Buffalo nfiniti WZR-HP-G450H User manual

User Manual for Professional Firmware
WZR-HP-G450H
Nfiniti High Power Wireless N Router & Access Point
www.buffalotech.com
35012039 ver.01

1. Introduction 3
1.1. Welcome 3
1.2. LED Specifications 3
1.3. Device Configuration 3
1.3.1. Factory Settings 3
1.3.2. Initial Operation 3
2. Configuration via the Web Interface 4
2.1. Preparation 4
2.2. Web Interface Access 4
2.3. Web Interface Structure 5
2.3.1. Setup 6
2.3.1.1. Basic Configuration 6
2.3.1.2. Dynamic DNS (DynDNS or DDNS) 6
2.3.1.3. MAC Address Cloning 7
2.3.1.4. Advanced Routing 7
2.3.1.5. Networking 7
2.3.1.6. EoIP Tunnel 8
2.3.2. Wireless 8
2.3.2.1. Basic Settings 8
2.3.2.2. Wireless Security 9
2.3.2.3. AOSS/WPS 11
2.3.2.4. MAC Filter 11
2.3.3. Services 12
2.3.3.1. Services 12
2.3.3.2. FreeRadius 12
2.3.3.3. PPPoE Server 12
2.3.3.4. VPN 12
2.3.3.5. USB 13
2.3.3.6. NAS 13
2.3.3.7. Hotspot 14
2.3.3.8. Milkfish SIP Router 14
2.3.3.9. My Ad Network 14
2.3.4. Security 14
2.3.4.1. Firewall 14
2.3.4.2. VPN Pass-through 14
2.3.5. Access Restrictions 14
2.3.5.1. WAN Access 14
2.3.6. NAT / QoS 14
2.3.6.1. Port Forwarding 14
2.3.6.2. Port Range Forwarding 15
2.3.6.3. Port Triggering 15
2.3.6.4. UPnP 15
2.3.6.5. DMZ 15
2.3.6.6. QoS 15
2.3.7. Administration 15
2.3.7.1. Management 15
2.3.7.2. Keep Alive 16
2.3.7.3. Commands 16
2.3.7.4. WOL 16
2.3.7.5. Factory Defaults 16
2.3.7.6. Firmware Upgrade 16
2.3.7.7. Backup 16
2.3.8. Status 16
2.3.8.1. Router 16
2.3.8.2. WAN 16
2.3.8.3. LAN 17
2.3.8.4. Wireless 17
- 1 -

2.3.8.5. Bandwidth 17
2.3.8.6. SysInfo 17
3. Use Cases 18
3.1. Access Point 18
3.1.1. Access Point with NAT / DHCP 18
3.1.1. Access Point attached to a network / Internet gateway 19
3.2. Wireless Client 20
3.3. Wireless Client Bridge 21
3.4. FTP Server 23
3.4.1. Examples 23
3.4.2. Logging into the FTP server 25
3.4.3. Common FTP commands 25
4. GPL Statement 27
4.1. GNU General Public License 27
4.1.1. Preamble 27
4.1.2. GNU General Public License – Terms and Conditions or Copying,
Distribution and Modification 28
4.1.3. NO WARRANTY 31
- 2 -

1. Introduction
1.1. Welcome
This AirStation wireless router comes with two different firmware
packages. You may use either the dd-wrt-based Professional firmware or
the simple User-friendly firmware. By default, the Professional
firmware is preinstalled for US/EU products, and the User-friendly
firmware is preinstalled for Asia-Pacific products.
If you're using the user-friendly firmware, please click on the link
on the left side.
1.2. LED Specifications
With exception of the router LED , the LED specifications are the same
as User-friendly firmware.
The router LED is off when no WAN connection is established.
The router LED is ON when in router mode and WAN connection is
established.
Please refer to "User Manual for User-friendly Firmware" for details.
1.3. Device Configuration
From the factory, the router is configured as a network bridge. That
means that all network interfaces can communicate with each other
using this default bridge. The router is ready to use with a few
simple adjustments.
1.3.1. Factory Settings
Because all interfaces are attached to the bridge by default, they all
have the same IP configuration:
IP address 192.168.11.1
Subnet Mask 255.255.255.0
DHCP server enabled
DHCP-Range 192.168.11.2 - 65
The Wireless LAN interface is activated by default with an SSID
generated from the device’s MAC address. For security, unused
interfaces should be disabled. Wireless LAN interfaces that are not
disabled should be configured with secure encryption (WPA2 or WPA is
recommended) and a secure password.
1.3.2. Initial Operation
Connect your computer to the router with an Ethernet LAN cable and
power the router on. It will take about 30 seconds to boot. You can
then access it via telnet or web browser at the IP address
192.168.11.1. The DHCP server in the router is enabled by default. If
your PC’s Ethernet is configured for DHCP it should receive an IP
address from the router’s DHCP server. If not, please configure the
Ethernet interface with an address from the 192.168.11.x subnet.
- 3 -

