Sandberg Wireless G54 Router User manual

Sandberg Wireless
G54 Router
[Item no. 130-79] Rev. 08.10.07
ENGLISHDANSKNORSKSVENSKASUOMI

2
Figure1- Example of network setup
Internet
DSL or
cable modem Router
Computer 1
Computer 2
Introduction
Sandberg Wireless G54 Router (referred to as “the router”) allows you to share a broadband
connection and local area network connection using both wireless and wired connections. The
Sandberg Wireless G54 Router is easy to configure thanks to its user-friendly web interface. Its
features include a range of security settings that you can configure to prevent uninvited guests.
The router works with ADSL, xDSL and cable modem connections that support one of the three
protocols Ethernet, PPPoE or PPTP. Your Internet service provider can tell you whether your Internet
connection is using one of these three standards.
1 Installing the router
1.1 Role of the router on the network
A router acts as a connection point between two networks. A router is generally used to connect
a local area network with multiple computers to the network of an Internet service provider. In
other words, a router allows several computers to share an Internet connection. The Sandberg
Wireless G54 Router is wireless, meaning that computers with wireless network cards can connect
to it without the use of cables.
Figure 1 shows an example of a typical network setup, with two computers sharing an Internet
connection.
ENGLISH

3
Figure 2 – External and internal IP addresses
As the router’s role is to create a bridge between two networks, it has one IP address for each
network. One IP address represents the router on the Internet and is called the external IP address,
and the other represents the router on the local area network and is called the internal IP address.
Each of the computers on the local area network also has its own IP address. This can be allocated
automatically by the router (using the router’s DHCP function) or it can be specifi ed manually on
each computer.
Figure 2 shows a typical network setup, and the IP addresses that form part of that setup.
172.64.102.85 is the router’s external IP address. When communicating with a computer over the
Internet, it will be this address that the computer ‘sees’, regardless of which computer on the local
area network is being used. The external IP address can either be dynamic or fi xed, depending
on the type of subscription set up with the Internet service provider. A dynamic IP address is one
that is allocated by the Internet service provider, but it is not necessarily the same address all
the time. A fi xed IP address always remains the same.
192.168.16.1 is the router’s internal IP address. This is the address of the router on the local area
network, the one that all the computers on the network connect to in order to access the Internet.
192.168.16.100 is the IP address of a computer on the network. This can either be defi ned in
Windows or be automatically allocated by the router.
192.168.16.101 is the IP address of a computer on the network. This can either be defi ned in
Windows or be automatically allocated by the router.
Computer 1
Computer 2
External
172.64.102.85
192.168.16.1
192.168.16.100
192.168.16.101
ENGLISH

4
1.3 Lamp indications
1.2 Connecting the router
The router can function both as a router and an access point. The connection mode used with
the router depends on how it is intended to function on the network.
• Router – Used if the Internet connection is to be shared between multiple computers, either
wirelessly, with cables, or both.
• Access Point – Used if the Internet connection is already shared between multiple computers,
e.g. via a router, and wireless access to the Internet is required. In this case, the role of the router
is to provide wireless access to the existing router.
1. Connect the electrical plug to a mains socket and the small round connector on the power lead
to the POWER socket on the router. Check that the “Power” lamp lights up.
• If you will be using the router function, connect the router’s WAN port to your existing ADSL/
broadband connection using a network cable.
• If you will be using the access point function, connect a network cable from the existing
network (typically the existing router) to port 1, 2, 3 or 4 on the router.
2. Screw the supplied antenna firmly into the thread on the far left. The antenna can be folded
upwards to increase the signal strength.
3. Connect up to four computers to the ports marked 1 to 4 on the router. If you will only be
connecting wirelessly, skip this step.
4. Start the connected computers.
LED
POWER
RESET
WAN
Wireless
1-4
Colour
Green
Green
Green
Green
Green
Status
On
On
On
Flashing
Off
Flashing
Off
On
Flashing
Off
Status
The router is on.
The router is restoring factory settings
WAN port connected.
WAN port transmitting data.
WAN port disconnected.
Wireless connection transmitting data.
Wireless connection is inactive.
LAN port connected.
LAN port transmitting data.
LAN port disconnected.
ENGLISH

