TRENDnet TEW-411BRPplus User manual

User’s Guide 0 ser’s Guide 0 U

User’s Guide 1
Copyright Statement
No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical,
photocopying, recording, or otherwise without the prior writing of the publisher.
MAY. 2004

User’s Guide 2
Contents
1. Introduction ............................................................................................................... 3
2. Safety Notification .................................................................................................... 4
3. Hardware Installation................................................................................................ 5
4. Web Management Settings ...................................................................................... 6
4.1. Primary Setup…..……………………………………………………………………………………….7
4.2. Security…………………………………………………………………………………………………..12
4.3. System……………………………………………………………………………………………………14
4.4. DHCP Server…….……………………………………………………………………………………..17
4.5. SNMP Info……………………………………………………………………………………………….19
4.6. Status…………………………………………………………………………………………………….20
4.7. Advanced Wireless…………………………………………………………………………………...21
4.8. Access Filters…………………………………………………………………………………………..24
4.9. Virtual Server…………..……………………………………………………………………………….26
4.10. Routing Table…………………………………………………………………………………………28
4.11. Dynamic DNS……………….………………………………………………………………………..30
5. Troubleshooting ..................................................................................................... 31

User’s Guide 3
1. Introduction
Thank you for purchasing your AP Router Wireless 802.11g AP Router.
This user guide will assist you with the installation procedure.
The package you have received should contain the following items:
AP Router Wireless 802.11g AP Router
Quick Installation Guide
User’s Guide CD-ROM
Power Adapter (5V DC, 2A)
Ethernet Cable
Note: if anything is missing, please contact your vendor

User’s Guide 4
2. Safety Notification
Your Wireless AP Router should be placed in a safe and secure location. To ensure proper operation,
please keep the unit away from water and other damaging elements. Please read the user manual
thoroughly before you install the device. The device should only be repaired by authorized and
qualified personnel.
Please do not try to open or repair the device yourself.
Do not place the device in a damp or humid location, i.e. a bathroom.
The device should be placed in a sheltered and non-slip location within a temperature range of
+5 to +40 Celsius degree.
Please do not expose the device to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.

User’s Guide 5
3. Hardware Installation
Front Panel
The front panel provides LED’s for device status. Refer to the following table for the meaning of each
feature.
LED STATUS Description
Off No power
Red On 1. Power on 2. Reset to default 3. Firmware upgrade (first 1
minute)
PWR/STAT
Red Blink 1. System up 2. Power on 3. Firmware upgrade
Off no Ethernet link detected
Green On 10/100Mbps Fast Ethernet link detected. No activity.
LAN
Green
Blink Indicates data traffic on the 10/100 Mbps LAN
WAN Orange
Blink Indicates data traffic on the 10/100 Mbps WAN
G Yellow
Blink
Indicates the device is linking or active data through wireless
links
Rear Panel
The rear panel features 4 LAN ports, 1 WAN port and Reset button. Refer to the following table for the
meaning of each feature.
Power (DC 5v)
Used to connect to the power outlet. Only use the power
adapter provided with the device. Use of an unauthorized
power adapter may cause damage to your device and void
your warranty.
Reset Press the Reset Button for approximately ten seconds. All
configurations will set to factory default settings.
LAN The RJ-45 Ethernet ports are used to connect your PC,
hub, switch or Ethernet network to your AP router.
WAN The RJ-45 Ethernet port labeled WAN is used to connect
your AP Router to your xDSL or Cable modem.
AP Router Default Settings
The default settings are shown following.
User Name
Password admin
AP Router IP
Address 192.168.1.1
AP Router Subnet
Mask 255.255.255.0
RF ESSID wlan-g
11g RF Channel 6
Mode 11b+11g
Encryption Disabled
DHCP client Enabled

4 Web Management Settings
TURN ON POWER SUPPLY
Quick power cycle can caused system corruption. When power on, be careful not to shut down under
about 5 seconds, because data is writing to the flash.
START UP & LOGIN
In order to configure the Wireless 11g AP Router, you must use your web browser and manually input
http://192.168.1.1 into the Address box and press Enter. The Main Page will appear.
In order to configure the Wireless 11g AP Router, you must input the password into the Password
field. The default password is “admin”. Leave the User Name field blank.
Once you have logged-in as administrator, it is a good idea to change the administrator password to
ensure a secure protection to the Wireless 11g AP Router. The Security Settings section describes
how to change the password.
Once you have inputted the correct password and logged-in, the screen will go to the Setup page.
User’s Guide 6

