Buffalo AirStation WZR-RS-G54 Installation and operating instructions

www.buffalotech.com
Introduction
The WZR-RS-G54’s VPN services allow users to securely access their home or office
network from anywhere in the world. All services available in your network are only one
click away with the use of the WZR-RS-G54’s “Network Service List”. You can even
remotely turn on your computer to gain access to your files, printers, and direct desktop
control. The WZR-RS-G54 PPTP (VPN) server can host up to 100 user accounts for
remote access to local resources. Create accounts for all your friends and family.
This guide will help you setup the initial PPTP (VPN) server as well as setup remote
connection compatiblity on any Windows PC (Starts on Page 5). If you plan on accessing
your network remotely, it is recommended that you become familiar with the steps in this
guide or keep this guide nearby.
PY00-29028-DM20
WZR-RS-G54
AirStation™ VPN Setup Guide
WZR-RS-G54

2
Initial Router Configuration
Before you begin to setup the PPTP Server and VPN Client(s), you must first setup
your network. Please refer to the WZR-RS-G54 Quick Setup Guide and/or Manual to
configure the WZR-RS-G54. Once the WZR-RS-G54 is configured, record the WAN
Port IP Address, you will need it
later. This can be found in the
‘Advanced’ -> ‘Management’ ->
‘System Information’ section in the
WZR’s user interface. If you have
a dynamically assigned WAN IP
Address you may want to register
with a Dynamic DNS service so you
do not have to keep referring to the
'System Information' page to check
the WAN Port IP Address.
Dynamic DNS Services
Dynamic DNS Services provide the
ability to register a “vanity” URL so
you do not have to remember your
public (WAN) IP Address. Example
http://YourName.dyndns.com
Some providers will provide this
service for free. The WZR-RS-
G54 supports DynDns (Free) and
TZO (Paid Service) Dynamic DNS
Services.
Refer to the WZR-RS-G54 Manual found on the CD-ROM for more specific information on
how to configure the service.
DynDNS WebSite - http://www.dyndns.org
TZO WebSite - http://www.tzo.com

3
PPTP (VPN) Server Setup
The PPTP Server Setup is required
if you wish to utilize the features of
the “Network Service List”.
◗To utilize the feature select
‘Enable’.
◗Select the type of authentication
desired. The default setting of
“MS-CHAPv2-MPPE-40/128” is
supported by all Microsoft dial up
clients. This is the recommended
setting.
◗Input the IP Address of the LAN
Port in the ‘Local IP Address’ field. The LAN port default setting is 192.168.12.1. If
the default LAN Port was changed in the intial setup, then please enter the IP Address
it was changed to. (Required Field)
◗In the 'Remote IP Addresses' fields, set the range of IP Addresses to supply to VPN
Clients. This can be the same range as the DHCP server or you can set a separate
range specifically for the VPN Clients. (Required fields)
◗If desired, add a WINS Server Address in the ‘WINS Server Address’ field. (Not
Required)
◗If desired, add a DNS Server IP Address in the ‘DNS Server Address’ field. It is
recommended to add the DNS Server info if in an Active Directory Domain. (Not
Required)
◗If you wish to restrict inbound connections based on the Remote IP Address(es) click
on ‘Enable’ in the ‘Enforce Address Restriction’ field. After pressing the ‘Apply’
button, scroll to the bottom of the page to register the allowable address(es).
Press the ‘Apply’ button to register your settings in the AirStation.

