Safety Information

Please note the following: WARNING: Please read the Safety Information section in Appendix C before you start. VORSICHT: Bitte lesen Sie den Abschnitt Wichtige Sicherheitshinweise sorgfltig durch, bevor Sie das Gert einschalten. AVERTISSEMENT: Veuillez lire attentivement la section Consignes importantes de scurit avant de mettre en route.

Positioning the Router

You should place the Router in a location that:
is conveniently located for connection to the telephone socket. is centrally located to the wireless computers that will connect to the Router. A suitable location might be on top of a high shelf or similar furniture to optimize wireless connections to computers in both horizontal and vertical directions, allowing wider coverage. allows convenient connection to the computers that will be connected to the four LAN ports on the rear panel, if desired. allows easy viewing of the front panel LED indicator lights, and access to the rear panel connectors, if necessary.
CHAPTER 2: INSTALLING THE ROUTER
When positioning your Router, ensure:
It is out of direct sunlight and away from sources of heat. Cabling is away from power lines, fluorescent lighting fixtures, and sources of electrical noise such as radios, transmitters and broadband amplifiers. Water or moisture cannot enter the case of the unit. Air flow around the unit and through the vents in the side of the case is not restricted. 3Com recommends you provide a minimum of 25 mm (1 in.) clearance.

Using the Rubber Feet

Use the four self-adhesive rubber feet to prevent your Router from moving around on your desk or when stacking with flat top units. Only stick the feet to the marked areas at each corner of the underside of your Router.

Wall Mounting

There are two slots on the underside of the Router that can be used for wall mounting. When wall mounting the unit, ensure that it is within reach of the power outlet. You will need two suitable screws to wall mount the unit. To do this: 1 Ensure that the wall you use is smooth, flat, dry and sturdy and make two screw holes which are 150 mm (5.9 in.) apart. 2 Fix the screws into wall, leaving their heads 3 mm (0.12 inch) clear of the wall surface. 3 Remove any connections to the unit and locate it over the screw heads. When in line, gently push the unit on to the wall and move it downwards to secure. When making connections, be careful not to push the unit up and off the wall. CAUTION: Only wall mount single units, do not wall mount stacked units.

Powering Up the Router

To power up the Router: 1 Plug the power adapter into the power adapter socket located on the back panel of the Router. 2 Plug the power adapter into a standard electrical wall socket. 3 Press the power button located on the back of the Router.

Connecting the Router

The first step for installing your Router is to physically connect it to the telephone socket and then connect it to a computer in order to be able to access the Internet. See Figure 5:
Figure 5 Connecting the Router

Power Supply Unit

3Com OfficeConnect ADSL Wireless 11g Firewall Router

Telephone Socket

Splitter/ Microfilter Block

Your PC

Wireless Users
1 Run the provided telephone cable from the wall jack providing ADSL service to the ADSL port on your Router. When inserting an ADSL RJ-11 plug, be sure the tab on the plug clicks into position to ensure that it is properly seated. If you are using splitterless ADSL service, add low-pass filters between the ADSL wall jack and your telephones. (These filters pass voice signals through but filter data signals out.) 2 Then:
If you are using a full-rate (G.dmt) connection, your service provider will attach the outside ADSL line to a data/voice splitter. In this case
you can connect your phones and computer directly to the splitter as shown below (Figure 6): or
If you are using a splitterless (G.lite) connection, then your service provider will attach the outside ADSL line directly to your phone system. In this case you can connect your phones and computer directly to the incoming ADSL line, but you will have to add low-pass filters to your phones as shown below (Figure 7)
Figure 6 Installing with a splitter
Plain Old Telephone System (POTS)
Residential Connection Point (NID)

Splitter Data

Router

Ethernet hub or switch

Figure 7 Installing without a splitter
Residential Connection Point [Network Interface Device (NID)]

Voice & Data

Filter
You have now completed the hardware installation of your Router. Next you need to set up your computers so that they can make use of the Router to communicate with the Internet. 3Com recommends that you perform the initial Router configuration from a computer that is directly connected to one of the LAN ports. If you configure the Router from a wireless computer, note that you may lose contact with the Router if you change the wireless configuration. To communicate wirelessly with your Router, your wireless NIC should be set as follows:
Encryption none SSID 3Com Channel 11
The Router has the ability to dynamically allocate network addresses to the computers on your network, using DHCP. However, your computers need to be configured correctly for this to take place. To change the configuration of your computers to allow this, follow the instructions in this chapter.
Obtaining an IP Address Automatically
Windows 2000 If you are using a Windows 2000-based computer, use the following procedure to change your TCP/IP settings: 1 From the Windows Start Menu, select Settings > Control Panel. 2 Double click on Network and Dial-Up Connections. 3 Double click on Local Area Connection. 4 Click on Properties. 5 A screen similar to Figure 8 should be displayed. Select Internet Protocol TCP/IP and click on Properties.

