SMC Networks THE BARRICADE SMCWBR14S-N4 User manual

BarricadeTM N
150 Mbps 4-Port Wireless Broadband Router
SMCWBR14S-N4
USER GUIDE

BarricadeTM SMCWBR14S-N4
User Guide
September 2009
Pub. # 149100000034W
E092009-CS-R01

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable.
However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or
other rights of third parties which may result from its use. No license is granted by implication or
otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications
at any time without notice.
Copyright © 2009 by
SMC Networks, Inc.
20 Mason
Irvine, CA 92618
All rights reserved
Trademarks:
SMC is a registered trademark; and Barricade, EZ Switch, TigerStack, TigerSwitch, and TigerAccess
are trademarks of SMC Networks, Inc. Other product and company names are trademarks or
registered trademarks of their respective holders.

– 4 –
WARRANTY AND PRODUCT REGISTRATION
To register SMC products and to review the detailed warranty statement,
please refer to the Support Section of the SMC Website at http://
www.smc.com.

– 5 –
COMPLIANCES
FEDERAL COMMUNICATION COMMISSION INTERFERENCE STATEMENT
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful interference
in a residential installation. This equipment generates, uses and can
radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio
communications. This transmitter must not be co-located or operating in
conjunction with any other antenna or transmitter. However, there is no
guarantee that interference will not occur in a particular installation. If this
equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one of the following
measures:
◆Reorient or relocate the receiving antenna
◆Increase the separation between the equipment and receiver
◆Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected
◆Consult the dealer or an experienced radio/TV technician for help
This device complies with Part 15 of the FCC Rules. Operation is subject to
the following two conditions: (1) This device may not cause harmful
interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
FCC Caution: Any changes or modifications not expressly approved by the
party responsible for compliance could void the user's authority to operate
this equipment.
IEEE 802.11b or 802.11g operation of this product in the U.S.A. is
firmware-limited to channels 1 through 11.
IMPORTANT NOTE:
FCC RADIATION EXPOSURE STATEMENT
This equipment complies with FCC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and
operated with minimum distance 20 cm between the radiator and your
body.

C
OMPLIANCES
– 6 –
IC STATEMENT
This Class B digital apparatus complies with Canadian ICES-003.
Operation is subject to the following two conditions: (1) this device may
not cause interference, and (2) this device must accept any interference,
including interference that may cause undesired operation of the device.
Cet appareil numérique de la classe B conforme á la norme NMB-003 du
Canada.
The device could automatically discontinue transmission in case of absence
of information to transmit, or operational failure. Note that this is not
intended to prohibit transmission of control or signaling information or the
use of repetitive codes where required by the technology.
IMPORTANT NOTE:
IC RADIATION EXPOSURE STATEMENT:
This equipment complies with IC RSS-102 radiation exposure limits set
forth for an uncontrolled environment. This equipment should be installed
and operated with minimum distance 20 cm between the radiator & your
body.
TAIWAN NCC
根據國家通信傳播委員會低功率電波輻射性電機管理辦法規定：
第十二條 經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更
頻率、加大功率或變更原設計之特性及功能。
第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應
立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信法規定作業之無線電通
信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。
EC CONFORMANCE DECLARATION
Marking by the above symbol indicates compliance with the Essential
Requirements of the R&TTE Directive of the European Union (1999/5/EC).
This equipment meets the following conformance standards:
◆EN 60950-1 (IEC 60950-1) - Product Safety
◆EN 55022/24 - ITE EMC
◆EN 301 489-1-17 - RF EMC
◆EN 300 328 - 802.11 b/g/n