User’s Guide 7
4.1. Primary Setup
MAKE CORRECT NETWORK SETTINGS OF YOUR COMPUTER
To change the configuration, use Internet Explorer (IE) or Netscape Communicator to connect the
WEB management 192.168.1.1.
Primary Setup
This screen contains all of the Router's basic setup functions.
.
Most users will be able to configure the AP Router and get it working properly using the settings on
this screen. Some Internet Service Providers (ISPs) will require that you enter AP Router Wireless
802.11g AP Router specific information, such as User Name, Password, IP Address, Default Gateway
Address, or DNS IP Address. This information can be obtained from your ISP, if required.
Internet:
Host Name: This entry is necessary for some ISPs and can be provided by them.
Domain Name: This entry is necessary for some ISPs and can be provided by them.
Configuration Type: The Router supports four connection types:
Dynamic IP Setting
Static IP Address
PPPoE (Point-to-Point Protocol over Ethernet)
PPTP (Point-to-Point Tunneling Protocol)

User’s Guide 8
These types can be selected from the drop-down menu next to Connection Type. The information
required and available features will differ depending on what kind of connection type you select.
Some descriptions of this information are included here:
• Internet IP Address and Subnet Mask
This is the Router's IP Address and Subnet Mask as seen by external users on the
Internet (including your ISP). If your Internet connection requires a static IP address,
then your ISP will provide you with a Static IP Address and Subnet Mask.
• Default Gateway
Your ISP will provide you with the Gateway IP Address.
• DNS (Domain Name Server) IP Address
Your ISP will provide you with at least one DNS IP Address.
• User Name and Password
Enter the User Name and Password you use when logging onto your ISP through a
PPPoE or PPTP connection.
• Connect on Demand
You can configure the Router to disconnect from your Internet connection after a
specified period of inactivity (Max Idle Time). If your Internet connection has been
terminated due to inactivity, Connect on Demand enables the Router to automatically re-
establish your connection as soon as you attempt to access the Internet again. If you
wish to activate Connect on Demand, click the radio button.
If you want your Internet connection to remain active at all times, enter 0 in the AP
Router 802.11g AP Router max Idle Time field. Otherwise, enter the number of minutes
you want to have elapsed before your Internet connection terminates.
• Keep Alive Option
This option keeps you connected to the Internet indefinitely, even when your connection
sits idle. To use this option, click the radio button next to Keep Alive. The default Redial
Period is 30 seconds (in other words, the Router will check the Internet connection every
30 seconds).
LAN IP Address and Subnet Mask: This is the Router's IP Address and Subnet Mask as seen on
the internal LAN. The default value is 192.168.1.1 for IP Address and 255.255.255.0 for Subnet Mask.
Wireless: This section provide the Wireless Network settings for your WLAN

User’s Guide 9
Mode: This unit supports 3 wireless mode – 11b+g , 11g Only and AfterBurner (turbo mode). Select
disable to turn off wireless.
Domain: The displaying information is related with each domain regulation.
Channel: Select the appropriate channel from the list provided to correspond with your network
settings. You shall assign a different channel for each AP to avoid signal interference.
SSID: The service set identifier ( SSID ) or network name. It is case sensitive and must not exceed 32
characters, which may be any keyboard character. You shall have selected the same SSID for all the
APs that will be communicating with mobile wireless stations.
SSID Broadcast: Enabling this option allows all wireless clients to find the AP Router. Disabling this
option allows only those wireless clients with the AP’s SSID to communicate with the AP Router.
Security: There are 3 types of security to be selected. To secure your Wireless Networks, it’s strongly
recommended to enable this feature.
WEP: Make sure that all wireless devices on your network are using the same encryption level and
key. WEP keys must consist of the letters "A" through "F" and the numbers "0" through "9."
Important Notice
In order to use WPA, please ensure that your Wireless Adapter supports WPA. WPA needs 802.1x
authentication (when RADIUS mode is chosen), though the Operating System must also support
802.1x protocol. For Microsoft’s OS family, only Windows XP has incorporated this by default. The
rest of the OS must installed 3er party’s client software such as Funk ODySSey.