Figure 11 Web Browser Location Field (Factory Default)
CHAPTER 4: RUNNING THE SETUP WIZARD
4 To log in as an administrator, enter the password (the default password is admin) in the System Password field and click Log in (Figure 12).
Figure 12 Router Login Screen
5 When you have logged in,
if you are logging in for the first time, the Country Selection screen will appear (Figure 13). Please select the country form the drop-down menu, and click Apply.
Figure 13 Country Selection Screen
The Wizard will then launch automatically (refer to Figure 16). You will be guided step by step through a basic setup procedure.
if the Router has been configured previously, the Welcome screen will appear (Figure 14). There are three tabs: Notice Board, Password and Wizard.

Figure 14 Welcome Screen

Go to the Notice Board tab to see the current software information. To view the Web help, click the Help button. Go to the Password tab to change the password (Figure 15). Go to the Wizard tab to do a quick setup of the Router (Figure 16).
The password screen allows you to change the current password and set the login time limit to the Routers management interface.
Figure 15 Password Screen
1 To change the current password, enter the password in the Current Password field. 2 Enter the new password in the New Password field, and enter it again in the Confirm New Password field.
3 Enter the time period in Login Timeout to set a maximum period of time for which the login session is maintained during inactivity (Default: 10 minutes). Setup Wizard Change Password To ensure the security of your Router, it is recommended that you choose a new password - this should be a mix of letters and numbers, and not easily guessed by others. To leave the current password unchanged, leave the fields blank and click Next.
Figure 16 Change Password Screen
Setup Wizard - Time and Time Zone
The Time and Time Zone screen allows you to set up the time for the Router.
Figure 17 Time and Time Zone Screen
1 If you want to automatically synchronize the Router with a public time server, check the Enable box in the Using Time Server NTP field. 2 Select the time zone in the Set Time Zone drop-down menu. 3 Select the desired servers from the Time Server drop-down menu.
4 Check the Enable box in the Daylight Savings field, if daylight savings applies to your area. 5 Click Next. Setup Wizard Connection Type The Connection Type screen allows you to set up the Router for the type of Internet connection you have. Before setting up your connection type, have your account information from your ISP ready.

Figure 18 Connection Type Screen
Select a DSL mode from the following:
PPPoE PPP over Ethernet, providing routing for multiple PCs, see page 32 PPPoA PPP over ATM, providing routing for multiple PCs, see page 33 Bridge Mode (for a single PC) RFC1483 Bridged Mode, for single PCs only, see page 34 Routing Mode over ATM RFC1483 Routed Mode, for multiple PCs, see page 34 Dynamic/Fixed IP in 1483 Bridge Mode (for multiple PCs), see page 35
and click Next. For further information on selecting a mode see Internet Settings on page 54.
PPPoE Mode To set up the Router for use with a PPP over Ethernet (PPPoE) connection, use the following procedure:

Figure 19 PPPoE Screen

1 Enter your user name in the Username field. 2 Enter your password in the Password field. 3 Re-type your password in the Retype Password field. 4 Enter your VPI and VCI information in the VPI/VCI fields. 5 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu. This information should be provided to you by your ISP. 6 Check all of your settings, and then click Next. The LAN Settings screen will then be displayed (refer to Figure 24).
PPPoA Mode To set up the Router for use with a PPP over ATM (PPPoA) connection, use the following procedure:

Figure 20 PPPoA Screen

Bridge Mode (for a single PC) To set up the Router for use with an RFC1483 bridged connection, use the following procedure:
Figure 21 Bridged Mode Screen
1 Enter your VPI and VCI information in the VPI/VCI fields. 2 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu. This information should be provided to you by your ISP. 3 Check all of your settings, and then click Next. The LAN Settings screen will then be displayed (refer to Figure 24). Routing Mode over ATM To set up the Router for use with an RFC1483 routed connection, use the following procedure:
Figure 22 Routing Mode Screen
1 Enter your Internet IP address in the WAN IP field. 2 Enter the subnet mask in the Subnet Mask field. 3 Enter the default gateway IP address in the Default Gateway field. 4 Enter the DNS address in the DNS field. 5 Enter your VPI and VCI information in the VPI/VCI fields. 6 Select the encapsulation type (LLC or VC MUX) in the Encapsulation drop-down menu. This information should be provided to you by your ISP. 7 Check all of your settings, and then click Next. The LAN Settings screen will then be displayed (refer to Figure 24). Dynamic/Fixed IP in 1483 Bridge Mode (For Multiple PCs) For bridge mode to work, you need to assign an IP address to the Router. You can either configure the Router to obtain an IP address automatically from a DHCP server or assign a fixed or static IP address to it.

