LevelOne WGR-2301 User manual

Introduction
http://www.level1.com Page 1
WGR-2301
AC750 Dualb Bandb Wireless Gigabit,
Dual WAN, VPN
User Manual
V1.0
Digital Data Communications Asia Co., Ltd.
http://www.level1.com

Introduction
http://www.level1.com Page 2
Table of Contents
Table of Contents..................................................................................................................... 2
0.1 Factory settings.......................................................................................................... 6
0.2Contact Us.................................................................................................................... 6
Chapter 1. Product Overview ............................................................................................. 7
1.1 Key characteristics ..................................................................................................... 7
1.2 Specifications.............................................................................................................. 8
Chapter 2. Hardware Installation........................................................................................ 9
2.1 Panel description........................................................................................................ 9
2.2 Precaution for installation......................................................................................... 10
2.3 Preparing for installation............................................................................................11
2.4 Hardware Installation.................................................................................................11
2.5 Hardware connection ............................................................................................... 12
Chapter 3. Logging to the device..................................................................................... 13
3.1 Configuring the correct network settings.................................................................. 13
3.2 Logging to the device ............................................................................................... 14
Chapter 4. Configuration Wizard...................................................................................... 17
4.1 Configuration of WAN1 port...................................................................................... 17
4.1.1 Dynamic IP access ........................................................................................... 18
4.1.2 Static IP access................................................................................................. 18
4.1.3 PPPoE access .................................................................................................. 19
Chapter 5. Start menu ....................................................................................................... 20
5.1 Setup Wizard............................................................................................................ 20
5.2 Interface status......................................................................................................... 20
5.3 Interface Traffic......................................................................................................... 21
5.4 Restart device........................................................................................................... 22
Chapter 6. Network parameters ....................................................................................... 23
6.1 Configuration of WAN port........................................................................................ 23
6.1.1 WAN1 access.................................................................................................... 24
6.1.2 List of line connection information .................................................................... 26
6.2 Line combination ...................................................................................................... 28
6.2.1 Description of line combination function........................................................... 29
6.2.2 Global configuration of line combination........................................................... 30
6.2.3 Load Balancing List........................................................................................... 32
6.2.4 Detection and bandwidth configuration............................................................. 32
6.2.5 Identity binding.................................................................................................. 33
6.3 Configuration of LAN port......................................................................................... 34
6.4 DHCP server ............................................................................................................ 35
6.4.1 DHCP server configuration............................................................................... 36
6.4.2 Static DHCP...................................................................................................... 37

Introduction
http://www.level1.com Page 3
6.4.3 DHCP auto binding ........................................................................................... 39
6.4.4 DHCP client list................................................................................................. 39
6.4.5 Case of DHCP configuration............................................................................. 40
6.5 DDNS configuration.................................................................................................. 42
6.5.1 DDNS authentication ........................................................................................ 43
6.6 UPnP ........................................................................................................................ 43
Chapter 7. Wireless configuration................................................................................... 45
7.1 Basic settings ........................................................................................................... 45
7.1.1 AP Mode ........................................................................................................... 46
7.1.2 Repeater Mode................................................................................................. 47
7.1.3 Bridge Mode...................................................................................................... 49
7.1.4 Lazy Mode ........................................................................................................ 50
7.1.5 Wireless configuration instance........................................................................ 50
7.2 Wireless security settings......................................................................................... 54
7.2.1 No security mechanism .................................................................................... 55
7.2.2 WEP.................................................................................................................. 55
7.2.3 WPA/WPA2....................................................................................................... 56
7.2.4 WPA-PSK/WPA2-PSK ...................................................................................... 57
7.3 Wireless MACAddress Filtering............................................................................... 58
7.4 Wireless Advanced Configuration ............................................................................ 60
7.5 Client List.................................................................................................................. 61
Chapter 8. Advanced Configuration................................................................................ 63
8.1 NAT and DMZ configuration ....................................................................................... 63
8.1.1 Description of NAT functions............................................................................... 63
8.1.2 Port Forwarding .................................................................................................. 64
8.1.3 NAT rules ........................................................................................................... 67
8.1.4 DMZ.................................................................................................................. 69
8.1.5 NAT and DMZ configuration instances ................................................................. 70
8.2 Static Route Settings ................................................................................................... 72
8.3 Policy routing ............................................................................................................. 74
8.3.1 Enable policy routing........................................................................................... 75
8.3.2 Policy routing configuration................................................................................. 75
8.4 Anti-NetSniper ........................................................................................................... 77
8.5 Port mirroring............................................................................................................. 77
8.6 Port VLAN................................................................................................................. 78
8.7 SYSLOG configuration ............................................................................................... 80
Chapter 9. User management........................................................................................... 81
9.1 User status.................................................................................................................. 81
Figure 9_1 User Status........................................................................................................ 81
Figure 9_2 User status information list................................................................................ 82
9.2 IP/MAC binding ......................................................................................................... 83
9.2.1 IP/MAC binding list ............................................................................................ 84