Because all relevant settings can be made using the web interface,
this manual refers to configuration via the web GUI only.
2. Configuration via the Web Interface
The router contains an integrated web server that provides an easy to
use web interface. It allows configuration, administration, and status
checking in a simple but effective way.
When accessing the web GUI for the first time, change the default
username and password. By default, the router’s status page can be
accessed without authentication, but this can be disabled.
The web interface was successfully tested on the following browsers:
-Internet Explorer 7.x and newer versions
-Firefox 2.x and newer versions
-Safari 2.x and newer versions
2.1. Preparation
Connect your PC to the router and power the router on as described in
1.2.2. After the router has loaded its operating system, you can
communicate with it via your LAN network interface.
The easiest way to test if your PC can communicate with the router is
to ping 192.168.11.1.
2.2. Web Interface Access
Open a browser window. Enter the address http://192.168.11.1 into the
address bar. The status page will be displayed.
When you click on a tab, the login window will pop up. Enter the
username and password you previously set.
- 4 -

2.3. Web Interface Structure
- 5 -

2.3.1. Setup
2.3.1.1. Basic Configuration
Setup Assistant
The setup assistant provides a step-by-step interface for basic router
configuration. This configures most common settings automatically.
WAN Setup
Here you’ll find the most important settings to configure your
internet access and WAN port. DHCP is enabled by default, but you can
also use PPPoE, PPTP, L2TP, static IP, or HeartBeat Signal. If you
don’t use a password to log in to your ISP, you may need to enter
“0000” for the password. Also, for some ISPs you should not enter the
service name, as it will prevent establishing the connection. If you
experience connection problems, then leave the service name empty.
WAN Connection Type Description
Disabled The WAN port is disabled.
Static IP A static IP address will be used – enter the
IP address, subnet mask, gateway, and server
manually.
Automatic
Configuration - DHCP The router obtains its WAN-side IP address from a DHCP server.
PPPoE Configure as PPPoE-client. For VDSL, check
the “VDSL-Tagging“ box.
PPTP Establishes connection via PPTP.
L2TP Establishes connection via L2TP.
HeartBeat Signal If you use a HeartBeat connection, consult
your ISP for setup information. HeartBeat
Signal is used only in Australia.
3G/UMTS Configures Internet Access via 3G/UMTS.
Enable USB in the “Services” section and
attach a 3g/UMTS USB stick to the router.
This setting is available in AirStations sold
in the European region only.
Network Setup
Network Setup configures the router’s basic settings to match the
local network. By default these settings are valid for all network
ports except the WAN because they are all attached to the default
bridge. If ports are disassociated from the bridge they will have
different settings.
2.3.1.2. Dynamic DNS (DynDNS or DDNS)
Dynamic DNS allows the assignment of a DNS record to a dynamically
assigned WAN-side IP address. A DynDNS client updates DNS records when
your WAN-side IP address changes.
- 6 -

