Zoom out
Zoom in
Vorherige Seite
1/130
Nächste Seite
WLR-4002B
1

Brauchen Sie Hilfe? Stellen Sie Ihre Frage.

Forenregeln

Inhalt der Seiten


  • Page 1

    WLR-4002B



  • Page 2

    TABLE OF CONTENTS
    INTRODUCTION

    7

    1 KEY FEATURES

    8

    2 PACKAGE CONTENTS

    9

    3 CAUTIONS

    10

    3.1 USAGE CAUTIONS
    3.2 POWER
    3.3 REPAIR
    3.4 DISPOSING OF THE ROUTER
    3.5 OTHERS

    10
    10
    10
    10
    10

    4 PRODUCT LAYOUT

    11

    BACKLABEL
    LED DEFINITION

    12
    13

    5 NETWORK + SYSTEM REQUIREMENTS

    14

    6 WLR-4002B PLACEMENT

    14

    7 SETUP LAN, WAN

    15

    8 PC NETWORK ADAPTER SETUP

    17

    9 BRINGING UP THE WLR-4002B

    21

    10 INITIAL SETUP WLR-4002B

    21

    LOGIN PROCEDURE
    LAN SETTINGS
    DEVICE STATUS
    INTERNET STATUS
    DHCP CLIENT STATUS
    WLR-4002B LOG
    STATISTICS

    21
    23
    25
    26
    27
    28
    29



  • Page 3

    11 CONFIGURATION WIZARD

    30

    12 WIRELESS SETTINGS

    32

    WIRELESS FUNCTION
    BASIC SETTINGS
    ADVANCED SETTINGS
    SECURITY
    ACL
    WPS

    32
    33
    34
    36
    42
    43

    13 FIREWALL SETTINGS

    45

    DMZ
    DENIAL OF SERVICE (DOS)
    ACCESS
    URL BLOCK

    46
    47
    48
    50

    14 ADVANCED SETTINGS

    51

    PORT FORWARDING
    VIRTUAL SERVER
    SPECIAL APPLICATIONS
    APPLICATION LAYER GATEWAY
    UPNP
    QOS

    52
    54
    56
    58
    59
    60

    15 VPN

    62

    STATUS
    62
    USING THE WIZARD TO CONFIGURE THE WLR-4002B FOR A PPTP VPN
    TUNNEL.
    63
    USING THE WIZARD TO CONFIGURE THE WLR-4002B FOR L2TP OVER IPSEC
    VPN TUNNEL.
    66
    CONFIGURING A MICROSOFT WINDOWS 7 VPN CLIENT
    70
    CONFIGURING A MICROSOFT WINDOWS XP VPN CLIENT
    77
    85
    CONFIGURING A MACOS VPN CLIENT
    CONFIGURING A VPN CLIENT ON IOS
    90
    94
    CONFIGURING A VPN CLIENT ON ANDROID



  • Page 4

    PROFILE SETTING
    PPTP
    L2TP
    IPSEC
    L2TP OVER IPSEC
    USER SETTING
    EXAMPLE OF CONFIGURING IPSEC SITE TO SITE ARCHITECTURE

    97
    100
    101
    102
    106
    107
    108

    16 TOOLBOX

    112

    SITECOM CLOUD SECURITY
    PASSWORD CHANGE OPTIONS
    TIME ZONE
    REMOTE MANAGEMENT
    FIRMWARE UPGRADE
    BACKUP SETTINGS
    RESET
    DDNS

    112
    117
    118
    119
    120
    121
    122
    123



  • Page 5



  • Page 6

    125

    Revision 2.0
    © Sitecom Europe BV 2012
    Note: All the information contained in this manual was correct at the time of
    publication.
    However, as our engineers are always updating and improving the product, your
    device’s software may have a slightly different appearance or modified
    functionality than presented in this manual.



  • Page 7

    Introduction
    Congratulations on your purchase of the WLR-4002B Wireless Gigabit VPN
    Router 300N. The WLR-4002B is compliant with 802.11n and up to 6 times
    faster than standard 802.11g based routers while still being compatible with
    802.11g & 802.11b devices. The WLR-4002B is not only a Wireless Access
    Point, but also doubles as a 7-port full-duplex Gigabit switch that connects
    your wired-Ethernet devices together at 10/100/1000 Mbps speeds.

    At 300 Mbps wireless transmission rate, the Access Point built into the Router
    uses advanced MIMO (Multi-Input, Multi-Output) technology to transmit
    multiple streams of data in a single wireless channel, giving you seamless
    access to multimedia content. The robust RF signal travels farther, eliminates
    dead spots and extends the network range. For data protection and privacy,
    the WLR-4002B encodes all wireless transmissions with WEP, WPA, or WPA2
    encryption.

    With the inbuilt DHCP Server & powerful SPI firewall, the WLR-4002B protects
    your computers against intruders and most known Internet attacks and also
    provides safe VPN pass-through. With the incredible speed and QoS function
    of 802.11n the WLR-4002B is ideal for media-centric applications like
    streaming video, gaming, and VoIP telephony to run multiple media-intense
    data streams through the network at the same time, with no degradation in
    performance.

    The router includes Sitecom Cloud Security to protect your home network
    against cybercrime.

    7



  • Page 8

    1 Key Features
    Features

    Advantages

    Incredible Data Rate up to

    Heavy data payloads such as

    300Mbps*

    MPEG video streaming

    IEEE 802.11n Compliant and

    Fully Interoperable with IEEE

    backwards compatible with

    802.11b / IEEE802.11g

    802.11b/g

    compliant devices with legacy
    protection

    Seven 10/100/1000 Mbps gigabit

    Scalability, extend your network.

    Switch Ports (Auto-Crossover)
    Firewall supports Virtual Server

    Avoids the attacks of Hackers or

    Mapping, DMZ, IP Filter, ICMP

    Viruses from Internet

    Blocking, SPI
    Support 802.1x authenticator,

    Provide mutual authentication

    802.11i (WPA/WPA2, AES), VPN

    (Client and dynamic encryption

    pass-through

    keys to enhance security

    WDS (Wireless Distribution System)

    Make wireless AP and Bridge
    mode simultaneously as a
    wireless repeater

    * Theoretical wireless signal rate based on IEEE standard of 802.11b, g, n chipset used. Actual
    throughput may vary. Network conditions and environmental factors lower actual throughput rate.
    All specifications are subject to change without notice.

    8



  • Page 9

    2 Package Contents
    Open the package carefully, and make sure that none of the items listed
    below are missing. Do not discard the packing materials, in case of return;
    the unit must be shipped back in its original package.

    1.

    The WLR-4002B Router

    2.

    A 110V~240V to 12V 1A Switching Power Adapter

    3.

    A Quick Install Guide

    4.

    A CD (User’s Manual)

    5.

    A Warranty card

    6.

    An UTP cable

    7.

    2 antennas

    9



  • Page 10

    3 Cautions
    This router’s design and manufacturer has your safety in mind. In order to
    safely and effectively use this router, please read the following before usage.

    3.1 Usage Cautions
    The user should not modify this router. The environmental temperature
    should be within +5 ~ +35 degrees Celsius.

    3.2 Power
    The router’s power voltage is DC 12V 1A.
    When using this router, please connect the supplied AC adapter or AC adapter
    cable to the router’s power jack. When placing the adapter cable, make sure
    it can not get damaged or be subject to pressure. To reduce the risk of
    electric shock, unplug the adapter first before cleaning it. Never connect the
    adapter to the router in a humid or dusty area. Do not replace the adapter or
    cable’s wire or connector.

    3.3 Repair
    If the router has a problem, you should take it to an appointed repair centre
    and let the specialists do the repair. Never repair the router yourself, you
    might damage the router or endanger yourself.

    3.4 Disposing of the Router
    When you dispose of the router, be sure to dispose it appropriately. Some
    countries may regulate disposal of an electrical device, please consult with
    your local authority.

    3.5 Others
    When using this router, please do not let it come into contact with water or
    other liquids. If water is accidentally spilled on the router, please use a dry
    cloth to absorb the spillage. Electronic products are vulnerable, when using
    please avoid shaking or hitting the router, and do not press the buttons too
    hard.
    - Do not let the router come into contact with water or other liquid.
    - Do not disassemble, repair or change the design of the router, any damage
    done will not be included in the repair policy.
    - Avoid hitting the router with a hard object, avoid shaking the router and
    stay away from magnetic fields.
    - If during electrostatic discharge or a strong electromagnetic field the
    product will malfunction, unplug the power cable. The product will return to
    normal performance the next time it is powered on.

    10



  • Page 11

    4 Product Layout

    Port

    Description

    Power connector

    Connect the 12V DC adapter to this port

    LAN (1~7)

    Connect your PC’s or network devices to this port

    WAN

    Connect your ADSL/Cable modem to this port

    11



  • Page 12

    Backlabel
    The backlabel describes the IP address, login details, SSID, security code and
    WPS button functionality.

    Button

    Description
    Press 1-5 seconds for OPS mode
    Press 10-15 seconds to reset the router

    OPS BUTTON

    Press 15+ Seconds to reset the router to factory
    defaults.

    12



  • Page 13

    LED Definition
    From left to right.

    Port

    Description

    LAN (Blue)

    Shows the cable is connected.

    LAN (Blue)

    Shows the cable is connected.

    LAN (Blue)

    Shows the cable is connected.

    LAN (Blue)

    Shows the cable is connected.

    WAN (Blue)

    Shows the cable is connected.

    WiFi (Blue)

    Shows WiFi activity.

    Power (Red)

    Shows the device is turned on.

    OPS (White)

    Shows OPS activity.

    13



  • Page 14

    5 Network + System Requirements
    To begin using the WLR-4002B, make sure you meet the following as
    minimum requirements:



    PC/Notebook.



    Operating System – Microsoft Windows XP/Vista/Seven



    1 Free Ethernet port.



    WiFi card/USB dongle (802.11 b/g/n) – optional.



    External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45).



    PC with a Web-Browser (Internet Explorer, Safari, Firefox, Opera)



    Ethernet compatible CAT5e cables.