Introduction
http://www.level1.com Page 4
Figure 9_3 IP/MAC binding global configuration ................................................................. 84
9.2.2 IP/MAC binding configuration ............................................................................. 85
9.2.3 IP/MAC binding instances ................................................................................... 86
9.3 PPPoE Server ............................................................................................................. 89
9.3.1 PPPoE introduction ............................................................................................. 89
9.3.2 PPPoE global Settings.......................................................................................... 90
9.3.3 PPPoE account configuration ............................................................................... 92
9.3.4 PPPoE user status................................................................................................ 94
9.3.5 Export PPPoE Accounts....................................................................................... 95
9.3.6 Import PPPOE Accounts...................................................................................... 96
9.3.7 Instance of PPPoE server configuration................................................................. 97
9.4 WEB authentication .................................................................................................... 99
9.4.1 WebAuth Global Settings..................................................................................... 99
9.4.2 Web Authentication Account List........................................................................ 100
9.4.3 WEB Authentication Client Status ...................................................................... 102
9.5 User Group Settings .................................................................................................. 103
Chapter 10. App Control ............................................................................................... 105
10.1 Schedule Settings...................................................................................................... 105
10.2 Application Control................................................................................................... 106
10.2.1 Application Management List............................................................................. 107
10.2.2 Internet Application Management Settings........................................................... 107
10.2.3 Internet Application Management ....................................................................... 109
10.3 QQ white list .............................................................................................................111
10.4 TM Whitelist .............................................................................................................113
10.5 Notification ...............................................................................................................114
10.5.1 Daily Routine Notification ..................................................................................115
10.5.2 Account expiration notification............................................................................116
10.6 Application Audit.......................................................................................................117
10.7 Policy Database .........................................................................................................118
Chapter 11. QoS............................................................................................................. 120
11.1 Fixed Rate Limiting .................................................................................................. 120
11.2 Flexible bandwidth.................................................................................................... 121
11.3 Session Limiting....................................................................................................... 123
Chapter 12. Firewall....................................................................................................... 125
12.1 Attack Prevention ..................................................................................................... 125
12.2 Access control .......................................................................................................... 126
12.2.1 Access Control Rule .......................................................................................... 127
12.2.2 Access control list ............................................................................................. 128
12.2.3 Access Control Settings ..................................................................................... 129
12.2.4 Access Control Settings instance......................................................................... 135
12.3 Domain filtering ....................................................................................................... 138
12.3.1 Domain filtering Settings ................................................................................... 138