4
Add VPN Usernames and Passwords to the Database:
◗Press on the ‘Add New User’ button.
A window will appear to add the new
user.
◗Enter a ‘User Name’. It can be
up to 16 characters. Alphanumeric
characters, double quotation ("), single
quotation ('), slash (/) and any symbol
other than space may be used. The
user name is case sensitive.
◗Enter a ‘Password’. Re-enter the password to confirm. It can be up to 16 characters.
Alphanumeric characters, double quotation ("), single quotation ('), slash (/) and any
symbol other than space may be used. The password is case sensitive.
◗Select the ‘IP Address Assignment Method’ from the drop down list. You have 3
choices.
• Acquire Automatically with DHCP – The next available address in the DHCP
server's list will be offered to the VPN Client.
• Obtain from PPTP Server Range – An IP Address will be given from the list you
created in the PPTP Server’s Remote IP Addresses list.
• Fixed IP Address – This option allows you to enter a Fixed IP Address for the user.
◗Enable/Disable RIP Transfer - The default setting is “Disable”. Enable this feature if
you desire to pass RIP packets to the remote user. This setting would be used if the
AirStation is also configured as a PPTP (VPN) Endpoint Client. Please see the manual
on the CD-ROM for more information regarding PPTP (VPN) Endpoint Clients.
Press the ‘Apply’ button to register the user. You can register up to 100 users. VPN user
status can be seen in the registered user list. An LED on the front of the AirStation (below
the WAN LED) will illuminate when a user has initiated a VPN session.

5
Allowable Address List:
This list is used to register Remote IP Addresses that are authorized to connect to the
PPTP Server. These IP Addresses are required if ‘Enforce Address Restriction’ was
enabled above.
Setting up your Computer as a VPN Client
A VPN Client Connection is required to securely communicate with a VPN Server. You
will need to setup a VPN Client Connection on each computer that wishes to login to the
PPTP (VPN) Server and the Network Service List. You may want to keep this setup guide
handy for quick reference to set up additional remote computers in the future. The setup
is performed once per computer; once it has been setup on a computer it does not have
to be re-setup.
Windows 98SE / ME (Windows 2000 and Windows XP skip to Page 10)
Setting up a Windows 98SE/ME computer with a VPN Client Connection is performed
in two steps. Step one is to setup the VPN Adapter. Step two is to configure the VPN
Client. You will need your Windows 98SE/ME CD to complete the installation.
Windows 98SE VPN Adapter installation
Installing the VPN Adapter
◗Right click on the Network
Neighborhood icon and
select ‘Properties’.
◗Select 'Adapter' and press
the 'Add' button.
◗Press the ‘Add’ button.

6
Windows 98SE VPN Adapter Installation cont'd
◗Scroll down and select ‘Microsoft’ in
the Manufacturers column.
◗Select ‘Microsoft Virtual Private
Networking Adapter’ and press the
‘OK’ button. You will be prompted
to insert your Windows 98SE CD
to complete the installation of the
adapter.
When the installation is complete, you will be prompted to reboot your computer.
Windows ME VPN Adapter Installation
Installing the VPN Adapter
◗Click the ‘Start’ menu, click
‘Settings’, click ‘Control Panel’,
and then double-click ‘Add/Remove
Programs’.
◗Click on the ‘Windows Setup’ tab.
◗Click and check ‘Communications’,
press the ‘Details’ button, click
and check the ‘Virtual Private
Networking’ check box and then
press the ‘OK’ button.
When the installation is complete, you will be prompted to reboot your computer.

7
Windows 98SE / ME Dial-Up Networking Client Installation
Configure the Dial-Up Networking client
◗Double click on the ‘My Computer’
icon.
◗Double click on the ‘Dial-Up
Networking’ icon. (ME users click the
‘Dial-Up Networking’ link.)
◗Double click the ‘Make New
Connection’ icon.
◗Type a name you wish to use to refer
to the connection. Use the drop down
selector to select ‘Microsoft VPN
Adapter’. Press the ‘Next’ button.
This name will be used to identify the
connection; something like 'Home VPN'
would be an acceptable name.