C
OMPLIANCES
– 7 –
This device is intended for use in the following European Community and
EFTA countries:
N
OTE
: The user must use the configuration utility provided with this
product to ensure the channels of operation are in conformance with the
spectrum usage rules for European Community countries as described
below.
◆This device will automatically limit the allowable channels determined
by the current country of operation. Incorrectly entering the country of
operation may result in illegal operation and may cause harmful
interference to other systems. The user is obligated to ensure the
device is operating according to the channel limitations, indoor/outdoor
restrictions and license requirements for each European Community
country as described in this document.
DECLARATION OF CONFORMITY IN LANGUAGES OF THE EUROPEAN
COMMUNITY
◆Austria ◆Belgium ◆Bulgaria ◆Cyprus ◆Czech Republic
◆Denmark ◆Estonia ◆Finland ◆France ◆Germany
◆Greece ◆Hungary ◆Iceland ◆Ireland ◆Italy
◆Latvia ◆Lithuania ◆Luxembourg ◆Malta ◆Netherlands
◆Norway ◆Poland ◆Portugal ◆Romania ◆Slovakia
◆Slovenia ◆Spain ◆Sweden ◆Switzerland ◆United Kingdom
Czech
Česky
Manufacturer tímto prohlašuje, že tento Radio LAN device je ve shoděse základními
požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/ES.
Estonian
Eesti
Käesolevaga kinnitab Manufacturer seadme Radio LAN device vastavust direktiivi 1999/
5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.
English Hereby, Manufacturer, declares that this Radio LAN device is in compliance with the
essential requirements and other relevant provisions of Directive 1999/5/EC.
Finnish
Suomi
Valmistaja Manufacturer vakuuttaa täten että Radio LAN device tyyppinen laite on
direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen
mukainen.
Dutch
Nederlands
Hierbij verklaart Manufacturer dat het toestel Radio LAN device in overeenstemming is
met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG
Bij deze Manufacturer dat deze Radio LAN device voldoet aan de essentiële eisen en aan
de overige relevante bepalingen van Richtlijn 1999/5/EC.
French
Français
Par la présente Manufacturer déclare que l'appareil Radio LAN device est conforme aux
exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE
Swedish
Svenska
Härmed intygar Manufacturer att denna Radio LAN device står I överensstämmelse med
de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv
1999/5/EG.
Danish
Dansk
Undertegnede Manufacturer erklærer herved, at følgende udstyr Radio LAN device
overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF

C
OMPLIANCES
– 8 –
German
Deutsch
Hiermit erklärt Manufacturer, dass sich dieser/diese/dieses Radio LAN device in
Übereinstimmung mit den grundlegenden Anforderungen und den anderen relevanten
Vorschriften der Richtlinie 1999/5/EG befindet". (BMWi)
Hiermit erklärt Manufacturer die Übereinstimmung des Gerätes Radio LAN device mit den
grundlegenden Anforderungen und den anderen relevanten Festlegungen der Richtlinie
1999/5/EG. (Wien)
Greek
Ελληνική
με την παρουσα Manufacturer δηλωνει οτι radio LAN device συμμορφωνεται προσ τισ
ουσιωδεισ απαιτησεισ και τισ λοιπεσ σχετικεσ διαταξεισ τησ οδηγιασ 1999/5/εκ.
Hungarian
Magyar
Alulírott, Manufacturer nyilatkozom, hogy a Radio LAN device megfelel a vonatkozó
alapvetõ követelményeknek és az 1999/5/EC irányelv egyéb elõírásainak.
Italian
Italiano
Con la presente Manufacturer dichiara che questo Radio LAN device è conforme ai
requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.
Latvian
Latviski
Ar šo Manufacturer deklarē, ka Radio LAN device atbilst Direktīvas 1999/5/EK būtiskajām
prasībām un citiem ar to saistītajiem noteikumiem.
Lithuanian
Lietuvių
Šiuo Manufacturer deklaruoja, kad šis Radio LAN device atitinka esminius reikalavimus ir
kitas 1999/5/EB Direktyvos nuostatas.
Maltese
Malti
Hawnhekk, Manufacturer, jiddikjara li dan Radio LAN device jikkonforma mal-ħtiġijiet
essenzjali u ma provvedimenti oħrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.
Spanish
Español
Por medio de la presente Manufacturer declara que el Radio LAN device cumple con los
requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la
Directiva 1999/5/CE
Polish
Polski
Niniejszym Manufacturer oświadcza, że Radio LAN device jest zgodny z zasadniczymi
wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC.
Portuguese
Português
Manufacturer declara que este Radio LAN device está conforme com os requisitos
essenciais e outras disposições da Directiva 1999/5/CE.
Slovak
Slovensky
Manufacturer týmto vyhlasuje, že Radio LAN device spĺňa základné požiadavky a všetky
príslušné ustanovenia Smernice 1999/5/ES.
Slovenian
Slovensko
Manufacturer izjavlja, da je ta radio LAN device v skladu z bistvenimi zahtevami in ostalimi
relevantnimi določili direktive 1999/5/ES.