    6 WLR-4002B Placement
    You can place the WLR-4002B on a desk or other flat surface, or you can
    mount it on a wall. For optimal performance, place your Wireless Broadband
    Router in the center of your home (or your office) in a location that is away
    from any potential source of interference, such as a metal wall or microwave
    oven. This location must be close to a power connection and your ADSL/Cable
    modem.

    14



  • Page 15

    7 Setup LAN, WAN
    WAN connection:

    15



  • Page 16

    LAN connection:

    16



  • Page 17

    8 PC Network Adapter setup
    Windows XP


    Enter [Start Menu]



    Select [Local Area Connection]) icon=>select [properties]

    select [Control panel]

    select [Network].

    17



  • Page 18



    Select [Internet Protocol (TCP/IP)] =>Click [Properties].



    Select the [General] tab.

    The router supports [DHCP] function, please select both [Obtain an IP
    address automatically] and [Obtain DNS server address automatically].

    18



  • Page 19

    Windows Vista/Seven


    Enter [Start Menu]

    select [Control panel]

    select [View network status

    and tasks] -> select [Manage network connections].



    Select [Local Area Connection]) icon=>select [properties]

    19



  • Page 20



    Select [Internet Protocol Version 4 (TCP/IPv4)] =>Click [Properties].



    Select the [General] tab.

    The router supports [DHCP] function, please select both [Obtain an IP address
    automatically] and [Obtain DNS server address automatically].

    20



  • Page 21

    9 Bringing up the WLR-4002B
    Connect the supplied power-adapter to the power inlet port and connect it to
    a wall outlet. Switch on the power via the switch on the back of the device.
    The WLR-4002B automatically enters the self-test phase. During self-test
    phase, the Power LED will be lit continuously to indicate that this product is in
    normal operation.

    10 Initial Setup WLR-4002B
    LOGIN procedure

    1. OPEN your browser (e.g. Internet Explorer).

    2. Type http://192.168.0.1 in the address bar and press [Enter]

    21



  • Page 22

    3. Type user name and password (default username is ‘admin’, the password
    can be found on the back of he router).

    4. Click OK.
    5. You will see the home page of the WLR-4002B.

    The System status section allows you to monitor the current status of your router
    the UP time, hardware information, serial number as well as firmware version
    information is displayed here.

    22



  • Page 23

    LAN settings
    The LAN tab gives you the opportunity to change the IP settings of the WLR4002B.

    Click <Apply> at the bottom of this screen to save any changes.

    IP address 192.168.0.1. It is the router’s LAN IP address (Your LAN clients
    default gateway IP address).

    IP Subnet Mask 255.255.255.0 Specify a Subnet Mask for your LAN segment.

    802.1d Spanning Tree is Disabled by default. If the 802.1d Spanning Tree
    function is enabled, this router will use the spanning tree protocol to prevent
    network loops.
    DHCP Server Enabled by default. You can enable or disable the DHCP server.
    When DHCP is disabled no ip-addresses are assigned to clients and you have to
    use static ip-addresses. When DHCP server is enabled your computers will be
    assigned an ip-address automatically until the lease time expires.

    23



  • Page 24

    Lease Time Forever. In the Lease Time setting you can specify the time period
    that the DHCP lends an IP address to your LAN clients. The DHCP will change
    your LAN client’s IP address when this time threshold period is reached.
    IP Address Pool You can select a particular IP address range for your DHCP
    server to issue IP addresses to your LAN Clients.

    Note: default IP range is 192.168.0.100 ~ 192.168.0.200. If you want
    your PC(s) to have a static/fixed IP address, then you’ll have to choose
    an IP address outside this IP address Pool

    Domain Name You can specify a Domain Name for your LAN or just keep the
    default (sitecomwlr4002).

    24



  • Page 25

    Device Status
    View the Broadband router’s current configuration settings. Device Status
    displays the configuration settings you’ve configured in the Wizard / Basic
    Settings / Wireless Settings section.

    25



  • Page 26

    Internet Status
    This page displays whether the WAN port is connected to a Cable/DSL
    connection. It also displays the router’s WAN IP address, Subnet Mask, and ISP
    Gateway as well as MAC address, the Primary DNS. Press the Renew button to
    renew your WAN IP address.

    26



  • Page 27

    DHCP Client Status
    This page shows all DHCP clients (LAN PCs) currently connected to your network.
    The table shows the assigned IP address, MAC address and expiration time for
    each DHCP leased client. Use the Refresh button to update the available
    information.

    You can check Enable Static DHCP IP. It is possible to add more static DHCP
    IPs. They are listed in the table Current Static DHCP Table. IP can be deleted
    at will from the table.

    Click apply button to save the changed configuration.

    27



  • Page 28

    WLR-4002B Log
    View the operation log. This page shows the current system log of the Broadband
    router. It displays any event occurred after system start up. At the bottom of the
    page, the system log can be saved <Save> to a local file for further processing
    or the system log can be cleared <Clear> or it can be refreshed <Refresh> to
    get the most updated information. When the system is powered down, the
    system log will disappear if not saved to a local file.

    28



  • Page 29

    Statistics
    Shows the counters of packets sent and received on WAN, LAN & WLAN.

    29



  • Page 30

    11 Configuration Wizard
    Click Wizard to configure the router. The Setup wizard will now be displayed;
    check that the modem is connected and click Next.

    Select your country from the Country list. Select your internet provider. Click
    Next.

    30



  • Page 31

    Depending on the chosen provider, you may need to enter your user name
    and password, MAC address or hostname in the following window. After you
    have entered the correct information, click Next.

    Click APPLY to complete the configuration.

    31



  • Page 32

    12 Wireless Settings
    You can set parameters that are used for the wireless stations to connect to this
    router. The parameters include Mode, ESSID, Channel Number and Associated
    Client.

    Wireless Function

    Enable or Disable Wireless function here. Click Apply and wait for module to
    be ready & loaded.

    32



  • Page 33

    Basic Settings

    Mode Allows you to set AP or WDS mode.
    Band Allows you to set the AP fixed at 802.11b or 802.11g mode. You can
    also select B+G mode to allow 80211b and 802.11g clients at the same time.
    Enable SSID # Allows you to enable up to four SSIDs for this router.
    SSID This is the name of the wireless signal which is broadcasted. All the
    devices in the same wireless LAN should have the same ESSID.
    Channel The channel used by the wireless LAN. All devices in the same
    wireless LAN should use the same channel. When ‘Auto’ is selected the router
    will automatically determine which wireless channel is most suitable.

    33



  • Page 34

    Advanced Settings
    This tab allows you to set the advanced wireless options. The options included
    are Authentication

    Type,

    Fragment

    Threshold,

    RTS

    Threshold,

    Beacon

    Interval, and Preamble Type. You should not change these parameters unless
    you know what effect the changes will have on the router.

    Authentication Type There are two authentication types: "Open System"
    and "Shared Key". When you select "Open System", wireless stations can
    associate with this wireless router without WEP encryption. When you select
    "Shared Key", you should also setup a WEP key in the "Encryption" page.
    After this has been done, make sure the wireless clients that you want to
    connect to the device are also setup with the same encryption key.

    Fragment Threshold "Fragment Threshold" specifies the maximum size of a
    packet during the fragmentation of data to be transmitted. If you set this
    value too low, it will result in bad performance.

    RTS Threshold When the packet size is smaller then the RTS threshold, the
    wireless router will not use the RTS/CTS mechanism to send this packet.

    34



  • Page 35

    Beacon Interval is the interval of time that this wireless router broadcasts a
    beacon. A Beacon is used to synchronize the wireless network.
    Data Rate The “Data Rate” is the rate that this access point uses to transmit
    data packets. The access point will use the highest possible selected
    transmission rate to transmit the data packets.
    N Data Rate The “Data Rate” is the rate that this access point uses to
    transmit data packets for N compliant wireless nodes. Highest to lowest data
    rate can be fixed.
    Channel Bandwidth is the range of frequencies that will be used.
    Preamble Type The “Long Preamble” can provide better wireless LAN
    compatibility while the “Short Preamble” can provide better wireless LAN
    performance.
    CTS Protection: It is recommended to enable the protection mechanism.
    This mechanism can decrease the rate of data collision between 802.11b and
    802.11g wireless stations. When the protection mode is enabled, the
    throughput of the AP will be a little lower due to a lot of frame-network that is
    transmitted.
    TX Power can be set to a bare minimum or maximum power.

    35



  • Page 36

    Security
    This Access Point provides complete wireless LAN security functions, included
    are WEP, IEEE 802.11x, IEEE 802.11x with WEP, WPA with pre-shared key
    and WPA with RADIUS. With these security functions, you can prevent your
    wireless LAN from illegal access. Please make sure your wireless stations use
    the same security function, and are setup with the same security key.

    SSID Selection Here you choose the SSID for which you wish to set the
    security.
    Broadcast ESSID If you enabled “Broadcast ESSID”, every wireless station
    located within the coverage of this access point can discover this access point
    easily. If you are building a public wireless network, enabling this feature is
    recommended. Disabling “Broadcast ESSID” can provide better security.
    WMM WiFi Multi Media if enabled supports QoS for experiencing better audio,
    video and voice in applications.

    36



  • Page 37

    Disable
    When you choose to disable encryption, it is very insecure to operate the
    router.

    37



  • Page 38

    Enable 802.1x Auth
    IEEE 802.1x is an authentication protocol. Every user must use a valid
    account to login to this Access Point before accessing the wireless LAN. The
    authentication is processed by a RADIUS server. This mode only authenticates
    users by IEEE 802.1x, but it does not encrypt the data during communication.

    38



  • Page 39

    WEP
    When you select 64-bit or 128-bit WEP key, you have to enter WEP keys to
    encrypt data. You can generate the key by yourself and enter it. You can
    enter four WEP keys and select one of them as a default key. Then the router
    can receive any packets encrypted by one of the four keys.