-WPA-Preshared key
There are two encryption options for WPA Pre-Shared Key, TKIP and AES. TKIP stands for
Temporal Key Integrity Protocol. TKIP utilizes a stronger encryption method and incorporates
Message Integrity Code (MIC) to provide protection against hackers. AES stands for Advanced
Encryption System, which utilizes a symmetric 128-Bit block data encryption.
To use WPA Pre-Shared Key, enter a password in the WPA Shared Key field between 8 and 63
characters long. You may also enter a Group Key Renewal Interval time between 0 and 99,999
seconds.
WPA
Algorithms
Please choose your algorithms method. You can select
between TKIP or AES.
WPA Shared
Key
Please input the Pre-Shared Key. The key should be between
8 and 63 characters in alphanumeric form.
Group Key
Renewal
Please input the period of renewal time. The default selection
is 300 seconds.
User’s Guide 10

User’s Guide 11
-WPA RADIUS
WPA RADIUS uses an external RADIUS server to perform user authentication. To use WPA
RADIUS, enter the IP address of the RADIUS server, the RADIUS Port and the shared secret
from the RADIUS server.
WPA
Algorithms
Please choose your algorithm method. You can select
between TKIP or AES.
Radius
Server
Address
Please input your RADIUS Server IP address.
RADIUS
Server Port
Please input the Authentication port of your RADIUS server.
RADIUS
Shared Key
The RADIUS server will accept the authentication if the
Shared Key matches.
Group Key
Renewal
Please input the period of renewal time. The default selection
is 300 seconds.
* Click Apply to save your settings.

4.2. Security
Router Password: To change the password for the AP Router, type the new password into the Enter
New Password field, then, type it again in the Re-enter to Confirm field.
* Click the Apply button to save the setting.
Use the default password when you first open the configuration pages, after you have configured
these settings, you should set a new password for the Router (using the Security screen). This will
increase security, protecting the Router from unauthorized changes.
VPN Pass-Through: Virtual Private Networking (VPN) is typically used for work-related networking.
For VPN tunnels, the Router supports IPSec Pass-Through, L2TP Pass-Through, and PPTP Pass-
Through.
•IPSec - Internet Protocol Security (IPSec) is a suite of protocols used to implement secure
exchange of packets at the IP layer. To allow IPSec tunnels to pass through the Router, IPSec
Pass-Through is enabled by default. To disable IPSec Pass-Through, uncheck the box next to
IPSec.
•L2TP - Layer 2 Tunneling Protocol is a protocol used to tunnel Point-to-Point Protocol (PPP)
over the Internet. To allow L2TP tunnels to pass through the Router, L2TP Pass-Through is
enabled by default. To disable L2TP Pass-Through, uncheck the box next to L2TP.
•PPTP - Point-to-Point Tunneling Protocol is the method used to enable VPN sessions to a
Windows NT 4.0 or 2000 server. To allow PPTP tunnels to pass through the Router, PPTP
User’s Guide 12