– 10 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to install the Wireless
Broadband Router and its physical and performance related characteristics.
It also gives information on how to operate and use the management
functions of the Wireless Broadband Router.
AUDIENCE This guide is for users with a basic working knowledge of computers. You
should be familiar with Windows operating system concepts.
CONVENTIONS The following conventions are used throughout this guide to show
information:
N
OTE
: Emphasizes important information or calls your attention to related
features or instructions.
C
AUTION
: Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W
ARNING
: Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS As part of the Wireless Broadband Router’s software, there is an online
web-based help that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
SEPTEMBER 2009 REVISION
This is the first revision of this guide.

– 11 –
CONTENTS
WARRANTY AND PRODUCT REGISTRATION 4
COMPLIANCES 5
ABOUT THIS GUIDE 10
CONTENTS 11
FIGURES 16
TABLES 19
SECTION I GETTING STARTED 20
1I
NTRODUCTION 21
Key Hardware Features 21
Description of Capabilities 21
Applications 22
Package Contents 23
Hardware Description 23
LED Indicators 25
Ethernet WAN Port 26
Ethernet LAN Ports 26
Power Connector 26
Reset Button 27
WPS Button 27
2N
ETWORK PLANNING 29
Internet Gateway Router 29
LAN Access Point 30
Wireless Bridge 31
3I
NSTALLING THE GATEWAY ROUTER 33
System Requirements 33

C
ONTENTS
– 12 –
Location Selection 33
Mounting on a Wall 34
Mounting on a Horizontal Surface 35
Gateway Mode Connections 35
Bridge Mode Connections 36
4I
NITIAL CONFIGURATION 38
ISP Settings 38
Connecting to the Login Page 38
Home Page and Main Menu 39
Common Web Page Buttons 40
Setup Wizard 40
Step 1 - Language Selection 40
Step 2 - SNTP Settings 41
Step 3 - WAN Settings - DHCP 42
Step 3 - WAN Settings - Static IP 43
Step 3 - WAN Settings - PPPoE 44
Step 3 - WAN Settings - PPTP 45
Step 4 - Wireless Security 46
Completion 47
SECTION II WEB CONFIGURATION 49
5O
PERATION MODE 51
Logging In 52
Operation Mode 54
6I
NTERNET SETTINGS 55
WAN Setting 55
DHCP 55
Static IP 57
PPPoE 58
PPTP 59
LAN Setting 61
Advanced Routing 63
Advanced Routing Settings 63
Routing Table 64

C
ONTENTS
– 13 –
Dynamic Route 65
7W
IRELESS CONFIGURATION 67
Basic Settings 67
WLAN Security 69
Wired Equivalent Privacy (WEP) 70
WPA Pre-Shared Key 71
WPA Enterprise Mode 72
IEEE 802.1X and RADIUS 74
Advanced Settings 76
Wireless Network 76
HT Physical Mode Settings 77
Advanced Wireless 79
Wi-Fi Multimedia 81
Multicast-to-Unicast Converter 83
Wireless Distribution System (WDS) 84
Wi-Fi Protected Setup (WPS) 88
Station List 90
8F
IREWALL CONFIGURATION 91
MAC/IP/Port Filtering 91
Current Filter Rules 93
Virtual Server Settings (Port Forwarding) 94
Current Virtual Servers in system 95
DMZ 95
System Security 96
Content Filtering 97
9A
DMINISTRATION SETTINGS 99
System Management 100
Language Settings 100
Web Interface Settings 100
SNTP Settings 101
DDNS Settings 102
Upgrade Firmware 103
Configuration Settings 104
System Status 105
Statistics 107

C
ONTENTS
– 14 –
System Log 108
SECTION III APPENDICES 110
AT
ROUBLESHOOTING 111
Diagnosing LED Indicators 111
If You Cannot Connect to the Internet 111
Before Contacting Technical Support 111
BH
ARDWARE SPECIFICATIONS 114
CC
ABLES AND PINOUTS 116
Twisted-Pair Cable Assignments 116
10/100BASE-TX Pin Assignments 117
Straight-Through Wiring 117
Crossover Wiring 118
DL
ICENSE INFORMATION 119
The GNU General Public License 119
GLOSSARY 123

