IMPORTANT - EnGenius...7 Reset Button — For resetting the router to its factory default settings by pressing button for more than 11 seconds or until the Power LED starts flashing

1

2

IMPORTANT

To install this router, please refer to the Quick Start Guide included in the product packaging.

To activate and use EnShare™ refer to the document “Using EnShare” also in the product packaging.

3

Chapter 1 Product Overview..............................................................5 Key Features....................................................................................................6 TechnicalSpecifications/SoftwareFeatures...................................8 Physical Interface..........................................................................................9

Chapter 2 Controlling the Router Through Its Web Configuration Interface...........................................................10 Logging In.....................................................................................................11 ViewingtheWebConfigurationDashBoard..................................12 Home Page...................................................................................................13 WebMenusOverview...............................................................................14 Internet.................................................................................................15 Wireless2.4GHz..........................................................................................16 ParentalControls........................................................................................17 GuestNetwork.............................................................................................18 IPv6.......................................................................................................19 Firewall................................................................................................20 VPN.................................................................................................................21 USBPort..........................................................................................................22 Advanced.......................................................................................................23 Tools................................................................................................................25

Chapter 3 Installation Setup Wizard..............................................26 InternetSetupWizard...............................................................................27 SettingUpYourInternetConnection.................................................28 SettingYourWirelessSecurity..............................................................29 SettingyourRouter’sAdministratorPassword.............................30 Setting your Router’s Time Zone........................................................31 Status and Save Settings.......................................................................33

Chapter 4 Basic Network Settings.................................................34 NetworkSettings.......................................................................................35 Status.............................................................................................................36 WANSettings...............................................................................................37 LANSettings................................................................................................38 WLANSettings............................................................................................39 GuestNetwork............................................................................................40 ConfiguringtheLAN(LocalAreaNetwork).....................................41 DHCPServer.................................................................................................42 ConfiguringDynamicHostConfigurationProtocol.......................43 EnableStaticDHCPIP..............................................................................44 CurrentStaticDHCPTable......................................................................45 ConfiguringEventLogging.....................................................................46 MonitoringBandwidthUsage................................................................47 ConfiguringtheSystemLanguage.....................................................48 ConfiguringIPCameras............................................................................49 ConfiguringInternetSettings...............................................................50 ConfiguringDynamicIP...........................................................................51 DNSServers..................................................................................................52 ConfiguringStaticIP.................................................................................53 ConfiguringPPPoE.....................................................................................54 ConfiguringPPTP.......................................................................................55 PPTP Settings..............................................................................................56 Configuring L2TP.......................................................................................57 L2TPSettings..............................................................................................58 ConfiguringDS-Lite...................................................................................59 WirelessLANSetup...................................................................................60 AccessPointMode....................................................................................61 WirelessDistributionSystemMode....................................................62 WDSSecuritySettingsScreen...............................................................63

Table of Contents

4

Chapter 5 Wireless Encryption.....................................................64 Wi-FiProtectAccess(WPA)Pre-SharedKey..................................65 ConfiguringSecurity.................................................................................66 Encryption Type.........................................................................................67 WPA Radius..................................................................................................68 WiredEquivalentPrivacy(WEP)...........................................................69 ConfiguringFilters......................................................................................70 MACAddressFilteringTable.................................................................71 ConfiguringWi-FiProtectedSetup....................................................72 ConfiguringClientList.............................................................................73

Chapter 6 Advanced Settings...........................................................74 ConfiguringAdvancedSettings............................................................75 SettingUpParentalControls.................................................................77 AddingaControlPolicy............................................................................78 ViewingParentalPolicies........................................................................81 GuestNetwork............................................................................................82 ConfiguringtheDHCPServerSetting...............................................83 ViewingtheDHCPClientListontheGuestNetwork.................84 IPv6.................................................................................................................85 ViewingtheIPv6ConnectionStatus.................................................86 ConfiguringStaticIPv6............................................................................87 SettingAutoconfiguration.....................................................................88 Configuring PPPoE....................................................................................89 Configuring6to4........................................................................................91 ViewinglocalConnections.....................................................................92 Firewall Setup.............................................................................................93 ConfiguringAdvancedSettings...........................................................94 ConfiguringDemilitarizedZone...........................................................96 ConfiguringDenialofService................................................................97 VirtualPrivateNetworkSetup..............................................................98 ConfiguringaVPNTunnelProfile.........................................................99 General........................................................................................................100 SA(SecurityAssociation)......................................................................101

Network.......................................................................................................102 Advanced.....................................................................................................103 ConfiguringaUserSetting...................................................................104 USBPort/Enshare..................................................................................105 ViewingFileServer.................................................................................106 ViewingDLNA...........................................................................................107 AdvancedNetworkSettings................................................................108 PortMappingSetup................................................................................109 CurrentPortMappingTable................................................................110 PortForwardingSetup...........................................................................111 CurrentPortForwardingTable..........................................................112 Port Triggering Setup............................................................................113 ApplicationLayerGetawaySetup....................................................115 Universal Plug and Play Setup...........................................................116 InternetGroupMulticastProtocolSetup.......................................117 QualityofServiceSetup.......................................................................118 Priority Queue...........................................................................................119 BandwidthAllocation.............................................................................120 Routing Setup...........................................................................................121 WakeonLANSetup................................................................................122 Tools Setup................................................................................................123 SystemTimeSetting..............................................................................124 SynchronizingTimewithaComputer.............................................125 DynamicDomainNameService(DDNS)Setup............................126 DiagnoseThatClientDevicesAreConnected.............................127 UpgradingtheRouter’sFirmware....................................................128 BackingUptheRouter’sSettings.....................................................129 RebootingtheRouter............................................................................130

Appendix..........................................................................................131 WallMountingtheRouter....................................................................132 FCCInterferenceStatement...............................................................133 IndustryCanadaStatement................................................................134

5

Chapter1 Product Overview

6

MaximumdataratesarebasedonIEEE802.11standards.Actualthroughputandrangemayvarydependingonmanyfactorsincludingenvironmentalconditions,distancebetweendevices,radiointerferenceintheoperatingenvironment,andmixofdevicesinthenetwork.EnGeniusTechnologies,Inc.EnShareTMsupportsbothFAT32andNTFSUSBformats.Transferspeedsofdatafromyourrouter-attachedUSBstoragedevicetoaremote/mobiledevicemayvarybasedonInternetuplinkanddownlinkspeeds,bandwidthtrafficateithersendorreceivelocations,thedataretrievalperformanceoftheattachedstoragedeviceorotherfactors.EnGeniusdoesnotguaranteecompatibilitywithallUSBdrives.EnGeniusdoesnotwarrantitsproductsorEnSharefromlossofdataorlossofproductivitytime.Featuresandspecificationssubjecttochangewithoutnotice.Trademarksandregisteredtrademarksarethepropertyoftheirrespectiveowners.ForUnitedStatesofAmerica:Copyright©2013EnGeniusTechnologies,Inc.Allrightsreserved.

Therouter’sdesignenablesuserstoconnectnumerouswired

andwirelessdevicestoitandsupportsintensiveapplications

likestreamingHDvideoandsharingofmediainthehomeand

accessingmediaawayfromthehomewithEnShare-Your

PersonalMediaCloud.

Product Overview

Key Features

• WirelessN300IEEE802.11b/g/n• Upto300Mbpsinthe2.4GHzfrequencyband• Built-in4-PortGigabitSwitchforoptimalaudio/visual

streaming• USBPorttoshareandaccessmediacontentinthehomeor

whenyou’reawayfromhomewithEnShare™• XtraRange™Technologyforbettersignalcoverage

throughout your home• NextGenerationIPv6Compliant• ParentalControls• Upto4GuestAccesssettings• Industry-standardWirelessEncryptionandSecurity• VPNServerSupportLite-BusinessApplications• EasySetupWizard•

Robust and Reliable Wireless PerformanceTheESR350isanXtraRangeWirelessN300Routerwitha

built-in4-portGigabitEthernetswitch.Thiscosteffective

routercanconnecttoDSLorcablemodemstoprovide

high performance Internet access for desktop or laptop

computers,tablets,smartphonesandawidevarietyofhome

entertainmentdevices,likeHDTVs,settopboxes,Blu-ray

players and game consoles.

7

Product Overview

A Media Sharing PlatformTheESR350isdesignedtoaccessandsharemediafor

devicesonthehomenetwork.Inadditiontoconnecting

homeentertainmentcomponentstoanyofitsavailable

GigabitEthernetports,theESR350alsoincludesaUSBport

forattachingaUSBstoragedevicesowirelessdevicesin

thehomeorawayfromthehomecanaccessmediacontent

whereverthereisanavailableInternetconnectionthrough

EnShare™-YourPersonalMediaCloud.

EnShareisavailableasanInternetportalforaccessingstored

mediaconnectedtotheUSBportoftherouter(Seethe

UsingEnSharedocumentintheproductpackaging).EnShare

willalsobeavailableasanappforAppleiOSdevices(iPads,

iPodsandiPhones)andAndroid-baseddevices(smartphones,

tabletPCs,Kindleandothermobilereaders)soon.Theapps

willbeavailablethroughAppleiTunesStoreandGooglePlay

respectively.

Industry-standard Wireless SecurityThe router supports a variety of security features and

mechanismsincludingindustry-standardWPA/WPA2wireless

encryptiontopreventunauthorizedaccesstoyournetwork.It

alsoincludesabuilt-inSPI(StatefulPacketInspection)firewall

tohelppreventattacksfrommalicioussoftware(malware)

from the Internet. The router also supports IPv6.

Attach USB storage to the ESR350 and access video, music, and other media throughout your home or away from home from your smartphone, tablet, or laptop.

USBMediaAnywhere with EnShareTM

More Guest Access OptionsTheESR350alsoincludesuptofour(4)separateanddiscrete

GuestAccessoptionsallowingtherouter’sadministratorto

assigndifferentnames(SSIDs-ServiceSetIdentifiers)foreach

logintothehomenetworksofriendsorvisitorscanaccessthe

user’sInternetconnectionwithoutaccessingpersonaldata

storedonnetworkedcomputersinthehome.

8

Technical Specifications

Device InterfaceGigabitWANPort4GigabitLANPortsUSB2.0PortPushButtonforWPSResetButton

IEEE Standards802.11b/g/nUpto300Mbpswirelessspeedinthe2.4GHzfrequencyband802.3i/u/ab

LED IndicatorsPowerWLAN(WirelessConnection)Internet

Package ContentsESR350RouterPowerAdapter(12V1A)QuickStartGuideRJ45EthernetCable

Power SpecificationExternalPowerAdapterDCIn,12V1A

CertificationsFCC/CE/IC

Physical/Environmental ConditionsOperatingTemperature:0º~40ºCelsiusHumidity:90%orless(non-condensing)StorageTemperature:-20º~60ºCelsiusHumidity:95%orless(non-condensing)

Software Features

Frequency Bands2.400~2.484GHz(11b/11g/11n)

Operating ModeAPRouter/WDS

Wireless FeaturesAutoChannelSelectionOutputPowerControlWMM(WirelessMultimedia)MSSID(MultipleSSID)

SecurityWEP/WPA-PSK/WPA2-PSKTKIP/AESHiddenSSIDMACAddressFiltering802.1XAuthenticationDDoSDHCPServer/ClientSPI(StatefulPacketInspection)NATPortForwardingDMZPortMapping/TriggeringVPNServer(PPTP/L2TP)VPNClient(PPTP/L2TP)VPNPass-through(PPTP/L2TP/IPSec)RuleBased(IPAddressRanges,PortBlockICMPVPNTunnel(Maximum5)QoSIP FilteringPort FilteringDDNSIPv6Pass-throughMACCloneTrafficMonitorWANType:PPPoE/DHCP/StaticIPUSBFeatures:SAMBA

9

Physical InterfaceDimensions and WeightsWeight:0.5lbs.Diameter:6.36”Height:1.64”

1 WLAN 2.4 GHz LED2 Power LED3 WAN Port/(Internet) Status LED

4DC Power Jack—connectstheESRSeriesRoutertoitsDCpoweradapter

5 WAN Port—connectstheESRRoutertoacableorDSLmodemtoaccesstheuser’sbroadband(Internet)connection

6 LAN Ports (1 – 4) — for connecting home entertainment components,computersorotherEthernet-enableddevicesusingEthernetcables

7Reset Button — For resetting the router to its factory default settingsbypressingbuttonformorethan11secondsoruntilthePowerLEDstartsflashing.

