HP PS110 Instruction Manual

HP PS110 Wireless 802.11n VPN Router
Configuration and Administration Guide
HP Part Number: 5998-6595
Published: January 2015
Edition: 1

© Copyright 2015 Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in
the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Acknowledgments
Microsoft® and Windows® are U.S. trademarks of the Microsoft group of companies. Google Chrome™ browser is a trademark of
Google Inc.
Warranty
WARRANTY STATEMENT: See the warranty information sheet provided in the product box and available online.

3
Contents
1 Deploying the HP PS110..............................................................................7
2 Using the Wizard Setup .............................................................................11
Overview................................................................................................................................................11
Automatically running the Wizard Setup the first time you log in ...............................................................11
Accessing the Wizard Setup after your first login .................................................................................... 11
Wizard Setup..........................................................................................................................................11
Step 1: Specify system time settings .......................................................................................................11
Step 2: Specify WAN settings ..............................................................................................................12
Step 3: Specify wireless settings............................................................................................................15
Step 4: Summary................................................................................................................................16
3 Servers.....................................................................................................17
Monitored Servers....................................................................................................................................17
4 Managing the HP PS110 system .................................................................19
Viewing the router status ...........................................................................................................................19
Setting the HP PS110 mode ...................................................................................................................... 20
General administration settings..................................................................................................................21
System information (General) settings ....................................................................................................21
Administrator login credentials .............................................................................................................21
Setting the Country Code.....................................................................................................................21
Configuring web server settings ........................................................................................................... 22
Configuring trusted users.......................................................................................................................... 23
System time settings................................................................................................................................. 23
Set system time.................................................................................................................................. 23
Daylight saving ................................................................................................................................. 25
Configuring SNMP.................................................................................................................................. 25
Managing system logs............................................................................................................................. 26
Events .............................................................................................................................................. 27
Proxy ARP settings................................................................................................................................... 28
Rebooting the router................................................................................................................................ 30
Viewing traffic statistics ............................................................................................................................ 30
5 WAN configuration...................................................................................33
Viewing the WAN interface status............................................................................................................. 33
Settings ................................................................................................................................................. 34
DHCP IP address ............................................................................................................................... 34
Static IP address ................................................................................................................................ 35
PPPoE............................................................................................................................................... 35
PPTP................................................................................................................................................. 37
L2TP ................................................................................................................................................ 38
DDNS ................................................................................................................................................... 39
MAC clone ............................................................................................................................................ 40
6 LAN configuration .....................................................................................41
Viewing the LAN interface status................................................................................................................41
LAN Settings .......................................................................................................................................... 42
Default VLAN settings......................................................................................................................... 42
DHCP relay....................................................................................................................................... 44
Spanning Tree................................................................................................................................... 44

4
DHCP client list....................................................................................................................................... 45
VLAN settings......................................................................................................................................... 45
IGMP settings......................................................................................................................................... 47
7 Wireless configuration ...............................................................................49
Viewing wireless interface status ............................................................................................................... 49
Basic wireless settings.............................................................................................................................. 50
Configuring virtual access point interfaces............................................................................................. 52
Configuring wireless security ............................................................................................................... 53
Advanced wireless settings........................................................................................................................61
WDS settings ......................................................................................................................................... 63
WPS settings .......................................................................................................................................... 64
WMM settings ....................................................................................................................................... 65
MAC authentication settings ..................................................................................................................... 67
Viewing the client list............................................................................................................................... 68
8 VPN configuration .....................................................................................69
Viewing VPN status................................................................................................................................. 69
VPN settings .......................................................................................................................................... 70
IPSec settings .................................................................................................................................... 70
L2TP over IPSec settings ...................................................................................................................... 73
PPTP settings ..................................................................................................................................... 74
VPN passthrough settings......................................................................................................................... 75
9 Routing configuration.................................................................................77
Viewing routing status.............................................................................................................................. 77
Viewing the IPv4 routing table .................................................................................................................. 78
IPv4 Dynamic route settings...................................................................................................................... 79
IPv4 Static route settings .......................................................................................................................... 80
Viewing the IPv6 routing table ...................................................................................................................81
IPv6 Dynamic route settings...................................................................................................................... 82
IPv6 Static route settings .......................................................................................................................... 82
10 Firewall configuration ..............................................................................85
Viewing the firewall status ........................................................................................................................ 85
Security settings...................................................................................................................................... 86
Client filtering......................................................................................................................................... 88
MAC filtering ......................................................................................................................................... 89
URL filtering............................................................................................................................................ 90
Content filtering .......................................................................................................................................91
SPI settings..............................................................................................................................................91
11 NAT configuration...................................................................................95
Viewing NAT status ................................................................................................................................. 95
NAT settings........................................................................................................................................... 96
Virtual server settings............................................................................................................................... 96
DMZ settings.......................................................................................................................................... 98
ALG settings........................................................................................................................................... 99
Port trigger settings.................................................................................................................................. 99
12 IPv6 configuration .................................................................................101
Viewing IPv6 status ................................................................................................................................101
IPv6 settings..........................................................................................................................................102
Static IPv6 .......................................................................................................................................102
SLAAC ........................................................................................................................................... 104
DHCPv6......................................................................................................................................... 105
PPPoE............................................................................................................................................. 106