5
Figure 3 – Router confi guration utility
2 Setting up the router
2.1 Configuring the router
NB: If you will be using the router as an access point only, the following steps can be skipped.
However, the router’s wireless security function should be enabled. (See section 2.3)
If you will be using the router wirelessly, the computer must be connected to the router’s wireless
network before the following steps can be carried out. See the documentation that came with
the computer’s wireless network card for information on how to connect to a wireless network.
1. Start your Internet browser (e.g. Internet Explorer®).
2. Type http://192.168.16.1 in the browser’s address bar and press Enter.
3. In the Username fi eld, type admin.
4. In the Password fi eld, type admin. Click [OK].
5. Click the [Setup] button.
2.1.1 WAN Setup
Here you can enter the type of connection used by the router. Contact your Internet service provider
if you are unsure which type of Internet connection you have.
• Select Static IP if you have an xDSL or Ethernet connection with a fixed IP address.
o IP address: Enter the IP address assigned by your Internet service provider.
o Subnet mask: Enter the subnet mask assigned by your Internet service provider.
o Default Gateway: Enter the gateway address assigned by your Internet service provider.
o MTU: The default value is 1500. You can accept this unless your Internet service provider
recommends a different value.
o Primary/Secondary DNS: Enter the DNS addresses assigned by your Internet service provider.
o When your changes are complete, click [OK].
ENGLISH

6
• Select DHCP if you have a cable modem or other type of Internet connection without a fixed
IP address.
o MTU: The default value is 1500. You can accept this unless your Internet service provider
recommends a different value.
o Primary/Secondary DNS: Enter the DNS addresses assigned by your Internet service provider.
o Hostname: Can be set to any name unless specified by your Internet service provider.
o When your changes are complete, click [OK].
• Select PPPoE if you have an xDSL connection that uses PPPoE.
o PPPoE User Name: Enter the user name assigned by your Internet service provider.
o PPPoE Password: Enter the password assigned by your Internet service provider.
o MTU: The default value is 1492. You can accept this unless your Internet service provider
recommends a different value.
o Primary/Secondary DNS: Enter the DNS addresses assigned by your Internet service provider.
o Hostname: Can be set to any name unless specified by your Internet service provider.
o Service Name: Can be set to any name unless specified by your Internet service provider.
o When your changes are complete, click [OK].
2.1.2 LAN Setup
Setup
Enter the IP address of the router here. With some Internet connections, it may be necessary
to change this in order to retain access to the router setup.
o IP Address: Enter the desired IP address. The IP address already entered can be accepted for
now.
o Subnet Mask: Enter the desired subnet mask. The subnet mask already entered can be
accepted for now..
o When your changes are complete, click [OK].
DHCP Server
A DHCP server is a way of automatically allocating IP addresses to the devices connected to
the router. If you already have a DHCP server in your network, such as a router provided by
your Internet service provider, this function should be disabled.
o Enable: Uncheck the box if you wish to disable the DHCP server. For now DHCP can be left
enabled.
o When your changes are complete, click [OK].
The default router configuration is now complete. However, before using the router, you should
secure it against unauthorised wireless access. Instructions for this are given in section 2.2
below.
2.2 Securing a wireless network
If you are using the router’s wireless functionality, the network must be secured against
unauthorised access by enabling one of the router’s built-in security features. This protects
authorised network users against unauthorised access from the outside.
The router can use one of the following security features:
• WEP
• WPA pre-shared key
• WPA RADIUS
All computers that connect wirelessly to the router must use the same type of security as the
router. It is therefore important to select a security method supported by all the network cards
on the network. For more information on this, see the user guide for the individual network
cards on the network.
ENGLISH