8USB PortforconnectingaUSBStorageDevice9 WPS Button—Wi-FiProtectedSetupbutton.Toassociate

anotherWPS-enabledclientdevice(computer,wirelessmediabridge,USBadapter,etc.)presstheWPSbuttonfor2to5secondsontherouterwhilealsopressingtheWPSbuttononthe end device.

Whenconsideringtheplacementoftherouterrememberthefollowing:• Itmustbeclosetoanelectrical

outlet.• Foroptimalwirelessconnectivity,

place the router near the center of theroomifpossible,atahighlevel

Otherelectronicdevicesandsomearchitectural construction materials orimpedimentsmayinterferewiththewirelesssignal(s)oftherouterand reduce its range or coverage. Try tominimizethenumberofwallsorfloorsthattherouter’ssignalneedstopenetratetoconnecttootherwirelessdevices.

10

Chapter2 Controlling the Router Through Its Web Configuration Interface

11

Logging InDuringtheQuick Start Guide procedure, you should have

successfully logged into the router’s Web Configuration user interface (essentiallytherouter’soperatingsystemthatcontrolshowitoperates)andestablishedsomeinitialsettings

and controls for the router.

Ifyouwishtochangetherouter’ssettings (establishanewusernameandpasswordforthepersonwhomanages

andmaintainstherouter,setParentalControls,establish

aGuestAccess-SSIDsettingforvisitors,oranynumberof

othersettings)youcanlogintotheWebConfigurationagain

throughthewebbrowser(InternetExplorer,Safari,Chrome,

Firefox)onyourcomputerortabletdevice.

To do this, enter the router’s default IP address of

192.168.0.1intoyourbrowser’saddresswindow.1.Attheloginscreenenteryourusernameandapassword

2.ClickLogintocontinue.

The default login settings are:

username: admin

password:admin

It’s highly recommended that, if you haven’t done so already,

to change these default names, so your router and the devices

connectedtoitonyourhomenetworkaremoresecure.

12

Viewing the Web Configuration Dash BoardTheHomePagescreenoftheWebConfigurationinterface,ordashboard,providesaccesstotherouter’ssettingsandcontrols.

Home Page

Home

SetupWizard

NetworkSettings

USBStorageSharing

IPCamViewer

Language

Logout

13

Home Page

The Home PagedisplaystheareaswithintheWebConfigurationtowhichyoucannavigate:Setup Wizard,

Network Settings, USB Storage Sharing, IP Cam Viewer,

Language, and Logout

HomeTheHomelinktakesyoubacktothedashboardscreenno

matterwhereyouareintheWebConfigurationinterface.

Setup WizardTheSetupWizardlinkstartsthewizardthatautomatically

configurestherouter.

Network SettingsTheNetworkSettingslinkdisplaysthemenustomanually

configuretherouter.

USB Storage SharingTheUSBStorageSharinglinkdisplaysthemenustoaccess

shared storage devices connected to the router.

IP Cam ViewerTheIPCamViewerlinkdisplaysthemenustoviewanIP

cameraconnectedtothenetwork.

LanguageTheLanguagelinkdisplaysthemenutosettheOSDlanguage.

LogoutTheLogoutlinkclosestherouter’sWebConfiguration

interface from any screen.

14

Web Menus Overview

SystemViewandeditsettingsthataffectsystemfunctionality.

Operation ModeConfigurethedevicetobearouterorWDSaccesspoint.

StatusDisplaysthesummaryofthecurrentsystemstatus.

ScheduleScheduleservicestostartandstopatspecifictimesorintervals.

Event LogViewrecordedsystemoperationsandnetworkactivityevents.

MonitorViewthecurrentnetworktrafficbandwidthusage.

LanguageConfiguretheapplicationmenuandGUIlanguage.

IP CameraViewtheIPcamerasconnectedtotheESRSeriesRouter.

15

InternetViewandeditsettingsthataffectnetworkconnectivity.

StatusDisplaysasummaryoftheInternetstatusandtypeofconnection.

Dynamic IPSetupadynamicIPconnectiontoanISP(InternetServiceProvider).

Static IPSetup a static IP connection to an ISP.

PPPoESetup a PPPoE connection to an ISP.

PPTPSetup a PPTP connection to an ISP.

L2TPSetup an L2TP connection to an ISP.

16

Wireless 2.4 GHzViewandeditsettingsfor2.4GHzwirelessnetworkconnectivity.

StatusViewthecurrentwirelessconnectionstatusandrelatedinformation.

BasicConfiguretheminimumsettingsrequiredtosetupawirelessnetworkconnection.

AdvancedConfiguretheadvancednetworksettings.

SecurityConfigurethewirelessnetworksecuritysettings.

FilterEstablishalistofclientdevices(computer,tablets,smartphones,printers,etc.)

basedontheirMAC(MediaAccessControl)numbersthatareallowedtowirelessly

connecttothe2.4GHznetwork.

WPSAutomatestheconnectionbetweenawirelessdeviceandyourencryptedrouter

usingan8-digitPIN.

Client ListViewthe2.4GHzwirelessdevicescurrentlyconnectedtothenetwork.

17

Parental ControlsViewandeditsettingsforparentalcontrols.

WizardEnableordisabletheParentalControlsfunction.Themenualsoprovidesinforma-

tionforconfiguringparentalcontrolpolicies.

Web MonitorThemenuprovidesalogoftheeventsfordefinedparentalcontrolpolicies.

18

Guest NetworkViewandeditsettingsforaguestnetwork.

SelectionEnableordisabletheGuestNetworkfunction.

DHCP Server SettingConfiguretheGuestNetworkDHCPserversettings.

DHCP Client ListConfiguretheGuestNetworkclientlist.

19

IPv6ViewandeditsettingsfortheIPv6protocol.

BasicAllowsyoutoenableordisabletheIPv6andIPv6Pass-throughfunctions.

StatusShowsIPv6LANconnectiondetails.

Static IPv6ConfiguretheIPv6protocol.

Auto ConfigurationConfiguretheIPv6byobtainingtheinformationthroughtheISPprovider.

PPPoEConfigurethePPPoEnetworkprotocol,obtaininformationfromyourISP(Internet

ServiceProvider).

6to4AllowsIPv6packetstobetransmittedoveranIPv4network.

Link LocalConfiguretheIPv6linklocaladdress.

20

FirewallViewandeditsettingsforthenetworkfirewall.

BasicEnableordisablethenetworkfirewall.

AdvancedConfigurevirtualprivatenetwork(VPN)packets.

DMZRedirectpacketsfromtheWANportIPaddresstoaparticularIPaddressonthe

LAN.

DoSEnableordisableblockingofDoS(DenialofService)attacks.

ACLConfigureaccesscontrollists.

21

VPNViewandeditsettingsforVPNtunnelling.

StatusViewthestatusofcurrentVPNtunnels.

Profile SettingManuallyconfigureVPNtunnels.

User SettingConfigureusers,userIDandpasswordcombinations,andassignaccesstospecific

VPNtunnels.

WizardAutomaticallyconfigureVPNtunnelswithguidancefromthesoftware.

22

USB PortForviewingandeditingsettingsforstoragesharing.

EnShare™EnablesordisablestheEnShareremoteaccessfunction.

File SharingEnablesordisablestheSambasharingfunction.

File ServerEnablesandconfigurestheFileServerfunction.

DLNAEnablesthediscoveryofDLNAdevices(someHDTVs,gameconsoles,somesettop

boxes/mediaplayers,Blu-rayplayers,somesmartphones,andnetworkattached

storage)onthehomenetwork.

23

AdvancedViewandconfigureadvancedsystemandnetworksettings.

NATEnableordisableNetworkAddressTranslation(NAT).

Port MappingRe-directarangeofserviceportnumberstoaspecifiedLANIPaddress.

Port ForwardingConfigureserverapplicationstosendandreceivedatafromspecificportsonthe

network.

Port TriggeringConfigureapplicationsthatrequiremultipleconnectionsanddifferentinboundand

outboundconnections.

ALGConfiguretheapplicationlayergateway(ALG).

UPnPEnableordisableUniversalPlugandPlay(UPnP)functionality.

IGMPEnableordisabletheInternetGroupMulticastProtocol(IGMP).

24

QoSConfiguresthenetworkqualityofservice(QoS)settingbyprioritizingtheuplink

anddownlinkbandwidth.

RoutingConfigurestaticrouting.

WOL(WakeOnLAN)ConfigureWakeonLANtoturnonacomputeroverthenetwork.

25

ToolsForviewingandconfiguringtherouter’soperatingsystemandnetworktools

settings.

AdminForsettingtheadministrator’spasswordusedtologintotherouter.

TimeForconfiguringthesystemtimeontherouter.

DDNSMapsastaticdomainnametoadynamicIPaddress.

DiagnosisToperformaPingtesttoverifywhetheraspecificdeviceisconnectedtotheLAN.

FirmwareForupdatingtherouter’sfirmware.

BackupForloadingorsavingtheconfigurationsettingstoorfromabackupfileorto

restore the router to its factory default settings.

ResetRebootstherouter.

26

Chapter3 Installation Setup Wizard

27

Internet Setup Wizard

UsetheWizardtodetectandsetupthe

type of Internet connection you need,

tosetupasecurewirelessconnection,

tocreateanadministratorpasswordto

secure the device, or set the router’s date

and time properties.

TousetheInternetSetupWizard,follow

these steps:

1. Click the Wizard buttontoshowtheWizardstartscreen.

2.ClickNexttocontinuewiththesetupprocedure.

Home

SetupWizard

28

1.DecidehowtosetuptheInternetconnection.

Note:It is recommended to let the device setup the Internetconnection automatically.

• Select Auto DetecttolettheWizardsetuptheInternetconnection.

• Select Manual Setup to set the properties yourself.

2.ClickNext to continue or Prev to return to the previous

screen.

If you selected Manual Setup,followthesesteps:

3. Select the Internet connection type and enter the

connection properties.

Setting Up Your Internet ConnectionNote:TheconnectiontypesavailablearestaticIP,PPPoE,DynamicIP,PPTP,andL2TP.

4.ClickNext to continue, Prev to return to the previous

screen, or Cancel to stop the procedure.

29

Settingwirelessencryption.

ToencryptthewirelesssignalintheESR350router,followthese

steps:

1.EntertherouternameinthewirelessName(SSID)textfield.

2.SelectthesecuritylevelfromtheEncryptiondropdownlist.

3.EnterapasswordintheEncryptionKeytextfield.

4.Repeatsteps1through3toencrypttheband

5.ClickNext to continue, Prev to return to the previous screen, or

Cancel to stop the procedure.

Setting Your Wireless Security

Important:Toensurethenetworkissecure,itisrecommended to select High for an encryption level.

30

Setting Your Router’s Administrator PasswordSetupapasswordtologintotheESRSeriesRouter.

1.EnterapasswordintheNew Passwordtextfield.2.EnterthesamepasswordintheRepeat New Passwordtextfield.3.ClickPrev to return to the previous screen, Skip to skip this procedure, Next to

continue, or Cancel to stop the procedure.

31

Setting Your Router’s Time ZoneSetupdateandtimesyncronizationontheESRSeriesRouter

withacomputeroranNetworkTimeProtocol(NTP)server.

Tosynchronizedateandtimesettingswithacomputer,follow

these steps:

1.SelectSynchronizewithPC(computer)fromtheTime Setup

dropdownlist.ThedateandtimevaluesareshowninthePC Date and Timetextfield.

2.ClickPrev to return to the previous screen, Apply to save the

settings, or Cancel to stop the procedure.

TosynchronizethedateandtimesettingswithanNTPserver,

followthesesteps:

1. Select SynchronizewithNTPServerfromtheTime Setup

dropdownlist.

2.SelectatimezonevaluefromtheTime Zonedropdownlist.3.EnteranIPaddressordomainnameofanNTPserverinthe

NTP Servertextfield.