    Key Length You can select the WEP key length for encryption, 64-bit or 128bit. The larger the key will be the higher level of security is used, but the
    throughput will be lower.
    Key Format You may select ASCII Characters (alphanumeric format) or
    Hexadecimal Digits (in the "A-F", "a-f" and "0-9" range) to be the WEP Key.
    Key1 - Key4 The WEP keys are used to encrypt data transmitted in the
    wireless network. Use the following rules to setup a WEP key on the device.
    64-bit WEP: input 10-digits Hex values (in the "A-F", "a-f" and "0-9" range) or
    5-digit ASCII character as the encryption keys. 128-bit WEP: input 26-digit
    Hex values (in the "A-F", "a-f" and "0-9" range) or 13-digit ASCII characters
    as the encryption keys.

    39



  • Page 40

    Click “Apply” at the bottom of the screen to save the above configurations.
    You can now configure other sections by choosing Continue, or choose Apply
    to

    apply

    the

    settings

    and

    reboot

    the

    device.

    WPA Pre-shared Key

    Wi-Fi Protected Access (WPA) is an advanced security standard. You can use a
    pre-shared key to authenticate wireless stations and encrypt data during
    communication. It uses TKIP or CCMP (AES) to change the encryption key
    frequently. So the encryption key is not easy to be cracked by hackers. This is
    the best security available.

    40



  • Page 41

    WPA-Radius
    Wi-Fi Protected Access (WPA) is an advanced security standard. You can use
    an external RADIUS server to authenticate wireless stations and provide the
    session key to encrypt data during communication. It uses TKIP or CCMP
    (AES) to change the encryption key frequently. Press Apply button when you
    are done.

    41



  • Page 42

    ACL
    This

    wireless

    router

    supports

    MAC

    Address

    Control,

    which

    prevents

    unauthorized clients from accessing your wireless network.

    Enable wireless access control Enables the wireless access control function
    Adding an address into the list Enter the "MAC Address" and "Comment"
    of the wireless station to be added and then click "Add". The wireless station
    will now be added into the "Current Access Control List" below. If you are
    having any difficulties filling in the fields, just click "Clear" and both "MAC
    Address" and "Comment" fields will be cleared.
    Remove an address from the list If you want to remove a MAC address
    from the "Current Access Control List ", select the MAC address that you want
    to remove in the list and then click "Delete Selected". If you want to remove
    all the MAC addresses from the list, just click the "Delete All" button. Click
    "Reset" will clear your current selections.

    Click <Apply> at the bottom of the screen to save the above configurations.
    You can now configure other sections by choosing Continue, or choose Apply
    to apply the settings and reboot the device.

    42



  • Page 43

    WPS
    Wi-Fi Protected Setup (WPS) is the simplest way to establish a connection
    between the wireless clients and the wireless router. You don’t have to select
    the encryption mode and fill in a long encryption passphrase every time when
    you try to setup a wireless connection. You only need to press a button on
    both wireless client and wireless router, and WPS will do the rest for you.

    The wireless router supports two types of WPS: WPS via Push Button and
    WPS via PIN code. If you want to use the Push Button, you have to push a
    specific button on the wireless client or in the utility of the wireless client to
    start the WPS mode, and switch the wireless router to WPS mode. You can
    simply push the WPS button of the wireless router, or click the ‘Start to
    Process’ button in the web configuration interface. If you want to use the PIN
    code, you have to know the PIN code of the wireless client and switch it to
    WPS mode, then fill-in the PIN code of the wireless client through the web
    configuration interface of the wireless router.

    43



  • Page 44

    WPS Check the box to enable WPS function and uncheck it to disable the
    WPS function.
    WPS Current Status If the wireless security (encryption) function of this
    wireless router is properly set, you’ll see a ‘Configured’ message here.
    Otherwise, you’ll see ‘UnConfigured’.
    Self Pin Code This is the WPS PIN code of the wireless router. You may need
    this information when connecting to other WPS-enabled wireless devices.
    SSID This is the network broadcast name (SSID) of the router.
    Authentication Mode It shows the active authentication mode for the
    wireless connection.
    Passphrase Key It shows the passphrase key that is randomly generated by
    the wireless router during the WPS process. You may need this information
    when using a device which doesn’t support WPS.
    WPS via Push Button Press the button to start the WPS process. The router
    will wait for the WPS request from the wireless devices within 2 minutes.
    WPS via PIN You can fill-in the PIN code of the wireless device and press the
    button to start the WPS process. The router will wait for the WPS request
    from the wireless device within 2 minutes.

    44



  • Page 45

    13

    Firewall Settings

    The Broadband router provides extensive firewall protection by restricting
    connection parameters, thus limiting the risk of hacker attacks, and defending
    against a wide array of common Internet attacks. However, for applications that
    require unrestricted access to the Internet, you can configure a specific
    client/server as a Demilitarized Zone (DMZ).

    Note: To enable the Firewall settings select Enable and click Apply

    45



  • Page 46

    DMZ
    If you have a client PC that cannot run an Internet application (e.g. Games)
    properly from behind the NAT firewall, then you can open up the firewall
    restrictions to unrestricted two-way Internet access by defining a DMZ Host.
    The DMZ function allows you to re-direct all packets going to your WAN port
    IP address to a particular IP address in your LAN. The difference between the
    virtual server and the DMZ function is that the virtual server re-directs a
    particular service/Internet application (e.g. FTP, websites) to a particular LAN
    client/server, whereas DMZ re-directs all packets (regardless of services)
    going to your WAN IP address to a particular LAN client/server.

    Enable DMZ Enable/disable DMZ

    Public IP Address The IP address of the WAN port or any other Public IP
    addresses given to you by your ISP

    Client PC IP Address Fill-in the IP address of a particular host in your LAN
    that will receive all the packets originally going to the WAN port/Public IP
    address above.

    Click <Apply> at the bottom of the screen to save the above configurations.

    46



  • Page 47

    Denial of Service (DoS)
    The Broadband router's firewall can block common hacker attacks, including
    Denial of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks
    occur the router can log the events.

    Ping of Death Protections from Ping of Death attack
    Discard Ping From WAN The router’s WAN port will not respond to any Ping
    requests
    Port Scan Protects the router from Port Scans.
    Sync Flood Protects the router from Sync Flood attack.

    47



  • Page 48

    Access
    You can restrict users from accessing certain Internet applications/services
    (e.g. Internet websites, email, FTP etc.), Access Control allows users to define
    the traffic type permitted in your LAN. You can control which PC client can
    have access to these services.

    Deny If you select “Deny” then all clients will be allowed to access Internet
    accept for the clients in the list below.

    Allow If you select “Allow” then all clients will be denied to access Internet
    accept for the PCs in the list below.

    Filter client PCs by IP Fill in “IP Filtering Table” to filter PC clients by IP.

    Add PC You can click Add PC to add an access control rule for users by IP
    addresses.

    Remove PC If you want to remove some PCs from the "IP Filtering Table",
    select the PC you want to remove in the table and then click “Delete

    48



  • Page 49

    Selected". If you want to remove all PCs from the table, just click the "Delete
    All" button.

    Filter client PC by MAC Check “Enable MAC Filtering” to enable MAC
    Filtering.

    Add PC Fill in “Client PC MAC Address” and “Comment” of the PC that is
    allowed to access the Internet, and then click “Add”. If you find any typo
    before adding it and want to retype again, just click "Reset" and the fields will
    be cleared.

    Remove PC If you want to remove some PC from the "MAC Filtering Table",
    select the PC you want to remove in the table and then click "Delete
    Selected". If you want to remove all PCs from the table, just click the "Delete
    All" button. If you want to clear the selection and re-select again, just click
    “Reset”.

    Click <Apply> at the bottom of the screen to save the above configuration.

    49



  • Page 50

    URL block
    You can block access to some Web sites from particular PCs by entering a full
    URL address or just keywords of the Web site.

    Enable URL Blocking Enable/disable URL Blocking

    Add URL Keyword Fill in “URL/Keyword” and then click “Add”. You can enter
    the full URL address or the keyword of the web site you want to block.

    Remove URL Keyword If you want to remove some URL keywords from the
    "Current URL Blocking Table", select the URL keyword you want to remove in
    the table and then click "Delete Selected". If you want remove all URL
    keywords from the table, just click "Delete All" button. If you want to clear
    the selection and re-select again, just click “Reset”.

    Click <Apply> at the bottom of the screen to save the above configurations

    50



  • Page 51

    14 Advanced Settings
    Network Address Translation (NAT) allows multiple users at your local site to
    access the Internet through a single Public IP Address or multiple Public IP
    Addresses. NAT provides Firewall protection from hacker attacks and has the
    flexibility to allow you to map Private IP Addresses to Public IP Addresses for
    key services such as Websites and FTP. Select Disable to disable the NAT
    function.

    51



  • Page 52

    Port Forwarding
    Port Forwarding allows you to re-direct a particular range of service port
    numbers (from the Internet/WAN Port) to a particular LAN IP address. It helps
    you to host servers behind the router NAT firewall.

    Enable Port Forwarding Enable Port Forwarding

    Private IP This is the private IP of the server behind the NAT firewall.

    Type This is the protocol type to be forwarded. You can choose to forward
    “TCP” or “UDP” packets only, or select “both” to forward both “TCP” and “UDP”
    packets.

    Port Range The range of ports to be forward to the private IP.

    Comment description of this setting.

    Add Port Forwarding Fill in the "Private IP", “Type”, “Port Range” and
    "Comment" of the setting to be added and then click "Add". Then this Port
    Forwarding setting will be added into the "Current Port Forwarding Table"
    below.

    52



  • Page 53

    Remove Port Forwarding If you want to remove a Port Forwarding setting
    from the "Current Port Forwarding Table", select the Port Forwarding setting
    that you want to remove in the table and then click "Delete Selected". If you
    want to remove all Port Forwarding settings from the table, just click "Delete
    All" button. Click "Reset" will clear your current selections.

    53



  • Page 54

    Virtual Server

    Use the Virtual Server function when you want different servers/clients in
    your LAN to handle different service/Internet application type (e.g. Email,
    FTP, Web server etc.) from the Internet. Computers use numbers called port
    numbers to recognize a particular service/Internet application type. The
    Virtual Server allows you to re-direct a particular service port number (from
    the Internet/WAN Port) to a particular LAN private IP address and its service
    port number.