5
DHCPv6 client list ..................................................................................................................................107
MLD settings ........................................................................................................................................ 108
13 QoS configuration .................................................................................109
Viewing QoS status............................................................................................................................... 109
Traffic shaping....................................................................................................................................... 110
Traffic mapping ......................................................................................................................................111
14 USB configuration..................................................................................113
User Account......................................................................................................................................... 113
File Sharing settings ............................................................................................................................... 114
FTP settings ........................................................................................................................................... 115
Safe removal ......................................................................................................................................... 116
15 Tools....................................................................................................117
Viewing tools status................................................................................................................................ 117
Updating software ................................................................................................................................. 117
Saving configuration settings ................................................................................................................... 118
Ping .....................................................................................................................................................120
Nslookup.............................................................................................................................................. 121
Traceroute............................................................................................................................................. 121
Email alert ............................................................................................................................................122
Scheduling............................................................................................................................................123
Support file ...........................................................................................................................................125
Viewing the EULA ..................................................................................................................................125
16 Support and other resources ...................................................................127
Online documentation ............................................................................................................................127
Contacting HP .......................................................................................................................................127
HP websites ..........................................................................................................................................127
Conventions ..........................................................................................................................................128
A Resetting to factory defaults ......................................................................129
Factory reset procedures .........................................................................................................................129
Using the reset button........................................................................................................................129
Using the management interface.........................................................................................................129
B Factory default settings .............................................................................131

6

1 Deploying the HP PS110
The PS110 router is designed for stacking on top of an HP ProLiant MicroServer Gen 8 Server.
To be able to discover and monitor the health status of HP servers from the PS110, connect a
network cable between any available LAN port on the PS110 and the server iLO port located
on the back of the server (bottom right corner). For more information, see the HP PS110
Wireless VPN Router Quickstart, which describes connecting the PS110 to the MicroServer. See
also “Monitored Servers” on page 17 for more information on monitoring the health status of
HP ProLiant servers.
For more information on the MicroServer Gen 8 Server, see the server documentation.
In a small office, the PS110 can be directly connected to a broadband modem (DSL or cable) to
provide secure wireless networking for all employees. In the following scenario, employees can
share data with each other and the MicroServer, and access the Internet while being protected
by the PS110’s firewall features.
With its wireless community feature, the PS110 can be configured to provide up to four
separate wireless networks (all on the same wireless channel), each with its own configuration
settings for security, VLAN support, and more.
Wireless community
High security wireless network for
employees using WPA/WPA2.
DSL/Cable modem
PS110 with
MicroServer Gen 8
Wireless community 1
High security wireless network
(WPA/WPA2) for employees
Wireless community 2
Low security wireless network
for guests
VLAN 1
VLAN 2
Guests with access to a network
printer and the Internet
Employees with secure access
to all network resources
and the Internet
DSL/Cable modem
PS110 with
MicroServer Gen 8