Introduction
http://www.level1.com Page 5
12.3.2 Domain Block Notification ................................................................................ 139
12.4 MAC Address Filtering.............................................................................................. 141
12.4.1 MAC Address Filtering...................................................................................... 142
12.4.2 MAC Address Filtering Settings ......................................................................... 143
Chapter 13. For the invalid entries, the system will skip the invalid configuration
entries in binding VPN ........................................................................................................ 145
13.1 PPTP ....................................................................................................................... 145
13.1.1 PPTP overview.................................................................................................. 145
13.1.2 PPTP list........................................................................................................... 146
13.1.3 PPTP server configuration.................................................................................. 147
13.1.4 PPTP client Settings .......................................................................................... 149
13.1.5 PPTP configuration instance............................................................................... 151
13.2 IPSec ....................................................................................................................... 156
13.2.1 IPSec Overview ................................................................................................ 156
13.2.2 IPSec list .......................................................................................................... 163
13.2.3 IPSec Settings ................................................................................................... 163
13.2.4 IPSec configuration instance .............................................................................. 169
Chapter 14. System ....................................................................................................... 177
14.1 Administrator ........................................................................................................... 177
14.2 Language ................................................................................................................. 178
14.3 Time ........................................................................................................................ 178
14.4 Configuration ........................................................................................................... 180
14.5 Firmware Upgrade .................................................................................................... 181
14.6 Remote Management................................................................................................. 182
14.7 Scheduled task.......................................................................................................... 183
Chapter 15. System ....................................................................................................... 185
15.1 Interface Status ......................................................................................................... 185
15.2 System information ................................................................................................... 185
15.3 System log................................................................................................................ 186
15.3.1 System log information...................................................................................... 186
15.3.2 Log Management Settings.................................................................................. 188
Chapter 16. Customer service...................................................................................... 189
Appendix A FAQ............................................................................................................. 190
A-1 How is an intranet computer with Windows 7 system connected to a wireless access
device?............................................................................................................................... 190
A-2 The device is used as wireless client, why can a wireless connection not be established?
193
A-3 How can I restore the device to its factory settings?................................................... 193
Appendix B Figure Index............................................................................................. 194
Appendix C LICENSE STATEMENT / GPL CODE STATEMENT................................ 199

Introduction
http://www.level1.com Page 6
0.1 Factory settings
1. The factory settings of interfaces are shown in Table 1-1.
Parameters
Factory Defaults
Note
User name
admin
User name and password are case
sensitive.
Password
admin
Address of
LAN port
192.168.1.1/255.255.255.0
Intranet users can maintain the device
through the address.
Address of
WAN port
Dynamic IP access
SSID 2.4G
LevelOne
For the device's SSID, the wireless
clients must use the same SSID before
connecting to wireless devices. Here,
ABCDEF is the hexadecimal numbers
converted from the device's serial
number.
SSID 5G
LevelOne-5G
Table 1-2 Factory settings
2. The factory user name of the system administrator is admin, and the factory password is
admin (case-sensitive).
0.2 Contact Us
If you have any questions during installation or use, please contact us in the following manners.
Customer service: 0800-011-110
LEVELONE discussions: http://www.level1.com
E-mail support: [email protected]

Chapter 1 Product Overview
http://www.level1.com Page 7
Chapter 1. Product Overview
1.1 Key characteristics
Supports fixed IP, dynamic IP, PPPoE,AP Client, 3G client access
Supports traffic load balancing and line backup
Supports policy routing
Supports the Internet behavior management function
Supports the DHCP server function
Supports the PPPoE server functions, and provide a fixed IP allocation, account
billing and other functions
Supports daily affair notification, due account notification functions
Supports WEB authentication function
Supports virtual server and DMZ
Supports various wireless modes
Supports various wireless security mechanisms
Supports SSID hiding
Supports the WMM (Wi-Fi Multimedia) function
Supports URL, MAC address, keyword filtering and other firewall policies
Supports Internet behavior management for users, and provide a wealth of control
strategies
Supports hotel PnP (Plug and Play)
Supports SYSLOG
Supports the Internet behavior audit function
Supports QQ, MSN white list
Supports internal/external network attack and defense
Supports user groups, time management