4.ClicktheEnable Daylight Savingscheckboxtoenableordisabledaylightsavingstime.

5.Selectthedateandtimevalueswhendaylightssavings

time starts in the Start Timedropdownlists.

32

6.Selectthedateandtimevalueswhendaylightssavings

time ends in the End Timedropdownlists.

7.ClickPrev to return to the previous screen, Apply to

save the settings, or Cancel to stop the procedure.

33

Status and Save SettingsThisscreenletsyoureview,changeandsaveyourInternet

connection,savewirelesssecuritysettingsorsetupupauser-

specifiednameforthedefaultEnGeniusDDNSservice.

Toreviewormodifythedevicesettings,followthesesteps:

1.ReviewthesettingsshownonthescreenfortheInternet

connection,the2.4GHznetwork,andtherouteradministrator

login.

2. You can change settings to the Internet connection and

wirelessnetworksettingsbyclickingtheSetupbutton.

Youmaywishtouseadifferentnamethat’seasiertoremember

forthedefaultEnGeniusDDNSserviceusedfortheEnShare™

feature.TospecifyyourownDDNSname,followthesesteps:

3. The Enableoptionshouldbeselectedbydefault.a. Enter the name in the Domain Nametextfield.b.SelectatimeintervaltorefreshtheDNSrecordsfromthe

Refreshdropdownlist.c.ClickApplytosavetheDDNSnameyouhaveentered.

4.ClickSavetoexittheWebConfigurationinterface.Therouterwillreboot(restart)toapplyallthesettingsyou’vespecified.

Devicesconnectedtotherouterwilltemporarilylosetheir

Internetconnection.Therebootmaytakeseveralseconds

beforetherouterandyourInternetconnectionareonceagain

available.

WARNING! Selecting DisableintheDDNSSettings/Statusfieldwilldisconnecttherouter’sconnection

tothedefaultEnGeniusDDNSserverandasaresult

willdisabletheEnSharefeaturewhichletsyouaccess

mediafromaUSBstoragedeviceconnectedtoyour

ESRpodrouterwhenyou’reawayfromyourhome.

34

Chapter4 Basic Network Settings

35

Network Settings

Viewing System StatusToseeamoredetailedviewoftherouter’sstatusthan

theinformationdisplayedontheHomepageoftheWeb

Configurationinterface,fromtheHomePageclickonNetwork Settings buttonintheuppernavigationbar.

Home

NetworkSettings

36

StatusToviewtheStatussettings,clickSystem then click Status.

OntheStatuspage,youcanviewasummaryofthecurrentroutersystemstatusincludingtherouter’s(hardware/software

version,date/time),wirednetwork(LAN)andwirelessnetwork

(WLAN)information.

ModelThe model name of the ESR Series Router.

ModeThe operating mode of the ESR Series Router.

UptimeTheamountoftimetheESRSeriesRouterhasbeenconnected

for the current session.

Current Date/TimeThe current system date and time.

Hardware VersionThehardwareversionnumberoftherouter.

Serial NumberTheserialnumberoftherouter(requiredforcustomerserviceor

support).

Application VersionTheversionoftherouter’sfirmware.

Note:Toupdatetherouter’sfirmware,visitwww.engeniustech.com and go to the product page for your router, then select the Downloadstabatthebottomofthewebpagetoseeifanewerversionofthefirmwareisavailable.

37

WAN Settings

Attain IP ProtocolDisplaystheIPprotocolinusefortherouter.Itcanbea

dynamic or static IP address.

IP AddressTherouter’sIPaddressasdesignatedbyanISP(InternetService

Provider).

Subnet MaskTherouter’sWANsubnetmaskasdesignatedbyanISPprovider.

Default GatewayTherouter’sgatewayaddressasdesignatedbyanISPprovider.

MAC AddressTherouter’sWANMAC(MediaAddressControl)address.The

router’sMACaddressislocatedonthelabelonthebottompanel

oftherouterandisuniqueforeachrouter.

Primary DNSTheprimaryDNSofanISPprovider.

Secondary DNSThesecondaryDNSofanISPprovider.

38

LAN Settings

IP AddressTherouter’slocalIPaddress.ThedefaultLANIPaddressis

http://192.168.0.1ToaccesstheWebConfigurationinterfacefortherouter,type

thisaddressintotheaddress(URL)fieldofyourwebbrowser.

Thiscanonlybedoneinthesamephysicallocationwherethe

routerresides(yourhomenetwork).

Subnet MaskTherouter’slocalSubnetMask.

DHCP ServerTheDHCPsettingstatus(Default:Enabled).TheDHCP(Dynamic

HostControlProtocol)isasoftwaremechanisminyourrouter

thatassignsIPaddressestowiredandwirelessdevicesonyour

network,forexample,acomputer,printer,tabletorHDTVonyour

networkmaybeassignedanIPaddressofhttp://192.168.0.104.

Notehowtheaddressisessentiallyanextensionoradditionof

your router’s IP address.

MAC AddressTherouter’suniqueMACaddress.

39

WLAN Settings

ChannelThecommunicationschannelusedbyallstations,orcomputing

devices,onthenetwork.

ESSIDTheIDvalueofasetofoneormoreinterconnectedbasicservice

sets(BSSs).

SecurityThesecuritysettingstatus(Default:Disabled).

BSSIDTheuniqueIDoftheBSSusingtheabovechannelvalueonthis

router.TheIDistheMACaddressoftheBSSsaccesspoint.

Associated ClientsThenumberofclientsassociated(activelylinkedtotheroutervia

awirelessorwired/Ethernetconnection)withthisSSID.

40

Guest Network

Guest NetworkTheguestnetworkstatus.(Default:Disabled)

IP AddressTheGuestNetwork’sLANIPaddress.

Subnet MaskTheGuestNetwork’slocalsubnetmask.

DHCP ServerTheGuestNetworkDHCPsettingstatus(Default:Enabled).

Guest Network InterfaceTheSSID(ServiceSetIdentifier)oftheGuestNetwork.

41

Configuring the LAN (Local Area Network)Thesettingsonthispageallowyoutoconfigurethewired

networksettings.Devicesconnectedtotherouter’sEthernet

portscompriseitsLAN.Therouter’sIPisdefinedintheIP Addressfield.ThedefaultsettingoftheDHCPserverissetto Enabledsothatnetworkedclients(computers,homeentertainmentcomponents,printers,etc.)willautomaticallybe

assignedIPaddressesbytherouter.

MoreadvancedusersmaywishtoconfiguretheDNSserver

settingstomeettheirspecificrequirements.Changingthe

settings in this section are not necessary for most situations.

ToviewtheLANsettings,clickSystem, then click LAN.

Note: Keep the router’s default values if you are uncertain of the settings values.

LAN IP IP AddressForconfiguringtherouter’sLANIPaddress.

IP Subnet MaskForconfiguringtherouter’sLANSubnetMask

802.1d Spanning TreeSpanningTreeisdisabledbydefault.Whenenabled,Spanning

Treepreventsnetworkloops(transmissionswon’tpassthe

samenodetwiceorseveraltimestoreachthedestination).

Note:

ThedefaultdeviceIPaddressis192.168.0.1.

42

DHCP ServerTheDHCPserverassignsIPaddressestothedevicesontheLAN.

DHCP ServerEnableordisabletheDHCPserver(Default:Enabled).

Lease TimeConfiguretheamountoftimeeachallocatedIPaddresscanbe

usedbyaclient.

Start IPThefirstIPaddressintherangeofaddressesassignedbythe

router.

End IPThelastIPaddressintherangeofaddressesassignedbythe

router.

Domain NameThe domain name of the router.

43

Configuring Dynamic Host Configuration ProtocolThiswindowallowsyoutoviewandconfigureDynamicHostConfigurationProtocol(DHCP)addresses.

WARNING! Donotmodifythesettingsinthissectionwithoutathoroughunderstandingoftheparameters.

ToviewtheDHCPsettings,clickSystem then click DHCP.

DHCP Client TableDisplaystheconnectedDHCPclientswhoseIPaddressesare

assignedbytheDHCPserveroftherouter.

IP AddressDisplaystheIPaddressofthestaticDHCPclientdevice

inthetable.

MAC AddressDisplaystheMACaddressofthestaticDHCPclientdevice

inthetable.

Expiration TimeThedateandtimewhenthecurrentDHCPaddress

is no longer valid.

ClickRefreshtoupdatethetable.

44

Enable Static DHCP IP

TherearereasonswhyyoumaywanttoenableastaticIP

addressonaclientdeviceonyourESRrouter’snetwork.

Onoccasion,iftherearepoweroutagesorifyou’vereconfigured

thesettingsonyourESRrouterandreboot(restart)ittoapply

thenewsettings,thepreviousIPaddressthattherouter’sDHCP

serverassignedtooneormoredevicesonthenetworkmayhave

changed.Someclientdevicesonyournetworkmayalsohave

webconfigurationinterfaces(settopboxes,NetworkAttached

Storage,etc.)thatareaccessiblefromtherouter’sassigned

IPaddressfromitsDHCPserver,sotheclientdevicecanbe

managed. Thus if the client device’s IP address changes from

timetotime,itmaybedifficultlinkingtoitunlessyoufindits

newaddressthroughtheESRrouter’sDHCPClientTable.

Ifyouwishtoavoidthis,thentheEnableStaticDHCPIPoption

allowsyousetastatic(essentiallyapermanent)addressfor

givenclientdevicesonyournetwork.

To do so, select the Enable Static DHCP IP option.

IP AddressEntertheIPaddressofthedevicetoaddasastaticDHCPclient.

MAC AddressEntertheMACaddressofthedevicetoaddasastaticDHCP

client.

ClickAddtoaddthedevicetothestaticDHCPclienttableorReset toreturnthetabletoitspreviousstate.

45

Current Static DHCP Table

AllowsyoutoviewtheactivestaticDHCPIPaddressesthat

havebeenmanuallyassignedtoclientdeviceswiththeir

correspondingMACaddresses.

No. (Number)DisplaystheIDofthestaticDHCPclientdeviceinthetable.

IP AddressDisplaystheIPaddressofthestaticDHCPclientdeviceinthe

table.

MAC AddressDisplaystheMACaddressofthestaticDHCPclientdeviceinthe

table.

SelectClicktoselectstaticDHCPclientdevicestobedeleted.

ClickDelete Selectedtoremoveaselectedaddress.ClickDelete All toremovealladdressesfromthetable.ClickReset to return

thetabletoitspreviousstate.ClickApply to save the settings or

Cancel to discard changes.

46

Configuring Event LoggingThe logging service records and displays important system

informationandactivityonthenetwork.Theeventsarestoredin

amemorybufferwitholderdataoverwrittenbynewerwhenthe

bufferisfull.

ToviewtheLogsettings,clickSystem then click Log.

Log Message List

Select Enable Logging to Syslog Server ClickSave to start logging information to the system.

Log Message windowShowsthecurrentsystemoperationsandnetworkactivity.

ClickSavetosavethemessagelisttoatextfile,Clear to discard

messagefromthememorybuffer,orRefresh to clear previous

messagesandwritenewmessagestothememorybuffer.

ClickApply to save changes.

47

Monitoring Bandwidth UsageThistoolallowsyoutoviewreal-timebandwidthusageforWAN

(WideAreaNetwork-orInternet),LAN(LocalAreaNetwork)and

WLAN(WirelessLocalAreaNetwork)traffic.FortheESR350,it

showsboththebandwidthtrafficinboththe2.4andfrequency

bands.

ToviewtheBandwidthMonitorsettings,clickSystem, then click

Monitor.

ThescreensdisplaytheactivebandwidthusageforboththeLAN

andWLANnetworksaswellasthebandwidthbeingusedonthe

WANconnection.

48

Configuring the System Language

TheESRrouter’sWebConfigurationinterfacesupportsmultiple

languages.

ToviewtheLanguagesettings,clickSystem, then click

Language.

Selectthesystemlanguageyouwishtousefromthedrop-down

menu.

49

Configuring IP CamerasThisESRroutersupportsuptofour(4)EnGeniusIPCameras

simultaneously.IfnoIPCameraisdetected,pleasecheckthatthe

IPCamera’sIPaddressandUPnPclientareconfiguredcorrectly.