7
For additional security, the Access Control function can be used. See section 2.3.4 for information
on this.
Confi guration of the various security features is described in the following sections.
2.2.1 Configuring WEP
1. Click [WLAN Setup].
2. Select the [Security] tab.
3. Under Encryption Method, select WEP.
4. Under Key Length, select the encryption strength. You can select either 64-bit or 128-bit. For
greatest security, 128-bit is recommended.
5. Under Key Format, select the format for entering security codes. You can select either HEX
(digits and/or letters from A to F) or ASCII (letters and/or digits).
6. Under Default TX Key, select the security code to use as default.
7. In the fields Encryption Key 1-4, enter up to four security codes. If you enter multiple codes,
computers can access the network wirelessly by entering any one of them. The codes must
comply with the format given in Key Length and Key Format. Both upper and lower case letters
can be used.
64-bit HEX - 26 digits and/or letters from A to F
128-bit HEX - 26 Ziffern und/oder Buchstaben von A bis F
64-bit ASCII - 5 letters and/or digits
128-bit ASCII - 13 letters and/or digits
8. Click [OK].
NB: Make a note of all the codes, as these must be entered on all the computers that connect
wirelessly to the router.
2.2.2 Configuring WPA/WPA2
1. Click [WLAN Setup].
2. Select the [Security] tab.
3. Under Security Mode, select WPA/WPA2/Mixed.
4. Under WPA Type, select the encryption method to use.
5. Under WPA/WPA2 Cipher Suite select the encryption type to use. The options are TKIP, AES
or TKIP/AES. Note that all devices connecting to the network must support the encryption type.
6. Under Pre-Shared Key Format, select the format for entering security codes.
7. Enter a code in the Pre-Shared Key field.
8. Click [OK].
2.2.3 Configuring RADIUS
This type of security is for advanced users and requires a separate RADIUS server. RADIUS is
typically used in larger corporate networks, and is not recommended for private use. Documentation
on configuring the router for RADIUS can be found in the English manual on the CD provided.
2.2.4 Configuring MAC Filtering
All network devices have a unique code called the MAC address.
Access Control is an extra security feature that ensures that only network devices with MAC
addresses approved by the router can connect to the wireless network.
1. Click [WLAN Setup].
2. Select the [Access Control] tab.
3. Under Access Control Mode, select [Allow/Deny Listed] to enable the function. Selecting [Allow
Listed] is recommended so that only the MAC addresses entered have access to the router.
4. In the fields below, enter the MAC addresses that are to be granted or denied access. Click [Add]
to add the specified MAC address to the list.
5. Click [OK].
ENGLISH

8
3 Advanced setup
Advanced setup enables you to defi ne specifi c settings for your network’s security policy, data
traffi c, etc. This requires specialised knowledge, including network technologies and security
policies, and is only recommended for users with experience in these areas. These settings are
not usually required for standard setup.
Not all functions are described in this user guide. For further information, refer to the English
user guide on the CD provided.
1. Start your Internet browser (e.g. Internett Explorer®)
2. Type http://192.168.16.1 in the browser’s address bar and press Enter.
3. In the Username fi eld, type admin.
4. In the Password fi eld, type admin. Click [OK].
5. Click the [Setup] button.
3.1 WAN Setup
See section
3.2 LAN Setup
See section
3.3 WLAN Setup
The router’s wireless connection can be configured here.
3.3.1 Basic Setup
• Check the Disable box to disable the router’s wireless function.
• Enter the name for the wireless network in the SSID field. This is the name that will be shown
when Windows®displays a list of available wireless networks.
• Band, Mode and Channel are advanced settings and should only be changed in special
circumstances.
3.3.2 Advanced Setup
See the English user guide on the CD provided.
3.3.3 Security
See section 2.2
3.3.4 Access Control
See section
How to discover the MAC address of a wireless network card
Windows®Vista
1. Click Start. Type “cmd” in the Start Search field and press Enter.
2. Type “ipconfig /all” and press Enter.
3. Locate the line with “Description…” followed by the name of the wireless network card.
The value indicated for Physical address is the network card’s MAC address.
Windows®XP
1. Click Start, then Control Panel, then Network and Internet Connections, then Network
Connections.
2. Double-click the icon for the wireless network connection, click the Support tab and then
click Details...
3. The value indicated for Physical address is the network card’s MAC address.
Windows®2000
1. Click Start, then Run. Type “cmd” in the field and press Enter.
2. Type “ipconfig /all” and press Enter.
3. Locate the line with “Description…” followed by the name of the wireless network card.
The value indicated for Physical address is the network card’s MAC address.
ENGLISH