Chapter 1 Product Overview
http://www.level1.com Page 8
Supports VPN function
Supports UPnP
Supports dynamic domain names
Supports HTTP remote management
Supports the WEB upgrading mode
Supports backup and import of WEB configuration files
The machine meets the 6KV lightning-proof feature
1.2 Specifications
Compatible with IEEE802.3, IEEE802.3u, IEEE 802.11n, IEEE 802.11b and IEEE
802.11g.
Supports TCP/IP, DHCP, ICMP, NAT, PPPoE, static routes and other protocols.
The physical ports support auto negotiation function, and support the MDI/MDI-X
adapter function.
Provide status indicators.
Operating environment: Temperature: 0~40°C
Height: 0~4000m
Relative humidity: 10%~-90%, no condensation

Chapter 2 Hardware Installation
http://www.level1.com Page 9
Chapter 2. Hardware Installation
2.1 Panel description
This section introduces the appearance of Progressive ™ 510W, and its front panel, back
panel is shown in Figure 2-1, Figure 2-2.
Figure 2-1 Diagram of front panel - Progressive WGR-2301
Figure 2-2 Diagram of rear panel - Progressive WGR-2301
1. LED description
LED
Description
Function
PWR
Power LED
It is constantly on when the power supply is working
properly.
SYS
System status
indicator
Flashes in the frequency of 2 times per second, and
the flashing frequency declines when the system
burden is heavy; normally on or off in failure.
USB
Status LED for 3G
Internet access card
LED is on after 3G card is inserted.
WLAN
Wireless Status LED
On when enabling the wireless feature, and flashes
when sending/receiving wireless data.
WAN
Port status indicator
When a device is connected to the WAN port, the
LED that corresponds to the port stays lit, and it will
flash if there is flow.
LAN
Port status indicator
When a device is connected to the LAN port, the

Chapter 2 Hardware Installation
http://www.level1.com Page 10
LED that corresponds to the port stays lit, and it will
flash if there is flow.
Note
The WPS feature is temporarily not supported by this software version, so the
corresponding status LED is not used.
Table 2-1 LED description
2. Description of interfaces
Interface
Notes
LAN
Integrated with multiple Ethernet (100M) ports, LAN port is an RJ-45, and
supports adaptive positive and negative lines.
WAN
WAN port is an RJ-45 and supports adaptive positive and negative lines.
USB
3G Internet card interfaces.
Antenna
For transmitting and receiving wireless data.
Table 2-2 Description of interfaces
3. Reset button
Reset button can be used to recover the device's factory settings when you forget the
administrator password. Method: In the process of charged operation, hold down the
Reset button for more than 5 seconds, and then release the button. The device will be
returned to its factory settings after operation, and automatically restart.
Note: The above operations will delete all the original device configurations; please
use it with care!
2.2 Precaution for installation
1. Make sure to install the workbench stably.
2. Do not place any heavy objects upon the device.
3. Make sure that the device is stored in a dry and ventilated area with proper heat
dissipation, and do not put it in a dirty and damp place.
4. Avoid exposing the device directly to the sunlight and keep it far away from heating
elements.
5. Mount the device away from the places where high power radio transmitters, radar
transmitters reside as far as possible.

Chapter 2 Hardware Installation
http://www.level1.com Page 11
6. Please use the original power cord.
2.3 Preparing for installation
1. We have applied to local operators (ISP, such as China Telecom, China Unicom, etc.)
for broadband services.
2. Preparation of related devices:
1) Modem (This item is not required when connected directly to Ethernet).
2) Hub or switch or wireless devices.
3) The PC with Ethernet card and Internet Protocol (TCP/IP) installed.
4) Power socket.
3. Preparation of tools and cables: Network cables.
2.4 Hardware Installation
Before installing the device, make sure the broadband service is normal. If you cannot
access, please contact operators (ISP) to resolve the problem. After successfully
accessing to the network, follow these steps to install the device. The power plug must be
removed during installation.
Place the device on a stable work bench:
1. Place the device on a sufficiently large, stable and properly-grounded work bench with
its bottom up.
2. Remove the adhesive protective paper from the foot pad, and stick the 4 pads in the 4
round slots at the bottom of the casing respectively.
3. Flip over the device, and place iton the workbench stably.