ToviewtheIPCamerasettings,clickSystem, then click IP Camera.

Beforestartingthisprocedure,youmustconnectyourEnGenius

IPcameratothenetwork.

Makesurethecameraispoweredon.

ClicktheRefreshbuttontoviewalistingofavailabledevices.

Note:The"IPCamera"functionsupportsEnGeniusIPCameraproductsonly.

50

Configuring Internet Settings

View Internet StatusTheWANSettings,orInternetStatus,pageshowsasummaryof

the current Internet connection information. This section is also

shownontheSystemStatuspage.

ToviewtheStatussettings,clickInternet, then click Status.

WAN SettingsToviewtheWANSettings,clickInternetthenselectStatus.

Attain IP ProtocolDisplaytheIPProtocoltypeusedfortheESRSeriesRouter

(DynamicIPAddressorStaticIPAddress).

IP AddressTherouter’sWANIPaddress.

Subnet MaskTherouter’sWANsubnetmask.

Default GatewayTheISP’sgatewayIPaddress.

MAC AddressTherouter’sWANMACaddress.Therouter’sMACaddressis

locatedonthelabelonthebacksideoftherouter.

Primary DNSTheprimaryDNSaddressofanISPprovider.

Secondary DNSThesecondaryDNSaddressofanISPprovider.

51

Configuring Dynamic IPDynamicIPaddressingassignsadifferentIPaddresseachtime

adeviceconnectstoanISP(InternetServiceProvider)andmost

commonlyusedbycableISPs.

ToviewtheDynamicIP,clickInternet then select Dynamic IP.

Dynamic IP

HostnameAssignanamefortheInternetconnectiontype.Thisfieldcanbe

blank.

MTU (Maximum Transmission Unit)AllowsyoutoconfiguretheMTU.TheMTUspecifiesthelargest

packetsizepermittedforaninternettransmission.Thefactory

defaultMTUsizeforDynamicIP(DHCP)is1500.TheMTUsize

canbesetbetween512and1500.

Clone MACEntertheMACaddressofyourcomputer’s(ortablet’s)network

embeddedNetworkInterfaceCard(NIC)intheMACaddressfield

and click Clone MAC.

Note:SomeISPprovidersrequireregisteringtheMACaddressoftheNetworkInterfaceCard(NIC)connecteddirectlytothecableorDSLmodem.CloneMACmaskstherouter'sMACaddresswiththeMACaddressofthecomputer’sNIC.

52

DNS ServersTheDNSservertranslatesadomainorwebsitenameintoaURL

(UniformResourceLocator),orInternetaddress.Therearetwo

optionstochoosefrom:FromISPorUser-Defined.SelectFromISPto

retrievetheDNSaddressvaluefromtheISP;selectUser-Definedto

assignacustomDNSserveraddress.

DNS Server

ConfigurethetypeofDNSserver.(Default=FromISP)

First DNS Server

Configurethefirst,orprimary,DNSserver.

Second DNS Server

Configurethesecond,orsecondary,DNSserver.

ClickApply to save the settings or Cancel to discard the changes.

53

Configuring Static IPSettingastaticIPaddressallowsanadministratortoseta

specificIPaddressfortherouterandguaranteesthatitcannot

beassignedadifferentaddress.

ToviewtheStaticIPsettings,clickInternet, then click Static IP.

Static IP

IP AddressTherouter’sWANIPaddress.

Subnet MaskTherouter’sWANsubnetmask.

Default GatewayTheWANgatewayaddress.

Primary DNSTheprimaryDNSserveraddress.

Secondary DNSThesecondaryDNSserveraddress.

MTU (Maximum Transmission Unit)TheMTUspecifiesthelargestpacketsizepermittedforan

internettransmission.ThefactorydefaultMTUsizeforstaticIP

is1500.TheMTUsizecanbesetbetween512and1500.

MAC AddressTherouter’sMACaddress.

ClickApply to save the settings or Cancel to discard the

changes.

54

Configuring PPPoEPoint-to-PointProtocoloverEthernet(PPPoE)isusedmainlyby

ISPsthatprovideDSLmodemstoconnecttotheInternet.

ToviewthePPPoEsettings,clickInternet, then click PPPoE.

UsernameEntertheusernameassignedbyanISP.

PasswordEnterthepasswordassignedbyanISP.

Service NameEntertheservicenameofanISP(optional).

MTU (Maximum Transmission Unit)Enterthe(MTU).TheMTUspecifiesthelargestpacketsize

permittedforaninternettransmission(PPPoEdefault:1492).

TheMTUsizecanbesetbetween512and1492.

Authentication TypeSelectthetypeofauthenticationprovidedbytheISP:Auto,PAP,

orCHAP.Ifunsureofthebestsetting,selectAutoorcheckwith

your Internet Service Provider.

TypeConfiguretheconnectiontypebetweentherouterandthe

ISP.Selectoneofthefollowing:Keep Connection, Automatic Connection or Manual Connection.

Idle TimeoutConfigurethemaximumidletime(1to1,000minutes)allowed

for an inactive connection.

Clone MACEntertheMACaddressofthedevices’networkinterface

card(NIC)intheMACaddressfieldandclickCloneMAC.

Note: SomeISPprovidersrequireregisteringtheMACaddressofthenetworkinterfacecard(NIC)connecteddirectlytothecableorDSLmodem.CloneMACmaskstherouter’sMACaddresswiththeMACaddressofthecomputer’sNIC.

ClickApply to save the settings or Cancel to discard the

changes.

55

Configuring PPTPPPTP(Point-to-PointTunnellingProtocol)isusedinassociation

withvirtualprivatenetworks(VPNs).Therearetwopartsto

aPPTPconnection:theWANinterfacesettingsandthePPTP

settings.

ToviewthePPTPsettings,clickInternet, then click PPTP.

WAN Interface Settings

Dynamic IP AddressWAN Interface TypeSelectDynamicIPAddresstoassignanIPaddressprovidedbyan

ISP.

HostnameEnterahostnameofanISP.(optional).

Clone MACEntertheMACaddressofthecomputer’s(ortablet’s)embedded

NetworkInterfaceCard(NIC)intheMACaddressfieldandclick

Clone MAC.


56

PPTP Settings

User NameEntertheusernameassignedbyyourISP.

PasswordEnterthepasswordassignedbyyourISP.

Service IP AddressEnterthePPTPserverIPaddressprovidedbyyourISP.

Connection IDEntertheconnectionIDprovidedbyyourISP(optional).

MTU (Maximum Transmission Unit)EnterMTU.TheMTUspecifiesthelargestpacketsize(Default:

1462)permittedforanInternettransmission.TheMTUsizecan

besetbetween512and1492.



Idle TimeoutConfigurethemaximumamountoftime,inminutes,allowedfor

inactiveInternetconnection.TheInternetconnectionwillbe

droppedwhenthemaximumidletimeisreached.Validvaluesare

betweenoneandonethousand.


57

Configuring L2TPL2TP(Layer2TunnelingProtocol)isusedinassociationwith

VPNs(VirtualPrivateNetworks).TherearetwopartstoaL2TP

connection:

1.TheWANinterfacesettings

and

2. The L2TP settings.

ToviewtheL2TPsettings,clickInternet, then click L2TP.

WAN Interface Settings

Dynamic IP Address

WAN Interface TypeSelectDynamicIPAddresstoassignanIPaddressprovidedbyan

ISP.

HostnameEnterahostnameofanISP(optional).

Clone MACEntertheMACaddressofyourcomputer’sembeddedNetwork

InterfaceCard(NIC)intheMACaddressfieldandclickClone MAC.


58

L2TP Settings

UsernameEntertheusernameassignedbyanISP.

PasswordEnterthepasswordassignedbyanISP.

Service IP AddressEntertheL2TPserverIPaddressprovidedbyanISP.

Connection IDEntertheconnectionIDprovidedbyanISP(optional).

MTU (Maximum Transmission Unit)EnterMTU.TheMTUspecifiesthelargestpacketsize(Default:

1460)permittedforanInternettransmission.TheMTUsizecan

besetbetween512and1492.



Idle TimeoutConfigurethemaximumamountoftime,inminutes,allowedfor

inactiveInternetconnection.TheInternetconnectionwillbe

droppedwhenthemaximumidletimeisreached.Validvaluesare

betweenoneandonethousand.


59

Configuring DS-LiteSingle-StackLite,orDS-Lite,allowsISPstostopIPv4addresses

fromreachingacustomer’snetworkdevicesandonlyuseIPv6.

ToviewtheDS-Litesettings,clickInternet, then click DS-Lite.

DS-Lite ConfigurationSelectDS-LiteDHCPv6OptionorManualConfiguration

AFTR IPv6 AddressEnter the AFTR IPv6 connection type

B4 IPv4 AddressEnteranOptionalB4IPv4address.

WAN IPv6 AddressEntertheWANIPv6address.

IPv6 WAN Default GatewayEntertheIPv6WANdefaultgatewayaddress.


60

Wireless LAN Setup

ToviewtheWirelessBasicsettings,clickWireless then select

Basic.

RadioEnableordisablethewirelessradio.Ifthewirelessradiois

disabled,wirelessaccesspointsarenotavailable.

ModeSelectthewirelessoperatingmodefortherouter.Twomodes

areavailable:AccessPointorWirelessDistributionSystem(WDS)

mode.

AP (Access Point)Providesaconnectionaccesspointforwirelessdevices.

WDS (Wireless Distribution System)Allowsthewirelessnetworktobeexpandedusingmultiple

accesspointswithoutwiredconnections.

ClickApply to save the settings or Cancel to discard changes.

61

Access Point ModeTheseinstructionsapplytoboththe2.4GHzandfrequencybands.

TherouterbydefaultisalreadyconfiguredinAccessPointMode.Foroptimumconnectivitytoanumberofdifferentwirelessclient

devices,it’srecommendedthatyoukeeptherouterinitsdefaultwirelesssettings.Youcanchoosetohavetherouterassociate

onlywithcertainiterations(IEEEstandards)andbydoingsothiswilleitherpositivelyornegativelyaffecttherouter’sspeedand

throughput performance.

BandSelectawirelessstandardforthenetworkfromthefollowing

options:

• 2.4GHz(IEEE802.11b)

• 2.4GHz(IEEE802.11n)

• 2.4GHz(IEEE802.11b/g)

• 2.4GHz(IEEE802.11g)

• 2.4GHz(IEEE802.11b/g/n)

Enable SSID#Selectthenumberofwirelessgroups,betweenoneandfour,

availableonthenetwork.

SSID[#]Enterthenameofthewirelessnetwork(s).

Auto ChannelEnableordisablehavingtherouterautomaticallyselecta

channelforthewirelessnetwork.AutoChannelisenabledby

default.Selectdisabletomanuallyassignaspecificchannel.

(Default=Disable)

Check Channel TimeWhenAutoChannelisenabled,selectatimeperiodthatthe

system checks the appropriate channel for the router.

ChannelWhenAutoChannelisdisabled,selectachanneltoassignto

thewirelessnetwork.Validvaluesarefromonetoelevenin

the US and one to thirteen in the EU.

62

Wireless Distribution System ModeConfiguringtherouter’swirelesssettingsforWDS(WirelessDistributionSystem)mode.

ChannelSelectachanneltoassigntothewirelessnetwork.Validvalues

are from one to eleven in the US and one to thirteen in the EU.

MAC Address [#]EntertheMACaddress(es)forthewirelessaccesspoint(s)

thatarepartoftheWDS.

WDS Data RateSelectthedataratefortheWDS.

Set SecurityClickSetSecuritytosetuptheWDSsecuritysettingsscreen.

63

WDS Security Settings ScreenSelectingthetypeofWDSencryption(Disable,WEPorWPAPre-

SharedKey)forthewirelessnetwork.

Wired Equivalent Privacy (WEP)

Key LengthSelectbetween64-bitand128-encryption.

Key FormatSelectthetypeofcharactersusedfortheWEPKey:ASCII

(5characters)orHexadecimal(10characters).

Default KeySelectthedefaultencryptionkeyforwirelesstransactions.

Encryption Key [#]Entertheencryptionkey(s)usedtoencryptthedatapackets

during data transmission.