8
Windows 98SE / ME Dial-Up Networking Client Installation cont'd
◗Type in the Dynamic DNS Host Name
or WAN IP Address of the VPN Server.
The WAN IP Address was referred to
on Page 2. Press the ‘Next’ button.
◗Click the ‘Finish’ button.
This completes the Windows 98SE / ME VPN Client setup. You are now ready to
establish a remote VPN connection to your WZR-RS-G54.
Connecting to the Remote Network
Be sure that you have a valid internet connection before trying to connect remotely.
◗Double click on the ‘VPN Connection’
Icon you just created.
Type in the username and password
that was created in the PPTP Server.
Verify you have the correct IP Address or
Host Name and press on the ‘Connect’
button. You will receive feedback that the
connection is successful.
To alter the properties of the VPN Client, where internet requests are routed through your
internet connection and not the VPN connection, refer to the following procedure. This
procedure is recommended for most users, as tunneling regular internet traffic through a
VPN server may slow down the internet connection significantly.
◗From the ‘Dial-Up Networking’ page
Right Click on the VPN Client you just
created.

9
◗Select ‘Properties’.
◗Click on the ‘Server Types’ tab.
◗Press the ‘TCP/IP Settings’ button.
◗Un-check ‘Use default gateway on
remote network’ check box. This
means, if you have an active VPN
session and you also wish to visit a
web site, your web request does not
go through the VPN tunnel.

10
Windows 2000 / XP
Microsoft has provided a wizard to easily configure the VPN Client in Windows 2000/XP.
Starting the wizard in Windows XP is different from Windows 2000. Once the wizard
launches, the setup is very similar; the images on your computer may be slightly different
from what you see in this publication.
Starting the Windows 2000 Wizard:
◗Click on the ‘Start’ menu, click
‘Settings’, then ‘Network and Dial-
Up Connections’, and click ‘Make
New Connection’.
Starting the Windows XP Wizard:
◗Click on the ‘Start’ menu and click on
the ‘Control Panel’ icon.
◗Click the ‘Network and ◗ Click the ‘Create a connection to the
Internet Connections’ icon.network at your workplace’ icon.

11
For both Windows 2000/XP
◗Click the ‘Next’ button.
◗Click ‘Connect to a private network
through the Internet’.
◗Press the ‘Next’ button.
◗If you have to dial out to get an internet
connection, then select ‘Automatically
dial this initial connection’ and use
the drop down selector to select the
connection. If not, select ‘Do not dial
the initial connection’. The ‘Do not
dial the initial connection’ option
should be selected if you are using a
broadband connection.
◗Press the ‘Next’ button.
◗Type in the IP Address of your WAN IP
Address or Dynamic DNS Host Name for
the Destination Address (Referred to on
Page 2).
◗Press the ‘Next’ button.

12
◗Depending on your computer
configuration, select either ‘For all
users’ or ‘Only for myself’. Selecting
'For all users' gurantees the connection
will work on all profiles on your system.
'Only for myself' specifies that the
connection will only be available on your
Window's profile.
◗Press the ‘Next’ button.
◗Type a name you wish to use to identify
the VPN connection. This name will
be used to identify the connection;
something like 'Home VPN' would be an
acceptable name.
◗Leave the check box checked if you
wish for a shortcut to be created on your
desktop for this connection. Otherwise
un-check the box.
◗Press the ‘Finish’ button.
Windows 2000
(Windows XP turn to Page 13)
◗A window will pop up so you can initiate
the VPN connection. You can press the
‘Connect’ button to dial the connection after
inputting your user name and password
(Specified in the PPTP Server setup) or press
the ‘Cancel’ button to close the window and
dial the connection later. Click the 'Save
Password' option if you would like Windows
to not prompt you for the password everytime you start the VPN connection.
NOTE: It is not recommended to use the save password feature for your VPN Client. If
your computer were to be stolen, then an unauthorized user may gain access to your
network.
This completes the setup of the VPN Client on your Windows 2000 computer. Please
skip to the middle of the next page to continue the setup.