Chapter 2 Hardware Installation
http://www.level1.com Page 12
2.5 Hardware connection
1. Establish a LAN connection
Connect the LAN port of the router and a PC or a hub or a switch in LAN with a network
cable. Or after the device's wireless feature is enabled, connect wireless clients or other
wireless devices to the router over a wireless connection.
2. Establish a WAN connection
Connect the WAN port of the router to the Internet with a network cable, as shown in the
figure below.
3. Connect power source
Before connecting the power supply, make sure that both power supply and grounding are
normal.
Figure 2-3 Establish a LAN connection and a WAN connection
Tip: The above network connection diagram is for reference only. Please configure
the network architecture according to the actual situation and needs.

Chapter 3 Logging Device
http://www.level1.com Page 13
Chapter 3. Logging to the device
This chapter describes how to configure the correct network settings for the network
computers, how to log on to the appliances and how to use shortcut icons to quickly link to
the HiPER website for product information and services.
3.1 Configuring the correct network settings
Before logging to the device through the WEB interface, you must correctly configure the
network computers in network settings.
First, connect your computer to the LAN port of the device, and then set the computer's IP
address.
The first step is to set the computer's TCP/IP. If it has been set correctly, skip this step.
The second step is to set the computer's IP address. You can use either of the following
methods:
1. Set the computer's IP address as one of the addresses from 192.168.1.2 -
192.168.1.254, the subnet mask is 255.255.255.0, and the default gateway is
192.168.1.1 (the LAN IP address of the device), and the DNS server is the address
provided by the local operator.
2. Set the computer's TCP/IP as "Obtain an IP address automatically". After setting, the
built-in DHCP server of the device will automatically assign IP addresses to
computers.
The third step is to use the Ping command on your computer to check whether it is
connected to the device. In Start ->Operation, type in cmd, and click <OK> to open the
command window. Type in ping 192.168.1.1.
The following lists two kinds of results of executing the Ping command in the Windows XP
environment:
If the screen is shown as follows, it indicates that the computer has been successfully and
a connection is established on the device.

Chapter 3 Logging Device
http://www.level1.com Page 14
If the screen is shown as follows, it indicates that the connection between the computer
and the device fails.
When connection fails, please check the following items:
1. Hardware connections: The LEDs that correspond to the LAN port on the device
panel and the PC network card LED must be on.
2. Configuring TCP/IP properties of the computer: If the LAN IP address of the device is
192.168.1.1, then the calculated IP address must be any one of the free addresses
from 192.168.1.2 - 192.168.1.254.
3.2 Logging to the device
When MS Windows, Macintosh, Unix or Linux operating systems are used on the PC, the
device can be configured through browsers (such as Internet Explorer or Firefox).
Open the browser, and type in the IP address of the device's LAN port in the address bar,
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Reply from 192.168.1.1: bytes=32 time<1ms TTL=255
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Pinging 192.168.1.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Chapter 3 Logging Device
http://www.level1.com Page 15
such as http://192.168.1.1. After the connection is established, you will see a login
interface as shown in Figure 3-1. In the first use, you should log in as a system
administrator, that is, enter your administrator username and password (the factory
defaults of username, password are admin and admin respectively, which are case
sensitive) on the login interface, and then click <OK>.
Figure 3-1 WEB login interface
If user name and password are correct, the browser will display the homepage of the WEB
management interface, as shown in Figure 3-2. The top-right corner of the page displays
device model, hardware version, software version and other information.
Figure 3-2 Homepage of the WEB interface