Use the MAC Address Filtering List to quickly copy the MAC addresses of the current wireless clients into the list table. You can define up to 32 MAC addresses to the list. You can click Clear to delete the current entry in the list.

Client List

You can view the list of all wireless clients that are connected to the Router.
Figure 39 Client List Screen
Click Refresh to update the list. WDS Settings The Router supports WDS (Wireless Distribution System). WDS enables one or more Access Points to rebroadcast received signals to extend range and reach, though this can affect the overall throughput of data.
Figure 40 Wireless WDS Settings Screen
1 Check the Enable WDS Function checkbox. 2 To refresh the list of available access points, click Rescan Wireless Networking.
3 Click Add to add the MAC address of the AP to the list, the add WDS screen will appear (refer to Figure 41).

Figure 41 Add WDS screen

Enter the MAC address(es) of one or more access points in the AP MAC Address table, and click Apply. Advance The Advance screen allows you to configure detailed settings for your wireless connection.
Figure 42 Wireless Advanced Setting screen
There are six parameters that you can configure:
Beacon Interval: this represents the amount of time between beacon transmissions.
DTIM Interval: A DTIM (Delivery Traffic Indication Message) is a countdown mechanism used to inform your wireless clients of the next window for listening to broadcast and multicast messages. Fragmentation Threshold: this is the maximum size for directed data packets transmitted. The use of fragmentation can increase the reliability of frame transmissions. Because of sending smaller frames, collisions are much less likely to occur. RTS Threshold: RTS stands for Request to Send, this parameter controls what size data packet the low level RF protocol issues to an RTS packet. CTS Protection Mode: CTS stands for Clear to Send. CTS Protection Mode boosts the Routers ability to intercept 802.11b/ 802.11g transmissions. Conversely, CTS Protection Mode decreases performance. Leave this feature disabled unless you encounter severe communication difficulties between the Router and your wireless clients. WMM Mode: Wireless Multimedia (WMM) mode, which supports devices that meet the 802.11E QBSS standard.

Profile

This feature is used to quickly set up the configuration parameters and save them into one profile for easy connection.

Figure 43 Profile Screen

Internet Settings

ATM PVC

You can configure the settings for your DSL connection. This feature is used to configure the parameters for your DSL connection. The information necessary to complete these screens should be obtained from your ISP. Check with your ISP first to find out what type of connection you should choose.

Figure 44 ATM PVC Screen

You should see the first entry already contains information thats been configured using the Wizard in the initial setup. If you want to change that information or set up other connection, click Edit. There are six options available for the DSL connection mode:
PPPoE PPP over Ethernet, providing routing for multiple PCs (see page 55) PPPoA PPP over ATM, providing routing for multiple PCs (see page 57) Bridge Mode RFC1483 Bridged Mode, for single PCs only (see page 59) Routing Mode over ATM RFC1483 Routed Mode, for multiple PCs (see page 61) Dynamic/Fixed IP in 1483 Bridge Mode (for multiple PCs) (see page 63) Disable To disable the Internet connection function (see page 64)
Click Edit to set the detailed settings.
PPPoE PPP over Ethernet, provides routing for multiple PCs. To configure this function correctly, you should obtain the information from your ISP.
Figure 45 PPPoE Settings Screen
1 Select PPPoE from the Protocol drop-down menu. 2 Enter the IP address and Subnet Mask information provided by your ISP into the IP address and Subnet Mask fields. 3 Enter the user name assigned to you by your ISP in the Username field. And enter the password assigned to you by your ISP in the Password field. Re-enter your password in the Confirm Password field. 4 Select the connection type from the Connect Type drop-down menu.
Always Connected means that Internet connection to your ISP is always on. Auto - Triggered by Traffic means your Router will automatically connect to your ISP every time a PC needs to access the Internet. Manual - Start in Disconnected means that after re-booting the Router, the Internet connection will need to be re-established manually by the user. Manual - Start in Connected means that after re-booting the Router, it will automatically establish a connection to your ISP.
Manual - Start in Last State means that after re-booting the Router, the Internet connection will stay in the previous condition before the reboot.
5 If you want your Router to automatically disconnect from the Internet after a period of inactivity, specify a time in the Idle Time (Minutes) field. (Enter a value of 0 to disable this timeout). 6 Enter the Maximum Transmission Unit (MTU) value supplied by your ISP. If you do not know this, leave it at the default value. 7 The Router supports the IP Control Protocol (IPCP) Subnet Mask Support feature, check the IPCP subnet checkbox to enable it. 8 To use the IPCP Subnet Mask Support for the DHCP clients, check the IPCP Subnet Populate DHCP Server checkbox. 9 Enter the VPI and VCI values provided by your ISP in the VPI and VCI fields. You can click Auto Search to automatically find out this information. 10 Select the encapsulation type (LLC or VC MUX) in the Encapsulation field. This information should be provided to you by your ISP. 11 Select the type of Quality of Service (CBR, UBR or VBR) in the QoS field.