64

Chapter5 Wireless Encryption

65

Wi-Fi Protected Access (WPA) Pre-Shared Key

WPA TypeSelectthetypeofWPA.

• WPATemporalKeyIntegrityProtocol(TKIP):Generates

a128-bitkeyforeachpacket.

• WPA2AdvancedEncryptionStandard(AES):

Governmentstandardpacketencryptionwhichis

stronger than TKIP.

Pre-Shared Key TypeSelectthetypeofpre-sharedkeyasPassphrase(ASCII)orHexadecimal.

Pre-Shared KeyEnterthepre-sharedKeyvalue.

66

Configuring SecurityEnablingsecurityoptionsonthewirelessnetworktoprevent

intrusionstosystemsonthewirelessnetwork.

ToviewtheSecuritysettings,clickWireless then select

Security.

SSID SelectionSelectthewirelessnetworkgroupinwhichyouwishtochange

itswirelesssecuritysettings.

Broadcast SSIDEnableordisablebroadcastSSID.Choosewhetherornotthe

wirelessgroupisvisibletoothermembers.

Wi-Fi Multimedia (WMM)Enableordisablequalityofserver(QoS)tooptimizethe

streamingforbandwidthsensitivedatasuchasHDTVvideo

streaming, online gaming, VoIP, videoconferencing, and etc.

EncryptionSelect the encryption type for the router.

Enable802.1xAuthentication

Enableordisable802.1xauthentication.

67


Wi-Fi Protected Access (WPA) Pre-Shared Key

WPA TypeSelectthetypeofWPAfromthefollowing:

• WPA2 Advanced Encryption Standard (AES): RECOMMENDED—GovernmentstandardpacketencryptionwhichisstrongerthanTKIP.

• WPA Temporal Key Integrity Protocol(TKIP):Generatesa128-bitkeyforeachpacket.

• WPA2 Mixed: MixedmodeallowsclientdevicestofirstassociatetotherouterusingWPA2,andiftheyfailto

connect,thentheyareconnectedviaWPA(TKIP).

Encryption TypeEnablingencryptionisstronglyencouragedbecauseunauthorizedpartieswithinrangeofyourrouter’swirelesssignalmayattempt

toaccessyourwirelessnetworkandthengainaccesstoprivateinformationondevicesonyournetwork.It’shighlyrecommended

thatyouencryptyourrouterwithWPA2(AES)foroptimalsecurityandthroughputperformance.Alwaysselectastrongpassphrase

greaterthan8characterslongandcomprisedofletters,numbers,andsymbols.Pleasemakenoteofthepassphraseandkeepitina

securelocationsomewhereinyourhomeincaseyouneedtoretrieveit.

Pre-Shared Key TypeSelectthetypeofpre-sharedkeyasPassphrase(ASCII)or

Hexadecimal.

Pre-Shared KeyEnterthePre-sSharedKeyvalue.

IMPORTANT! WPA2(AES)offersmuchstrongersecuritythanWEP(WiredEquivalentPrivacy)whichhasbeenandcanbecomprimised.

68

WPA RADIUSUsingaRADIUSservertoauthenticatewirelessstationsand

provide a session key to encrypt data during communications.

WPA TypeSelect the type of Wireless Protected Access (WPA) from the

following:

• WPA2 Advanced Encryption Standard (AES): RECOMMENDED—GovernmentstandardpacketencryptionwhichisstrongerthanTKIP.

• WPA Temporal Key Integrity Protocol(TKIP):Generatesa128-bitkeyforeachpacket.

• WPA2 Mixed: MixedmodeallowsclientdevicestofirstassociatetotherouterusingWPA2,andiftheyfailto

connect,thentheyareconnectedviaWPA(TKIP).

RADIUS Server IP AddressEnter the IP address of the server.

RADIUS Server PortEntertheportnumberoftheserver.

RADIUS Server PasswordEnterthepasswordoftheserver.

69

Wired Equivalent Privacy (WEP)

Authentication TypeSelectthetypeofauthenticationfromthefollowing:

• Open System: WirelessstationscanassociatewiththerouterwithoutWEPencryption

• Shared Key: DevicesmustprovidethecorrespondingWEPkey(s)whenconnectingtotherouter

• Auto: TherouterautomaticallydetectswhetherOpenSystemorSharedKeyisbeingused

Key LengthSelectbetween64-bitand128-encryption.

Key TypeSelectthetypeofcharactersusedfortheWEPKey:ASCII

(5characters)orHexadecimal(10characters).

Encryption Key [#]Entertheencryptionkey(s)usedtoencryptthedatapackets

during data transmission.

Enable 802.1x AuthenticationEnableordisable802.1xauthentication.

70

Configuring Filters

WhenEnableWirelessAccessControlisselected,onlywirelessclientswithMACaddresseslistedinthetableareallowedtoconnect

tothewirelessnetwork.

ToviewtheFiltersettings,clickWireless then select Filter.

Enabling Wireless Access ControlSelect“EnableWirelessAccessControl”

DescriptionEnter a description of the device

allowedtoconnecttothenetwork.

MAC AddressEntertheMACAddressofthe

wirelessdevice.

ClickAdd toappendanewdeviceto the list or Reset to discard changes.

WARNING! Incorrectlychangingthesesettingsmaycausethedevicetostopfunctioning.Donotmodifythesettingsinthissectionwithoutathoroughunderstandingoftheparameters.

71

MAC Address Filtering Table

No. (Number)Thesequencenumberofthedevice.

DescriptionThe description of the device.

MAC AddressTheMACaddressofthedevice.

SelectIndicatesthedevice(s)thatcanhaveactionsperformedon

them.

ClickDelete Selected to remove selected devices from the list.

ClickDelete All to remove all devices from the list.

ClickResettodiscardchanges.ClickApply to save the settings or

Cancel to discard changes.

72

Configuring Wi-Fi Protected SetupWi-FiProtectedSetup(WPS)isanquickandeasywaytoassociateanewwirelessclientdevicetotheencryptedrouterusingaPINor

theWPSbuttonsoneachdevice.

ToviewtheWPSsettings,clickWireless then select WPS.

WPSEnableordisableWPS.

WPS Current StatusDisplayswhetherornotthe

wirelesssecurityisconfigured.

Self Pin CodeAn8-digitPINwhichisrequired

whenconfiguringtherouter

forthefirsttimeinWindows7orVista.

SSIDThenameofthewirelessnetwork.

Authentication ModeThe current security settings for the

correspondingSSID(wirelessnetwork).

Passphrase KeyArandomlygeneratedkeycreatedby

therouterduringtheWPSprocess.

WPS via Push ButtonClick“Start to Process”toactivateWPS.

WPS via PINEnter the PINofawirelessdeviceclick“Start to Process” to

activateWPS.

73

Configuring Client ListViewthewirelessdevicescurrentlyconnectedtotherouter.

ToviewtheClientListsettings,clickWirelessthenselectClient

List.

InterfaceThetypeofnetworkconnectedtothedevice.

MAC AddressTheMACaddressofdeviceconnectedtonetwork.

SignalThesignalstrengthofthedeviceconnectedtothenetwork.

Idle TimeTheamountoftimetheconnecteddevicehasnotbeenactiveon

thenetwork.

ClickRefreshtorefillthelistwithcurrentlyconnecteddevices.

74

Chapter6 Advanced Settings

75

Configuring Advanced SettingsAllowsyoutodefinetheAdvancedSettingsavailableontherouter.

ToviewtheAdvancedsettings,clickWireless then select Advanced.

Fragment ThresholdEnterthemaximumsizeofapacketduringdatatransmission.

Avaluetoolowcouldleadtolowperformance.

RTS ThresholdEntertheRTSthreshold.Ifthepacketsizeissmallerthanthe

RTSthreshold,therouterdoesnotuseRTS/CTStosendthe

data packet.

Beacon IntervalEnterthebeaconinterval.Thisistheamountoftimethatthe

routersetstosynchronizethenetwork.

Delivery Traffic Indication Message (DTIM) PeriodEntertheDTIMperiod.TheDTIMisacountdownperiodinformingclientsofthenextpoint

ofbroadcastandmulticastofmessagesoverthenetwork.Validvaluesarebetween1and255.

N Data RateSelecttheNdatarate.ThisistherateinwhichtheESRSeriesRouterwilltransmitdatapacketstowirelessNcompatibledevices.

WARNING!Incorrectlychangingthesesettingsmaycausethedevicetostopfunctioning.Donotmodifythesettingsinthissectionwithoutathoroughunderstandingoftheparameters.

76

Channel BandwidthSelectthechannelbandwidth.ThefactorydefaultisAuto20/40MHz.Thedefaultsettingprovidesthebestperformancebyauto

selectingchannelbandwidth.

Preamble TypeSelectthepreambletype.LongPreambleprovidesbetterLANcompatibilityandShortPreambleprovidesbetterwirelessperformance.

CTS ProtectionSelectthetypeofCTSprotection.UsingCTSProtectioncanlowerthedatacollisionsbetweenWirelessB(802.11b)andWirelessG

(802.11g)devicesandlowerdatathroughput.

Tx PowerSelectthewirelesssignalstrengthlevel.Validvaluesarebetween25%and100%.


77

Setting Up Parental ControlsOffensivewebcontentcanbeblockedwhenaparentspecifieskeywords.ParentscanalsolimitInternetaccesswithinaspecified

timeandday,withaSchedule. A PolicyisaruleprofilewhichdescribesthekeywordfilterandInternetaccessschedule.Parentscanapply the policy to multiple users or Policy Members.TheParentalControlstoolwillscreenpolicymembersbasedonappliedpolicies.

Configuring the Access Control ListToviewtheACLsettings,clickFirewall then select ACL.

Viewing the Access Control ListTolearnhowtoviewexistingaccesscontrollist,refertoViewing Parental Policies.

Adding a Control PolicyTolearnhowtocreateandaddapolicytotheaccess

control list, refer to Adding a Control Policy.

ToviewtheWizard settings,

click Parental Control then select Wizard.

Enable Parental Control (Access Control)ClicktoenableParentalControl.

Add PolicyClickthebuttontoaddanewcontrolpolicytothe

network.

Policy TableShowsthecontrolpoliciesavailableonthenetwork.

ClickApply to save changes or Cancel to discard them.

Note:Bydefault,everyoneisallowedtoviewallthecontentswithoutanylimitationandfilter.

78

Adding a Control PolicyTherouterprovidesawizardtoguideyouthroughsettingupa

newAccessControlPolicy.

To start the procedure, click the Add Policybutton.

ClickNext to continue the procedure or Cancel to stop the

procedure.

Theprocedureconsistsofthefollowingsteps:

1.EnterauniquenameforyourpolicyinthePolicyName

textfield.

2.ClickPrevtoreturntothepreviousscreen,Nexttocontinue

theprocedure,orCanceltostoptheprocedure.

3. Add target devices to the access control policy.

79

5. Setting up a schedule for the router services.

To set up a Service Schedule,followthesesteps: a. Select Allow from the Schedule option.

b.Clickthedaysthattheschedulewillbeactive.

c.Enterthetimeperiodthattheschedulewillbeactive.

6.ClickPrev to return to the previous screen, Next to continue

the procedure, Save to save the changes, or Cancel to stop

the procedure.

To add a device to the Member List, follow these steps:

a.ClickMAC or IP from the Filter Type option.

b.ClickAddtoshowtheaddclientdialog. c. Enter the name of the device in the Device Nametextfield.

d.EntereitheraMACaddressoranIPaddressintheAddress

fielddependinguponwhichfiltertypeyouchose.

e.ClicktheAdd Device Button to close the screen and

addthedevicetotheMemberList.



the procedure.

80

7.SetupakeywordandURLfilterlist.

Tosetupakeyword/URLfilterlist,followthesesteps:

a. Select Allow from the Filtering option.

b.EnterakeywordorURLintheURL/Keyword text field. c.ClicktheAddbuttontoaddthefiltertothelist. d. Repeat steps a through cforeachfilter.

8.ClickEnable Application Filtertofiltersoftwareapplications.



the procedure.

10.SelectEnabletosavewebaccessinformationtoalogfileor Disable to ignore the information.

11.ClickPrev to return to the previous screen, Save to save the

changes, or Cancel to stop the procedure.