8 Deploying the HP PS110
In this scenario, employees connect to wireless community 1, which is protected with WPA/
WPA2. All employee traffic exits the PS110 on VLAN 1, providing access to private resources
on the company network and on the Internet.
Guests connect to wireless community 2, which is protected with WEP. All guest traffic exits the
PS110 on VLAN 2, providing access only to the Internet.
For offices that need Ethernet ports for wired connectivity, the PS110 has a built-in 4-port
Gigabit switch. It can also be used to extend the reach of the network to areas that are difficult
or impossible to reach with traditional cabling.
In the following scenario, PS110 #1 provides wireless network services to the employees in the
main office, while PS110 #2 and PS110 #3 use the Wireless Distribution System (WDS) to
create a wireless link between the main office network and a small network in a warehouse.
WDS eliminates the need to run cabling, allowing for fast and easy deployment.
In the following scenario, a PS110 located in an office provides a virtual private network (VPN)
connection across the Internet to a remote client (typically a mobile worker). The PS110 forms
secure VPN (IPSec, PPTP, L2TP/IPSec) tunnel connection to the client, which can then access the
computers and servers in the office network. The remote client can be a Windows or Mac
computer, or any Apple iOS or Android mobile device.
Wireless community
File server computers
WDS
Wireless link
Employee
Main office area Warehouse
Wireless community
PS110 #2
PS110 #1
PS110 #3

9
In the following scenario, four HP PS110s provide a virtual private network (VPN) across the
Internet between a headquarters and three branch offices. The PS110 #1 forms secure VPN
tunnel connections to PS110 #2, PS110 #3, and PS110 #4 at three branch locations. The
computers on each branch network can access the computers and servers on the headquarters
network.
Note The WDS and VPN features of the PS110 are completely interoperable with HP R100-Series
Wireless VPN Routers.
LAN computers Office
Internet
Server
LAN WAN
VPN
VPN
Remote Client
PS110
LAN computers Headquarters
Branch 1
Branch 2
Branch 3
Internet
LAN
LAN
LAN
WAN
WAN
WAN
Server
LAN WAN
VPN
VPN
VPN
VPN
PS110 #1
PS110 #2
PS110 #3
PS110 #4

10 Deploying the HP PS110

2 Using the Wizard Setup
Overview
The Wizard Setup provides an easy way to quickly configure basic settings on the PS110 and
make the router operational.
Automatically running the Wizard Setup the first time you log in
The first time you log in to the management interface (see the HP PS110 Wireless VPN Router
Quickstart for first time login procedure), the HP end user license agreement displays. When
you accept the agreement, a page displays to enable you to select your country so that wireless
radio settings are configured appropriately. Select the country in which the router is operating,
and then click Save. The first page in the Wizard Setup appears.
Accessing the Wizard Setup after your first login
When you log in subsequent to completing or cancelling out of the Wizard Setup, the System
Status page displays by default.
See also the HP PS110 Wireless VPN Router Quickstart, which describes the configuration
procedure for a basic wireless network.
Wizard Setup
To start the Wizard Setup, select Home > Wizard Setup, and then click Start.
Step 1: Specify system time settings
The router keeps time by connecting to a Network Time Protocol (NTP) server. This enables the
router to synchronize the system clock to the global Internet. The synchronized clock in the router
is used to record the system log, filtering features, and scheduling rules. Select the proper time
zone for your location. The system clock might not update immediately. The router updates the
current time after it has made contact with time servers on the Internet and has received a
response. Alternatively, the system time can be entered manually or imported from the host
computer (copies the system time from the management computer).