Figure 53 Firewall Screen
To enable the firewall function: 1 Select the level of protection (High, Medium, or Low) that you desire from the Firewall level drop-down menu. 2 Click Apply.
For low and medium levels of firewall protection, refer to Figure 54. For high level of firewall protection, refer to Figure 55.
Figure 54 Low and Medium Level Firewall Protection Screen
When abnormal network activity occurs, an alerting email will be sent out to you. Enter the following information to receive the email:
Your E-mail Address SMTP Server Address User name Password
Figure 55 High Level Firewall Protection Screen
If you select high level of protection, you will need to configure additional parameters for the firewall.
Fragmentation half-open wait - Configures the number of seconds that a packet state structure remains active. When the timeout value expires, the Router drops the un-assembled packet, freeing that structure for use by another packet. TCP SYN wait - Defines how long the software will wait for a TCP session to synchronize before dropping the session. TCP FIN wait - Specifies how long a TCP session will be maintained after the firewall detects a FIN packet. TCP connection idle timeout - The length of time for which a TCP session will be managed if there is no activity. UDP session idle timeout - The length of time for which a UDP session will be managed if there is no activity. H.323 data channel idle timeout - The length of time for which an H.323 session will be managed if there is no activity.
Total incomplete TCP/UDP sessions HIGH - Defines the rate of new unestablished sessions that will cause the software to start deleting half-open sessions. Total incomplete TCP/UDP sessions LOW - Defines the rate of new unestablished sessions that will cause the software to stop deleting half-open sessions. Incomplete TCP/UDP sessions (per min) HIGH - Maximum number of allowed incomplete TCP/UDP sessions per minute. Incomplete TCP/UDP sessions (per min) LOW - Minimum number of allowed incomplete TCP/UDP sessions per minute. Maximum incomplete TCP/UDP sessions number from same host Maximum number of incomplete TCP/UDP sessions from the same host. Incomplete TCP/UDP sessions detect sensitive time period - Length of time before an incomplete TCP/UDP session is detected as incomplete. Maximum half-open fragmentation packet number from same host Maximum number of half-open fragmentation packets from the same host. Half-open fragmentation detect sensitive time period - Length of time before a half-open fragmentation session is detected as half-open. Flooding cracker block time - Length of time from detecting a flood attack to blocking the attack.

URL Filter

To configure the URL filter feature, use the table on the URL Filter screen to specify the Web sites (www.somesite.com) and/or keywords you want to filter on your network. For example, entering a keyword of xxx would block access to any URL that contains the string xxx.
Figure 63 URL Filter Screen
1 Check the Enable URL Filtering Function checkbox. 2 Enter the URL address or keywords in the URL/Keyword field. 3 Select Denied or Allowed from the Mode drop-down menu. To complete this configuration, you will need to create or modify the filtering rule in the PC Privileges screen (see page 75). From the PC Privileges Add PC screen (Figure 62), if you check the two options: Bypass URL Filter, and Bypass Content Filter, then the Web sites and keywords defined in this screen will not be filtered out.
Content Filter You can use the list on the Content Filter screen to specify the type of content that you want to filter out. The Router comes with a 14-day free trial of the 3Com Content Filter Service (3CSBCFS). To activate the 14-day free trial of the service, you must first register your Router at www.3com.com. To continue using the service after the trial period, you must purchase the 12-month subscription license.
Figure 64 Content Filter Screen
To configure the Content Filter feature: 1 Check the Enable Content Filtering Function checkbox. 2 Select the server that you want to use from the Content Filter Server drop-down menu. If the server you want to use is not listed, enter the server address manually. 3 Define the time in the Server Timeout field (the default value is 3000ms). If the Content Filter Server does not respond within this time period, the Router will use the default content filter rule. The default rule is either Allow or Deny None of the above (Uncategorized URL). You can configure this rule at the bottom of the Content Filter screen.
4 If you are not sure about your subscription status, click CHECK in Subscription Filtering Status to find out if you have a current, valid subscription. 5 Subjects are listed under Core Categories and Productivity Categories. You can define what content should be viewed/blocked using the Allow/Deny option. The Deny option is used to filter out the content that contains the specific subject matter. Content with a specific subject matter will not be filtered out if the Allow option is checked. 6 Click Apply for the changes to take effect. Server Control The Router can be configured to restrict access to the Internet, email or other network services at specific days and times. Restriction can be set for the servers. You can define the traffic type permitted or not-permitted to the Internet.
Figure 65 Server Control Screen
In the Service Filtering Mode, select one option:
Denied except listed below. All Allowed.
Click Add to add a new entry to the table (see Figure 66).
Figure 66 Server Control Add Server Screen