    Enable Virtual Server Enable Virtual Server.
    Private IP This is the LAN client/host IP address that the Public Port number
    packet will be sent to.
    Private Port This is the port number (of the above Private IP host) that the
    below Public Port number will be changed to when the packet enters your
    LAN (to the LAN Server/Client IP)
    Type Select the port number protocol type (TCP, UDP or both). If you are
    unsure, then leave it to the default “both” setting. Public Port Enter the
    service (service/Internet application) port number from the Internet that will
    be re-directed to the above Private IP address host in your LAN

    54



  • Page 55

    Comment The description of this setting.
    Add Virtual Server Fill in the "Private IP", "Private Port", "Type", “Public
    Port” and "Comment" of the setting to be added and then click "Add". Then
    this Virtual Server setting will be added into the "Current Virtual Server Table"
    below.
    Remove Virtual Server If you want to remove Virtual Server settings from
    the "Current Virtual Server Table", select the Virtual Server settings you want
    to remove in the table and then click "Delete Selected". If you want to
    remove all Virtual Server settings from the table, just click the "Delete All"
    button. Click "Reset" will clear your current selections.
    Click <Apply> at the bottom of the screen to save the above configurations.

    55



  • Page 56

    Special Applications
    Some applications require multiple connections, such as Internet games,
    video Conferencing, Internet telephony and others. In this section you can
    configure the router to support multiple connections for these types of
    applications.

    Enable Trigger Port Enable the Special Application function.

    Trigger Port This is the out going (Outbound) range of port numbers for this
    particular application.

    Trigger Type Select whether the outbound port protocol is “TCP”, “UDP” or
    both.

    Public Port Enter the In-coming (Inbound) port or port range for this type of
    application (e.g. 2300-2400, 47624)

    Public Type Select the Inbound port protocol type: “TCP”, “UDP” or both
    Comment The description of this setting.

    56



  • Page 57

    Popular applications This section lists the more popular applications that
    require

    multiple

    connections.

    Select

    an

    application

    from

    the

    Popular

    Applications selection. Once you have selected an application, select a
    location (1-10) in the Copy to selection box and then click the Copy to button.
    This will automatically list the Public Ports required for this popular application
    in the location (1-10) you specified.

    Add Special Application Fill in the "Trigger Port", "Trigger Type”, “Public
    Port”, "Public Type", "Public Port" and "Comment" of the setting to be added
    and then click "Add". The Special Application setting will be added into the
    "Current Trigger-Port Table" below. If you happen to make a mistake, just
    click "Clear" and the fields will be cleared.

    Remove If you want to remove Special Application settings from the "Current
    Trigger-Port Table", select the Special Application settings you want to remove
    in the table and then click "Delete Selected". If you want remove all Special
    Application settings from the table, just click the "Delete All" button. Click
    "Reset" will clear your current selections.

    57



  • Page 58

    Application Layer Gateway
    In the context of computer networking, an application-level gateway
    (also known as ALG or application layer gateway) consists of a security
    component that augments a firewall or NAT employed in a computer network.
    It allows customized NAT traversal filters to be plugged into the gateway to
    support address and port translation for certain application layer "control/data"
    protocols such as FTP, BitTorrent, SIP, RTSP, file transfer in IM applications etc.
    In order for these protocols to work through NAT or a firewall, either the
    application has to know about an address/port number combination that allows
    incoming packets, or the NAT has to monitor the control traffic and open up port
    mappings (firewall pinhole) dynamically as required.
    Legitimate application data can thus be passed through the security checks of the
    firewall or NAT that would have otherwise restricted the traffic for not meeting its
    limited filter criteria.

    To Enable/Disable special support for any of the applications in the list. You can
    Simply check or uncheck the corresponding checkbox and Click “Apply” for the
    settings to take effect.

    58



  • Page 59

    UPnP
    With UPnP, all PCs in you Intranet will discover this router automatically, so
    you don’t have to configure your PC and it can easily access the Internet
    through this router.

    UPnP Feature You can enable or Disable the UPnP feature here. After you
    enable the UPnP feature, all client systems that support UPnP, like Windows
    XP, can discover this router automatically and access the Internet through this
    router without having to configure anything. The NAT Traversal function
    provided by UPnP can let applications that support UPnP connect to the
    internet without having to configure the virtual server sections.

    59



  • Page 60

    QoS
    QoS can let you classify Internet application traffic by source/destination IP
    address and port number. You can assign priority for each type of application
    and reserve bandwidth for it. The packets of applications with higher priority
    will always go first. Lower priority applications will get bandwidth after higher
    priority applications get enough bandwidth. This can let you have a better
    experience in using critical real time services like Internet phone, video
    conference …etc. All the applications not specified by you are classified as rule
    name “Others”. The rule with a smaller priority number has a higher priority;
    the rule with a larger priority number has a lower priority. You can adjust the
    priority of the rules by moving them up or down.

    Enable/Disable

    QoS

    You

    can

    check

    “Enable

    QoS”

    to

    enable

    QoS

    functionality for the WAN port.

    Add a QoS rule into the table Click “Add” then enter a form of the QoS
    rule. Click “Apply” after filling out the form the rule will be added into the
    table.

    Remove QoS rules from the table If you want to remove QoS rules from
    the table, select the QoS rules you want to remove in the table and then click
    "Delete Selected". If you want remove all QoS rules from the table, just click
    the "Delete All" button. Clicking "Reset" will clear your current selections.

    60



  • Page 61

    Edit a QoS rule Select the rule you want to edit and click “Edit”, then enter
    the detail form of the QoS rule. Click “Apply” after editing the form and the
    rule will be saved.

    Adjust QoS rule priority You can select the rule and click “Move Up” to
    make its priority higher. You also can select the rule and click “Move Down” to
    make its priority lower.

    61



  • Page 62

    15 VPN
    A Virtual Private Network (VPN) provides a secure connection between two or
    more computers or protected networks over the public Internet.
    It provides authentication to ensure that the information is going to and from the
    correct parties and security to protect the information from viewing or tampering
    en route. The WLR-4002B supports IPSec (Site to Site, Remote to Site) and L2TP
    over IPSec methods to establish VPN connections and the maximum VPN session
    number is up to 5.

    Status

    This page displays the connect status of VPN connection. You can select one of
    them to connect or disconnect the VPN connection.

    To Connect or Disconnect an existing tunnel. Select the tunnel from the list by
    ticking the corresponding check box and click connect or disconnect.

    Note : If the connection type is remote dial-in (Client to Site or L2TP over
    IPSec), you can’t disconnect this session manually.

    62



  • Page 63

    Using the Wizard to Configure the WLR-4002B for a
    PPTP VPN tunnel.

    1.
    2.
    3.

    In the Top Menu on the right side, click VPN.
    In the submenu, click Wizard to add a VPN profile.
    Click Next to create a VPN profile.

    4.

    In the Name field, enter a name for the PPTP VPN tunnel. This name is for
    reference purposes. Click Next to continue.

    63



  • Page 64

    5.

    Click PPTP and click NEXT to continue.

    6.

    Complete the following fields :
    Enter a name for authentication.
    Enter a password for authentication.
    Enter any private IP address on a different subnet
    than the LAN IP address of the computer connected
    behind the WLR-4002B.(When WLR4002 is on default
    settings, the LAN IP address is 192.168.0.100. In this
    case you can select any private IP address other than
    192.168.0.x, for example 192.168.3.x).
    Remote IP Range Enter an IP range that is on the same subnet as the
    Server IP address you have entered in the Server IP
    address field, but the range should not include Server
    IP.(For example if you specified a Server IP address
    of 192.168.2.1, you can define a Remote IP Range of
    192.168.2.100 – 200.)
    User Name
    Password
    Server IP

    Click Next to continue.

    64



  • Page 65

    8.

    Enable the VPN policy, and then click Apply to save the VPN profile.

    65



  • Page 66

    Using the Wizard to Configure the WLR-4002B for L2TP
    over IPSec VPN tunnel.
    1.
    2.
    3.

    In the Top Menu on the right side, click VPN.
    In the submenu, click Wizard to add a VPN profile.
    Click Next to create a VPN profile.

    4.

    In the Name field, enter a name for the L2TP VPN tunnel. This name is for
    reference purposes. Click Next to continue.

    5.

    Click L2TP and click NEXT to continue.

    66



  • Page 67

    6.

    Complete the following fields:
    Enter a name for authentication.
    Enter a password for authentication.
    Enter any IP address on a different subnet than the
    LAN IP address of the computer connected behind the
    WLR-4002B.(When WLR4002 is on default settings,
    the LAN IP address is 192.168.0.100. In this case
    you can select any IP address other than
    192.168.0.x).
    Remote IP Range Enter an IP range that is on the same subnet as the
    Server IP address you have entered in the Server IP
    address field, but the range should not include Server
    IP.(For example if you specified a Server IP address
    of 192.168.2.1, you can define a Remote IP Range of
    192.168.2.100 – 200.)

    User Name
    Password
    Server IP

    Click Next to continue.

    7.

    In the Shared Key field, enter the Security key you wish to use.

    67



  • Page 68

    8.

    Enable the VPN policy, and then click Apply to save the VPN profile.

    68



  • Page 69

    In the following examples it is assumed that the WLR-4002B is placed behind a
    bridged modem. This means that the Router will receive a public IP address on
    the WAN side. The WAN/Internet IP address can be found on the Internet
    status page of the WLR-4002B.

    If the WAN IP address of the WLR-4002B is not a public IP address but a local IP
    address (for example any IP address in the following ranges: 10.X.X.X,
    172.16.X.X or 192.168.X.X)
    In this situation your WLR-4002B is placed behind a NAT enabled modem. In this
    case consult your manual to make sure your modem supports VPN pass through
    and the GRE47 protocol and set it up to allow access to the VPN server behind
    the modem.

    69



  • Page 70

    Configuring a Microsoft Windows 7 VPN Client
    1. Click the Start button and open the Control Panel.