User’s Guide 13
Pass-Through is enabled by default. To disable PPTP Pass-Through, uncheck the box next to
PPTP.
Web Filters: Using the Web Filters feature, you may enable up to four different filters.
•Proxy - Use of WAN proxy servers may compromise network security. Denying Proxy will
disable access to any WAN proxy servers. To enable proxy filtering, click the box next to Proxy.
•Java - Java is a programming language for websites. If you deny Java, you run the risk of not
having access to Internet sites created using this programming language. To enable Java
filtering, click the box next to Java.
•ActiveX - ActiveX is a programming language for websites. If you deny ActiveX, you run the
risk of not having access to Internet sites created using this programming language. To enable
ActiveX filtering, click the box next to ActiveX.
•Cookies - A cookie is data stored on your PC and used by Internet sites when you interact with
them. To enable cookie filtering, click the box next to Cookies.
DMZ: The DMZ hosting feature allows one local user to be exposed to the Internet for use of a
special-purpose service such as Internet gaming or videoconferencing. DMZ hosting forwards all the
ports at the same time to one PC. The Port Forwarding feature is more secure because it only opens
the ports you want to have opened, while DMZ hosting opens all the ports of one computer, exposing
the computer so the Internet can see it.
Any PC whose port is being forwarded must have its DHCP client function disabled and should have a
new static IP address assigned to it because its IP address may change when using the DHCP
function.
1. To expose one PC, select Enable.
2. Enter the computer's IP address in the DMZ Host IP Address field.
3. Click the Apply button.
Block WAN ICMP Request: By enabling the Block WAN Request feature, you can prevent your
network from being "pinged," or detected, by other Internet users. The Block WAN Request feature
also reinforces your network security by hiding your network ports. Both functions of the Block WAN
Request feature make it more difficult for outside users to work their way into your network. This
feature is enabled by default. Select Disable to disable this feature.
* Check all the settings and click Apply to save them.

4.3. System
Restore Factory Defaults: Click the Yes button to reset all configuration settings to factory default
values. Note: Any settings you have saved will be lost when the default settings are restored. Click the
No button to disable the Restore Factory Defaults feature.
Click the Apply button to save the setting.
Firmware Upgrade: Click the Upgrade button to load new firmware onto the Router. If the Router is
not experiencing difficulties, then there is no need to download a more recent firmware version, unless
that version has a new feature that you want to use.
Note: When you upgrade the Router’s firmware, you may lose its configuration settings, so
make sure you write down the Router’s settings before you upgrade its firmware.
To upgrade the Router’s firmware:
1. Download the firmware upgrade file from the internet.
2. Extract the firmware upgrade file.
3. Click the Upgrade button.
User’s Guide 14

User’s Guide 15
4. On the Firmware Upgrade screen, click the Browse button to find the firmware upgrade file.
5. Double-click the firmware upgrade file.
6. Click the Upgrade button, and follow the on-screen instructions.
Note: Do not power off the Router or press the Reset button while the firmware is being
upgraded.
Multicast Pass-Through: IP Multicasting occurs when a signal data transmission is sent to multiple
recipients at the same time. Using the Multicast Pass-Through feature, the Router allows IP multicast
packets to be forwarded to the appropriate computers. Keep the default setting, Enable, to support the
feature, or select Disable to disable it.
MAC Cloning: The Router’s MAC address is a 12-digit code assigned to a unique piece of hardware
for identification. Some ISPs require that you register the MAC address of your network card/adapter,
which was connected to your cable or DSL modem during installation. If your ISP requires MAC
address registration, find your adapter’s MAC address by following the instructions for your PC’s
operating system.
For Windows 98 and Millennium:
1. Click the Start button, and select Run.
2. Type winipcfg in the field provided, and press the OK key.
3. Select the Ethernet adapter you are using.
4. Click More Info.
5. Write down your adapter’s MAC address.
For Windows 2000 and XP:
1. Click the Start button, and select Run.
2. Type cmd in the field provided, and press the OK key.
3. At the command prompt, run ipconfig /all, and look at your adapter’s physical address.
4. Write down your adapter’s MAC address.
To clone your network adapter’s MAC address onto the Router and avoid calling your ISP to change
the registered MAC address, follow these instructions.