The router’s firmware offers presets for the most common DynDNS
services plus an option to define individual settings.
DynDNS Service Description
Disabled Default, no DynDNS
DynDNS.org
freedns.afraid.org
ZoneEdit.com
No-IP.com
3322.org
easyDNS.com
TZO.com
DynSIP.org
Custom Individual DynDNS service configuration
2.3.1.3. MAC Address Cloning
MAC address cloning lets you assign a different MAC address to the
router than the one encoded in the hardware.
2.3.1.4. Advanced Routing
Operating Mode
The default operating mode of the router is Gateway. Other routing
protocols are available.
Modus Description
Gateway Gateway (default)
BGP BGP Routing
Rip2 Router Rip2 Routing
OSPF Router OSPF Routing
OLSR Router OLSR Routing
Router Router
Static Routing
The Static Routing section lets you add static routes. The input
parameters are equivalent to the parameters of the Linux command
“route”.
2.3.1.5. Networking
The Networking section allows detailed network configuration.
VLAN Tagging
Use this option to configure VLAN tagging.
- 7 -

Bridging
By default, one bridge (br0) is defined and active. In this section
you can define additional bridges and change the interface assignment
according to your requirements.
Bonding
Bonding offers the ability to “bond” interfaces together. Bonding can
be used to enhance throughput or provide failover capabilities.
Port Setup
The port setup section allows further configuration of the routers
network interfaces. Network interfaces can be separated from the
bridge and it is possible to assign separate network settings for each
interface. If an interface is separated from the bridge, add routing
rules to allow communication between the interface and the bridge or
other unbridged interfaces.
2.3.1.6. EoIP Tunnel
EoIP (Ethernet over IP) tunnels can transport Ethernet data packages
via a tunnel over existing IP connections. You can define up to 10
tunnels that can also be bonded.
2.3.2. Wireless
2.3.2.1. Basic Settings
Each Wireless LAN interface has its own section in the wireless basic
settings screen. The wireless interfaces are labelled ath0 and ath0.1
– ath0.4 depending on the number of radios installed. To correctly
identify the antenna connectors, please compare the MAC addresses
printed on the enclosure with the addresses displayed in the web
interface.
Wireless Mode
This parameter is used to define the operating mode of the Wireless
LAN interface. You can select among the following modes:
Modus Description
AP WLAN Access Point mode (default)
Client WLAN Client mode
Client-Bridge Client-Bridge mode allows connecting to
another Wireless LAN access point and
establishing a network bridge with that
access point
Adhoc Adhoc operating mode, required for building
mesh networks
WDS Station WDS Station is the client in a WDS-AP <-> WDS
station bridge. This is a special wireless
networking mode that offers better
flexibility and security than the classical
MAC address based WDS.
- 8 -

WDS AP WDS AP is the AP side for WDS AP <-> WDS
Station. A WDS AP allows connections from WDS
Stations and Wireless Clients.
Wireless Network Mode
Defines the IEEE802.11 networking mode.
Mode Description
Disabled Interface is disabled
Mixed 2.4 GHz 802.11b / 802.11g / 802.11n mixed
mode
B-Only 2.4 GHz 802.11b mode (802.11g and 802.11n
devices cannot connect)
G-Only 2.4 GHz 802.11g mode (802.11b, and 802.11n
devices cannot connect)
BG-Mixed 2.4 GHz 802.11b & 802.11g mixed mode (802.11n
devices cannot connect)
NG-Mixed 2.4 GHz 802.11n & 802.11g mixed mode (802.11b
devices cannot connect)
N-Only (2.4 GHz) 2.4 GHZ 802.11n mode (802.11b and 802.11g
devices cannot connect)
Channel Width
Some wireless network modes support wireless channel widths besides
the standard 20 MHz. 802.11g & 802.11n offer the option to use 40 MHz
channels for enhanced throughput. Both the AP and the client must
support 40 MHz channels to use them.
Wireless Channel (AP only)
Set the desired wireless channel, or let the router choose a free
channel automatically. If the router is in classic WDS (MAC address
based) mode, then the wireless channel must be selected manually.
Wireless Network Name (SSID)
The name of the wireless network the radio transmits or connects to
depending on the wireless mode)(
Wireless SSID Broadcast (AP only)
The name of the wireless network (SSID) may be broadcasted or not. Not
broadcasting does not prevent the network from being detected by a
wireless network sniffer; it just hides the name.
Advanced Settings
Check this box to get access to advanced wireless settings. These
advanced parameters should be only modified by experienced users.
2.3.2.2. Wireless Security
Because wireless data packets can easily be sniffed, wireless
connections require a greater level of security to ensure that data
cannot be read by unauthorized users.
- 9 -