– 16 –
FIGURES
Figure 1: Top Panel 24
Figure 2: Rear Panel 25
Figure 3: LEDs 25
Figure 4: Operating as an Internet Gateway Router 30
Figure 5: Operating as an Access Point 31
Figure 6: Operating as a Wireless Bridge 31
Figure 7: Operating as a Wireless Repeater 32
Figure 8: Wall Mounting 34
Figure 9: Gateway Mode Connection 35
Figure 10: Bridge Mode Connection 36
Figure 11: Login Page 39
Figure 12: Home Page 39
Figure 13: Wizard Step 1 - Language Selection 40
Figure 14: Wizard Step 2 - Time and SNTP Settings 41
Figure 15: Wizard Step 3 - WAN Settings - DHCP 42
Figure 16: Wizard Step 3 - WAN Settings - Static IP 43
Figure 17: Wizard Step 3 - WAN Settings - PPPoE 44
Figure 18: Wizard Step 3 - WAN Settings - PPTP 45
Figure 19: Wizard Step 4 - Wireless Security 46
Figure 20: Logging On 52
Figure 21: Home Page 53
Figure 22: Operation Mode (Gateway) 54
Figure 23: DHCP Configuration 56
Figure 24: Static IP Configuration 57
Figure 25: PPPoE Configuration 58
Figure 26: PPTP Configuration 59
Figure 27: LAN Configuration 61
Figure 28: Advanced Routing (Gateway Mode) 63
Figure 29: Basic Settings 68
Figure 30: Security Mode Options 69
Figure 31: Security Mode - WEP 70

F
IGURES
– 17 –
Figure 32: Security Mode - WPA-PSK 71
Figure 33: Security Mode - WPA 73
Figure 34: Security Mode - 802.1X 75
Figure 35: Advanced Settings — Wireless Network 76
Figure 36: HT Physical Mode Settings 77
Figure 37: Advanced Wireless Settings 79
Figure 38: Wi-Fi Multimedia Settings 81
Figure 39: WMM Configuration 82
Figure 40: Multicast-to-Unicast Converter 83
Figure 41: Manual WDS MAC Address Configuration 84
Figure 42: WDS Configuration Example 85
Figure 43: WDS Configuration 86
Figure 44: Enabling WPS 88
Figure 45: WPS Configuration 89
Figure 46: Station List 90
Figure 47: MAC/IP/Port Filtering 92
Figure 48: Virtual Server 94
Figure 49: DMZ 95
Figure 50: System Security 96
Figure 51: Content Filtering 97
Figure 52: System Management 100
Figure 53: SNTP Settings 101
Figure 54: DDNS Settings (Gateway Mode) 102
Figure 55: Upgrade Firmware 103
Figure 56: Configuration Settings 104
Figure 57: System Status (Gateway Mode) 105
Figure 58: Statistics 107
Figure 59: System Log 108
Figure 60: RJ-45 Connector 116
Figure 61: Straight-through Wiring 118
Figure 62: Crossover Wiring 118

TABLES
Table 1: Key Hardware Features 21
Table 2: LED Behavior 26
Table 3: WMM Access Categories 81
Table 4: LED Indicators 111
Table 5: 10/100BASE-TX MDI and MDI-X Port Pinouts 117

– 20 –
S
ECTION
I
GETTING STARTED
This section provides an overview of the Wireless Broadband Router, and
describes how to install and mount the unit. It also describes the basic
settings required to access the management interface and run the setup
Wizard.
This section includes these chapters:
◆“Introduction” on page 21
◆“Network Planning” on page 29
◆“Initial Configuration” on page 38
◆“Installing the Gateway Router” on page 33

