HP R100-Series Instruction Manual

HP R100-Series Wireless VPN Routers
Configuration and Administration Guide
HP Part Number: 5998-8218
Published: October 2015
Edition: 1 (Software Version1.0.1.x)

© Copyright 2015 Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in
the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Acknowledgments
Microsoft® and Windows® are U.S. trademarks of the Microsoft group of companies. Google Chrome™ browser is a trademark of
Google Inc. Mozilla® and Firefox® are registered trademarks of the Mozilla Foundation.
Warranty
WARRANTY STATEMENT: See the warranty information sheet provided in the product box and available online.

3
Contents
1 Deploying the HP R110/R120 ......................................................................7
2 Using the Wizard Setup .............................................................................11
Overview................................................................................................................................................11
Automatically running the Wizard Setup the first time you log in ............................................................... 11
Accessing the Wizard Setup after your first login ....................................................................................11
Wizard Setup.......................................................................................................................................... 11
Step 1: Specify system time settings ....................................................................................................... 11
Step 2: Specify WAN settings ..............................................................................................................12
Step 3: Specify wireless settings............................................................................................................15
Step 4: Summary................................................................................................................................16
3 Managing the HP R110/R120 system..........................................................17
Viewing router status ................................................................................................................................17
Setting the operating mode .......................................................................................................................18
General administration settings..................................................................................................................19
System information (General) settings ....................................................................................................19
Administrator login credentials .............................................................................................................19
Setting the Country Code.....................................................................................................................19
Configuring web server settings ........................................................................................................... 20
Configuring trusted users.......................................................................................................................... 20
System time settings..................................................................................................................................21
Set system time...................................................................................................................................21
Daylight saving ................................................................................................................................. 22
Configuring SNMP.................................................................................................................................. 22
Managing system logs............................................................................................................................. 23
Events .............................................................................................................................................. 25
Proxy ARP settings................................................................................................................................... 25
Rebooting the router................................................................................................................................ 27
Viewing traffic statistics ............................................................................................................................ 27
4 WAN configuration...................................................................................29
Viewing the WAN interface status............................................................................................................. 29
Settings ................................................................................................................................................. 30
DHCP IP address ............................................................................................................................... 30
Static IP address ................................................................................................................................ 30
PPPoE................................................................................................................................................31
PPTP................................................................................................................................................. 33
L2TP ................................................................................................................................................ 34
DDNS ................................................................................................................................................... 35
MAC clone ............................................................................................................................................ 36
5 LAN configuration .....................................................................................37
Viewing LAN interface status .................................................................................................................... 37
LAN Settings .......................................................................................................................................... 38
Default VLAN settings......................................................................................................................... 38
DHCP relay....................................................................................................................................... 39
Spanning Tree................................................................................................................................... 40