User’s Guide 16
1. Select Enable.
2. Enter your adapter's MAC address in the MAC Address field.
3. Click the Apply button.
To disable MAC address cloning, keep the default setting, Disable.
Remote Management: This feature allows you to manage your Router from a remote location, via the
Internet. To disable this feature, keep the default setting, Disable. To enable this feature, select
Enable, and use the specified port ( default is 8080) on your PC to remotely manage the Router. You
must also change the Router’s default password to one of your own, if you haven’t already. A unique
password will increase security.
To remotely manage the Router, enter http://xxx.xxx.xxx.xxx:8080 (the x’s represent the Router’s
Internet IP address, and 8080 represents the specified port) in your web browser’s address field. You
will be asked for the Router’s password. After successfully entering the password, you will be able to
access the Router’s web-based utility.
Note: If the Remote Management feature is enabled, anyone who knows the Router’s Internet IP
address and password will be able to alter the Router’s settings.
MTU: MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for
Internet transmission. Keep the default setting, Auto, to have the Router select the best MTU for your
Internet connection, To specify a MTU size, select Manual, and enter the value desired (default is
1400). You should leave this value in the 1200 to 1500 range.
Traffic Log: The Router can keep logs of all incoming or outgoing traffic for your Internet connection.
This feature is disabled by default. To keep activity logs, select Enable.
To keep a permanent record of activity logs as a file on your PC’s hard drive, Log viewer software
must be used. In the Send Log to field, enter the fixed IP address of the PC running the Log viewer
software. The Router will send updated logs to that PC.
To see a temporary log of the Router’s most recent incoming traffic, click the Incoming Access Log
button. To see a temporary log of the Router’s most recent outgoing traffic, click the Outgoing
Access Log button.
Click the Apply button to save the setting.

User’s Guide 17
4.4. DHCP Server
The DHCP Server screen allows you to configure the settings for the Router's Dynamic Host
Configuration Protocol (DHCP) server function. The Router can be used as a DHCP server for your
network. A DHCP server automatically assigns an IP address to each computer on your network. If
you choose to enable the Router's DHCP server option, you must configure your entire network PCs
to connect to a DHCP server, the Router.
If you disable the Router's DHCP server function, you must configure the IP Address, Subnet Mask,
and DNS for each network computer (note that each IP Address must be unique).
DHCP Server: Select the Enable option to enable the Router's DHCP server option. If you already
have a DHCP server on your network or you do not want a DHCP server, then select Disable from
the options.
Starting IP Address: Enter a numerical value for the DHCP server to start with when issuing IP
addresses. Because the Router's default IP address is 192.168.1.1, the Starting IP Address must be
192.168.1.2 or greater, but smaller than192.168.5.253. The default Starting IP Address is
192.168.1.100.

User’s Guide 18
Maximum Number of DHCP Users: Enter the maximum number of PCs that you want the DHCP
server to assign IP addresses to. The absolute maximum is 253 - possible if 192.168.1.1 is your
starting IP address. The default is 50.
Client Lease Time: The Client Lease Time is the amount of time a network user will be allowed
connection to the Router with their current dynamic IP address.
Enter the amount of time, in minutes, that the user will be "leased" this dynamic IP address. The
default is 0 minutes, which means one day.
Static DNS 1-3: The Domain Name Server (DNS) is how the Internet translates domain or website
names into Internet addresses or URLs. Your ISP will provide you with at least one DNS Server IP
Address. If you wish to utilize another DNS, enter that IP Address in one of these fields. You can enter
up to three DNS Server IP Addresses here. The Router will utilize these for quicker access to
functioning DNS servers.
WINS: The Windows Internet Naming Service (WINS) manages each PC’s interaction with the Internet.
If you use a WINS server, enter that server’s IP Address here. Otherwise, leave this field blank.
Currently Assigned: Click the DHCP Clients Table button to see a list of PCs assigned IP addresses
by the Router. For each PC, the list shows the Computer Name, MAC address, IP address, and the
amount of DHCP client lease time left. Click the Refresh button to display the most current information.
* Click Apply to save your settings.

User’s Guide 19
4.5. SNMP
SNMP: The SNMP INFO screen allows you to customize the Simple Network Management Protocol
(SNMP) settings. SNMP is a popular network monitoring and management protocol.
SNMPv2c To enable the SNMP support feature,
select Enable. Otherwise, select Disable.
Contact In the contact field, enter contact
information for the Router.
Unit Name
and
Description
In the Unit Name and Description field,
enter the name of the Router.
Identification
Physical
Location
In the Physical Location field, specify the
area or location where the Router resides.
public You may change the SNMP Community’s
name from its default, public. Then
configure the community’s access as
either Read-Only or Read-Write.
SNMP Community
private You may change the SNMP Community’s
name from its default, public. Then
configure the community’s access as
either Read-Only or Read-Write.
Click Apply to save your settings.