    2. From the Control Panel, select Network and Internet.(If your control
    panel view has been set to Icons you can directly go to step 4)

    70



  • Page 71

    3. From Network and internet, select Network and Sharing center .

    4.

    Under Network and Sharing Center, select Setup a new connection
    or network.

    71



  • Page 72

    5.

    Click Connect to a workplace, and click Use my internet connection
    (VPN).

    72



  • Page 73

    6. Complete the following fields:
    Internet Address Enter the WLR-4002B WAN IP address.
    Destination name Enter a name for the VPN client.
    We recommend to select: Don’t connect now. Just set it up so I can
    connect later.
    Click next to continue.

    7. Complete the following fields:
    User name Enter the username used to log onto the VPN tunnel.
    Password Enter the password used to log onto the VPN tunnel.
    Click Create to continue.

    73



  • Page 74

    8.

    When the following screen appears, click the Close button to close the
    VPN connection setting.

    9.

    Select Change adapter settings on the left side of the window.

    74



  • Page 75

    10.

    Select the VPN connection you just set, right-click VPN Connection, and
    select Properties.

    11.

    Go to the Security tab and configure the following settings :
    Under the Type of VPN, select the Protocol that has been set in the WLR4002B, Point to point tunneling protocol(PPTP) or Layer 2
    Tunneling Protocol with IPsec (L2TP-IPSec) .
    Check
    Check
    Check

    unencrypted password (PAP).
    Challenge Handshake Authentication Protocol (PPTP).
    Microsoft CHAP Version 2 (MS-CHAP v2).

    75



  • Page 76

    12.

    Go to Network and Sharing Center on the bottom-right of the windows.

    Under VPN Connection click Connect.

    76



  • Page 77

    Configuring a Microsoft Windows XP VPN Client
    1.

    Click the Start button and open the Control Panel.

    2.

    From the Control Panel, Click on Network Connections.

    77



  • Page 78

    3.

    Click on Create a network from the left side of the window.

    4.

    Click Next to continue to setup the VPN client.

    78



  • Page 79

    5.

    Select Connect to the network at my workplace and click Next to
    continue.

    6.

    Select Virtual Private network connection and click Next to continue.

    79



  • Page 80

    7.

    Enter a Company name, this name is only for reference purposes.

    8.

    Enter the Hostname , this should be the WLR-4002B WAN IP address and
    click Next to continue.

    80



  • Page 81

    9.

    Click Finish to continue, you may choose to add a shortcut for this
    connection on the Desktop by clicking the checkbox before you click
    Finish.

    10.

    Click on Properties.

    81



  • Page 82

    11.

    Click on the Security Tab from the top in the window and select
    Advanced, click Settings to continue.

    82



  • Page 83

    12.

    Configure the following settings:
    Under Data encryption, select Optional encryption (connect even
    if no encryption)
    Check
    Check
    Uncheck
    Check

    Unencrypted password (PAP)
    Challenge Handshake Authentication Protocol
    (SPAP)
    Microsoft CHAP (MS-CHAP)
    Microsoft CHAP Version 2 (MS-CHAP v2)

    Click OK to continue.

    13.

    Click Yes to continue. If the VPN type you have configured in the WLR4002B is PPTP you can skip step 14.

    83



  • Page 84

    14a.

    If the VPN Type of the tunnel you have set up in the WLR-4002B is L2TP
    over IPSec You have also entered a Shared key in the WLR-4002B(see
    step 7 of chapter Using the Wizard to Configure the WLR-4002B for
    L2TP over IPSec for reference).
    Click on IPSec Settings…

    14b.

    Check Use pre-shared key for authentication.
    Key, Enter the shared key you have entered in the WLR-4002B.

    84



  • Page 85

    Configuring a MacOS VPN Client
    1. Select System Preferences.

    2.

    On the System preferences panel, Click Network.

    85



  • Page 86

    3.

    Click on the + sign on the bottom left.

    4.

    Select the VPN interface.

    86



  • Page 87

    5.

    Under the VPN Type dropdown, select the option that corresponds to the
    VPN Type you have configured in the WLR-4002B. Enter a name for this
    profile (this name is for reference purpose only)

    6.

    Complete the following fields:
    Server address
    Account Name

    Enter the WAN IP address of the WLR-4002B.
    Enter the name used to log onto the VPN tunnel
    (this must be one of the users you have set in the
    VPN user table of the WLR-4002B)

    Click Authentication Settings to continue.

    87



  • Page 88

    7.

    Complete the following fields:
    Enter the password that belongs to the Account name
    which you have entered in step 6 of this Guide.
    Shared Key If the VPN Type of the VPN tunnel you have set up in
    the WLR-4002B is L2TP over IPSec You have also
    entered a Shared key in the WLR-4002B(see step 7
    of chapter Using the Wizard to Configure the
    WLR-4002B for L2TP over IPSec for reference)
    Enter the same key in this field.
    Password

    Click OK to continue.

    8.

    Click on Advanced in the network panel to continue.

    88



  • Page 89

    9.

    Select the checkbox Send all traffic over VPN connection.
    Click OK to continue.

    10.

    If the VPN tunnel is already connected, click Disconnect and Connect
    again for the changes made in step 9 to take effect.

    89



  • Page 90

    Configuring a VPN client on iOS
    1.

    Click Settings on the Springboard.

    2.

    Select General on from the panel of the left side and Click on Network.

    90



  • Page 91

    3.

    Click on VPN.

    4.

    click on Add VPN Configuration…

    91



  • Page 92

    3.

    Select the VPN Type that corresponds to the VPN Type you have
    configured in the WLR-4002B.
    Complete the following fields:
    Description
    Server
    Account

    Password

    Enter a name for your VPN connection, this name is
    for reference purposes only.
    Enter the WLR-4002B WAN IP address
    Enter Enter the name used to log onto the VPN
    tunnel(this must be one of the users you have set in
    the VPN user table of the WLR-4002B)
    Enter the Password used to log onto the VPN tunnel.

    Secret(L2TP only) If the VPN Type of the VPN tunnel you have set up in
    the WLR-4002B is L2TP over IPSec You have also
    entered a Shared key in the WLR-4002B(see step 7
    of chapter Using the Wizard to Configure the
    WLR-4002B for L2TP over IPSec for reference)
    Enter the same key in this field.

    92



  • Page 93

    4.

    Set the Switch to ON to connect to the VPN Network.

    93



  • Page 94

    Configuring a VPN client on Android
    1.

    Click on Settings.

    2.

    click on More.. from the Settings menu on the upper left.
    Then Click on VPN.

    94



  • Page 95

    2. Click on Add VPN Network.

    3.

    Select the VPN Type that corresponds to the VPN Type you have
    configured in the WLR-4002B.
    Complete the following fields:
    Description
    Server
    Account

    Password

    Enter a name for your VPN connection, this name is
    for reference purposes only.
    Enter the WLR-4002B WAN IP address
    Enter the name used to log onto the VPN tunnel (this
    must be one of the users you have set in the VPN
    user table of the WLR-4002B)
    Enter the Password used to log onto the VPN tunnel.

    Secret(L2TP only) If the VPN Type of the VPN tunnel you have set up in
    the WLR-4002B is L2TP over IPSec You have also
    entered a Shared key in the WLR-4002B(see step 7
    of chapter Using the Wizard to Configure the
    WLR-4002B for L2TP over IPSec for reference)
    Enter the same key in this field.

    95



  • Page 96

    4.

    Click on the VPN network you have just created to connect.

    96



  • Page 97

    Profile Setting

    This page allows you to Add, Edit and Delete VPN profiles.

    Add

    click here if you wish to manually add a new VPN profile.

    Edit

    to edit an existing profile, select one from the list by selecting the
    corresponding radio button and click ‘Edit’.

    Click “Apply” to save the settings and apply the changes.

    97



  • Page 98

    Add Users to an existing Profile
    Click on Profile Setting.

    Select the Profile for which you wish to modify user settings and click on Edit.
    Then Click on the protocol name you selected to edit.

    98



  • Page 99

    From here all current users that you have created will be shown.
    In the Available box existing users are be displayed that do not have
    access to this VPN Tunnel yet.

    The Member box displays users that already have access to this VPN
    Tunnel.

    To Add or remove users to the VPN Tunnel, click the on the username you
    wish you Add or Remove and press the
    ´<<’, ‘>>’ buttons to the
    desired box.

    Click Apply Click “Apply” to save the settings and apply the changes.

    99



  • Page 100

    PPTP

    The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual
    private networks. PPTP uses a control channel over TCP and a GRE tunnel
    operating to encapsulate PPP packets.
    The PPTP specification does not describe encryption or authentication features
    and relies on the PPP protocol being tunneled to implement security functionality.
    However the most common PPTP implementation, shipping with the Microsoft
    Windows product families, implements various levels of authentication and
    encryption natively as standard features of the Windows PPTP stack. The
    intended use of this protocol is to provide similar levels of security and remote
    access as typical VPN products.

    General
    This page allows you to configure the general VPN settings.
    Name
    Connection Type

    Enter a name for your VPN policy
    Supports IPSec and L2TP over IPSec methods to
    establish VPN connection.

    PPTP
    Authentication
    Encryption
    User Name
    Password

    Select the desired authentication protocol (PAP,
    CHAP, Auto). Select Auto by default.
    Supports 40-bit, 128-bit or No encryption.
    Enter the username for authentication.
    Enter the password for authentication.

    Network
    Server IP
    Remote IP Range

    Enter the VPN Server IP address.
    Assign a range of IP addresses. The assigned IP
    range should be on the same IP network but not
    the in the same range as your DHCP IP range.

    100



  • Page 101

    L2TP
    In computer networking, Layer 2 Tunneling Protocol (L2TP) is a tunneling
    protocol used to support virtual private networks (VPNs). It does not provide
    any encryption or confidentiality by itself; it relies on an encryption protocol that
    it passes within the tunnel to provide privacy.

    General
    This page allows you to configure the general VPN settings.
    Name
    Connection Type

    Enter a name for your VPN policy
    Supports IPSec and L2TP over IPSec methods to
    establish VPN connection.