you turn NAT off, the computers on your network will not be able to access the Internet. Other problems may also occur.
IPSEC NAT-T Pass-through NAT-T (NAT Traversal) is an Internet Draft proposed to IETF in order to help the problems associated with passing IPsec traffic through NAT Routers. For NAT-T to work, both ends of the connection need to support this function. Ensure that you select NAT-T only if it is needed as it will reduce LAN-WAN throughput. This Router supports NAT-T draft 2 implementation.
Universal Plug and Play This is a technology that offers seamless operation of voice messaging, video messaging, games, and other applications that are Universal Plug and Play compliant. Some applications require the Router's firewall to be configured in a specific way to operate properly. This usually requires opening TCP and UDP ports and in some instances setting trigger ports. An application that is Universal Plug and Play compliant has the ability to communicate with the Router, basically "telling" the Router which way it needs the firewall configured. The Router ships with the Universal Plug and Play feature disabled. If you are using any applications that are Universal Plug and Play compliant, and want to take advantage of the Universal Plug and Play features, you can enable this feature. Simply check the Enable Universal Plug and Play checkbox. Click Apply to save the change. WAN Ping Blocking Computer hackers use what is known as "Pinging" to find potential victims on the Internet. By pinging a specific IP address and receiving a response from the IP address, a hacker can determine that something of interest might be there. The Router can be set up so it will not respond to an Internet Control Message Protocol (ICMP) Ping from the outside. This heightens the level of security of your Router. To turn off the ping response, check Block ICMP Ping and click Apply; the Router will not respond to an ICMP ping from the Internet. MSS Clamping You might not be able to browse some Web sites or to send email messages that contain attachments from an Internet Connection Sharing client computer if your outbound connection is through a Windows XP-based Internet Connection Sharing host computer that uses Point-to-Point Protocol over Ethernet (PPPoE). This issue may occur if the Windows XP-based Internet Connection Sharing host computer uses a smaller Maximum Transmission Unit (MTU) size on the WAN interface (the PPPoE connection to the Internet) than it uses on the private interface (the Ethernet connection to the Internet Connection Sharing client). If a packet is larger than
the MTU size on the WAN interface, the client sends an Internet Control Message Protocol (ICMP) error to the external server to request that the server negotiate the TCP Maximum Segment Size (MSS). However, this message may be blocked by some firewalls. When this occurs, the packet is dropped. To allow the message to go through the firewall, enable MSS Clamping. MSS clamping will make Internet Connection Sharing set the MSS value low enough to match the external interface.

Type Two In larger networks, where there are more devices, the IP address of 192.168.100.8 is, again, split into two parts but is structured differently:
Part one (192.168) identifies the network on which the device resides. Part two (.100.8) identifies the device within the network.
How does a Device Obtain an IP Address and Subnet Mask?
This type of IP Address operates on a subnet mask of 255.255.0.0. See Table 4 for an example about how a network (only four computers represented) and a Router might be configured.
Table 4 IP Addressing and Subnet Masking
Device PC 1 PC 2 PC 3 PC 4 Router IP Address 192.168.100.8 192.168.201.30 192.168.113.155 192.168.002.230 192.168.002.72 Subnet Mask 255.255.0.0 255.255.0.0 255.255.0.0 255.255.0.0 255.255.0.0
There are three different ways to obtain an IP address and the subnet mask. These are:
Dynamic Host Configuration Protocol (DHCP) Addressing Static Addressing Automatic Addressing (Auto-IP Addressing)

DHCP Addressing

The Router contains a DHCP server, which allows computers on your network to obtain an IP address and subnet mask automatically. DHCP assigns a temporary IP address and subnet mask which gets reallocated once you disconnect from the network. DHCP will work on any client Operating System such as Windows 95, Windows 98, Windows NT 4.0, Windows 2000 and Windows XP. Also, using DHCP means that the same IP address and subnet mask will never be duplicated for devices on the network. DHCP is particularly useful for networks with large numbers of users on them.

Static Addressing

You must enter an IP Address and the subnet mask manually on every device. Using a static IP and subnet mask means the address is permanently fixed. Network devices use automatic IP addressing if they are configured to acquire an address using DHCP but are unable to contact a DHCP server. Automatic IP addressing is a scheme where devices allocate themselves

Auto-IP Addressing

an IP address at random from the industry standard subnet of 169.254.x.x (with a subnet mask of 255.255.0.0). If two devices allocate themselves the same address, the conflict is detected and one of the devices allocates itself a new address. Automatic IP addressing support was introduced by Microsoft in the Windows 98 operating system and is also supported in Windows 2000 and Windows XP.