12 Using the Wizard Setup
Choose either to configure the system time manually or have it automatically configured by an
NTP server. You can also enable support for daylight savings time, if required for your location
For more information on setting the system time, see “System time settings” on page 23.
Step 2: Specify WAN settings
The Internet Connection page allows you to set up the router for the type of Internet connection
you have. Before setting up your connection type, have your account information from your ISP
ready.
The router supports five possible connection types. Your ISP can provide you with information
on the correct type for your Internet connection and the parameters that need to be configured.
Select one of the following Connection Types, enter supplementary information as directed by
the wizard, and then click Next to apply the settings. A description of each connection type
follows.
•DHCP: See “Connection Type: DHCP” on page 12.
•Static IP Address: See “Connection Type: Static IP Address” on page 13.
•PPPoE: See “Connection Type: PPPoE” on page 13.
•PPTP: See “Connection Type: PPTP” on page 14.
•L2TP: See “Connection Type: L2TP” on page 14.
The Internet Connection page also includes the option to enable Stateful Packet Inspection (SPI)
for the WAN connection. SPI is the intrusion detection feature of the router that limits access for
incoming traffic. For more information on the SPI feature, see “SPI settings” on page 91.
Connection Type: DHCP
A dynamic connection type is the most common method used with cable modems. In most
cases, setting the connection type to DHCP is enough to complete the connection to your ISP. If
your ISP also assigns you a Host Name, enter it in the space provided (do not use characters
` " & ' # \).

Wizard Setup 13
For more information on the WAN DHCP Connection Type, see “DHCP IP address” on
page 34.
Connection Type: Static IP Address
The Static IP Address Connection Type sets the router to operate with a fixed IP address. If your
ISP provides you with a static IP address, subnet mask, and ISP gateway address, enter them in
the spaces provided.
For more information on the WAN Static IP Address Connection Type, see “Static IP address”
on page 35.
Connection Type: PPPoE
The Point-to-Point Protocol over Ethernet (PPPoE) is a common WAN protocol that provides a
secure “tunnel” connection between the service provider and the local network. Enter the
specific PPPoE information assigned by your ISP.
For more information on the WAN PPPoE Connection Type, see “PPPoE” on page 35.

14 Using the Wizard Setup
Connection Type: PPTP
The Point-to-Point Tunneling Protocol (PPTP) is a common WAN protocol used for Virtual Private
Networks (VPNs) that provides a secure “tunnel” connection between the service provider and
the local network. Enter the specific PPTP information assigned by your ISP.
For more information on the WAN PPTP Connection Type, see “PPTP” on page 37.
Connection Type: L2TP
The Layer 2 Tunneling Protocol (L2TP) is a common WAN protocol used for Virtual Private
Networks (VPNs) that provides a secure “tunnel” connection between the service provider and
the local network. Enter the specific L2TP information assigned by your ISP.
For more information on the WAN L2TP Connection Type, see “L2TP” on page 38.

Wizard Setup 15
Step 3: Specify wireless settings
The PS110 router supports a dual-band single radio for 2.4 GHz or 5 GHz operation. This
means that the PS110 can operate at 2.4 GHz or 5 GHz, but not both at the same time. By
default, the radio is enabled on the 2.4 GHz band.
Configure the following basic wireless settings before clicking Next.
Radio Band and Radio Mode
Configure the PS110 router to operate in the 2.4 GHz band (for 802.11b/g/n) or the 5 GHz
band (for 802.11a/n), and then select an operating mode. The 11 b / g / n M i x e d mode is
configured by default. For more information, see “Basic wireless settings” on page 50.

16 Using the Wizard Setup
SSID
A default wireless community (SSID) is defined on the PS110, its name is HP1 and it is
assigned to VLAN 1. The settings that initially display in the wizard pertain to the default
wireless community. Enter a unique SSID name for your network. For more information, see
“Basic wireless settings” on page 50.
Note The PS110 allows you to create up to four wireless communities.
MAC Authentication, Authentication Mode, and Encryption Type
Configure wireless security for the default wireless community. The PS110 has no wireless
security configured by default. HP recommends that WPA2 be configured for maximum
security. Leaving the Authentication Mode setting as Open or using WEP security is not
recommended.
For more information on wireless security, see “Configuring wireless security” on page 53.
Step 4: Summary
After you complete the Wizard Setup, the Summary page displays.
Confirm the settings, and then click Finish. The router reboots and the PS110 is operational.