4
DHCP client list....................................................................................................................................... 40
VLAN settings..........................................................................................................................................41
IGMP settings......................................................................................................................................... 43
6 Wireless configuration ...............................................................................45
Viewing wireless interface status ............................................................................................................... 45
Basic wireless settings.............................................................................................................................. 46
Configuring virtual access point interfaces............................................................................................. 48
Configuring wireless security ............................................................................................................... 49
Advanced wireless settings....................................................................................................................... 57
WDS settings ......................................................................................................................................... 59
Key concepts..................................................................................................................................... 59
WDS configuration ............................................................................................................................ 60
Example of a WDS Deployment .......................................................................................................... 62
WPS settings .......................................................................................................................................... 68
WMM settings ....................................................................................................................................... 69
MAC authentication settings ..................................................................................................................... 71
Viewing the client list............................................................................................................................... 72
7 VPN configuration .....................................................................................73
Viewing VPN status................................................................................................................................. 73
VPN settings .......................................................................................................................................... 74
IPSec settings .................................................................................................................................... 74
L2TP over IPSec settings ...................................................................................................................... 77
PPTP settings ..................................................................................................................................... 78
VPN passthrough settings......................................................................................................................... 79
8 Routing configuration.................................................................................81
Viewing routing status...............................................................................................................................81
Viewing the IPv4 routing table .................................................................................................................. 82
IPv4 Dynamic route settings...................................................................................................................... 83
IPv4 Static route settings .......................................................................................................................... 84
Viewing the IPv6 routing table .................................................................................................................. 85
IPv6 Dynamic route settings...................................................................................................................... 86
IPv6 Static route settings .......................................................................................................................... 86
9 Firewall configuration ................................................................................89
Viewing the firewall status ........................................................................................................................ 89
Security settings ...................................................................................................................................... 90
Client filtering......................................................................................................................................... 92
MAC filtering ......................................................................................................................................... 93
URL filtering............................................................................................................................................ 94
Content filtering ...................................................................................................................................... 95
SPI settings............................................................................................................................................. 95
10 NAT configuration...................................................................................99
Viewing NAT status ................................................................................................................................. 99
NAT settings......................................................................................................................................... 100
Virtual server settings............................................................................................................................. 100
DMZ settings.........................................................................................................................................102
ALG settings..........................................................................................................................................103
Port trigger settings.................................................................................................................................103
11 IPv6 configuration .................................................................................105
Viewing IPv6 status ............................................................................................................................... 105
IPv6 settings......................................................................................................................................... 106
Static IPv6 ...................................................................................................................................... 106
SLAAC ........................................................................................................................................... 108

5
DHCPv6......................................................................................................................................... 109
PPPoE.............................................................................................................................................. 110
DHCPv6 client list ...................................................................................................................................111
MLD settings ......................................................................................................................................... 112
12 QoS configuration .................................................................................113
Viewing QoS status................................................................................................................................ 113
Traffic shaping....................................................................................................................................... 114
Traffic mapping ..................................................................................................................................... 115
13 USB configuration..................................................................................117
User Account......................................................................................................................................... 117
File Sharing settings ............................................................................................................................... 118
FTP settings ........................................................................................................................................... 119
Safe removal.........................................................................................................................................120
14 Tools....................................................................................................121
Viewing tools status................................................................................................................................ 121
Updating software ................................................................................................................................. 121
Saving configuration settings ...................................................................................................................122
Ping .....................................................................................................................................................124
Nslookup..............................................................................................................................................125
Traceroute.............................................................................................................................................125
Email alert ............................................................................................................................................126
Scheduling............................................................................................................................................127
Support file ...........................................................................................................................................129
Viewing the EULA ..................................................................................................................................129
15 Support and other resources ...................................................................131
Online documentation ............................................................................................................................ 131
Contacting HP ....................................................................................................................................... 131
HP websites .......................................................................................................................................... 131
Conventions ..........................................................................................................................................132
A Resetting to factory defaults ......................................................................133
Factory reset procedures .........................................................................................................................133
Using the reset button........................................................................................................................133
Using the management interface.........................................................................................................133
B Factory default settings .............................................................................135

6

1 Deploying the HP R110/R120
In a small office, the HP R110/R120 can be directly connected to a broadband modem (DSL or
cable) to provide secure wireless networking for all employees. In the following scenario,
employees can share data and resources with each other and access the Internet at the same
time:
With its wireless community feature, the R110 can be configured to provide up to four separate
wireless networks (all on the same wireless channel), and the R120 up to eight wireless
networks (split between two radios), each with its own configuration settings for security, VLAN
support, and more.
In this scenario, employees connect to wireless community 1, which is protected with WPA/
WPA2. All employee traffic exits the HP R110/R120 on VLAN 1, providing access to private
resources on the company network and on the Internet.
Guests connect to wireless community 2, which is protected with WEP. All guest traffic exits the
HP R110/R120 on VLAN 2, providing access only to the Internet.
For offices that need Ethernet ports for wired connectivity, the R110/R120 has a built-in 4-port
gigabit switch. It can also be used to extend the reach of the network to areas that are difficult
or impossible to reach with Ethernet cabling.
Wireless community
High security wireless network for
employees using WPA/WPA2.
DSL/Cable modem
R110/R120
Wireless community 1
High security wireless network
(WPA/WPA2) for employees
Wireless community 2
Low security wireless network
for guests
VLAN 1
VLAN 2
Guests with access to a network
printer and the Internet
Employees with secure access
to all network resources
and the Internet
R110/R120
DSL/Cable modem