– 21 –
1INTRODUCTION
The Barricade Wireless Broadband Router (SMCWBR14S-N4) supports
routing from an Internet Service Provider (ISP) connection (DSL or cable
modem) to a local network. It is simple to configure and can be up and
running in minutes.
KEY HARDWARE FEATURES
The following table describes the main hardware features of the Gateway
Router.
DESCRIPTION OF CAPABILITIES
◆Internet connection through an RJ-45 WAN port.
◆Local network connection through four 10/100 Mbps Ethernet ports.
◆DHCP for dynamic IP configuration.
◆Firewall with Stateful Packet Inspection, client privileges, intrusion
detection, and NAT.
◆NAT also enables multi-user Internet access via a single user account,
and virtual server functionality (providing protected access to Internet
services such as Web, FTP, e-mail, and Telnet).
◆VPN pass-through (PPTP).
◆User-definable application sensing tunnel supports applications
requiring multiple connections.
Table 1: Key Hardware Features
Feature Description
WAN Port One 100BASE-TX RJ-45 port for connecting to the Internet.
4 LAN Ports Four 100BASE-TX RJ-45 ports for local network connections.
WPS Button To set up a secure connection to a wireless device.
Reset Button For resetting the unit and restoring factory defaults.
LEDs Provides LED indicators for Power, WAN port, and LAN ports status.
Mounting Options Can be mounted on any horizontal surface such as a desktop or
shelf, or on a wall using two screws.

C
HAPTER
1
| Introduction
Description of Capabilities
– 22 –
◆Easy setup through a Web browser on any operating system that
supports TCP/IP.
◆Compatible with all popular Internet applications.
In addition, the Gateway Router offers full network management
capabilities through an easy-to-configure web interface.
APPLICATIONS Many advanced networking features are provided by the Barricade:
◆Wired LAN — The Barricade provides connectivity to wired
10/100 Mbps devices, making it easy to create a network in small
offices or homes.
◆Internet Access — This device supports Internet access through a
WAN connection. Since many DSL providers use PPPoE to establish
communications with end users, the Barricade includes built-in clients
for these protocols, eliminating the need to install these services on
your computer.
◆Shared IP Address — The Barricade provides Internet access for up
to 253 users via a single shared IP address. Using only one ISP
account, multiple users on your network can browse the Web at the
same time.
◆Virtual Server — If you have a fixed IP address, you can set the
Barricade to act as a virtual host for network address translation.
Remote users access various services at your site using a constant IP
address. Then, depending on the requested service (or port number),
the Barricade can route the request to the appropriate server (at
another internal IP address). This secures your network from direct
attack by hackers, and provides more flexible management by allowing
you to change internal IP addresses without affecting outside access to
your network.
◆DMZ Host Support — Allows a networked computer to be fully
exposed to the Internet. This function is used when NAT and firewall
security prevent an Internet application from functioning correctly.
◆Security — The Barricade supports security features that deny
Internet access to specified users, or filter all requests for specific
services the administrator does not want to serve. WPA (Wi-Fi
Protected Access) and MAC filtering provide security over the wireless
network.
◆Virtual Private Network (VPN) — The Barricade supports one of the
most commonly used VPN protocols – PPTP. This protocol allows remote
users to establish a secure connection to their corporate network. If
your service provider supports VPNs, then these protocols can be used
to create an authenticated and encrypted tunnel for passing secure
data over the Internet (i.e., a traditionally shared data network). The
VPN protocols supported by the Barricade are briefly described below.

C
HAPTER
1
| Introduction
Package Contents
– 23 –
◆Point-to-Point Tunneling Protocol — Provides a secure tunnel for
remote client access to a PPTP security gateway. PPTP includes
provisions for call origination and flow control required by ISPs.
PACKAGE CONTENTS
The Barricade Wireless Broadband Router package includes:
◆Barricade Wireless Broadband Router
◆RJ-45 Category 5 network cable
◆AC power adapter
◆Quick Installation Guide
◆EZ Installation & Documentation CD
Inform your dealer if there are any incorrect, missing or damaged parts. If
possible, retain the carton, including the original packing materials. Use
them again to repack the product in case there is a need to return it.
HARDWARE DESCRIPTION
The Barricade Wireless Broadband Router, from herein refered to as
Gateway Router, connects to the Internet using its RJ-45 WAN port. It
connects directly to your PC or to a local area network using its RJ-45 Fast
Ethernet LAN ports.
The Gateway Router includes an LED display on the front panel for system
power and port indications that simplifies installation and network
troubleshooting.