3.4 Security
3.4.1 Firewall Setup
The router’s built-in firewall can be configured to protect against commonly occurring hacker
attacks. It is also possible to block or authorise specific MAC addresses and/or IP addresses, and
to block access to certain websites on the Internet.
• Enabling the built-in firewall is recommended. However, if you wish to disable it, uncheck the
Firewall Enable box.
NB: If the built-in firewall is disabled, functions such as MAC filtering, URL Control, etc. will also
be disabled.
3.4.2 URL Control
This function enables you to block access to specific websites on the Internet.
• Select Enable to enable the function.
• Click [Add...] to add a website address to the list. Then enter the website address in the field
and click [OK].
3.4.3 Access Control, Block Port, Block Dos Attack
See the English user guide on the CD provided.
3.5 Services
3.5.1 Virtual Server
NAT (Network Address Translation) is a technology that allows multiple computers on a local
area network to share the same external IP address. The way this works is that the router manages
all the network traffic originating from the computers on the network and sorts incoming network
traffic so it is redirected to the right computer. However, this may cause a problem for network
traffic that is not initiated at the request of a computer on the local area network.
A typical scenario is when a computer on the local area network is set up as a server. In this case,
a computer on the Internet would connect to the router’s external IP address. However, this network
request does not indicate which computer on the local area network it is addressed to, and the
router therefore has no means of knowing where to forward it.
This is solved by setting up the router’s NAT function so that it forwards incoming network traffic
on certain network ports to a specific IP address on the local area network.
Example: An FTP server is set up on a computer on the network with the IP address 192.168.16.100.
FTP uses network port 21 by default.
The router’s NAT function is set up to forward all incoming traffic on port 21 to IP address
192.168.16.100.
It may also be necessary to configure NAT for applications such as IP telephony, file sharing and
online gaming to work properly.
NB: For Virtual Server to work as intended, the computer that network traffic is forwarded to must
be configured with a static IP address.
1. Click [New…].
2. Under Type, enter the types of service to grant access to, e.g. FTP.
3. Under Service Name, enter a name of your choice.
4. Under Forward Port, enter the numbers of the relevant inbound ports.
5. Under Local Port, enter the numbers of the local ports.
6. Under Local Server IP, enter the IP address of the computer providing the desired service.
7. Click [OK]. Any new services can then be set up in the same way.
3.5.2 Special Application, DMZ
See the English user guide on the CD provided.
3.6 Router Setup
See the English user guide on the CD provided.
9
ENGLISH

10
3.7 System
3.7.1 Management
See the English user guide on the CD provided.
3.7.2 Region
• Under Time Zone, select the correct time zone.
3.7.3 Config
• Click [BACKUP…] to create a local copy of the router configuration.
• To load a previous backup file, click [Browse…] and select the desired backup file. Then click
[RESTORE…].
3.7.4 Upgrade
• To update the router’s firmware, click [Browse…] and select the new firmware. Click [OK].
NB: Updating the router’s firmware is at your own risk, unless carried out in consultation with
Sandberg Support.
3.7.5 Reboot
• Click [REBOOT…] to restart the router. Then wait for up to 60 seconds.
3.7.6 Default
• Click [FACTORY DEFAULT…] to restore the router’s factory settings. Then wait for up to 60
seconds.
3.7.7 Password
• Enter the existing password under Current Password.
• Enter the new password under New password, then repeat it under Re-type password. Click
[OK].
3.8 Status
An overview of the most useful settings is displayed here. Click [Refresh] to update the information.
ENGLISH