US MANUFACTURER'S FCC DECLARATION OF CONFORMITY
3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064, USA (508) 323-5000 Date: March 8, 2006 Declares that the Product: Brand Name: 3Com Corporation Model Number: WL-552 Equipment Type: 3Com OfficeConnect ADSL Wireless 54Mbps 11g Firewall Router
Complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. 3Com OfficeConnect ADSL Wireless 54Mbps 11g Firewall Router Model WL-552
INDUSTRY CANADA - RF COMPLIANCE
This device complies with RSS 210 of Industry Canada. Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of this device. L ' utilisation de ce dispositif est autorisee seulement aux conditions suivantes: (1) il ne doit pas produire de brouillage et (2) l' utilisateur du dispositif doit etre pret a accepter tout brouillage radioelectrique recu, meme si ce brouillage est susceptible de compromettre le fonctionnement du dispositif. The term "IC" before the equipment certification number only signifies that the Industry Canada technical specifications were met. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (EIRP) is not more than that required for successful communication. To prevent radio interference to the licensed service, this device is intended to be operated indoors and away from windows to provide maximum shielding. Equipment (or its transmit antenna) that is installed outdoors is subject to licensing. Pour empecher que cet appareil cause du brouillage au service faisant l'objet d'une licence, il doit etre utilize a l'interieur et devrait etre place loin des fenetres afin de Fournier un ecram de blindage maximal. Si le matriel (ou son antenne d'emission) est installe a l'exterieur, il doit faire l'objet d'une licence.
INDUSTRY CANADA EMISSIONS COMPLIANCE STATEMENT AVIS DE CONFORMIT LA RGLEMENTATION D'INDUSTRIE CANADA SAFETY COMPLIANCE NOTICE

configuring 56 MAC Address Filtering Screen 66 mode 30

Subnet Mask 85

TCP/IP 23, 25, 85 Technical specifications 89 standards 89 Time and Time Zone screen 76 TZO.com 70
NAT (Network Address Translation) 68 NAT-T (NAT Traversal) 68 Network addresses 85 Networking wireless 81 NIC wireless 14
Universal Plug and Play 68 Upgrade Screen 74 URL Blocking Screen 64
Password 27, 75 Poison Reverse 58 PPPoA 31 PPPoA Screen 31 PPPoA Settings Screen 52 PPPoE 26, 30, 31 PPPoE Screen 30 PPPoE Settings Screen 51
Virtual Servers Screen 61 VPI/VCI 30, 32, 33, 34, 36
WAN Ping Blocking 68 WDS 49 Web Browser Location Field 27 Web Proxy 26 WiFi Protected Access 45, 48 Wireless networking 81 NIC 14 Wireless Configuration Screen 43 Wireless Settings Screen 31, 32, 33, 35, 36, 43 Wireless WDS Settings Screen 49 WPA (with RADIUS Server) Screen 48 WPA-PSK (no server) Screen 45
Remote Admin 68 Reset to Factory Default Screen 73 Reset to Factory Defaults 80 Restart Router Screen 73 RFC 1483 Bridged Mode 32, 53 RFC 1483 Routed Mode 34 RIP (Routing Information Protocol) 57 RIP Parameter Screen 58 Router Login Screen 28 Routing Mode Screen 34 Routing Table Screen 59
Schedule Rule Screen 65 Setup Wizard 27 SNMP Community Screen 71 SNMP Trap Screen 72 Special Applications Screen 60 Specifications technical 89 SSID 31, 32, 33, 35, 36, 43 Static Addressing 87 Static Route Parameters Screen 57 Status Screen 28, 40

DATA SHEET

WIRELESS
3COM OFFICECONNECT ADSL WIRELESS 54 MBPS 11G FIREWALL ROUTER
3Com OfficeConnect ADLS Wireless 54 Mbps 11g Firewall Router