8 Deploying the HP R110/R120
In the following scenario, HP R110/R120 #1 provides wireless network services to the
employees in the main office, while HP R110/R120 #2 and HP R110/R120 #3 use the Wireless
Distribution System (WDS) to create a wireless link between the main office network and a
small network in a warehouse. WDS eliminates the need to run cabling, allowing for fast and
easy deployment.
In the following scenario, an HP R110/R120 located in an office provides a virtual private
network (VPN) connection across the Internet to a remote client (typically a mobile worker). The
R110/R120 forms a secure VPN (IPSec, PPTP, L2TP/IPSec) connection to the remote client,
which can then access the computers and servers in the office network. The remote client can
be a Windows or Mac computer, or any Apple iOS or Android mobile device.
Wireless community
File server computers
WDS
Wireless link
Employee
Main office area Warehouse
Wireless community
R110/R120
#1
R110/R120
#2
R110/R120
#3
LAN computers Office
R110/R120
Internet
Server
LAN WAN
VPN
VPN
Remote Client

9
In the following scenario, four HP R110/R120s provide a virtual private network (VPN) across
the Internet between corporate headquarters and three branch offices. The R110/R120 #1
creates secure VPN connections to R110/R120 #2, R110/R120 #3, and R110/R120 #4 at three
branch locations. The computers on each branch network can access the computers and
servers on the headquarters network.
LAN computers Headquarters
Branch 1
R110/R120
#1
R110/R120
#2
Branch 2
R110/R120
#3
Branch 3
R110/R120
#4
Internet
LAN
LAN
LAN
WAN
WAN
WAN
Server
LAN WAN
VPN
VPN
VPN
VPN

10 Deploying the HP R110/R120

2 Using the Wizard Setup
Overview
The Wizard Setup provides an easy way to quickly configure basic settings on the R110/R120
and make the router operational.
Automatically running the Wizard Setup the first time you log in
The first time you log in to the management interface (see the HP R100-Series Wireless VPN
Routers Quickstart for the first time login procedure), the HP end user license agreement
displays. When you accept the agreement, a page displays to enable you to select your
country so that wireless radio settings are configured appropriately. Select the country in which
the router is operating, and then click Save. The first page in the Wizard Setup appears.
Accessing the Wizard Setup after your first login
When you log in subsequent to completing or canceling out of the Wizard Setup, the System
Status page displays by default.
See also the HP R100-Series Wireless VPN Routers Quickstart, which describes the
configuration procedure for a basic wireless network.
Wizard Setup
To start the Wizard Setup, select Home > Wizard Setup, and then click Start.
Step 1: Specify system time settings
The router keeps time by connecting to a Network Time Protocol (NTP) server. This enables the
router to synchronize the system clock to the global Internet. The synchronized clock in the router
is used to record the system log and control client filtering. Select the proper time zone for your
location. The system clock might not update immediately. The router updates the current time
after it has made contact with time servers on the Internet and has received a response.
Alternatively, the system time can be entered manually or imported from the host computer
(copies the system time from the management computer).

12 Using the Wizard Setup
Choose either to configure the system time manually or have it automatically configured by an
NTP server. You can also enable support for daylight savings time, if required for your location.
For more information on setting the system time, see “System time settings” on page 21.
Step 2: Specify WAN settings
The Internet Connection page allows you to set up the router for the type of Internet connection
you have. Before setting up your connection type, have your account information from your ISP
ready.
The router supports five possible connection types. Your ISP can provide you with information
on the correct type for your Internet connection and the parameters that need to be configured.
Select one of the following Connection Types, enter supplementary information as directed by
the wizard, and then click Next to apply the settings. A description of each connection type
follows.
•DHCP: See “Connection Type: DHCP” on page 12.
•Static IP Address: See “Connection Type: Static IP Address” on page 13.
•PPPoE: See “Connection Type: PPPoE” on page 13.
•PPTP: See “Connection Type: PPTP” on page 14.
•L2TP: See “Connection Type: L2TP” on page 14.
Connection Type: DHCP
A dynamic connection type is the most common method used with cable modems. In most
cases, setting the connection type to DHCP is enough to complete the connection to your ISP. If
your ISP also assigns you a Host Name, enter it in the space provide. Do not use these
characters: ` " & ' # \
For more information on the WAN DHCP Connection Type, see “DHCP IP address” on
page 30.