Chapter 3 Logging Device
http://www.level1.com Page 16
Homepage description:
1. The top-right corner of the page displays device model, hardware version, software
version and three fast link icons. These 3 shortcut icons have the following functions:
1) Product Discussion–Link to the discussion forums of the HiPER official
website to participate in discussions about the product.
2) Knowledge Base–Link to the knowledge base of HiPER official website for
searching related technical information.
3) Booking Service–Link to the booking service page of HiPER official website, for
advance reservation of the customer service in a certain working period.
2. This page displays the main menu bar on the left.
3. The main operating page is located on the right of the page, in which you can
configure various functions of the device, view the related configuration information
and status information, etc.
4. If this is the first time for you to log in the device, the main operation page will be
linked directly to the configuration wizard page. The next chapter describes how to
configure the basic parameters required for the normal running of the device in the
Start -> Configuration wizard page.

Chapter 4 Configuration Wizard
http://www.level1.com Page 17
Chapter 4. Configuration Wizard
By reading this chapter, you can understand the basic network parameters required for
the device to access to the Internet, and these parameters are configured to connect the
device to the Internet. Before configuring "Internet Line" in the Configuration Wizard, you
should properly configure the network settings of the network computer. For specific
methods, see Chapter 3 Logging in the Device.
If this is the first time for you to log in the device, a configuration wizard homepage
appears directly in the main operating page.As shown in Figure 4-1:
Figure 4-1 Homepage of configuration wizard
In logging next time, the wizard will no longer automatically pop up: When checking it,
you can go directly to the System Status page in logging next time.
Exit the wizard: Exits the Configuration Wizard and returns to the System Status
page.
Next step: Enter the Selection of device access mode page.
4.1 Configuration of WAN1 port
Access modes provided by WAN1 port include: dynamic IP access, fixed IP access,
PPPoE access.

Chapter 4 Configuration Wizard
http://www.level1.com Page 18
4.1.1 Dynamic IP access
The default WAN1 access is dynamic IP access, as shown in Figure 4-3. If your Internet
access mode is dynamic IP access, please click <Next>, to complete the configuration of
the WAN1 port.
Figure 4-2 Configuration Wizard - Dynamic IP access
4.1.2 Static IP access
If your Internet access mode is Static IP access, please select "Fixed IP access" in the
drop-down list box of Figure 4-4, and fill in the related parameters, and enter into the next
page, to complete the configuration of WAN1.
Figure 4-3 Configuration Wizard - Static IP access
IP address, subnet mask, gateway address, primary DNS server, secondary DNS
server: Fill in the WAN IP address, subnet mask, gateway address and DNS server
address that ISP (Such as China Telecom) offers you.

Chapter 4 Configuration Wizard
http://www.level1.com Page 19
4.1.3 PPPoE access
If your Internet access mode is PPPoE access, please select "PPPoE access" in the
drop-down list box of Figure 4-5 , and fill in the corresponding user name and password,
and then click <Next> to enter into the next page to complete the configuration of WAN1.
Figure 4-4 Configuration wizard - PPPoE access
User name, password: Type in the user name, password provided by the ISP. If you
have any questions, please ask your ISP.

Chapter 5 Start Menu
http://www.level1.com Page 20
Chapter 5. Start menu
Start menu is located on the top of the Level 1 menu bar of the WEB interface, providing
the interface for 4 common pages, including: configuration wizard, running status, port
flow, device reboot. In the Start menu, you can quickly configure the basic parameters
required by the device in working properly, view the information about the interfaces, and
view the statistics data of the devices' real-time traffics.
5.1 Setup Wizard
The Start-> Setup wizard pages can help you to quickly configure the basic parameters
required by some devices in working normally. For details, see Chapter 4 Configuration
Wizard.
5.2 Interface status
This section describes the Start-> Interface status page, in which you can view the
information about the device's interfaces. As shown in the interface in Figure 5-1, the
connection type, connection status, IP address and other information about the interfaces
can be viewed.
Figure 5-1 Interface status