Buffalo AirStation WZR-RS-G54 Installation and operating instructions

www.buffalotech.com
Introduction
The WZR-RS-G54’s VPN services allow users to securely access their home or office
network from anywhere in the world. All services available in your network are only one
click away with the use of the WZR-RS-G54’s “Network Service List”. You can even
remotely turn on your computer to gain access to your files, printers, and direct desktop
control. The WZR-RS-G54 PPTP (VPN) server can host up to 100 user accounts for
remote access to local resources. Create accounts for all your friends and family.
This guide will help you setup the initial PPTP (VPN) server as well as setup remote
connection compatiblity on any Windows PC (Starts on Page 5). If you plan on accessing
your network remotely, it is recommended that you become familiar with the steps in this
guide or keep this guide nearby.
PY00-29028-DM20
WZR-RS-G54
AirStation™ VPN Setup Guide
WZR-RS-G54

2
Initial Router Configuration
Before you begin to setup the PPTP Server and VPN Client(s), you must first setup
your network. Please refer to the WZR-RS-G54 Quick Setup Guide and/or Manual to
configure the WZR-RS-G54. Once the WZR-RS-G54 is configured, record the WAN
Port IP Address, you will need it
later. This can be found in the
‘Advanced’ -> ‘Management’ ->
‘System Information’ section in the
WZR’s user interface. If you have
a dynamically assigned WAN IP
Address you may want to register
with a Dynamic DNS service so you
do not have to keep referring to the
'System Information' page to check
the WAN Port IP Address.
Dynamic DNS Services
Dynamic DNS Services provide the
ability to register a “vanity” URL so
you do not have to remember your
public (WAN) IP Address. Example
http://YourName.dyndns.com
Some providers will provide this
service for free. The WZR-RS-
G54 supports DynDns (Free) and
TZO (Paid Service) Dynamic DNS
Services.
Refer to the WZR-RS-G54 Manual found on the CD-ROM for more specific information on
how to configure the service.
DynDNS WebSite - http://www.dyndns.org
TZO WebSite - http://www.tzo.com

3
PPTP (VPN) Server Setup
The PPTP Server Setup is required
if you wish to utilize the features of
the “Network Service List”.
◗To utilize the feature select
‘Enable’.
◗Select the type of authentication
desired. The default setting of
“MS-CHAPv2-MPPE-40/128” is
supported by all Microsoft dial up
clients. This is the recommended
setting.
◗Input the IP Address of the LAN
Port in the ‘Local IP Address’ field. The LAN port default setting is 192.168.12.1. If
the default LAN Port was changed in the intial setup, then please enter the IP Address
it was changed to. (Required Field)
◗In the 'Remote IP Addresses' fields, set the range of IP Addresses to supply to VPN
Clients. This can be the same range as the DHCP server or you can set a separate
range specifically for the VPN Clients. (Required fields)
◗If desired, add a WINS Server Address in the ‘WINS Server Address’ field. (Not
Required)
◗If desired, add a DNS Server IP Address in the ‘DNS Server Address’ field. It is
recommended to add the DNS Server info if in an Active Directory Domain. (Not
Required)
◗If you wish to restrict inbound connections based on the Remote IP Address(es) click
on ‘Enable’ in the ‘Enforce Address Restriction’ field. After pressing the ‘Apply’
button, scroll to the bottom of the page to register the allowable address(es).
Press the ‘Apply’ button to register your settings in the AirStation.

4
Add VPN Usernames and Passwords to the Database:
◗Press on the ‘Add New User’ button.
A window will appear to add the new
user.
◗Enter a ‘User Name’. It can be
up to 16 characters. Alphanumeric
characters, double quotation ("), single
quotation ('), slash (/) and any symbol
other than space may be used. The
user name is case sensitive.
◗Enter a ‘Password’. Re-enter the password to confirm. It can be up to 16 characters.
Alphanumeric characters, double quotation ("), single quotation ('), slash (/) and any
symbol other than space may be used. The password is case sensitive.
◗Select the ‘IP Address Assignment Method’ from the drop down list. You have 3
choices.
• Acquire Automatically with DHCP – The next available address in the DHCP
server's list will be offered to the VPN Client.
• Obtain from PPTP Server Range – An IP Address will be given from the list you
created in the PPTP Server’s Remote IP Addresses list.
• Fixed IP Address – This option allows you to enter a Fixed IP Address for the user.
◗Enable/Disable RIP Transfer - The default setting is “Disable”. Enable this feature if
you desire to pass RIP packets to the remote user. This setting would be used if the
AirStation is also configured as a PPTP (VPN) Endpoint Client. Please see the manual
on the CD-ROM for more information regarding PPTP (VPN) Endpoint Clients.
Press the ‘Apply’ button to register the user. You can register up to 100 users. VPN user
status can be seen in the registered user list. An LED on the front of the AirStation (below
the WAN LED) will illuminate when a user has initiated a VPN session.