    L2TP
    Authentication
    User Name
    Password

    Select the desired authentication protocol (PAP,
    CHAP, Auto). Select Auto by default.
    Enter the username for authentication.
    Enter the password for authentication.

    Network
    Server IP
    Remote IP Range

    Enter the VPN Server IP address.
    Assign a range of IP addresses. The assigned IP
    range should be on the same IP network but not
    the in the same range as your DHCP IP range.

    101



  • Page 102

    IPSec

    IPSec (Internet Protocol Security) is a protocol suite for securing Internet
    Protocol (IP) communications by authenticating and encrypting each IP packet of
    a communication session.
    IPSec also includes protocols for establishing mutual authentication between
    agents at the beginning of the session and negotiation of cryptographic keys to
    be used during the session.
    IPSec is an end-to-end security scheme operating in the Internet Layer of the
    Internet Protocol Suite. It can be used in protecting data flows between a pair of
    hosts (host-to-host), between a pair of security gateways (network-to-network),
    or between a security gateway and a host (network-to-host).

    General
    This page allows you to configure the general VPN settings.
    Name
    Connection Type
    Authentication Type
    Shared Key
    Confirm
    Local ID Type
    Local ID
    Peer ID Type
    Peer ID

    Enter a name for your VPN policy
    Supports IPSec and L2TP over IPSec methods to
    establish VPN connection.
    Supports pre-shared key method for
    authentication.
    Enter the Shared Key.
    Enter your Shared Key again for verification.
    Supports IP Address, Domain Name, Email
    Address methods for Local ID Type.
    Enter an ID to identify and authenticate the local
    VPN endpoint.
    Supports IP Address, Domain Name, Email
    Address methods for Peer ID Type.
    Enter an ID to identify and authenticate the remote
    VPN endpoint.

    102



  • Page 103

    SA (Security Association)
    A Security Association (SA) is the establishment of shared security attributes
    between two network entities to support secure communication.
    An SA may include attributes such as:
    cryptographic algorithm and mode; traffic encryption key; and parameters for the
    network data to be passed over the connection.
    Establishment of an SA is described in RFC 2408, the Internet Security
    Association and Key Management Protocol.
    This page allows you to configure SA.

    IKE (Phase 1) Proposal
    Exchange
    Select Main Mode or Aggressive Mode for IKE Phase 1 negotiation.
    • Main Mode: Select this option to configure the standard
    negotiation parameters for IKE Phase 1 of the VPN Tunnel.
    (Recommended Setting)
    • Aggressive Mode: Select this option to configure IKE Phase 1 of
    the VPN Tunnel to carry out negotiation in a shorter amount of
    time. (Not Recommended - Less Secure)
    DH Group
    Select a DH Group from the drop-down menu (Group 1, Group2,
    Group5 and Group14). As the DH Group number increases, the
    higher the level of encryption implemented for IKE Phase 1.
    Encryption
    The WLR4002 supports DES, 3DES, AES128, AES192, AES256
    encryption methods for traffic through the VPN.
    Authentication
    The WLR4002 supports SHA1, MD5 methods for authentication.
    Life Time Enter the number of seconds for the IKE Lifetime. The
    period of time to pass before establishing a new IKE security
    association (SA) with the remote endpoint. The default value is
    28800.

    103



  • Page 104

    IPSec (Phase 2) Proposal
    Protocol
    Select ESP (Encapsulating Security Payload) or AH (Authentication
    Header) for traffic through the VPN.
    • AH (Authentication Header) to provide connectionless
    integrity and data origin authentication for IP datagrams and to
    provide protection against replay attacks.
    • ESP (Encapsulating Security Payload) to provide
    confidentiality, data origin authentication, connectionless integrity,
    an anti-replay service (a form of partial sequence integrity), and
    limited traffic flow confidentiality.
    Encryption
    The WLR4002 supports DES, 3DES, AES128, AES192, AES256
    encryption methods for traffic through the VPN.
    Authentication
    The WLR4002 supports SHA1, MD5 methods for authentication.
    Perfect Forward Secrecy
    Select Enable or Disable to enable or disable PFS (Perfect Forward
    Secrecy). PFS is an additional security protocol.
    DH Group
    Select a PFS DH Group from the drop-down menu (Group 1,
    Group2, Group5, Group14). As the DH Group number increases,
    the higher the level of encryption implemented for PFS.
    Life Time
    Enter the number of seconds for the IPSec Lifetime. The period of
    time to pass before establishing a new IPSec security association
    (SA) with the remote endpoint. The default value is 28800.

    Network
    This page allows you to configure the VPN server and
    local/remote subnet.
    Security Gateway Type
    Security Gateway

    Security Gateway Type supports IP Address and
    Domain Name. Select one of them.
    The IP address or domain name of the VPN server.

    Local Network

    Enter the local (LAN) subnet and mask.
    (ex. 192.168.0.0/255.255.255.0)

    Remote Network

    Enter the remote subnet and mask.
    (ex. 192.168.9.0/255.255.255.0)

    104



  • Page 105

    Advanced
    This page allows you to configure advanced VPN settings.
    Nat Traversal

    Enabling NAT Traversal allow IPSec traffic from this
    endpoint to traverse through the translation process
    during NAT. The remote VPN endpoint must also
    support this feature and it must be enabled to
    function properly over the VPN.

    Dead Peer Detection

    Enable DPD (Dead Peer Detection) to delete the
    VPN tunnel if there is no traffic detected. The VPN
    will re-establish once traffic is again sent through the
    tunnel.

    105



  • Page 106

    L2TP over IPSec

    L2TP over IPSec VPNs enable a business to transport data over the Internet,
    while still maintaining a high level of security to protect data.
    You can use this type of secure connection for small or remote office clients that
    need access to the corporate network. You can also use L2TP over IPSec VPNs for
    routers at remote sites by using the local ISP and creating a demand-dial
    connection into corporate headquarters.

    General
    Name
    Connection Type
    Authentication Type
    Shared Key
    Confirm

    Enter a name for your VPN policy
    Supports IPSec and L2TP over IPSec methods to
    establish VPN connection.
    Supports pre-shared key method for
    authentication.
    Enter the Shared Key.
    Enter your Shared Key again for verification.

    L2TP/PPTP
    Authentication
    User Name
    Password

    Select the desired authentication protocol (PAP,
    CHAP, Auto). Select Auto by default.
    Enter the username for authentication.
    Enter the password for authentication.

    Network
    Server IP
    Remote IP Range

    Enter the VPN Server IP address.
    Assign a range of IP addresses. The assigned IP
    range should be on the same IP network but not
    the in the same range as your DHCP IP range.

    106



  • Page 107

    User Setting

    This page allows you to maintain VPN users.

    Add a user Enter the desired name and password, for verification the password
    has to be entered twice. Click ‘Add’ to add the user to the current VPN user table
    Reset This button will clear all values from the input boxes.
    Current VPN user table shows all existing VPN users.
    Delete Selected Select a user from the table and Click Delete Selected to delete
    this user.
    Delete ALL This deletes all current VPN user from the current table.
    Click “Apply” to save the settings and apply the changes.

    107



  • Page 108

    Example of configuring IPSec Site to Site architecture
    In this guide we give an example how to set up a IPSec Site to Site architecture.
    The values in this example are only to give an impression of how to do the
    configuration.

    108



  • Page 109

    Configuring Location B
    1.

    Click on VPN in the top menu then click Wizard in the submenu.
    Click Next to continue.

    2.

    In the Name field, enter a name for the IPSec VPN tunnel. This name is
    for reference purposes. Click Next to continue.

    3.

    Click IPSec and click NEXT to continue.

    4.

    Click Site to Site and click NEXT to continue.

    109



  • Page 110

    5.

    Complete the following fields :
    Security Gateway Type

    Choose the type of Security Gateway you
    wish to use(In this example we use IP
    address.

    Security Gateway

    Enter the WAN IP address of the remote
    VPN Server( In our example this is the WAN
    IP address of the WLR-4002B in Location A,
    77.193.12.20)

    Remote Address

    Enter an IP address that is on the same
    Subnet as the Local LAN of the remote VPN
    server (In our example the WLR-4002B in
    location A has a local IP of 192.168.2.1 so
    we set the Remote address to 192.168.2.0)

    Remote Netmask

    Enter the Netmask of the Remote Local LAN(In
    our example the WLR-4002B in Location A has
    a IP Subnet Mask of 255.255.255.0)

    click NEXT to continue.

    6.

    Enter the Shared Key you wish to use, this shared key must be used in
    both VPN servers.(In this example we used ‘test’)

    110



  • Page 111

    7.

    Enable the VPN policy, and then click Apply to save the VPN profile.

    8.

    Repeat these steps 1~7 for the other VPN server.

    9.

    Once Both VPN routers have been completely set up.
    Click on Status in the submenu of the VPN menu and click Connect to
    establish the IPSec Site to Site connection.

    111



  • Page 112

    16 TOOLBOX
    Sitecom Cloud Security
    Antivirus software alone is not safe enough. You can now benefit from
    additional built-in security in your modem or router. Protect all devices in your
    home network against cybercrime while browsing. Activated automatically,
    your network and devices are better secured than ever before.
    Your Sitecom device comes with a 6 month free Sitecom cloud security
    subscription.
    After you have set up your Sitecom device for internet access, open the web
    browser and enter http://www.sitecomcloudsecurity.com in the address bar.
    If the device has been properly configured the following web page should be
    shown.

    Here you can see which security features are activated.

    112



  • Page 113

    The Sitecom Cloud Security service offers the following protection options:
    1
    2
    3
    4

    Anti-Malware
    Anti-Phishing
    Protection against unsafe websites
    Advertisement blocking

    With the protection of unsafe websites activated the Sitecom Cloud Security
    will always check if a website is safe. If it is not safe it will inform you that is
    not safe to enter.

    If you still wish to visit this webpage click on ‘proceed anyway’. Alternatively
    click ‘Back to Safety’ so that your security will not be breached.

    113



  • Page 114

    If you wish to change your security options or to extend your subscription at
    any time, open http://www.sitecomcloudsecurity.com from your web browser.
    You will be asked for a username and password. These can be found on the
    backlabel on the bottom of your Sitecom router or modem.