81

Viewing Parental PoliciesAvailableparentalcontrolpoliciesareshowninatableandeachpolicycanbeenabledordisabled,edited,anddeleted.

ToviewtheWebsettings,clickParental Control then select Web Monitor.

EnableClicktoenableordisablethecontrolpolicy.

Policy NameShowsthecontrolpolicyname.

Target DeviceShowsthetargetdeviceMACaddressorIPaddress.

ScheduleShowsthecontrolpolicyschedule.

LoggedShowswhetherthecontrolpolicyisstoring

log information.

ModifyEditapolicybyclickingtheEdit Button.

DeleteapolicybyclickingtheDelete Button.

82

Guest NetworkTheGuestNetworkfunctionenablesyoutoofferInternetconnectivitytovisitorsorguestswhilekeepingothernetworkeddevices

(computersandharddrives)andsensitivepersonalorcompanyinformationprivateandsecure.

TheGuestNetworkiscontrolledbytheWirelessSSIDfunction.WhentheGuestNetworkfunctionisenabled,theGuestSSIDcan

onlygettheinternetconnectionfromWAN,butcannotreachtheclientfromtheLANport.

Enabling the Guest NetworkToviewtheSelectionsettings,clickGuest Network then select Selection.

Guest NetworkEnableorDisabletheGuestNetwork

function

Client IsolationGuestclientsareisolatedandcannot

communicatewitheachother.

SSIDChooseaSSIDfortheGuestNetwork

used.TheSSIDcanbedefinedfromtheWirelesssettingpage.


83

Configuring the DHCP Server SettingTheGuestNetworkSSIDshouldbeonadifferentsubnetfromtherouter’sDHCPserver.

ToviewtheDHCPServerSettings,clickGuest Network then select DHCP Server Setting.

Router IP addressDefinetherouterIPaddress

fortheGuestnetwork.

Default Subnet MaskDefinetheSubnetMaskIP

addressfortheGuest

network.

Start IPTodefinetheGuestnetworkDHCPserverstartIP.

End IPTodefinetheGuestnetworkDHCPserverendIP.


84

Viewing the DHCP Client List on the Guest NetworkShowsthelistofguestclientsregisteredonthenetwork.

ToviewtheDHCPClientListsettings,clickGuest Network then select DHCP Client List.

DHCP Client TableShowstheIPaddress,

MACaddress,and

expirationtimeofeach

of the registered clients

on the list.

IP AddressThe IP address of the guest client.

MAC AddressTheMACaddressoftheguestclient.

Expiration TimeThetimethattheguestclient’sDHCPaddresswillexpireandmustberenewed.

ClickRefreshtorefreshtheviewofthelist.

85

IPv6Thereareseveralconnectiontypestochoosefrom:AutoDetection,StaticIPv6,Autoconfiguration(SLAAC/DHCPv6),PPPoE,IPv6

inIPv4Tunnel,6to4,andLink-local.Ifyouareunsureofyourconnectionmethod,pleasecontactyourIPv6InternetServiceProvider.

Enabling IPv6 SettingsToviewtheBasicsettings,clickIPv6thenselectBasic.

BeforeusingorconfiguringtheIPv6protocol,orIPv6passthrough,onanESRSeriesRouteryoumustenableit.

IPv6SelectenabletoconfiguretheIPv6protocolontherouter.

IPv6 PassthroughSelectenabletoallowIPv6passthroughfunctionality.

IPv6mustbedisabledtoenablethisfeature.


Note:IfyouareusingthePPPoEoption,youwillneedtoensurethatanyPPPoEclientsoftwareonyourcomputershasbeenremovedordisabled.

86

Viewing the IPv6 Connection StatusToviewtheStatusinformation,clickIPv6thenselectStatus.

IPv6 Connection InformationShowstheIPv6connectiontype,theLANIPv6link-localaddressandtheDHCP-PD.

LAN IPv6 Computers ListShowsalistofnetworkcomputersandtheirIPv6connectioninformation.

87

Configuring Static IPv6ToviewtheStaticIPv6settings,clickIPv6 then select Static IPv6.

Use Link-Local AddressEnableordisableLANlink-localaddress.

IPv6 AddressEntertheLAN(local)IPv6addressfortherouter.

Subnet Prefix LengthEnterthesubnetprefixlength.

Default GatewayEnterthedefaultgateway.

Primary IPv6 DNS AddressEntertheprimaryIPv6DNSaddress.

Secondary IPv6 DNS AddressEnterthesecondaryIPv6DNSaddress.

LAN IPv6 AddressEntertheLANIPv6address.

LAN IPv6 Link-Local AddressEntertheLANIPv6link-localaddress.

Enable Automatic IPv6 Address AssignmentEnableordisableautomaticIPv6addressassignment.

Autoconfiguration TypeEntertheautoconfigurationtype.(Default:SLAAC+RDNSS).

Router Advertisement LifetimeEntertheIPv6AddressLifetime(inminutes).


88

Setting AutoconfigurationToviewtheAutoConfigurationsettings,clickIPv6 then select Auto Configuration.

Obtain A DNS Server Address AutomaticallyEnableordisableobtainingaDNSserver

automatically.



Enable DHCP-PDEnableordisableDHCP-prefixdelegation(PD).




Autoconfiguration TypeEntertheautoconfigurationtype.(Default:SLAAC+RDNSS)



89

Configuring PPPoEToviewthePPPoEsettings,clickIPv6 then select PPPoE.

Address ModeSelectStaticifyourISPassignedyoutheIPaddress,subnet

mask,gateway,andDNSserveraddresses.Inmostcases,select

Dynamic.

IP AddressEntertheIPaddress(StaticPPPoEonly).

User NameEnter your PPPoE user name.

PasswordEnteryourPPPoEpassword.

Verify PasswordRetypetheyourPPPoEpassword.

Service NameEntertheISPServiceName(optional).

Reconnect ModeSelecteitherAlways-on,On-Demand,orManual.

Maximum Idle TimeEnteramaximumidletimeduringwhichthe

Internet connection is maintained during inactivity.

Todisablethisfeature,enableAuto-reconnect.

MTUMaximumTransmissionUnit-youmayneedtochangetheMTU

foroptimalperformancewithyourspecificISP.1492isthe

defaultMTU.

90

Obtain A DNS Server Address AutomaticallyEnableordisableobtainingaDNSserverautomatically.



Enable DHCP-PDEnableordisableDHCP-prefixdelegation(PD).







91

Configuring 6to4Toviewthe6to4settings,clickIPv6 then select 6to4.

6to4 AddressEnterthe6to4IPaddress.





Enable Automatic IPv6 Address AssignmentEnableordisableautomaticIPv6address

assignment.




92

Viewing Local ConnectionsToviewtheLinkLocalsettings,clickIPv6 then select Link Local.



93

Firewall Setup

Configuring Basic SettingsToviewtheBasicsettings,clickFirewallthenselectBasic.

TheESRSeriesRouterfirewallautomaticallydetectsandblocksDenialofService(DoS)attacks.URLblocking,packetfilteringand

statefulpacketinspection(SPI)arealsosupported.Thedetailsoftheattackandthetimestamparerecordedinthesecuritylog.

FirewallEnableordisablethefirewalloftheESRSeriesRouter.


Note:ThissectionappliestoClientRoutermode.

94

Configuring Advanced SettingsTheroutersupportsVPNpass-throughwhichallowsvirtualprivatenetworking(VPN)packetstopassthroughthefirewall.

ToviewtheAdvancedsettings,clickFirewallthenselectAdvanced.

VPN L2TP Pass-throughClickSelecttoallowanL2TPconnectionmethod

overaVPN.

VPN PPTP Pass-throughClickSelecttoallowaPPTPconnectionmethod

overaVPN.

VPN IPSec Pass-throughClickSelecttoallowanIPSecconnectionmethodoveraVPN.

IPv6 Pass-throughClickSelecttoallowIPv6packetstopassthroughthefirewall.

PPPoE Pass-throughClickSelecttoallowaPPPoEpacketstopassthroughthefirewall.


Note: VPNL2TPPass-through,VPNPPTPPass-through,andVPNIPSecPass-throughareenabledbyfactorydefault.

95

VPN L2TP Pass-throughClickSelecttoallowanL2TPconnectionmethodoveraVPN.

VPN PPTP Pass-throughClickSelecttoallowaPPTPconnectionmethodoveraVPN.

VPN IPSec Pass-throughClickSelecttoallowanIPSecconnectionmethodoveraVPN.

IPv6 Pass-throughClickSelecttoallowIPv6packetstopassthroughthefirewall.

PPPoE Pass-throughClickSelecttoallowPPPoEpacketstopassthroughthefirewall.


Note: VPNL2TPPass-through,VPNPPTPPass-through,andVPNIPSecPass-throughareenabledbyfactorydefault.

96

Configuring Demilitarized ZoneConfiguringadeviceontheLANasaDemilitarizedZone(DMZ)hostallowsunrestrictedtwo-wayInternetaccessforInternet

applications,suchasonlinevideogames,torunfrombehindtheNATfirewall.TheDMZfunctionallowstheroutertoredirectall

packetsgoingtotheWANportIPaddresstoaparticularIPaddressontheLAN.Thedifferencebetweenthevirtualserverandthe

DMZfunctionisthatavirtualserverredirectsaparticularserviceorInternetapplication,suchasFTP,toaparticularLANclientor

server,whereasaDMZredirectsallpackets,regardlessoftheservice,goingtotheWANIPaddresstoaparticularLANclientorserver.

ADMZhostallowsacomputertohaveallitsconnectionsandportscompletelyopenduringdatatransmission.

ToviewtheDMZsettings,clickFirewall then select DMZ.

Enabling DMZClickEnableDMZtoactivateDMZfunctionality.

Local IP AddressEnteranIPaddressofadeviceontheLAN.


WARNING!ThePCdefinedasaDMZhostisnotprotectedbythefirewallandisvulnerabletomaliciousnetworkattacks.DonotstoreormanagesensitiveinformationontheDMZhost.

97

Configuring Denial of ServiceToenableblockingofdenialofservice(DoS)attacks,selecttheDoSoptionintheFirewallsection.DoSattackscanfloodtheInternet

connectionwiththecontinuoustransmissionofdata.BlockingtheseattacksensuresthattheInternetconnectionisalwaysavailable.

ToviewtheDoSsettings,clickFirewall then select DoS.

Block DoSEnableordisableblockingDoSattacks.

Discard Ping on WANICMP(ping)packagesareblocked

whileBlockDoSisenabled.

EnableDiscardPingonWANiftheWANportisrequired.


98

Virtual Private Network SetupAVirtualPrivateNetwork(VPN)providesasecureconnectionbetweentworemotelocationsortwousersovertheInternet.It

providesauthenticationtosecurelyencryptdatacommunicatedbetweenthetworemoteendpoints.TheShortModelNamesupports

upto5VPNtunnels,makingitidealforsmall-office/home-officeusersoremployeeswhoworkfromhomebutneedtocommunicate

securelybacktothemainoffice.

Viewing StatusToviewtheStatussettings,clickVPN then select Status.

No. (Number)ThesequencenumberoftheVPNtunnel.

NameThenameoftheVPNtunnel.

TypeThetypeofVPNtunnel.

Gateway/Peer IP AddressTheVPNgatewayorpeerIPaddress.

Transmit PacketsThenumberofpacketstransmitted.

Received PacketsThenumberofpacketsreceived.

UptimeTheamountoftimetheVPNhasbeenactive.

SelectIndicatesthedevice(s)thatcanhaveactionsperformedonthem.

99

Configuring a VPN Tunnel ProfileToviewtheStatussettings,clickVPNthenselectStatus.

ManuallyconfigureaVPNtunnelprofile.

Creating a Profile

• ClickAdd tocreateanewVPNtunnelprofile.• ClickEdittoeditthesettingsoftheselectedprofile.• ClickDelete Selectedtodeletetheselectedprofile.• ClickDelete All todeleteallcurrentprofiles.

100

GeneralFormanuallyconfiguringaVPNtunnelprofile.

Name: Enterthenameforthisprofile.

Connection Type: Clickthedrop-downmenutoselecttheconnectiontype(PPTP,L2TP,IPSec,L2TPoverIPSec).