Wizard Setup 13
Connection Type: Static IP Address
The Static IP Address Connection Type sets the router to operate with a fixed IP address. If your
ISP provides you with a static IP address, subnet mask, and ISP gateway address, enter them in
the spaces provided.
For more information on the WAN Static IP Address Connection Type, see “Static IP address”
on page 30.
Connection Type: PPPoE
The Point-to-Point Protocol over Ethernet (PPPoE) is a common WAN protocol that provides a
secure connection between the service provider and the local network. Enter the specific PPPoE
information assigned by your ISP.
For more information on the WAN PPPoE Connection Type, see “PPPoE” on page 31.

14 Using the Wizard Setup
Connection Type: PPTP
The Point-to-Point Tunneling Protocol (PPTP) is a common WAN protocol used for Virtual Private
Networks (VPNs) that provides a secure connection between the service provider and the local
network. Enter the specific PPTP information assigned by your ISP.
For more information on the WAN PPTP Connection Type, see “PPTP” on page 33.
Connection Type: L2TP
The Layer 2 Tunneling Protocol (L2TP) is a common WAN protocol used for Virtual Private
Networks (VPNs) that provides a secure connection between the service provider and the local
network. Enter the specific L2TP information assigned by your ISP.
For more information on the WAN L2TP Connection Type, see “L2TP” on page 34.

Wizard Setup 15
Step 3: Specify wireless settings
The R110 router features a single dual-band radio for 2.4 GHz or 5 GHz operation. The R120
router features two radios, one for 2.4 GHz and one for 5 GHz operation. This means that the
R110 can operate at 2.4 GHz or 5 GHz, but not both at the same time. The R120 can operate
concurrently at 2.4 GHz and 5 GHz.
The R110 router has a single configuration page for 2.4 GHz or 5 GHz operation. The R120
router has separate configuration pages for 2.4 GHz and 5 GHz operation.
Configure the following basic wireless settings before clicking Next.
Radio Band and Radio Mode
Configure the R110 router to operate in the 2.4 GHz band (for 802.11b/g/n) or the 5 GHz
band (for 802.11a/n).
For R110 and R120, select an operating mode. For 2.4 GHz, the 11 b / g / n M i x e d mode is
configured by default. For 5 GHz, 11 a / n M i x e d (R110) or 11ac/n/a (R120) mode is
configured by default. For more information, see “Basic wireless settings” on page 46.

16 Using the Wizard Setup
SSID
Enter a unique name to identify your wireless network.
•By default, a wireless community with an SSID of HP1 is defined on the R110.
•By default, two wireless communities with SSIDs of HPT1_2G and HP1_5G are defined
on the R120.
For more information, see “Basic wireless settings” on page 46.
Note The R110/R120 allows you to create up to four wireless communities per radio.
MAC Authentication, Authentication Mode, and Encryption Type
Configure wireless security for the default wireless community. The R110/R120 has no wireless
security configured by default. HP recommends that WPA2 be configured for maximum
security. Leaving the Authentication Mode setting as Open or using WEP security is not
recommended.
For more information on wireless security, see “Configuring wireless security” on page 49.
Step 4: Summary
After you complete the Wizard Setup, the Summary page displays.
Confirm the settings, and then click Finish. The router reboots and the HP R110/R120 is
operational.