    If the login succeeded you can click on ‘Settings’ to change your security
    options.

    114



  • Page 115

    Or click ‘License’ to renew your subscription.

    115



  • Page 116

    If you wish to disable Sitecom Cloud Security at any time, open the webpage
    of your Sitecom product and log in with the supplied credentials (these can be
    found on the back label on the bottom of your Sitecom device).
    Go to Toolbox and select “Sitecom Cloud Security”.

    Click the “Disable” radio button and click ‘Apply’ for the settings to take
    effect.

    116



  • Page 117

    Password change options

    You can change the password required to log into the broadband router's
    system web-based management. Passwords can contain 0 to 12 alphanumeric
    characters, and are case sensitive.

    Current Password Fill in the current password to allow changing to a new
    password.
    New Password Enter your new password.
    Confirmed Password Enter your new password again for verification
    purposes.

    Click <Apply> at the bottom of the screen to save the above configurations

    117



  • Page 118

    Time Zone
    The Time Zone allows your router to base its time on the settings configured
    here, which will affect functions such as Log entries and Firewall settings.

    Set Time Zone Select the time zone of the country you are currently in. The
    router will set its time based on your selection.
    Time Server Address You can set an NTP server address.
    Enable Daylight Savings The router can also take Daylight savings into
    account. If you wish to use this function, you must check/tick the enable box
    to enable your daylight saving configuration (below).
    Start Daylight Savings Time Select the period in which you wish to start
    daylight Savings Time
    End Daylight Savings Time Select the period in which you wish to end
    daylight Savings Time
    Click <Apply> at the bottom of the screen to save the above configurations

    118



  • Page 119

    Remote Management
    The remote management function allows you to designate a host in the
    Internet the ability to configure the Broadband router from a remote site.
    Enter the designated host IP Address in the Host IP Address field.

    Host Address This is the IP address of the host in the Internet that will have
    management/configuration access to the Broadband router from a remote
    site. If the Host Address is left 0.0.0.0 this means anyone can access the
    router’s web-based configuration from a remote location, providing they know
    the password.

    Port The port number of the remote management web interface.

    Enabled Select “Enabled” to enable the remote management function.

    Click <Apply> at the bottom of the screen to save the above configurations.

    119



  • Page 120

    Firmware Upgrade
    This page allows you to upgrade the router’s firmware.

    Enable automatic

    firmware

    update

    When

    enabled

    the

    router

    will

    periodically check if a new firmware is available, I a new firmware is detected
    the router will give a notification.

    Firmware Upgrade This tool allows you to upgrade the Broadband router’s
    system firmware. To upgrade the firmware of your Broadband router, you
    need to download the firmware file to your local hard disk, and enter that file
    name and path in the appropriate field on this page. You can also use the
    Browse button to find the firmware file on your PC.

    Once you’ve selected the new firmware file, click <Apply> at the bottom of
    the screen to start the upgrade process

    120



  • Page 121

    Backup Settings
    The Backup screen allows you to save (Backup) the router’s current
    configuration settings. When you save the configuration setting (Backup) you
    can re-load the saved configuration into the router through the Restore
    selection. If extreme problems occur you can use the Restore to Factory
    Defaults selection, this will set all configurations to its original default settings
    (e.g. when you first purchased the router).

    Use the "Backup" tool to save the Broadband router current configuration to a
    file named "config.bin" on your PC. You can then use the "Restore" tool to
    restore the saved configuration to the Broadband router. Alternatively, you
    can use the "Restore to Factory Defaults" tool to force the Broadband router
    to perform a power reset and restore the original factory settings.

    121



  • Page 122

    Reset
    You can reset the router’s system should any problem exist. The reset
    function essentially re-boots your router’s system.

    122



  • Page 123

    DDNS
    DDNS allows you to map the static domain name to a dynamic IP address.
    You must get an account, password and your static domain name from the
    DDNS service providers. This router supports DynDNS, TZO and other
    common DDNS service providers.

    Enable/Disable

    Enable or disable the DDNS function of this router

    Provider

    Select a DDNS service provider

    Domain name

    Fill in your static domain name that uses DDNS

    Account/E-mail

    The account that your DDNS service provider
    assigned to you.

    Password/Key

    The password you set for the DDNS service account
    above.

    Click <Apply> at the bottom of the screen to save the above configurations.

    123



  • Page 124

    124



  • Page 125

    125



  • Page 126

    Parts of the firmware of the WLR-4002B Wireless VPN Gigabit Router are subject to the GNU
    general public license.

    Appendix A: Licensing Information
    This product includes third-party software licensed under the terms of the GNU General Public
    License.. You can modify or redistribute this free software under the terms of the GNU General
    Public License. Please see Appendix B for the exact terms and conditions of this license.
    Specifically, the following part of this product is subject to the GNU GPL:

    #

    Package name

    Source

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13

    Linux v2.6.21
    busybox v1.7.5
    termcap v1.3.1
    libupnp v1.6.0
    pcre v6.x
    popt v1.7
    dnsmasq v2.39
    iproute2 v2.6.16
    rp-pppoe v3.8
    iptables v1.3.8
    wget-1.11.x
    linuxigd v1.0
    wireless_tools v28

    14
    15
    16
    17
    18
    19

    updatedd-2.6
    igmpproxy v0.1-beta2
    pptp-client v1.7.1
    accel-pptp/pppd-plugin v0.8.3rc5
    ppp v2.4.3
    udhcp v0.9.9-pre

    www.kernel.org
    http://www.busybox.net/
    ftp://ftp.gnu.org/gnu/termcap
    http://pupnp.sourceforge.net/
    http://www.pcre.org/
    http://freecode.com/projects/popt
    http://thekelleys.org.uk/dnsmasq/doc.html
    http://www.linuxfoundation.org/en/Net:Iproute2
    http://www.roaringpenguin.com/products/pppoe
    http://www.netfilter.org/projects/iptables/index.html
    http://www.gnu.org/software/wget/
    http://linux-igd.sourceforge.net/index.php
    http://www.hpl.hp.com/personal/Jean_Tourrilhes/Lin
    ux/Tools.html
    http://freecode.com/projects/updatedd
    http://sourceforge.net/projects/igmpproxy
    http://pptpclient.sourceforge.net/
    http://accel-pptp.sourceforge.net/

    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32

    ez-ipupdate v3.0.11b8
    uboot v1.1.4
    gcc v4.3.4
    uclibc v0.9.29
    zlib v1.2.3
    mtd-utils v1.2
    openl2tp-1.x
    rpcbind-0.2.x
    ippool-1.3
    openswan-2.6.2x
    gmp-4.3.x
    libtirpc-0.2.x
    libreadline v5.2

    http://ppp.samba.org/
    http://sources.busybox.net/index.py/trunk/udhcpweb/index.html?revision=9967
    http://ez-ipupdate.com
    http://www.denx.de/wiki/U-Boot
    http://gcc.gnu.org/
    http://www.uclibc.org
    http://www.zlib.net/
    http://git.infradead.org
    http://www.openl2tp.org/
    http://rpcbind.sourceforge.net/
    http://sourceforge.net/projects/openl2tp/files/ippool/
    https://www.openswan.org/projects/openswan
    http://gmplib.org/
    http://sourceforge.net/projects/libtirpc/
    http://cnswww.cns.cwru.edu/php/chet/readline/rltop.
    html

    Availability of source code
    Sitecom Europe BV has made available the full source code of the GPL licensed software,
    including any scripts to control the compilation and installation of the object code in the driver
    section of this product.

    126



  • Page 127

    No Warranty
    The free software included in this product is distributed in the hope that it will be useful, but
    WITHOUT ANY LIABILITY OF OR ANY WARRANTY FROM THE LICENSOR.

    Appendix B: GNU GENERAL PUBLIC LICENSE
    Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place
    - Suite 330, Boston, MA 02111-1307, USA Everyone is permitted to copy and distribute
    verbatim copies of this license document, but changing it is not allowed.

    Preamble
    The licenses for most software are designed to take away your freedom to share and change it.
    By contrast, the GNU General Public License is intended to guarantee your freedom to share and
    change free software--to make sure the software is free for all its users. This General Public
    License applies to most of the Free Software Foundation's software and to any other program
    whose authors commit to using it. (Some other Free Software Foundation software is covered
    by the GNU Library General Public License instead.) You can apply it to your programs, too.
    When we speak of free software, we are referring to freedom, not price. Our General Public
    Licenses are designed to make sure that you have the freedom to distribute copies of free
    software (and charge for this service if you wish), that you receive source code or can get it if
    you want it, that you can change the software or use pieces of it in new free programs; and that
    you know you can do these things. To protect your rights, we need to make restrictions that
    forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions
    translate to certain responsibilities for you if you distribute copies of the software, or if you
    modify it. For example, if you distribute copies of such a program, whether gratis or for a fee,
    you must give the recipients all the rights that you have. You must make sure that they, too,
    receive or can get the source code. And you must show them these terms so they know their
    rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this
    license which gives you legal permission to copy, distribute and/or modify the software. Also, for
    each author's protection and ours, we want to make certain that everyone understands that
    there is no warranty for this free software. If the software is modified by someone else and
    passed on, we want its recipients to know that what they have is not the original, so that any
    problems introduced by others will not reflect on the original authors' reputations. Finally, any
    free program is threatened constantly by software patents. We wish to avoid the danger that
    redistributors of a free program will individually obtain patent licenses, in effect making the
    program proprietary. To prevent this, we have made it clear that any patent must be licensed
    for everyone's free use or not licensed at all. The precise terms and conditions for copying,
    distribution and modification follow.

    TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND
    MODIFICATION
    0.
    This License applies to any program or other work which contains a notice placed by the
    copyright holder saying it may be distributed under the terms of this General Public License.
    The "Program", below, refers to any such program or work, and a "work based on the Program"
    means either the Program or any derivative work under copyright law: that is to say, a work
    containing the Program or a portion of it, either verbatim or with modifications and/or
    translated into another language. (Hereinafter, translation is included without limitation in the
    term "modification".) Each licensee is addressed as "you". Activities other than copying,
    distribution and modification are not covered by this License; they are outside its scope. The act
    of running the Program is not restricted, and the output from the Program is covered only if its
    contents constitute a work based on the Program (independent of having been made by running
    the Program). Whether that is true depends on what the Program does.
    1.
    You may copy and distribute verbatim copies of the Program's source code as you receive it, in

    127



  • Page 128

    any medium, provided that you conspicuously and appropriately publish on each copy an
    appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to
    this License and to the absence of any warranty; and give any other recipients of the Program a
    copy of this License along with the Program. You may charge a fee for the physical act of
    transferring a copy, and you may at your option offer warranty protection in exchange for a fee.
    2.
    You may modify your copy or copies of the Program or any portion of it, thus forming a work
    based on the Program, and copy and distribute such modifications or work under the terms of
    Section 1 above, provided that you also meet all of these conditions: a) You must cause the
    modified files to carry prominent notices stating that you changed the files and the date of any
    change. b) You must cause any work that you distribute or publish, that in whole or in part
    contains or is derived from the Program or any part thereof, to be licensed as a whole at no
    charge to all third parties under the terms of this License. c) If the modified program normally
    reads commands interactively when run, you must cause it, when started running for such
    interactive use in the most ordinary way, to print or display an announcement including an
    appropriate copyright notice and a notice that there is no warranty (or else, saying that you
    provide a warranty) and that users may redistribute the program under these conditions, and
    telling the user how to view a copy of this License. (Exception: if the Program itself is
    interactive but does not normally print such an announcement, your work based on the Program
    is not required to print an announcement.) These requirements apply to the modified work as a
    whole. If identifiable sections of that work are not derived from the Program, and can be
    reasonably considered independent and separate works in themselves, then this License, and its
    terms, do not apply to those sections when you distribute them as separate works. But when
    you distribute the same sections as part of a whole which is a work based on the Program, the
    distribution of the whole must be on the terms of this License, whose permissions for other
    licensees extend to the entire whole, and thus to each and every part regardless of who wrote
    it. Thus, it is not the intent of this section to claim rights or contest your rights to work written
    entirely by you; rather, the intent is to exercise the right to control the distribution of derivative
    or collective works based on the Program. In addition, mere aggregation of another work not
    based on the Program with the Program (or with a work based on the Program) on a volume of
    a storage or distribution medium does not bring the other work under the scope of this License.
    3.
    You may copy and distribute the Program (or a work based on it, under Section 2) in object
    code or executable form under the terms of Sections 1 and 2 above provided that you also do
    one of the following: a) Accompany it with the complete corresponding machine-readable
    source code, which must be distributed under the terms of Sections 1 and 2 above on a medium
    customarily used for software interchange; or, b) Accompany it with a written offer, valid for at
    least three years, to give any third party, for a charge no more than your cost of physically
    performing source distribution, a complete machine-readable copy of the corresponding source
    code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily
    used for software interchange; or, c) Accompany it with the information you received as to the
    offer to distribute corresponding source code. (This alternative is allowed only for
    noncommercial distribution and only if you received the program in object code or executable
    form with such an offer, in accord with Subsection b above.) The source code for a work means
    the preferred form of the work for making modifications to it. For an executable work, complete
    source code means all the source code for all modules it contains, plus any associated interface
    definition files, plus the scripts used to control compilation and installation of the executable.
    However, as a special exception, the source code distributed need not include anything that is
    normally distributed (in either source or binary form) with the major components (compiler,
    kernel, and so on) of the operating system on which the executable runs, unless that
    component itself accompanies the executable. If distribution of executable or object code is
    made by offering access to copy from a designated place, then offering equivalent access to
    copy the source code from the same place counts as distribution of the source code, even
    though third parties are not compelled to copy the source along with the object code.
    4.
    You may not copy, modify, sublicense, or distribute the Program except as expressly provided
    under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program
    is void, and will automatically terminate your rights under this License. However, parties who
    have received copies, or rights, from you under this License will not have their licenses
    terminated so long as such parties remain in full compliance.
    5.
    You are not required to accept this License, since you have not signed it. However, nothing else

    128



  • Page 129

    grants you permission to modify or distribute the Program or its derivative works. These actions
    are prohibited by law if you do not accept this License. Therefore, by modifying or distributing
    the Program (or any work based on the Program), you indicate your acceptance of this License
    to do so, and all its terms and conditions for copying, distributing or modifying the Program or
    works based on it.
    6.
    Each time you redistribute the Program (or any work based on the Program), the recipient
    automatically receives a license from the original licensor to copy, distribute or modify the
    Program subject to these terms and conditions. You may not impose any further restrictions on
    the recipients' exercise of the rights granted herein. You are not responsible for enforcing
    compliance by third parties to this License.
    7.
    If, as a consequence of a court judgment or allegation of patent infringement or for any other
    reason (not limited to patent issues), conditions are imposed on you (whether by court order,
    agreement or otherwise) that contradict the conditions of this License, they do not excuse you
    from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your
    obligations under this License and any other pertinent obligations, then as a consequence you
    may not distribute the Program at all. For example, if a patent license would not permit royaltyfree redistribution of the Program by all those who receive copies directly or indirectly through
    you, then the only way you could satisfy both it and this License would be to refrain entirely
    from distribution of the Program. If any portion of this section is held invalid or unenforceable
    under any particular circumstance, the balance of the section is intended to apply and the
    section as a whole is intended to apply in other circumstances. It is not the purpose of this
    section to induce you to infringe any patents or other property right claims or to contest validity
    of any such claims; this section has the sole purpose of protecting the integrity of the free
    software distribution system, which is implemented by public license practices. Many people
    have made generous contributions to the wide range of software distributed through that
    system in reliance on consistent application of that system; it is up to the author/donor to
    decide if he or she is willing to distribute software through any other system and a licensee
    cannot impose that choice. This section is intended to make thoroughly clear what is believed to
    be a consequence of the rest of this License.
    8.
    If the distribution and/or use of the Program is restricted in certain countries either by patents
    or by copyrighted interfaces, the original copyright holder who places the Program under this
    License may add an explicit geographical distribution limitation excluding those countries, so
    that distribution is permitted only in or among countries not thus excluded. In such case, this
    License incorporates the limitation as if written in the body of this License.
    9.
    The Free Software Foundation may publish revised and/or new versions of the General Public
    License from time to time. Such new versions will be similar in spirit to the present version, but
    may differ in detail to address new problems or concerns. Each version is given a distinguishing
    version number. If the Program specifies a version number of this License which applies to it
    and "any later version", you have the option of following the terms and conditions either of that
    version or of any later version published by the Free Software Foundation. If the Program does
    not specify a version number of this License, you may choose any version ever published by the
    Free Software Foundation.
    10.
    If you wish to incorporate parts of the Program into other free programs whose distribution
    conditions are different, write to the author to ask for permission. For software which is
    copyrighted by the Free Software Foundation, write to the Free Software Foundation; we
    sometimes make exceptions for this. Our decision will be guided by the two goals of preserving
    the free status of all derivatives of our free software and of promoting the sharing and reuse of
    software generally.

    NO WARRANTY
    11.
    BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE
    PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE
    STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE
    PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,

    129



  • Page 130

    INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
    FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND
    PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE,
    YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
    12.
    IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY
    COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE
    PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
    GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR
    INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA
    BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A
    FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH
    HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

    END OF TERMS AND CONDITIONS

    130






Missbrauch melden von Frage und/oder Antwort

Libble nimmt den Missbrauch seiner Dienste sehr ernst. Wir setzen uns dafür ein, derartige Missbrauchsfälle gemäß den Gesetzen Ihres Heimatlandes zu behandeln. Wenn Sie eine Meldung übermitteln, überprüfen wir Ihre Informationen und ergreifen entsprechende Maßnahmen. Wir melden uns nur dann wieder bei Ihnen, wenn wir weitere Einzelheiten wissen müssen oder weitere Informationen für Sie haben.

Art des Missbrauchs:

Zum Beispiel antisemitische Inhalte, rassistische Inhalte oder Material, das zu einer Gewalttat führen könnte.

Beispielsweise eine Kreditkartennummer, persönliche Identifikationsnummer oder unveröffentlichte Privatadresse. Beachten Sie, dass E-Mail-Adressen und der vollständige Name nicht als private Informationen angesehen werden.

Forenregeln

Um zu sinnvolle Fragen zu kommen halten Sie sich bitte an folgende Spielregeln:

Neu registrieren

Registrieren auf E - Mails für Sitecom WLR-4002B - N300 wenn:


Sie erhalten eine E-Mail, um sich für eine oder beide Optionen anzumelden.


Holen Sie sich Ihr Benutzerhandbuch per E-Mail

Geben Sie Ihre E-Mail-Adresse ein, um das Handbuch zu erhalten von Sitecom WLR-4002B - N300 in der Sprache / Sprachen: Englisch als Anhang in Ihrer E-Mail.

Das Handbuch ist 6,73 mb groß.

 

Sie erhalten das Handbuch in Ihrer E-Mail innerhalb von Minuten. Wenn Sie keine E-Mail erhalten haben, haben Sie wahrscheinlich die falsche E-Mail-Adresse eingegeben oder Ihre Mailbox ist zu voll. Darüber hinaus kann es sein, dass Ihr ISP eine maximale Größe für E-Mails empfangen kann.

Das Handbuch wird per E-Mail gesendet. Überprüfen Sie ihre E-Mail.

Wenn Sie innerhalb von 15 Minuten keine E-Mail mit dem Handbuch erhalten haben, kann es sein, dass Sie eine falsche E-Mail-Adresse eingegeben haben oder dass Ihr ISP eine maximale Größe eingestellt hat, um E-Mails zu erhalten, die kleiner als die Größe des Handbuchs sind.

Ihre Frage wurde zu diesem Forum hinzugefügt

Möchten Sie eine E-Mail erhalten, wenn neue Antworten und Fragen veröffentlicht werden? Geben Sie bitte Ihre Email-Adresse ein.



Info