delete Selected

Delete ALL

Example of configuring IPSec Site to Site architecture

Configuring Location B

Shared Key

Once Both VPN routers have been completely set up. Click on Status in the submenu of the VPN menu and click Connect to establish the IPSec Site to Site connection.

TOOLBOX

Sitecom Cloud Security

Provides built-in security features like antivirus and anti-phishing for network protection.

The Sitecom Cloud Security service offers the following protection options: 1 Anti-Malware 2 Anti-Phishing 3 Protection against unsafe websites 4 Advertisement blocking

Password change options

Current Password

New Password

Confirmed Password

Remote Management

Host Address

Port

Sets the port number for the remote management web interface.

Enabled

Firmware Upgrade

Enable automatic firmware update

Firmware Upgrade

Process for manually upgrading the router's system firmware.

Backup Settings

Restore to Factory Defaults

Reset

DDNS

Enable;Disable

Provider

Domain name

Account;E-mail

Password;Key

Sitecom WLR-4002B Specifications

General

Wireless Standard	802.11n
Frequency Bands	2.4 GHz
Maximum Wireless Speed	300 Mbps
Ports	4 x 10/100Mbps LAN, 1 x 10/100Mbps WAN
Security	WPA, WPA2, WEP
Antennas	2x External Antennas
Weight	200 g
Standards	IEEE 802.3, IEEE 802.3u