Monitored Servers 17
3 Servers
The Servers > Monitor Servers page provides the status of selected servers and a way to
select servers to monitor. There is a limit of ten servers that can be monitored.
Note Server discovery and monitoring works with any HP ProLiant Server running iLO v1.4 or later.
To discover and monitor servers running in IPv4-based environments, be sure to clear the iLO
Client Applications use IPv6 first checkbox in the server’s iLO port IPv6 settings. For
more information, see the HP ProLiant Server documentation.
Monitored Servers
The Monitored Servers list is the server dashboard, providing basic information and system
health status for servers that the user has chosen to monitor.
This page includes the following settings:
Server: System Health
Displays the status of the monitored server with one of these symbols.
•: The device or subsystem is working correctly.
•: The device or subsystem is operating at a reduced capacity.
•: One or more components of the device or subsystem are non-operational.
•: The server was taken offline.
•: The system status cannot be determined.
Server: Product Name
Displays the product name of the monitored server.

18 Servers
Server: iLO IP Address
Displays the IP address (IPv4 or IPv6) of the monitored server. Click the IP address to connect to
the server.
If the iLO IP address has changed, an alert icon is shown next to the IP address. Click the
icon to update the link to display the new IP address.
Delete
To delete a server from the Monitored Servers list, select the checkbox for that server, and
then click Apply.
Add New Server to Monitored List
Servers can be added to the Monitored Servers list either by manual entry of the server IP
address, or by selection from a list of discovered devices. Use the list to select which method to
use. The default method is Select from discovered list.
Discovered Servers
The Discovered Servers list can include a maximum of 100 recently discovered iLO server
devices. The list includes the following information for each server:
•Server: Product Name: Displays the product name of the discovered server.
•Server: iLO IP Address: Displays the IP address of the discovered server.
•Add: To add a server from the Discovered Servers list, select the checkbox for that
server, and then click Apply.
When the Add Server selection is Manually, this new field appears:
•Server IP Address: Enter the IP address of the target server.

4 Managing the HP PS110 system
The HP PS110 is managed via its web-based management interface using Microsoft Internet
Explorer 8 or later, Google Chrome v29, or Mozilla Firefox v24 or later. You can access the HP
PS110 management interface using either http or https. Using https is more secure, but you
will see a warning because the security certificate is issued by the router and not a known
certificate authority. With https, it is acceptable to choose the option that allows you to
proceed through the security warning.
In a web browser, specify either: http://192.168.1.1 or https://192.168.1.1.
For information on launching the web-based management interface for the first time, see the HP
PS110 Wireless VPN Router Quickstart.
Viewing the router status
The Status page displays a summary of the router’s key settings. Click Refresh to update the
status.

20 Managing the HP PS110 system
The Status page includes these items:
Device Information
Shows the router's software version, hardware serial number, host name, device description,
and country selection.
Resource Utilization
Indicates the status of the router's resources, including CPU and memory usage.
Security
Displays the current settings for Denial of Service (DoS) and Stateful Packet Inspection (SPI)
features.
When a DoS attack or SPI intrusion (a specific host blocked) is detected, an alert symbol ( )
displays on the Security line. If you open the Security section, an alert message next to
DOS or SPI indicates the security violation. Click Alert to view the log details on the
System > Log page. Click Clear to remove the alert message from the status page.
Note The security alert is not supported when the router is operating in Bridge mode.
Wireless
Displays the current settings for the wireless interface, including radio enable, operating
frequency, mode, channel, SSID, MAC address, authentication, and encryption.
WAN
Displays the WAN connection type, status, and IP address assignment.
LAN
Displays the router's local network IP address, MAC address, and DHCP server status.
USB
Displays the current status of a device attached to the router's USB port.
SNMP
Displays the status of the Simple Network Management Protocol feature.
Setting the HP PS110 mode
The System > Mode page configures the operation mode of the router. The device supports
the following Router and Bridge modes:
•Router Mode: The normal router mode that allows connections between a wired LAN and
wireless clients to the WAN Internet connection, such as a cable or DSL modem. This is the
factory set default mode.
•Bridge Mode: The router operates like an access point, extending a wired LAN to wireless
clients. In this mode there is no WAN configuration, including routing, VPN, NAT, firewall,
and QoS settings; all Internet access features are disabled. In fact, all four LAN ports and
WAN port are bridged together, so the WAN port operates like another LAN port.