Authentication Type:Clickthedrop-downmenutoselecttheauthentication type.

Shared Key:Enterthesharedkeytobeusedforthisprofile.

Confirm: Enterthesharedkeyasecondtimetoconfirmtheshared key.

Local ID Type:Clickthedrop-downmenutoselectthetypeofIDusedforthisprofile(IPaddress,DomainName,Email

Address).

Local ID: EnterthelocalIDdesignationbasedondefinitiontypefromLocalIDType,previousfield.

Peer ID type: Clickthedrop-downmenutoselectthetypeofPeerIDforthisprofile(IPaddress,DomainName,Email

Address).

Peer ID: EnterthePeerIDdesignationbasedondefinitiontypefromPeerIDType,previousfield.

Apply: ClickApply to save the changes.

Cancel: ClickCancel to delete the changes.

101

SA (Security Association)IKE(InternetKeyExchange)isconfiguredintwonegotiations.

Phase1authenticatestheVPNClientstoeachotherby

confirmingthematchingPre-SharedKeywiththetwogateways.

IPSecisthePhase2oftheVPNprocess.

Manually configuring a VPN tunnel profile.

IKE (Phase 1) ProposalExchange:Clickthedrop-downmenutoselectthetypeof

exchange(MainMode,AggressiveMode).

DH Group:Clickthedrop-downmenutoselecttheDHgroup(group1,group2,group5,group14).

Encryption: Clickthedrop-downmenutoselectthetypeofencryption(DES,3DES,AES128,AES192,AES256).

Authentication: Clickthedrop-downmenutoselecttheauthenticationprotocol(MD5,SHA1).

Life Time: Enter the life time value for Phase 1. The life time

valueshouldbegreaterthanPhase2(IPSec).86400sec.(1day)

is a common default and is a normal value for Phase 1.

IPSec (Phase 2) ProposalProtocol: Clickthedrop-downmenutoselecttheprotocoltype(ESP,AH)

Encryption: Clickthedrop-downmenutoselectthetypeofencryption(DES,3DES,AES128,AES192,AES256).

Authentication: Clickthedrop-downmenutoselecttheauthenticationprotocol(MD5,SHA1).

Perfect Forward Secrecy (PFS):SelectenabletoenablePFS.AfreshDHkeyisgeneratedduringIKEphaseIIandrenewedfor

eachkeyexchangetoeliminatedependenciesbetweenthe

keys.

DH Group: Clickthedrop-downmenutoselecttheDHgroup(group1,group2,group5,group14).

Life Time: Enter the life time value for Phase 2. The life time

valueshouldbesmallerthanPhase1(IKE).3600sec.(1hour)

is a common value for Phase 2.

Apply: ClickApply to save the changes.

Cancel:ClickCancel to delete the changes.

102

Network


Security Gateway Type:Clickthedrop-downmenutoselecttheSecurityGatewayType(IPAddress,DomainName)

Security Gateway: EnterthegatewayvalueasdefinedinSecurityGatewayType.

Local NetworkLocal Address: EntertheIPaddressofthelocalPC.Local Netmask: EnterthenetmaksofthelocalPC.

Remote NetworkRemote Address: EntertheIPaddressoftheremotePC.Remote Netmask: EnterthenetmaskoftheremotePC.Apply: ClickApplytosavethechanges.Cancel: ClickCanceltodeletethechanges.

103

Advanced


NAT Traversal: SelectenabletoenabletheNATTraversalfunctioninordertohidetheprivateIPaddressfrompublicview.

Note: ServicessuchasVoIPrequiretheuseofaprivateIP address.

Dead Peer Detection:Apply: ClickApplytosavethechanges.Cancel: ClickCanceltodeletethechanges.

104

Configuring a User SettingTheUserSettingfunctionallowsyoutocreateuserprofiles

inordertosetuploginaccesstotheVPNservice.

NameEnterthenameofthenewuserprofile.

PasswordEnterthepasswordfortheusername.

ConfirmEnterthepasswordasecondtimetoconfirmthesetting.

AddClickAddtoaccepttheprofileandaddittotheCurrentVPNUser

Table.

ResetClickResettoclearthenewsettings.

Current VPN User TableDisplaystheUserID,UserNameandSelectionstatus.

Delete SelectedClicktodeletetheselecteduserprofile.

Delete AllClicktodeleteallthecurrentuserprofiles.

ResetClicktocleartheselectionsfromtheCurrentVPNUserTable.

ApplyClicktoacceptsavethenewsettings.

CancelClicktoclearthenewchanges.

105

USB PortTheESR350routerisequippedwithaUSBportforconnectingaharddrivesomediacontentcanbeaccessedortransferredtoother

devicesinthehomeordevicesawayfromhome.

Viewing EnShareTheEnSharefeatureallowsyoutoaccessmedia

contentstoredonaUSBharddriveconnectedtothe

router’sUSBportinthehomeandwhenyouareaway

fromhomewhenyouhaveaccesstotheInternet.

By default the EnShare feature is enabled.

To view the EnShare settings or disable EnShare, click USB Port then select EnShare.

1. Select DisabletodisabletheEnSharefeature.2.ClickApplytosavethenewsettings.

File SharingTheFileSharingfunctionallowsyoutoprovideusers

theabilitytosharefilesoverthenetworkthroughthe

Sambaservice.By default the EnShare feature is enabled.

ToviewtheFileSharingsettings,clickUSB Port then select File Sharing.

1. Select EnabletoenabletheSambaServicefunction.2.ClickApplytosavethenewsettings,orclickCancel to delete the changes.

106

Viewing File ServerTheFileServerfunctionallowsyoutoprovidenetworkusersFTPaccesstosharedUSBstoredfiles.

ToviewtheFileServersettings,clickUSB Port then select File Server.

Enable FTP ServiceSelectthistoenabletheFTPservicetosharefilesontheUSB

device

Port NumberDefinetheportnumber(default:21)toopenfortheFTPservice.

Login TimeoutDefinetheperiodofinactivity(default:90)beforeauseris

logged out.

Stay TimeoutDefinethelockoutperiod(default:90)beforeauserisallowed

to attempt a login.

Login UserDefinethenumberofconcurrentuserstoaccesstheservice

(Max:20users)

Share ModeDefinethetypeofsharepriviledge:Read/Write,Readonly.

Use Anonymous LoginSelectthistoallowanonymoususerlogin.

User NameEnter the user name to login to the FTP service.

PasswordEnterthepasswordtologintotheFTPservice.

107

Viewing DLNATheDLNAMediaServerfunctionallowsyoutotransferphotos,musicandvideobetweennetworkeddevicesthroughtheESRSeries

Router.

ToviewtheDLNAsettings,clickUSB Port then select DLNA.

1. Select EnabletoenabletheDLNAMediaServerfunction.2.IntheShareFolderName,enterthenameofthesharedfolder.

3.ClickApplytosavethenewsettings,orCancel to clear the changes.

108

Advanced Network Settings

NAT SetupNetworkAddressTranslation(NAT)allowsusersontheLANtoaccesstheInternetthroughasinglePublicIPAddressormultiple

PublicIPAddresses.NATprovidesfirewallprotectionfromhackerattacksandallowsformappingLANIPaddressestoWANIP

addresseswithkeyservicessuchaswebsites,FTP,andvideogameservers.

ToviewtheNATsettings,clickAdvanced then select NAT.

NATEnableorDisabletheNAT.

Network TurbineEnableorDisablethenetworkturbine.

Note: Thenetworkturbineisdesignedtoimprovetherouter’sperformance.Thereisabout20~30%improvementwhenthenetworkturbineisenabled.

Note: ThenetworkturbinemaycauseproblemswiththeInternetconnection.Disablethenetworkturbinefunctionifyouexperience

connection issues.


109

Port Mapping SetupPortMappingallowsyoutoredirectaparticularrangeofserviceportnumbersfromtheWANtoaparticularLANIPaddress.

ToviewthePortMappingsettings,clickAdvanced then select Port Mapping.

Enable Port MappingClickEnablePortMappingtoactivateportmapping.

DescriptionEnternotesordetailsaboutthemappedportrange

configuration.

Local IPEnterthelocalIPaddressoftheserverbehindthe

NATfirewall.

ProtocolSelecttheprotocoltouseformappingfromthefollowing:TCP,UDPorBoth.

Port RangeEntertherangeofportstobeforwarded.

ClickAddtoappendanewdevicetothelistorReset to discard changes.

110

Current Port Mapping TableDisplaysalistofmappedportrangesinuseonthenetwork.

No. (Number)Thesequencenumberofthemappedportrange.

DescriptionNotesordetailsaboutthemappedportrange.

Local IPIP address of the server for the mapped port range.

TypeTheprotocolusedtocommunicatewiththeWANportsandLAN

server.

Port RangeThe range of mapped ports.

SelectIndicatesthedevice(s)thatcanhaveactionsperformedonthem.


ClickDelete All to remove all devices form the list.

ClickReset the discard changes.


111

Port Forwarding SetupPortforwardingenablesmultipleserverapplicationsonaLANtoserveclientsonaWANoverasingleWANIPaddress.Therouter

acceptsincomingclientpackets,filtersthembasedonthedestinationWAN,orpublic,portandprotocolandforwardsthepacketsto

theappropriateLAN,orlocal,port.UnliketheDMZfeature,portforwardingprotectsLANdevicesbehindthefirewall.

ToviewthePortForwardungsettings,clickAdvanced then select Port Forwarding.

Enable Port ForwardingClickEnablePortForwardingtoactiveportforwarding.

DescriptionEnternotesordetailsabouttheforwardedportconfiguration.

Local IPEnterthelocalIPaddressoftheserverbehindtheNATfirewall.

ProtocolSelecttheprotocoltouseformappingfromthefollowing:TCP,

UDPorBoth.

Local PortEntertheLANportnumberthatWANclientpacketswillbe

forwardto.

Public PortEntertheWANportnumberthatclientswillsendtheirpackets

to.

ClickAddtoappendanewconfigurationtothetableorResetto discard changes.

112

Current Port Forwarding TableThetableofcurrentportforwardingconfigurations.





113

Port Triggering SetupSomeapplications,suchasonlinegames,videoconferencingandVoIPtelephony,requiremultipleportsforinboundandoutbound

traffic.Ifanapplicationrequiressimultaneoususeofincomingandanoutgoingports,configureporttriggeringtomapalocalportor

rangeofportstoaspecificpublicport.Sendingpacketsoutoverthelocalporttriggerstheroutertoopenanincominglocalportthat

ismappedtothesamepublicportandapplicationastheoutgoinglocalport(s).Thelocalapplicationcancommunicateoverthe

incomingandoutgoingportswithouttheneedforcreatingafixedaddress.

ToviewthePortTriggeringsettings,clickAdvanced then select Port Triggering.

Enable Port TriggeringClickEnableTriggerPorttoactivateporttriggering.

DescriptionEnternotesordetailsabouttheporttriggeredconfiguration.

Popular ApplicationsSelectadefaultapplicationoraddanewone.

Trigger PortEntertheapplication’soutboundportnumber(s).

Trigger TypeSelecttheprotocoltouseforporttriggeringfromthefollowing:

TCP,UDPorBoth.

Public PortEntertheinboundport(s)fortheapplicationinthefollowing

format:2300-2400or47624.

114

Public TypeSelecttheprotocoltousefortheinboundportfromthefollowing:TCP,UDPorBoth.

ClickAdd toappendanewconfigurationtothetableorReset to discard changes.

Current Port Triggering TableThelistofcurrentporttriggeringconfigurations.

ClickDeleteSelectedtoremoveselecteddevices

from the list.



ClickApplytosavethesettingsorCanceltodiscardchanges.

115

Application Layer Gateway SetupTheALG(ApplicationLayerGateway)servesasawindowbetweencorrespondentapplicationprocessessothattheymayexchange

information on an open environment.

ToviewtheALGsettings,clickAdvanced then select ALG.

SelectthelistedapplicationsthatneedALGsupportandthentherouterwillauthorizethemtopassthroughtheNATgateway.


116

Universal Plug and Play SetupUPnPhelpsinternetdevices,suchasgamingandvideoconferencing,toaccessthenetworkandconnecttootherregisteredUPnP

devices.