OVERVIEW

The 3Com OfficeConnect ADSL Wireless 54 Mbps 11g Firewall Router provides robust routing and security features and allows users to share a single ADSL connection. With wireless data speeds of up to 54 Mbps plus a high-speed routing engine, this ADSL firewall router is able to handle high-bandwidth applications confidently. Advanced security features include 128-bit WPA/WPA2 with TKIP/AES encryption, a stateful packet inspection firewall, hacker pattern detection, URL filtering, IP and MAC address filtering and SurfControl's optional content filtering technology (14-day free trial included). Furthermore, the firewall router features a transparent bridge firewall with proxy ARP, 1-to-1 NAT, NAT off mode and more to increase flexibility in deployment. Designed to be easy to set up and use, this firewall router can auto PVC scan, simplifying installation, and is backed by a market-leading three-year hardware warranty with next business day replacement.
DELIVERS HIGH&SPEED WIRELESS CONNECTIVITY
The ADSL Wireless 11g Firewall Router provides a highspeed, 54 Mbps wireless connection for users with 802.11g equipped PCs and laptops. It is also backwardcompatible with IEEE 802.11b wireless LAN equipment, preserving existing network investments. Wi-Fi CERTIFIED, this 11g router interoperates with other Wi-Fi products. Additionally, support for Wireless Distribution System (WDS) makes set up of an extended, or completely wireless, network extremely simple.
DELIVERS ADVANCED SECURITY
Advanced wireless security and multiple firewall features offer advanced levels of protection for the network. To shield wireless connections, the ADSL Wireless 54 Mbps 11g Firewall Router implements 128- bit WPA/WPA2 with TKIP/AES encryption for maximum security, along with 40-/64- and 128-bit Wired Equivalent Privacy (WEP) encryption for legacy clients. A stateful packet inspection firewall, hacker pattern detection, URL filtering, support for the SurfControl Web Filter service and other security features help protect the entire network from attacks and other Internet security risks. The SurfControl Web Filter allows you to actively monitor network usage and abuse anywhere within your organization.

KEY BENEFITS

PROVIDES SHARED INTERNET ACCESS FOR WIRELESS AND WIRED USERS
The 3Com OfficeConnect ADSL Wireless 54 Mbps 11g Firewall Router combines an ADSL modem, router, IEEE 802.11g wireless access point and 4-port switch to allow users to economically and securely share a single ADSL or ADSL 2/2+ connection. A high-speed routing engine and 54 Mbps wireless throughput easily handle large data transfers and Internet downloads, including those from multimedia applications.

KEY BENEFITS (continued)

SurfControl Web Filter bolsters your defenses by providing: Bulletproof infrastructure security - Automatic, real-time security updates from our comprehensive threat database. Legal liability protection - Prevents circulation of inappropriate content that violates copyright laws or infringes on rights. Regulatory compliance - Helps you meet HIPAA, Sarbanes-Oxley, and other industry or government security requirements. Enhanced employee productivity - Limits web surfing and downtime due to attacks and improves IT productivity because it's easy to implement and manage.

FEATURES AND BENEFITS

SHARED INTERNET ACCESS
Wired and wireless user support All-in-one device Supports up to 64 wireless users (wireless MAC filter for 32 clients) on a single DSL connection to save time and money An ADSL 2/2+ modem, 802.11g access point, router, firewall and 4-port switch in one box to allow easy DSL sharing
HIGH-SPEED WIRELESS CONNECTIVITY
1802.11g 54 Mbps connections Backward compatible with 802.11b Wireless connectivity at speeds almost 5x faster than 802.11b Supports high speeds and protects investments in legacy products

ADVANCED SECURITY

WPA/WPA2 and WEP Multi-level wireless security Robust firewall VPN passthrough URL/key word blocking and content filtering (optional) Advanced 128-bit WPA/WPA2 with TKIP/AES encryption for maximum security, along with 40-/64- and 128-bit WEP encryption for legacy clients Provides additional wireless security with SSID Broadcast Disable and MAC filtering Stateful packet inspection firewall, hacker pattern detection, protection from DoS attacks, transparent/bridge mode firewall, access control list with scheduling Permits secure connections to remote offices Enforces acceptable web usage policies to improve productivity; 14-day free trial of the optional content filtering service is included

EASE OF USE

Setup wizards and an intuitive web browser interface Makes setup and configuration easy

SUPPORT SERVICE

Wireless LAN Site Survey, 3Com Express Maintenance Refer to www.3com.com/services for details
MINIMUM SYSTEM REQUIREMENTS

SPECIFICATIONS

ATM SUPPORT
Traffic shaping (UBR/CBR) OAM (I.610) F4/F5 support PPP over Ethernet (RFC2516) PPP over ATM Support for up to 8 PVCs
Operating system that supports an Ethernet connection with an IP stack. Installation CD requires Windows 98/ ME/ XP/ 2000. Computers with an Ethernet 10BASE-T or 10/100 interface configured for network communication. For wireless access, PCs or laptops with Wi-Fi CERTIFIED IEEE 802.11g or 802.11b PC Cards or NICs An active ADSL or ADSL 2/2+ broadband connection.