3 Managing the HP R110/R120 system
The HP R110/R120 is managed via its web-based management interface using Microsoft
Internet Explorer 8 or later, Google Chrome v29 or later, or Mozilla Firefox v24 or later. You
can access the HP R110/R120 management tool using either http or https. Using https is
more secure, but you will see a warning because the security certificate is issued by the router
and not a known certificate authority. With https, it is acceptable to choose the option that
allows you to proceed through the security warning.
In a web browser, specify either: http://192.168.1.1 or https://192.168.1.1.
For information on launching the web-based management interface for the first time, see the HP
R100-Series Wireless VPN Routers Quickstart.
Viewing router status
The Status page displays a summary of the router’s key settings. Click Refresh to update the
status.

18 Managing the HP R110/R120 system
The Status page includes these items:
Device Information
Shows the router's software version, hardware serial number, host name, device description,
and country selection.
Resource Utilization
Indicates the status of the router's resources, including CPU and memory usage.
Security
Displays the current settings for the Denial of Service (DoS) and Stateful Packet Inspection (SPI)
features.
When a DoS attack or SPI intrusion (a specific host blocked) is detected, an alert symbol ( )
displays on the Security line. If you open the Security section, an alert message next to
DOS or SPI indicates the security violation. Click Alert to view the log details on the
System > Log page. Click Clear to remove the alert message from the status page.
Note The security alert is not supported when the router is operating in Bridge mode.
Wireless
Displays the current settings for the wireless interface, including: radio enable, operating
frequency, mode, channel, SSID, MAC address, authentication, and encryption.
WAN
Displays the WAN connection type, status, and IP address assignment.
LAN
Displays the router's local network IP address, MAC address, and DHCP server status.
USB
Displays the current status of a device attached to the router's USB port.
SNMP
Displays the status of the Simple Network Management Protocol feature.
Setting the operating mode
The System > Mode page configures the operating mode of the router. The router supports
the following operating modes:
•Router Mode: The normal router mode that allows connections between a wired LAN and
wireless clients to the WAN Internet connection, such as a cable or DSL modem. This is the
factory set default mode.
•Bridge Mode: The router operates like an access point, extending a wired LAN to wireless
clients. In this mode there is no WAN configuration, including routing, VPN, NAT, firewall,
and QoS settings; all Internet access features are disabled. In fact, all four LAN ports and
WAN port are bridged together, so the WAN port operates like another LAN port.

General administration settings 19
General administration settings
The System > Admin page configures the following settings for the router.
System information (General) settings
Configures settings that help identify the router, including the system name, location, and the
name of a person to contact for administrative purposes. The system name appears on the
banner and login screen. Do not use these characters: ` " & ' # \
Administrator login credentials
Configures the web management interface login username and password. The login user name
and password can be from 6 to 32 alphanumeric and special characters in length. Do not use
these characters: ` " & ' # \
Setting the Country Code
The country of operation, also known as the regulatory domain, determines the availability of
certain wireless settings on the router. When the country is set, the router automatically limits
the available wireless channels and channel width, and adjusts the radio power level in
accordance with the regulations of the selected country.

20 Managing the HP R110/R120 system
Caution Incorrectly selecting the country can result in illegal operation and can cause harmful
interference to other systems. You must ensure that the router is operating in accordance with
channel, power, indoor/outdoor restrictions, and license requirements for the intended country.
If you fail to heed this caution, you might be held liable for violating local regulatory
requirements.
Configuring web server settings
This section configures access to the web management interface.
HTTP Server
HTTPS Server
The router software includes HTTP and HTTPS functionality to enable communication with your
web browser. Unlike HTTP, HTTPS provides secure communications, using a digital certificate to
encrypt data exchanged between the router and your web browser. HTTP and HTTPS are both
enabled by default.
Session Timeout
Configure the Session Timeout for automatic log out from the web interface. If there is no
activity on the management session for the specified time, then the administrator is
automatically logged off.
Configuring trusted users
When using the trusted users feature, only computers with specified MAC or IP addresses can
access the router's web management interface. All other devices, either LAN or WLAN, cannot
access the web interface. A maximum of five rules can be defined.