5
Allowable Address List:
This list is used to register Remote IP Addresses that are authorized to connect to the
PPTP Server. These IP Addresses are required if ‘Enforce Address Restriction’ was
enabled above.
Setting up your Computer as a VPN Client
A VPN Client Connection is required to securely communicate with a VPN Server. You
will need to setup a VPN Client Connection on each computer that wishes to login to the
PPTP (VPN) Server and the Network Service List. You may want to keep this setup guide
handy for quick reference to set up additional remote computers in the future. The setup
is performed once per computer; once it has been setup on a computer it does not have
to be re-setup.
Windows 98SE / ME (Windows 2000 and Windows XP skip to Page 10)
Setting up a Windows 98SE/ME computer with a VPN Client Connection is performed
in two steps. Step one is to setup the VPN Adapter. Step two is to configure the VPN
Client. You will need your Windows 98SE/ME CD to complete the installation.
Windows 98SE VPN Adapter installation
Installing the VPN Adapter
◗Right click on the Network
Neighborhood icon and
select ‘Properties’.
◗Select 'Adapter' and press
the 'Add' button.
◗Press the ‘Add’ button.

6
Windows 98SE VPN Adapter Installation cont'd
◗Scroll down and select ‘Microsoft’ in
the Manufacturers column.
◗Select ‘Microsoft Virtual Private
Networking Adapter’ and press the
‘OK’ button. You will be prompted
to insert your Windows 98SE CD
to complete the installation of the
adapter.
When the installation is complete, you will be prompted to reboot your computer.
Windows ME VPN Adapter Installation
Installing the VPN Adapter
◗Click the ‘Start’ menu, click
‘Settings’, click ‘Control Panel’,
and then double-click ‘Add/Remove
Programs’.
◗Click on the ‘Windows Setup’ tab.
◗Click and check ‘Communications’,
press the ‘Details’ button, click
and check the ‘Virtual Private
Networking’ check box and then
press the ‘OK’ button.
When the installation is complete, you will be prompted to reboot your computer.

7
Windows 98SE / ME Dial-Up Networking Client Installation
Configure the Dial-Up Networking client
◗Double click on the ‘My Computer’
icon.
◗Double click on the ‘Dial-Up
Networking’ icon. (ME users click the
‘Dial-Up Networking’ link.)
◗Double click the ‘Make New
Connection’ icon.
◗Type a name you wish to use to refer
to the connection. Use the drop down
selector to select ‘Microsoft VPN
Adapter’. Press the ‘Next’ button.
This name will be used to identify the
connection; something like 'Home VPN'
would be an acceptable name.

8
Windows 98SE / ME Dial-Up Networking Client Installation cont'd
◗Type in the Dynamic DNS Host Name
or WAN IP Address of the VPN Server.
The WAN IP Address was referred to
on Page 2. Press the ‘Next’ button.
◗Click the ‘Finish’ button.
This completes the Windows 98SE / ME VPN Client setup. You are now ready to
establish a remote VPN connection to your WZR-RS-G54.
Connecting to the Remote Network
Be sure that you have a valid internet connection before trying to connect remotely.
◗Double click on the ‘VPN Connection’
Icon you just created.
Type in the username and password
that was created in the PPTP Server.
Verify you have the correct IP Address or
Host Name and press on the ‘Connect’
button. You will receive feedback that the
connection is successful.
To alter the properties of the VPN Client, where internet requests are routed through your
internet connection and not the VPN connection, refer to the following procedure. This
procedure is recommended for most users, as tunneling regular internet traffic through a
VPN server may slow down the internet connection significantly.
◗From the ‘Dial-Up Networking’ page
Right Click on the VPN Client you just
created.

9
◗Select ‘Properties’.
◗Click on the ‘Server Types’ tab.
◗Press the ‘TCP/IP Settings’ button.
◗Un-check ‘Use default gateway on
remote network’ check box. This
means, if you have an active VPN
session and you also wish to visit a
web site, your web request does not
go through the VPN tunnel.

10
Windows 2000 / XP
Microsoft has provided a wizard to easily configure the VPN Client in Windows 2000/XP.
Starting the wizard in Windows XP is different from Windows 2000. Once the wizard
launches, the setup is very similar; the images on your computer may be slightly different
from what you see in this publication.
Starting the Windows 2000 Wizard:
◗Click on the ‘Start’ menu, click
‘Settings’, then ‘Network and Dial-
Up Connections’, and click ‘Make
New Connection’.
Starting the Windows XP Wizard:
◗Click on the ‘Start’ menu and click on
the ‘Control Panel’ icon.
◗Click the ‘Network and ◗ Click the ‘Create a connection to the
Internet Connections’ icon.network at your workplace’ icon.