STANDARDS

ANSI T1.413 issue 2 ITU G.992.1 (G.DMT) ITU G.992.2 (G.lite) ITU G.992.3 (ADSL2 DMT) ITU G.992.4 (ADSL2 G.lite) ITU G.992.5 (ADSL2+)

USERS SUPPORTED

Up to 253 simultaneous users, including up to 64 wireless users

PHYSICAL PORTS

LAN: 4 autosensing RJ-45 10/100BASE-TX Ports WAN: 1 RJ-11 port

ROUTING

RIP v1 and v2, static routing

WIRELESS DATA RATES

802.11g: 54, 48, 36, 24, 18, 12, 9 and 6 Mbps 802.11b: 11, 5.5, 2 and 1 Mbps

GATEWAY FEATURES

DHCP server Transparent/bridge firewall Proxy ARP Special Application support Dynamic DNS support Support of SIP ALG and other popular ALGs IP QoS Virtual server support Virtual DMZ support Universal plug and play support

FREQUENCY BAND

2.4-2.4835 GHz

WIRELESS MEDIUM

OFDM, CCK

MEDIA ACCESS PROTOCOL

CSMA/CA

WIRELESS TRANSMIT POWER

802.11g: 16dBm 802.11b: 18dBm IP Protocol Set Dynamic and static IP addressing, DHCP server, NAT/PAT (with TCP and UDP), PPTP/PPPoE, CHAP, IPCP, SNTP

STANDARDS CONFORMANCE

Wi-Fi WPA/WPA2 CERTIFIED IEEE 802.11b, IEEE 802.11g
REGULATORY/AGENCY APPROVALS
Safety: UL60950-1, CSA 22.2 No. 60950-1-03, EN 60950-1: 2001, IEC 60950-1: 2001. Emission: CFR Title 47, FCC Part 15, Subpart B & C, ICES-003, Industry Canada RSS-210, Industry Canada RSS-Gen, EN 300 328, EN 301 489-1/17. EN55022 Class B, EN55024. Telecom: FCC Part 68, IC CS-03.

DIMENSIONS

Height: 3.5 cm (1.5in) Width: 22 cm (8.7 in) Depth: 13.5 cm (5.3 in) Weight: 592 g (1.3 lb)
Supplied via OfficeConnect power supply Operating output: DC12V/1.25A Maximum power consumption: 15W
CONFIGURATION AND MANAGEMENT
Browser-based user interface Syslog server support SNMP v1, v2 agent support

OPERATING RANGE

Obstructed, maximum: 100 m (328 ft) Unobstructed, maximum: 350 m (1,148 ft)

WARRANTY SUMMARY

Three-year Hardware Warranty with next business day Advance Hardware Replacement. Refer to www.3com.com/warranty for details.

SECURITY

Firewall with hacker pattern detection Event logging Access control list Disable broadcast SSID URL or keyword filtering MAC address filtering 128-bit WPA/WPA2 with TKIP/AES encryption 40-/64- and 128-bit WEP shared-key encryption VPN passthrough (PPTP, IPsec, L2TP/IPsec) SurfControls Web Filter (subscription based, 14-day free trial included subject to product registration at http://esupport.3com.com)

SERVICE AND SUPPORT

3Com Global Services offers the resources and talents of a major corporation plus more than two decades of experience in resolving network challenges and delivering business benefits to enterprises around the world. Global support with a personalized, local focus in the local language helps drive productivity and minimize expenses. Because 3Com understands both the technology and the business, were the partner you need to remain strong and competitive.

ORDERING INFORMATION

PRODUCT DESCRIPTION
3Com OfficeConnectADSL Wireless 54 Mbps 11g Firewall Router, Model WL-522 (ITU Annex A, ADSL over POTS) 3Com OfficeConnect ADSL Wireless 54 Mbps 11g Firewall Router, Model WL-522 (ITU Annex B, ADSL over ISDN) Availability varies by region, check with your ISP for support details. For additional information, please visit www.3com.com

3COM SKU

3CRWDR101A-75 3CRWDR101B-75
Visit www.3com.com for more information about 3Com solutions.
3Com Corporation, Corporate Headquarters, 350 Campus Drive, Marlborough, MA 01752-3064 3Com is publicly traded on NASDAQ under the symbol COMS. Copyright 2010 3Com Corporation. All rights reserved. 3Com, the 3Com logo and OfficeConnect are registered trademarks of 3Com Corporation in various countries worldwide. Wi-Fi,Wi-Fi Alliance, the Wi-Fi CERTIFIED logo, and WMM are registered trademarks, and Wi-Fi CERTIFIED, WPA, WPA2, andWi-Fi Protected Setup are trademarks, of the Wi-Fi Alliance. All other company and product names may be trademarks of their respective companies. While every effort is made to ensure the information given is accurate, 3Com does not accept liability for any errors or mistakes which may arise. All specifications are subject to change without notice 400979-002 01/10