13
Windows XP
◗Double click on the icon shortcut you created
on your desktop or browse back to your ‘My
Network Connections’ for the VPN Client
icon and double click on it. Type in your user
name and password (set up on the PPTP
Server) and click the 'Connect' button. Press
the ‘Cancel’ button to close the window and
dial the connection later. Click the 'Save
Password' option if you would like Windows
to not prompt you for the password everytime you start the VPN connection.
NOTE: It is not recommended to use the save password feature for your VPN Client. If
your computer were to be stolen, then an unauthorized user may gain access to your
network.
This completes the setup of the VPN Client on your Windows XP computer.
To alter the properties of the VPN Client, where
internet requests are routed through your internet
connection and not the VPN connection, refer
to the following procedure. This procedure is
recommended for most users, as tunneling regular
internet traffic through a VPN server may slow
down the internet connection tremendously.
Windows 2000 / XP:
◗Launch the VPN Client. Press the
‘Properties’ button. Click the ‘Networking’
tab.
◗Click ‘Internet Protocol (TCP/IP)’ and
press the ‘Properties’ button. Press the
‘Advanced’ button.
◗Un-check ‘Use default gateway on remote
network’. Press the ‘OK’ button to close all
the windows. This means, if you have an
active VPN session and you also wish to visit
a web site, your web request does not go
through the VPN tunnel.

14
Network Service List
Once the VPN session has been established you can take advantage of the “Network
Service List” to provide quick access to all of your network resources. You can access this
list by opening up an Internet Explorer Web Browser (5.0 or greater), typing the LAN IP
Address for your WZR-RS-G54 followed with “/hosts.htm”.
Example: http://192.168.12.1/hosts.htm . The default LAN IP Address is 192.168.12.1 .
If the default LAN Port was changed in the intial setup, then please enter the IP Address it
was changed to followed by /hosts.htm . (Required Field)
NOTE: Web browsers other than Microsoft's Internet Explorer can be used to access this
page but some of the one click features may become disabled.
Personal Firewall Issues: It is recommended to turn/off or disable any personal firewalls
before trying to utilize the features included in the Network Service List. Personal firewalls
may cause unexpected behavior depending on their configuration.
You can refer to the help section (Blue Question Mark) on the Network Service List
header or the WZR-RS-G54 Manual (on the CD-ROM) for further information on “Network
Service List” functions.
Please 'Bookmark' (Add to Favorites) this Network Service List. This way you can on the
bookmark instead of typing in the URL everytime.
When you are finished working with the Network Service List, you can disconnect yourself
from the VPN connection by right clicking on the Network/VPN icon in the system tray
(near the clock) and selecting 'Disconnect'. Next time you want to connect to the
Network Service List, you must connect the VPN connection first; this is done by double
clicking on the VPN Connection icon you created on previous steps.
If you encounter any problems or have any questions, please contact our 24x7 technical
support at: 1- 866-752-6210

15
Buffalo Technology
Technical Support
Buffalo Technology offers toll-free technical support 24 hours a day, 7 days a
week for this product. Customers in the United States and Canada can obtain
technical support using the following information:
◗Web www.buffalotech.com
◗E-mail [e-mail] (Retail Channel Customers)
[e-mail] (All other Customers)
◗Telephone [phone] (USA & Canada only)
The constantly evolving state of wireless products and operating systems
requires Buffalo Technology to occasionally release updated software to take
advantage of new technologies and to comply with industry standards. For
the most recent software, firmware, driver, and technical whitepaper releases
available, please visit the Buffalo Technology website.
FCC Compliance Statement - This device complies with Part 15 of the FCC
Rules. Operation is subject to the following two conditions: (1) This device may
not cause harmful interference, and (2) this device must accept any interference
received, including interference that may cause undesired operation.
R&TTE Compliance Statement - This equipment complies with all
the requirements of the DIRECTIVE 1999/5/EC OF THE EUROPEAN
PARLIAMENT AND THE COUNCIL of 9 March 1999 on radio equipment and
telecommunication terminal equipment and the mutual recognition of their
conformity (R&TTE). See the user manual for the complete statement.
Copyright © 2004 Buffalo Technology, Inc. All Rights Reserved. Buffalo Technology (USA) Inc., is part of MELCO INC.,
the global manufacturers of IT peripherals, including memory, networking, and multimedia products, inside many of the
world's computers. All trademarks are property of their respective owners.