ToviewtheUPnPsettings,clickAdvanced then select UPnP.

ClickEnable or Disable to activate or deactivate UPnP.


117

Internet Group Multicast Protocol SetupInternetGroupMulticastProtocol(IGMP)isanetwork-layerprotocolusedtoestablishmembershipinamulticastgroup.

ToviewtheIGMPsettings,clickAdvanced then select IGMP.

ClickEnable or Disable toactivateordeactivateIGMP.ClickApply to save the settings or Cancel to discard changes.

Note: DisablingtheMulticastfunctionmaycauseIPbasedmultimediadevices,suchasanIP-STBorOTTbox,mayloseconnectivitywiththemediastreamingserver.

118

Quality of Service SetupQoScanprioritizebandwidthusesuchasvideostreaming,onlinegaming,VoIPtelephonyandvideoconferencingtoensurestable

andefficientnetworkperformance.

ToviewtheQoSsettings,clickAdvanced then select QoS.

Total Bandwidth SettingsUplinkSelectthemaximumbandwidthspeedforoutbound

traffic.

DownlinkSelectthemaximumbandwidthspeedforinbound

traffic.

Note:ClickDisabled ifyoudonotwanttoprioritizeanydataorprotocol.

119

Priority QueueSetnetworkresourceusagebasedonspecificprotocolsorportranges.Incomingpacketsareprocessedbasedontheprotocols’

positionwithinthequeue.

Unlimited Priority QueueLocal IP AddressEnterthelocalIPaddressofadeviceonthenetwork.

Thisdevice’sactivityisnotrestrictedbytheQoSfeature.

High/Low Priority QueueSpecify the priority for different protocols. Additional

protocolsandportrangescanbeadded.

ClickApply to save the settings or Cancel to discard

changes.

120

Bandwidth AllocationSetnetworkresourceusage,forinboundandoutboundtraffic,basedonlocalIPandportranges.

TypeSelectDownloadorUploadtospecificthedirectionofpacket

traffic.

Local IP RangeEnterthelocalIPrangeofthecurrentconfiguration.

ProtocolSelecttheprotocoltomanageforthecurrentconfiguration.

Port RangeEnterthelocalportrangeofthecurrentconfiguration.

PolicySelectMinorMaxtospecifythetypeofconfigurationpolicy.

Rate (bps)Selectthebandwidthrate,inbitspersecond(bps),ofthecurrentconfiguration.

ClickAdd tosavethesettingsandlisttheconfigurationintheCurrentQoStableorReset the discard changes.


121

Routing SetupTypicallystaticroutingdoesnotneedtobesetupbecausetherouterhasadequateroutinginformationafterithasbeenconfigured

forInternetaccess.Staticroutingisonlynecessaryiftherouterisconnectedtonetworkunderadifferentsubnets.

ToviewtheRoutingsettings,clickAdvanced then select Routing.

Note: Toenableastaticrouting,NATmustbedisabled.Iftherouterisconnectedwithanetworkunderthedifferentsubnet,theroutingsetupallowsthenetworkconnectionwithintwodifferentsubnets.

Enable Static RoutingClickEnableStaticRoutingtoactivatethefeature.

Destination LAN IPEntertheLANIPaddressofthedestinationdevice.

Subnet MaskEntertheSubnetMaskofthedestinationdevice.

Default GatewayEnterthedefaultgatewayIPaddressforthedestinationdevice.

HopsEnterthemaximumnumberofhopswithinthestaticrouting

thatapacketisallowedtotravel.

InterfaceSelectLANorWANastheinterface.

ClickAddtosavethesettingsandlisttheconfigurationintheCurrentStaticRoutingtableorReset the discard changes.

View and select devices in the Current Static Routing Table.ClickDelete Selected or Delete All to remove devices

fromthetable.ClickReset to stop.


122

Wake on LAN SetupWakeonLANsetup(WOL)allowstheadministratortoactivateacomputeroverthenetwork.

ToviewtheWOLsettings,clickAdvanced then select WOL.

Enabling WOL over WAN ClickEnable WOL over WAN to activate the feature.

Server Port Enter the server port of the device to activate.

Wake MAC Address EntertheMACaddressofthedevicetoactivate.

ClickStart to activate the device.


123

Tools Setup

Configuring the Administrator AccountChangetherouter’ssystempasswordaswellassetupadevice

toremotelyconfigurethesettings.

ToviewtheAdminsettings,clickTools then select Admin.

• Login Name:Keeporchangeexistingloginname• Old Password:Entertheexistingadministratorpassword• New Password:Enterthenewadministratorpassword• Repeat New Password: Re-typethenewadministratorpassword• Graphical Authentication: ToenableordisableCAPTCHA

Remote Management• Host Address: Enter the designated host IP Address.

• Port: Entertheportnumber(Default:8080)forremoteaccessingmanagementwebinterface.

• Enable:Selecttoenableremotemanagement.


Note: To access the settings of the ESR Series Router remotely, entertherouter’sWANIPaddressandportnumber.

124

System Time SettingChangethesystemtimeoftheESRSeriesRouterandsetupautomaticupdatesthroughanetworktime(NTP)protocolserveror

through a computer.

ToviewtheTimesettings,clickTools then select Time.

Synchronizing with an NTP Server

Time SetupSelecthowtheESRSeriesRouterobtains

the current time.

Time ZoneSelectthetimezonefortheESRSeriesRouter.

NTP Time ServerEnterthedomainnameorIPaddressofanNTPserver.

Enabling Daylight SavingsClicktoenableordisabledaylightsavingstime.

Start TimeSelectthedateandtimewhendaylightsavingstimestarts.

End TimeSelectthedateandtimewhendaylightsavingstimeends.


125

Synchronizing Time with a Computer

Time SetupSelecthowtheESRSeriesRouterobtainsthecurrenttime.

Computer Date and TimeDisplayssystemdateandtimefromacomputer.

Enable Daylight SavingClicktoenableordisabledaylightsavingstime.

Start TimeSelectthedateandtimewhendaylights

savings time starts.

End TimeSelectthedateandtimewhendaylightssavingstimeends.


126

Dynamic Domain Name Service (DDNS) SetupThemostcommonuseforDDNSisinallowinganInternetdomainnametobeassignedtoacomputerwithavarying(dynamic)IP

address.ThismakesitpossibleforothersitesontheInternettoestablishconnectionstothemachinewithoutneedingtotracktheIP

address themselves.

ToviewtheDDNSsettings,clickTools then select DDNS.

Dynamic DNSClicktoenableordisableDDNS.

Server AddressSelect the server address.

Host NameEnter the host name.

UsernameEnter a username for the host service.

PasswordEnterapasswordforthehostservice.


127

Diagnosis that Client Devices Are Connected to the RouterThediagnosisfeatureallowstheadministratortoverifythataclientdeviceisavailableonthenetworkandisacceptingrequest

packets.Ifthepingresultreturnsalive,itmeansadeviceisconnected.Thisfeaturedoesnotworkifthetargetdeviceisbehinda

firewallorhassecuritysoftwareinstalled.

ToviewtheDiagnosissettings,clickTools then select Diagnosis.

Diagnosing a Network Connection Problem

Address to PingEnter IP address of the device to ping.

Ping FrequencySelect the interval, in seconds, that the ping message is sent out.

ClickStarttobeginthediagnosis.

128

Upgrading The Router’s FirmwareFirmwareistherouter’ssystemsoftwarethatoperatesandallowstheadministratortointeractwithit.

ToviewtheFirmwaresettings,clickTools then select Firmware.

WARNING! Upgradingfirmwarethroughawirelessconnectionisnotrecommended.FirmwareupgradingmustbeperformedwhileconnectedtoanEthernet(LANport)withallotherclientsdisconnected.

Toupdatethefirmwareversion,followthesesteps:

1.DownloadtheappropriatefirmwareapprovedbyEnGeniusfromanEnGeniuswebsite.SeetheDownloads tab on the product page for this product.Fornewproducts,newfirmwaremaynotbereadilyavailable.2.ClickChoose File.

3.Browsethefilesystemandselectthefirmwarefile.

4.ClickApply.

129

Backing Up The Router’s SettingsSavethemasaconfigurationfileonyourcomputer.

ToviewtheBack-upsettings,clickTools then select Back-up.

Restoring to the router’s Factory Default settingsClickResettorestoretheESRSeriesRoutertofactorydefaults.

Backup SettingsClickSave tosavethecurrentconfigurationontheroutertoa*.dlffile.

Restore SettingsTorestoresavedsettings,dothefollowing:

a.ClickChoose File.

b.Browsethefilesystemforlocationofthesettingsfile(*.dlf).

c.ClickUpload.

130

Rebooting the RouterThisfeatureallowsyoutoreboottherouterintheeventofasystemhanguporotherdisruptiontothenetwork.

ToviewtheResetsettings,clickTools then select Reset.

ClickApply to reset the device.

131

Appendix

132

Wall Mounting The RouterThefollowingareinstructionsifyouchoosetomounttherouterona

wall.

Note: ChoosealocationthatiswithinreachofanelectricaloutletfortheACadapterandtheDSLorCablemodem.

Tomountthedeviceonthewalldothefollowing:

1.Measurethedistancefromthemiddleofeachmountingscrewhole.

2.Markthelocationsofthescrewholesonthewall.

3.Drillaholeforeachmarkedlocationandinsertascrewineach.

Note: Makesuretoleaveenoughofthescrewheadabovethewallsurfacetosecuretherouter.

4.Installandsecurethemountsontotherouter.

5.Installtherouteronthewall.

133

Federal Communication Commission Interference Statement

ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart15oftheFCC

Rules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceinaresidentialinstallation.This

equipmentgeneratesusesandcanradiateradiofrequencyenergyand,ifnotinstalledandusedinaccordancewiththe

instructions,maycauseharmfulinterferencetoradiocommunications.However,thereisnoguaranteethatinterferencewillnot

occurinaparticularinstallation.Ifthisequipmentdoescauseharmfulinterferencetoradioortelevisionreception,whichcanbe

determinedbyturningtheequipmentoffandon,theuserisencouragedtotrytocorrecttheinterferencebyoneofthefollowing

measures:

• Reorient or relocate the receiving antenna.

• Increasetheseparationbetweentheequipmentandreceiver.

• Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiverisconnected.

• Consultthedealeroranexperiencedradio/TVtechnicianforhelp.

WARNING! Anychangesormodificationsnotexpresslyapprovedbythepartyresponsibleforcompliancecouldvoidtheuser’sauthoritytooperatethisequipment.

ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(1)Thisdevicemaynot

causeharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmaycause

undesired operation.

FCC Radiation Exposure Statement Important:ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment.ThisdevicecomplieswithFCCRFExposurelimitssetforthforanuncontrolledenvironment,under47CFR2.1093paragraph(d)(2).Thistransmittermustnotbeco-locatedoroperatinginconjunctionwithanyotherantennaortransmitter.

134

Industry Canada Statement

ThisdevicecomplieswithRSS-210oftheIndustryCanadaRules.Operationissubjecttothefollowingtwoconditions:(1)This

devicemaynotcauseharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethat

may cause undesired operation.

CedispositifestconformeàlanormeCNR-210d’IndustrieCanadaapplicableauxappareilsradioexemptsdelicence.Son

fonctionnementestsujetauxdeuxconditionssuivantes:(1)ledispositifnedoitpasproduiredebrouillagepréjudiciable,et(2)ce

dispositifdoitacceptertoutbrouillagereçu,ycomprisunbrouillagesusceptibledeprovoquerunfonctionnementindésirable.

Important:Radiation Exposure Statement: ThisequipmentcomplieswithICradiationexposurelimitssetforthforanuncontrolledenvironment.Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&yourbody.Déclaration d’exposition aux radiations:Cetéquipementestconformeauxlimitesd’expositionauxrayonnementsICétabliespourunenvironnementnoncontrôlé.Cetéquipementdoitêtreinstalléetutiliséavecunminimumde20cmdedistanceentrelasourcederayonnementetvotrecorps.

Documents

IMPORTANT - EnGenius...7 Reset Button — For resetting the router to its factory default settings by pressing button for more than 11 seconds or until the Power LED starts flashing